last executing test programs: 3.499924053s ago: executing program 0 (id=600): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="9d", 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec020000", @ANYRES16=0x0, @ANYBLOB='+\x00\x00\x00>', @ANYRES32=0x0, @ANYBLOB="c402330080800000080211000000ffffffffffff90e488f9971a00000000000000000000000000000000000003010004060000000000002a01007206030303030303760600000000060bdd3b2d5014b2109a59339408ad50548584c01cda5f3ced6f13b590b9aaf1bca488130effc03c7c2adf4757f254203300027902dd1fa777e6282b58e524dd7aeb13a8b3df323b58645505746aa35226d44912415c3d4ac256aa5c2291a3317d27815fda589135d0308f4ff131b3c4a96dde0f9c497c9bbde281223c0596f01156deb1f851f7602fb2299c382c07898a4d7dddbc046ef6a9b938b13f76ccceb4d339a7d92a6a7f45bd90df8b5bd53f1eec1a241b70cadc8c29c9dde44f2a899e94bcf0613609929460dda7b3421f2af277170aab1eef1bc7a6bad283ec72e75c78d8f4f30f5e2ee79daf8ece54852b5b93eabb5832b001d39227230802e601a7f9749d370367565ddb88a137c4572cce24103d4337027917c48d29a1860dad1f99fe412ea5a5eff0a43812f63ec34a05279e6dc25839f828e60b01f9b6a65bf411101d89dc154716566458aa4111340a6d895801f8d51908b9bdd47762550f4ee51c8a3f64cfe2f8b701e79d393a957fa4e3e620099b226f683280ec0f5d85f9c59d29d9159126c9f114d0e08f17f96e4757dd81825d8f432246cdb8ab571fcfdd655dad8ac12f96664d51c30bd3379c2d305630cd93fec0b4249d429b451f52399f26b866650e0e9464949a974045190fa9251c8b6aacda7ecc351ee9cb5512364284512cf7643040ee1f52573ed7bb7527b9a86fc2f33bffce71947a0f29cfb9ac7bd9e7642cdd7283534cd40fda26eabadf3814f88fa9c5d39124ac6ffcf2583cbdd58fa0969b3e6783c46ed2318e977c080347f36fa8d773079f6224521c4c8b10e4a9454bece9457b66b239a7eaff140a8d9131349399c804bb1a81f829c6ab11af5cfe8df9f59ec093d26c17fe50bb0550d71068d16276310600cd000000000004008700"], 0x2ec}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x2711, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xbe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) getsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x6e, 0x1, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x800, 0xe5b}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2646, @ANYRES16=r2, @ANYRES16=r3, @ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000eec52a83c6e07469000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @multicast}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c2000b0086dd6012000800383a00fc010000000000000000000000000000ff0200000000000000000000000000010100007800000000600ad91500002c00ff010000000000000000000000000001fe8000000000000000000000000000040000009000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2.990098464s ago: executing program 4 (id=605): syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f0000000240)='./file7\x00', 0xc43, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="acd80c0d60d998833a1cade74acff2316dcd1b77321c8c7923848a29438d7107758ad5b2afaeb99e055ddf01db57db6e50113ba1639931066080a75a3d5b82b8dc4f36671cb8be0e7c3a0b1b5148f8388b5e3eadd2670427b3f90cd3e30f68856df292f6031ac33d8a5b09111dab3b9f871abc2ea3aa10961b853e84e94e460bfd8190c1cb395ffa35900a543a5800cda076438b7a3a3412983abdb1f6e51c764463c5175462e7ccb36c7367e3eaceab1dcc", @ANYRES16=0x0, @ANYBLOB="b940f56b03bb1a415f50f732a91369cb9795c7993f4cfd0c2bff60529bb1572a17f927a60844da24f9d681051c75656585e7d0fa8be5f01fa511ffed2b57eb23df3e4949ea7f2902e5b943a049ed03a1aa1784131cdfa0a4e2af39b8523470a1f7176c446691b303df29ff78c42585de1731975d34ae2441111ac0eafe331526fc325638ccdef6db59154aac6af705481255f279fa4a0b", @ANYRESOCT=0x0, @ANYRES64], 0x84, 0x5f96, &(0x7f000000d1c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@noprefix}, {@subsystem='cpuacct'}]}) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000f2ffffff000000850000006100000018110000", @ANYRESHEX=0x0, @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) r4 = socket$inet6(0xa, 0x2, 0xfffffffc) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="434759c5614e22462270939f1e7d2604ff00"], 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91a31edc45c2f064bf78d886991b3c7941edf04673356b94520592b962a1dab9fa4c3c9d49d87496c1ce44b6"], 0x22) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) copy_file_range(r5, 0x0, r5, &(0x7f00000001c0), 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400), 0x208e24b) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c90010000c000500170308000600090085990000ded9798a6768340c8cfa57a1fcce48e680631537f499fe02c6aab8327b828448f4fc1abf3c8dfad850860f0b8630f1d3e8ab9e06cb984a81e3e8280ebb9eaff1206c01fd6852fea26981a57fb5e5a5b3977f097c36732a60b9060d09dd742aecb6b2c90cec7bd0e7e991b95a4c93510a7a19a1b8f78120a2f34b5be48535c701f6835a6647d43d09fc201427f973ebd2f336d1dadee1f195a15403c494"], 0x15) readahead(r5, 0x0, 0x5) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f0419"], 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2726], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.982444032s ago: executing program 0 (id=606): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000100)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:\n'], 0x8) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) rt_sigreturn() mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.446074536s ago: executing program 3 (id=612): ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x5450, 0x0) epoll_create1(0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r0 = gettid() close(0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 2.369605459s ago: executing program 2 (id=613): futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") getsockname$unix(0xffffffffffffffff, 0x0, 0x0) r0 = eventfd(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="030000000044"], 0x8) 2.273641281s ago: executing program 3 (id=615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 2.187145742s ago: executing program 3 (id=616): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) 2.127196341s ago: executing program 2 (id=618): socket$inet(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.04864239s ago: executing program 0 (id=619): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r0, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}]}, 0x28}}, 0x0) 1.925124978s ago: executing program 0 (id=620): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) rt_sigreturn() r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.767523841s ago: executing program 2 (id=621): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fallocate(r1, 0x0, 0x0, 0x801ffff) chmod(&(0x7f0000000040)='./file0\x00', 0x0) 1.688039998s ago: executing program 0 (id=622): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe(&(0x7f0000000180)) socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005240), 0x264e33, 0x14) 1.678523265s ago: executing program 1 (id=623): fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1d, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) poll(0x0, 0x0, 0x64) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = eventfd2(0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x5421) 1.562097483s ago: executing program 2 (id=624): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='nv\x00', 0x3) sendfile(r0, r1, 0x0, 0x8000002b) 1.5269194s ago: executing program 4 (id=625): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x0) 1.416368365s ago: executing program 1 (id=626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 1.23278274s ago: executing program 1 (id=627): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000bf"], 0x0, 0x1f}, 0x20) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x4}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000280)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000580)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_MARK={0x8}]}, 0x5c}}, 0x0) 1.232422975s ago: executing program 3 (id=628): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.072311351s ago: executing program 3 (id=629): gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x5451, 0x0) r1 = msgget$private(0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() mknod(0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) msgsnd(r1, &(0x7f0000000180)=ANY=[@ANYRES8], 0x99, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e21, 0x9, @remote}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003000)={'#! ', '', [], 0xa, "69f4a3464788b9b361f65ff095fdcecae72ce9a18e6613cf699fe4b06359e7fd0aa68cf46120a7ce556d8badd0618f4412375bfe13a260d311b48d755768e47470e95921b1bd"}, 0x4a) clock_gettime(0x4, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/164, 0xa4}], 0x1}, 0x5746}], 0x2, 0x6, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 1.066364844s ago: executing program 1 (id=630): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r0, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}]}, 0x28}}, 0x0) 932.423511ms ago: executing program 4 (id=631): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 930.402094ms ago: executing program 1 (id=632): close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x10) 853.521319ms ago: executing program 3 (id=633): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xffffffffffffffff}, 0x78) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="7032534db4"], 0x8) close(r2) socket$inet6(0xa, 0x80801, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) mlockall(0x3) 736.618186ms ago: executing program 4 (id=634): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fallocate(r1, 0x0, 0x0, 0x801ffff) chmod(&(0x7f0000000040)='./file0\x00', 0x0) 609.250223ms ago: executing program 0 (id=635): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket$inet(0x2, 0x6, 0x0) shutdown(r5, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30006c6600080041007369770014003300697036746e6c30000000000000005fe9709760c200"], 0x38}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='ext4\x00', 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setreuid(0xffffffffffffffff, 0xee00) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r7}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000019078ac1e0001ac1414aa0300907803000000450000000000000000000000000000ff07141400"], 0x0) 443.140522ms ago: executing program 4 (id=636): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") shmctl$SHM_LOCK(0x0, 0xb) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) statx(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x1100, 0x0, &(0x7f00000010c0)) 394.35151ms ago: executing program 2 (id=637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x5c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 161.527923ms ago: executing program 1 (id=638): syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000100)=0x30, 0x0) 116.86418ms ago: executing program 2 (id=639): accept(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}], 0x20}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r1, 0xc8036ab6d6cbef07}, 0x14}}, 0x0) 0s ago: executing program 4 (id=640): syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="009b605b08edbf21ee2584eb7d1f453716ae995ecea556026925c58a5e500e0c7791246ad8811d9d89d560fda150ec88b52b8609"], 0xfd, 0x124ab, &(0x7f0000012580)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46800) ftruncate(r0, 0x7fff) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="90", 0x1}]) kernel console output (not intermixed with test programs): 289] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 183.353631][ T5289] usb 2-1: Product: syz [ 183.357847][ T5289] usb 2-1: Manufacturer: syz [ 183.368794][ T5289] usb 2-1: SerialNumber: syz [ 183.384748][ T5289] usb 2-1: config 0 descriptor?? [ 183.402279][ T6257] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.740075][ T6267] loop3: detected capacity change from 0 to 32768 [ 183.773948][ T5106] Bluetooth: hci1: command tx timeout [ 183.831819][ T6267] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.929289][ T29] audit: type=1326 audit(1719555211.071:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 183.935739][ T6267] XFS (loop3): Ending clean mount [ 183.968991][ T29] audit: type=1326 audit(1719555211.091:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 183.991765][ T29] audit: type=1326 audit(1719555211.101:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 184.016728][ T6267] XFS (loop3): Quotacheck needed: Please wait. [ 184.026085][ T29] audit: type=1326 audit(1719555211.101:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 184.054990][ T29] audit: type=1326 audit(1719555211.101:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 184.091202][ T29] audit: type=1326 audit(1719555211.171:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 184.128956][ T29] audit: type=1326 audit(1719555211.171:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 184.148578][ T6267] XFS (loop3): Quotacheck: Done. [ 184.156286][ T29] audit: type=1326 audit(1719555211.171:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 184.156342][ T29] audit: type=1326 audit(1719555211.211:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 184.217893][ T29] audit: type=1326 audit(1719555211.211:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 184.358836][ T5099] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.516721][ T52] team0 (unregistering): Port device team_slave_1 removed [ 184.688445][ T52] team0 (unregistering): Port device team_slave_0 removed [ 185.123595][ T5106] Bluetooth: hci0: command tx timeout [ 185.422675][ T6285] loop3: detected capacity change from 0 to 32768 [ 185.537541][ T6285] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.647871][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 185.809099][ T6296] overlayfs: statfs failed on './file0' [ 185.835141][ T6285] XFS (loop3): Ending clean mount [ 185.841210][ T5106] Bluetooth: hci1: command tx timeout [ 185.877338][ T6285] XFS (loop3): Quotacheck needed: Please wait. [ 186.014995][ T6285] XFS (loop3): Quotacheck: Done. [ 186.279582][ T5099] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.416714][ T5150] usb 2-1: USB disconnect, device number 9 [ 186.430437][ T6228] chnl_net:caif_netlink_parms(): no params data found [ 187.200967][ T5106] Bluetooth: hci0: command tx timeout [ 187.225033][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.293702][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.346596][ T6228] bridge_slave_0: entered allmulticast mode [ 187.369614][ T6325] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 187.410965][ T6228] bridge_slave_0: entered promiscuous mode [ 187.444389][ T6325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.258'. [ 187.469274][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.517557][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.562781][ T6228] bridge_slave_1: entered allmulticast mode [ 187.592048][ T6228] bridge_slave_1: entered promiscuous mode [ 187.726242][ T6228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.777329][ T6228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.844928][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.919837][ T5106] Bluetooth: hci1: command tx timeout [ 188.091673][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.161441][ T6228] team0: Port device team_slave_0 added [ 188.178397][ T6228] team0: Port device team_slave_1 added [ 188.252474][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.279395][ T5149] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 188.403594][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.458422][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.472799][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.503719][ T5149] usb 4-1: Using ep0 maxpacket: 16 [ 188.515266][ T6228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.536143][ T5149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 188.556162][ T5149] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 188.590347][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.597585][ T5149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.610301][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.646612][ T5149] usb 4-1: config 0 descriptor?? [ 188.653435][ T6228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.669472][ T6262] chnl_net:caif_netlink_parms(): no params data found [ 189.073707][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.261'. [ 189.280182][ T5106] Bluetooth: hci0: command tx timeout [ 189.638741][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.651008][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.678661][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.719943][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.770648][ T5149] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1 [ 189.788497][ T5149] hid-generic 0003:0158:0100.000C: unexpected long global item [ 189.792097][ T6228] hsr_slave_0: entered promiscuous mode [ 189.812993][ T5149] hid-generic 0003:0158:0100.000C: probe with driver hid-generic failed with error -22 [ 189.903871][ T6228] hsr_slave_1: entered promiscuous mode [ 189.957868][ T6228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.008953][ T6228] Cannot create hsr debugfs directory [ 190.034049][ T5149] usb 4-1: USB disconnect, device number 10 [ 190.716031][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.736188][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.748121][ T6262] bridge_slave_0: entered allmulticast mode [ 190.783395][ T6262] bridge_slave_0: entered promiscuous mode [ 190.821300][ T6262] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.828604][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.869276][ T6262] bridge_slave_1: entered allmulticast mode [ 190.878702][ T6262] bridge_slave_1: entered promiscuous mode [ 190.946702][ T5106] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 191.236213][ T6262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.359255][ T5106] Bluetooth: hci0: command tx timeout [ 191.522378][ T6262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.768082][ T35] bridge_slave_1: left allmulticast mode [ 191.790418][ T35] bridge_slave_1: left promiscuous mode [ 191.813058][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.840076][ T35] bridge_slave_0: left allmulticast mode [ 191.845796][ T35] bridge_slave_0: left promiscuous mode [ 191.879179][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.366068][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 192.366519][ T29] audit: type=1326 audit(1719555219.501:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68aad75b29 code=0x7fc00000 [ 192.959051][ T5106] Bluetooth: hci2: command tx timeout [ 193.276284][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.289943][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.301683][ T35] bond0 (unregistering): Released all slaves [ 194.303716][ T6262] team0: Port device team_slave_0 added [ 194.319495][ T5096] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 194.365595][ T6262] team0: Port device team_slave_1 added [ 194.669001][ T5096] usb 4-1: device descriptor read/64, error -71 [ 194.805963][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.821174][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.059669][ T5096] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 195.309132][ T5096] usb 4-1: device descriptor read/64, error -71 [ 195.392894][ T6262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.407216][ T6262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.433239][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.459570][ T5096] usb usb4-port1: attempt power cycle [ 195.469667][ T6262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.578649][ T6262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.590489][ T6262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.624787][ T6262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.743345][ T35] hsr_slave_0: left promiscuous mode [ 195.750002][ T35] hsr_slave_1: left promiscuous mode [ 195.756151][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.772204][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.785050][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.794518][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.835166][ T35] veth1_macvtap: left promiscuous mode [ 195.847140][ T35] veth0_macvtap: left promiscuous mode [ 195.853097][ T35] veth1_vlan: left promiscuous mode [ 195.858558][ T35] veth0_vlan: left promiscuous mode [ 195.899052][ T5096] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 195.949694][ T5096] usb 4-1: device descriptor read/8, error -71 [ 196.188787][ T5108] Bluetooth: hci2: unexpected event 0x09 length: 10 > 3 [ 196.197518][ T5108] Bluetooth: hci2: SCO packet for unknown connection handle 1039 [ 196.318728][ T5108] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 196.810640][ T35] team0 (unregistering): Port device team_slave_1 removed [ 196.885969][ T35] team0 (unregistering): Port device team_slave_0 removed [ 196.951234][ T5151] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 197.143719][ T5151] usb 3-1: Using ep0 maxpacket: 16 [ 197.151475][ T5151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 197.163504][ T5151] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 197.175616][ T5151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.187508][ T5151] usb 3-1: config 0 descriptor?? [ 197.415917][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.275'. [ 197.502168][ T29] audit: type=1326 audit(1719555224.621:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7fc00000 [ 197.563166][ T29] audit: type=1326 audit(1719555224.621:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f657b175b29 code=0x7fc00000 [ 197.593159][ T29] audit: type=1326 audit(1719555224.621:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7fc00000 [ 197.617215][ T29] audit: type=1326 audit(1719555224.621:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7fc00000 [ 197.641968][ T29] audit: type=1326 audit(1719555224.621:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7fc00000 [ 197.664534][ T29] audit: type=1326 audit(1719555224.621:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7fc00000 [ 197.687068][ T29] audit: type=1326 audit(1719555224.621:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7fc00000 [ 197.709669][ T29] audit: type=1326 audit(1719555224.621:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7fc00000 [ 197.739108][ T29] audit: type=1326 audit(1719555224.621:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7fc00000 [ 197.763413][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.783679][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.795496][ T29] audit: type=1326 audit(1719555224.621:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.1.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7fc00000 [ 197.812390][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.837189][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.878359][ T5151] hid (null): unknown global tag 0x83 [ 197.889464][ T5151] hid (null): unknown global tag 0xc [ 197.901251][ T5151] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1 [ 197.908832][ T5151] hid-generic 0003:0158:0100.000D: unexpected long global item [ 197.917610][ T5151] hid-generic 0003:0158:0100.000D: probe with driver hid-generic failed with error -22 [ 198.035384][ T6262] hsr_slave_0: entered promiscuous mode [ 198.049968][ T6262] hsr_slave_1: entered promiscuous mode [ 198.060741][ T6262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.098732][ T6262] Cannot create hsr debugfs directory [ 198.148775][ T5149] usb 3-1: USB disconnect, device number 10 [ 198.317619][ T6419] netlink: 32 bytes leftover after parsing attributes in process `syz.1.277'. [ 198.552135][ T6228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.612281][ T6228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.640519][ T5151] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 198.665528][ T6228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.679970][ T6228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.709006][ T5096] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 198.830234][ T5151] usb 2-1: Using ep0 maxpacket: 16 [ 198.838375][ T5151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 198.861947][ T5151] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 198.876183][ T5151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.895957][ T5151] usb 2-1: config 0 descriptor?? [ 198.901298][ T5096] usb 4-1: Using ep0 maxpacket: 16 [ 198.924493][ T5096] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 198.935735][ T5096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.946666][ T5096] usb 4-1: Product: syz [ 198.951489][ T5096] usb 4-1: Manufacturer: syz [ 198.956326][ T5096] usb 4-1: SerialNumber: syz [ 198.970955][ T5096] usb 4-1: config 0 descriptor?? [ 198.981526][ T5096] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 200.102703][ T6262] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.145476][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.167587][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.204309][ T6262] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.211028][ T5151] hid (null): unknown global tag 0x83 [ 200.216791][ T5151] hid (null): unknown global tag 0xc [ 200.244366][ T6262] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.249579][ T5151] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1 [ 200.258995][ T5151] hid-generic 0003:0158:0100.000E: unexpected long global item [ 200.267747][ T5151] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22 [ 200.290253][ T6262] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.326219][ T5108] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 200.335410][ T5108] Bluetooth: hci2: Injecting HCI hardware error event [ 200.344995][ T5106] Bluetooth: hci2: hardware error 0x00 [ 200.392545][ T5096] gp8psk: FW Version = 224.11.118 (0xe00b76) Build 2221/58/65 [ 200.431965][ T5150] usb 2-1: USB disconnect, device number 10 [ 200.524106][ T6228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.614783][ T5096] gp8psk: FPGA Version = 136 [ 200.650515][ T6228] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.710837][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.718113][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.772001][ T1791] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.779339][ T1791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.819183][ T6427] capability: warning: `syz.3.279' uses 32-bit capabilities (legacy support in use) [ 201.036965][ T5096] gp8psk: usb out operation failed. [ 201.055232][ T5096] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 201.066175][ T6262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.080055][ T5096] dvb_usb_gp8psk 4-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 201.100732][ T5096] usb 4-1: USB disconnect, device number 15 [ 201.374291][ T6262] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.463051][ T6440] loop2: detected capacity change from 0 to 64 [ 201.488521][ T6440] hfs: can't find a HFS filesystem on dev loop2 [ 202.314976][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.322268][ T5289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.347396][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.354707][ T5289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.399259][ T5106] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 202.635798][ T6228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.972686][ T5149] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 203.219240][ T5149] usb 3-1: device descriptor read/64, error -71 [ 203.578998][ T5149] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 203.769316][ T5149] usb 3-1: device descriptor read/64, error -71 [ 203.891993][ T5149] usb usb3-port1: attempt power cycle [ 204.306510][ T6228] veth0_vlan: entered promiscuous mode [ 204.339071][ T5149] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 204.393242][ T5149] usb 3-1: device descriptor read/8, error -71 [ 204.401777][ T6228] veth1_vlan: entered promiscuous mode [ 204.448983][ T5148] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 204.479566][ T5106] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 204.568757][ T6262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.646553][ T6228] veth0_macvtap: entered promiscuous mode [ 204.689607][ T5149] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 204.702543][ T5148] usb 4-1: Using ep0 maxpacket: 16 [ 204.717223][ T6228] veth1_macvtap: entered promiscuous mode [ 204.721567][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 204.761319][ T5148] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 204.776810][ T5149] usb 3-1: device descriptor read/8, error -71 [ 204.792286][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.823803][ T5148] usb 4-1: config 0 descriptor?? [ 204.899512][ T5149] usb usb3-port1: unable to enumerate USB device [ 204.939429][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.964658][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.987263][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.088977][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.111885][ T6487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.121315][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.177928][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.264585][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.412301][ T6262] veth0_vlan: entered promiscuous mode [ 205.540071][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.599127][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.644405][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.657492][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.688714][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.709124][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.731126][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.751598][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.772624][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.806098][ T6228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.837112][ T6228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.861612][ T6228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.884871][ T6228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.951238][ T6262] veth1_vlan: entered promiscuous mode [ 205.993819][ T5148] hid (null): bogus close delimiter [ 206.045333][ T5148] hid (null): unknown global tag 0x83 [ 206.064838][ T5148] hid (null): unknown global tag 0xc [ 206.080768][ T5148] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1 [ 206.098645][ T5148] hid-generic 0003:0158:0100.000F: unexpected long global item [ 206.153629][ T5148] hid-generic 0003:0158:0100.000F: probe with driver hid-generic failed with error -22 [ 206.569402][ T5106] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 206.575688][ T5148] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 206.756370][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.784735][ T6262] veth0_macvtap: entered promiscuous mode [ 206.796421][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.807601][ T5148] usb 3-1: Using ep0 maxpacket: 16 [ 206.836391][ T5148] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 206.855856][ T5148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.876878][ T5148] usb 3-1: Product: syz [ 206.885892][ T5148] usb 3-1: Manufacturer: syz [ 206.898945][ T5148] usb 3-1: SerialNumber: syz [ 206.918048][ T5148] usb 3-1: config 0 descriptor?? [ 206.935033][ T5148] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 207.093086][ T6262] veth1_macvtap: entered promiscuous mode [ 207.251873][ T5149] usb 4-1: USB disconnect, device number 16 [ 207.285538][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.314462][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.527791][ T6262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.562451][ T6262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.577813][ T6262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.595049][ T6262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.606906][ T6262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.618362][ T6262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.630294][ T6262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.641476][ T6262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.661154][ T6262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.754893][ T6262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.808337][ T6262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.829751][ T6262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.856571][ T5148] gp8psk: FW Version = 224.11.118 (0xe00b76) Build 2221/58/65 [ 207.860267][ T6262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.886481][ T6262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.916232][ T6262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.936258][ T6262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.960499][ T6262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.978821][ T6262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.044985][ T6262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.057354][ T5148] gp8psk: FPGA Version = 136 [ 208.094518][ T6262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.119067][ T6262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.127909][ T6262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.222869][ T5096] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 208.419471][ T5096] usb 2-1: Using ep0 maxpacket: 32 [ 208.457528][ T5096] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 3 [ 208.470067][ T5148] gp8psk: usb out operation failed. [ 208.475375][ T5148] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 208.503964][ T5096] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 208.525816][ T5148] dvb_usb_gp8psk 3-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 208.529046][ T5096] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 208.574067][ T5096] usb 2-1: Product: syz [ 208.581661][ T5148] usb 3-1: USB disconnect, device number 15 [ 208.590919][ T5096] usb 2-1: Manufacturer: syz [ 208.619045][ T5096] usb 2-1: SerialNumber: syz [ 208.646533][ T5096] usb 2-1: config 0 descriptor?? [ 208.656115][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.669561][ T6538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.711499][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.877362][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.894628][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.340633][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 209.340654][ T29] audit: type=1326 audit(1719555236.481:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.4.297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca85775b29 code=0x0 [ 209.371099][ T6565] loop0: detected capacity change from 0 to 128 [ 209.407953][ T6565] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 209.489782][ T29] audit: type=1326 audit(1719555236.571:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 209.568450][ T29] audit: type=1326 audit(1719555236.571:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 209.628613][ T29] audit: type=1326 audit(1719555236.611:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 209.675383][ T6565] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 209.711381][ T29] audit: type=1326 audit(1719555236.611:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 209.837437][ T29] audit: type=1326 audit(1719555236.621:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 209.910004][ T5148] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 209.981657][ T29] audit: type=1326 audit(1719555236.691:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 210.078138][ T29] audit: type=1326 audit(1719555236.691:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 210.111095][ T5096] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 210.143757][ T5148] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.177029][ T5148] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 210.184569][ T29] audit: type=1326 audit(1719555236.701:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 210.218241][ T5148] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 210.250119][ T5148] usb 5-1: config 1 has no interface number 1 [ 210.269765][ T29] audit: type=1326 audit(1719555236.721:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 210.279536][ T5148] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 210.351283][ T5096] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.388112][ T5096] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.417099][ T5148] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 210.455365][ T5096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.473502][ T5148] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 210.498995][ T5096] usb 4-1: Product: syz [ 210.514552][ T5148] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 210.519655][ T5096] usb 4-1: Manufacturer: syz [ 210.538677][ T5148] usb 5-1: string descriptor 0 read error: -22 [ 210.545319][ T5148] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.570888][ T5148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.605820][ T5096] usb 4-1: SerialNumber: syz [ 210.664764][ T5148] usb 5-1: low speed audio streaming not supported [ 210.879218][ T5149] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 211.109170][ T5149] usb 1-1: Using ep0 maxpacket: 16 [ 211.127324][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 211.189229][ T5149] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 211.198340][ T5149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.257410][ T5149] usb 1-1: config 0 descriptor?? [ 211.523468][ T6585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.564566][ T6588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.658186][ T6588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.706560][ T6588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.749571][ T6588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.972566][ T5148] usb 2-1: USB disconnect, device number 11 [ 211.998440][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.041893][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.121204][ T5096] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 212.127946][ T5096] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 212.139388][ T5096] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 212.147108][ T5149] hid (null): bogus close delimiter [ 212.160833][ T5149] hid (null): unknown global tag 0x83 [ 212.166345][ T5149] hid (null): unknown global tag 0xc [ 212.203387][ T5149] hid-generic 0003:0158:0100.0010: unknown main item tag 0x1 [ 212.219026][ T5149] hid-generic 0003:0158:0100.0010: unexpected long global item [ 212.237794][ T5149] hid-generic 0003:0158:0100.0010: probe with driver hid-generic failed with error -22 [ 212.410612][ T5289] usb 5-1: USB disconnect, device number 3 [ 212.447183][ T5096] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 212.499377][ T5096] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 212.538082][ T5096] usb 4-1: USB disconnect, device number 17 [ 212.576131][ T5096] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 212.613332][ T1791] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 212.811479][ T1791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.842206][ T1791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.866479][ T1791] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 212.871397][ T927] usb 1-1: USB disconnect, device number 9 [ 212.886038][ T1791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.912838][ T1791] usb 2-1: SerialNumber: syz [ 214.027189][ T1791] usb 2-1: 0:2 : does not exist [ 214.051276][ T1791] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 214.104536][ T1791] usb 2-1: USB disconnect, device number 12 [ 214.191343][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 214.240466][ T5106] Bluetooth: hci1: unexpected event 0x09 length: 10 > 3 [ 214.392274][ T5147] udevd[5147]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.540994][ T5106] Bluetooth: hci1: SCO packet for unknown connection handle 1039 [ 215.149132][ T5289] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 215.428982][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 215.442064][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 215.461413][ T5106] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 215.482645][ T5289] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 215.525383][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.709829][ T5289] usb 4-1: config 0 descriptor?? [ 215.868724][ T6644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.539757][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.314'. [ 216.984473][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.066703][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.108003][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.167496][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.299891][ T5289] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1 [ 217.359205][ T5289] hid-generic 0003:0158:0100.0011: unexpected long global item [ 217.416781][ T5289] hid-generic 0003:0158:0100.0011: probe with driver hid-generic failed with error -22 [ 217.529279][ T5106] Bluetooth: hci0: command tx timeout [ 218.399129][ T1791] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 218.486801][ T6647] loop4: detected capacity change from 0 to 32768 [ 218.543567][ T6647] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 218.590434][ T1791] usb 3-1: Using ep0 maxpacket: 16 [ 218.609294][ T927] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 218.610416][ T1791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 218.646683][ T1791] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 218.663746][ T1791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.666652][ T6647] XFS (loop4): Ending clean mount [ 218.677129][ T1791] usb 3-1: config 0 descriptor?? [ 218.715911][ T6647] XFS (loop4): Quotacheck needed: Please wait. [ 218.741395][ T5149] usb 4-1: USB disconnect, device number 18 [ 218.829180][ T927] usb 2-1: Using ep0 maxpacket: 32 [ 218.831621][ T6647] XFS (loop4): Quotacheck: Done. [ 218.873394][ T927] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 3 [ 218.889209][ T6658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.910416][ T927] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 218.923603][ T927] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 218.949281][ T927] usb 2-1: Product: syz [ 218.953521][ T927] usb 2-1: Manufacturer: syz [ 218.959825][ T927] usb 2-1: SerialNumber: syz [ 218.989872][ T927] usb 2-1: config 0 descriptor?? [ 219.002147][ T6663] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 219.047397][ T5106] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 219.056396][ T5106] Bluetooth: hci1: Injecting HCI hardware error event [ 219.065925][ T5106] Bluetooth: hci1: hardware error 0x00 [ 219.086054][ T6228] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 219.414782][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.473686][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.560777][ T1791] hid (null): bogus close delimiter [ 219.567557][ T1791] hid (null): unknown global tag 0x83 [ 219.608961][ T1791] hid (null): unknown global tag 0xc [ 219.637339][ T1791] hid-generic 0003:0158:0100.0012: unknown main item tag 0x1 [ 219.655709][ T1791] hid-generic 0003:0158:0100.0012: unexpected long global item [ 219.688436][ T1791] hid-generic 0003:0158:0100.0012: probe with driver hid-generic failed with error -22 [ 219.857055][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 219.857077][ T29] audit: type=1326 audit(1719555246.931:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 220.866613][ T1791] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 220.927016][ T29] audit: type=1326 audit(1719555246.931:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 220.983860][ T5289] usb 3-1: USB disconnect, device number 16 [ 221.077837][ T29] audit: type=1326 audit(1719555246.961:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 221.109396][ T1791] usb 5-1: Using ep0 maxpacket: 32 [ 221.122321][ T5106] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 221.143497][ T1791] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 221.189683][ T29] audit: type=1326 audit(1719555246.961:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 221.209518][ T1791] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 221.243491][ T1791] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 221.254536][ T29] audit: type=1326 audit(1719555246.961:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 221.268966][ T1791] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.330871][ T29] audit: type=1326 audit(1719555247.121:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 221.348098][ T1791] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 221.400962][ T29] audit: type=1326 audit(1719555247.121:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 221.423142][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.429191][ T1791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 221.498352][ T1791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 221.516382][ T1791] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.524431][ T29] audit: type=1326 audit(1719555247.121:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 221.537058][ T1791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 221.584134][ T1791] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 221.597042][ T1791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.605595][ T1791] usb 5-1: Product: В [ 221.611626][ T1791] usb 5-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 221.621820][ T1791] usb 5-1: SerialNumber: syz [ 221.630420][ T1791] usb 5-1: config 0 descriptor?? [ 221.642574][ T1791] pvrusb2: Hardware description: Terratec Grabster AV400 [ 221.645772][ T29] audit: type=1326 audit(1719555247.161:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 221.650775][ T1791] pvrusb2: ********** [ 221.671983][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.683025][ T1791] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 221.693552][ T6695] netlink: 'syz.0.328': attribute type 10 has an invalid length. [ 221.702576][ T1791] pvrusb2: Important functionality might not be entirely working. [ 221.715467][ T1791] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 221.734379][ T29] audit: type=1326 audit(1719555247.161:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x7ffc0000 [ 221.765473][ T1791] pvrusb2: ********** [ 221.884415][ T1977] pvrusb2: Invalid write control endpoint [ 221.904082][ T6695] team0: Port device netdevsim0 added [ 222.059974][ T1977] pvrusb2: Invalid write control endpoint [ 222.080363][ T1977] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 222.158576][ T1977] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 222.364693][ T1977] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 223.144856][ T1977] pvrusb2: Device being rendered inoperable [ 223.159125][ T1977] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 223.167791][ T1977] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 223.189112][ T1977] pvrusb2: Attached sub-driver cx25840 [ 223.194964][ T1977] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 223.360640][ T1977] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 223.382782][ T5149] usb 5-1: USB disconnect, device number 4 [ 223.871732][ T6706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.330'. [ 223.960177][ T9] usb 2-1: USB disconnect, device number 13 [ 224.139575][ T927] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 224.166119][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.188944][ T5289] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 224.310285][ T6719] netlink: 32 bytes leftover after parsing attributes in process `syz.4.334'. [ 224.355811][ T6727] netlink: 'syz.1.336': attribute type 10 has an invalid length. [ 224.361621][ T927] usb 4-1: Using ep0 maxpacket: 16 [ 224.381141][ T927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 224.399199][ T5289] usb 1-1: Using ep0 maxpacket: 16 [ 224.406139][ T5289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 224.432796][ T6732] netlink: 32 bytes leftover after parsing attributes in process `syz.1.336'. [ 224.446499][ T927] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 224.459982][ T5289] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 224.484822][ T927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.500966][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.524584][ T927] usb 4-1: config 0 descriptor?? [ 224.526195][ T5289] usb 1-1: config 0 descriptor?? [ 224.627997][ T5149] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 224.732004][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.739630][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.054624][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.332'. [ 225.082179][ T5149] usb 5-1: Using ep0 maxpacket: 16 [ 225.790165][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.865918][ T5149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 225.897279][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.919088][ T5149] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 225.954225][ T5149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.980494][ T5149] usb 5-1: config 0 descriptor?? [ 226.014338][ T5289] hid (null): unknown global tag 0x83 [ 226.049439][ T5289] hid (null): unknown global tag 0xc [ 226.066956][ T5289] hid-generic 0003:0158:0100.0013: unknown main item tag 0x1 [ 226.085841][ T5289] hid-generic 0003:0158:0100.0013: unexpected long global item [ 226.099922][ T5289] hid-generic 0003:0158:0100.0013: probe with driver hid-generic failed with error -22 [ 226.217245][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.258088][ T5289] usb 1-1: USB disconnect, device number 10 [ 226.259786][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.320713][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.356582][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.393730][ T927] hid-generic 0003:0158:0100.0014: unknown main item tag 0x1 [ 226.409094][ T927] hid-generic 0003:0158:0100.0014: unexpected long global item [ 226.442944][ T927] hid-generic 0003:0158:0100.0014: probe with driver hid-generic failed with error -22 [ 226.459462][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.498351][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.547516][ T5149] usbhid 5-1:0.0: can't add hid device: -71 [ 226.559378][ T5149] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 226.593769][ T5149] usb 5-1: USB disconnect, device number 5 [ 226.595205][ T5180] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 226.622744][ T5289] usb 4-1: USB disconnect, device number 19 [ 227.076328][ T5180] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.098241][ T5180] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.110256][ T5180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.118659][ T5180] usb 2-1: Product: syz [ 227.126433][ T5180] usb 2-1: Manufacturer: syz [ 227.137083][ T5180] usb 2-1: SerialNumber: syz [ 229.289162][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 229.289183][ T29] audit: type=1326 audit(1719555256.411:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.4.345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca85775b29 code=0x0 [ 229.447454][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.459849][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.509235][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.639505][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.779834][ T927] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.818991][ T5151] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 230.034175][ T5151] usb 5-1: unable to get BOS descriptor or descriptor too short [ 230.051822][ T5151] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 230.051975][ T6782] netlink: 'syz.0.348': attribute type 10 has an invalid length. [ 230.068975][ T5151] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 230.090248][ T5180] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 230.097237][ T6782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.348'. [ 230.119380][ T5151] usb 5-1: config 1 has no interface number 1 [ 230.125596][ T5151] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 230.136883][ T5180] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 230.146923][ T5180] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 230.158537][ T5151] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 230.254329][ T5151] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 230.275414][ T5151] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 230.297219][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.313978][ T5151] usb 5-1: string descriptor 0 read error: -22 [ 230.320952][ T5151] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.330380][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.340269][ T5151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.351477][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.369619][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.380549][ T5151] usb 5-1: low speed audio streaming not supported [ 230.389820][ T5108] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.397483][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.547845][ T3847] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.013022][ T3847] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.154302][ T5180] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 231.209137][ T5180] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 231.264184][ T5180] usb 2-1: USB disconnect, device number 14 [ 231.298335][ T5180] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 231.372099][ T3847] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.657185][ T3847] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.989075][ T5096] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 232.143038][ T5096] usb 3-1: device descriptor read/64, error -71 [ 232.452980][ T6798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.352'. [ 232.526537][ T5106] Bluetooth: hci3: command tx timeout [ 232.749092][ T5096] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 233.196573][ T5096] usb 3-1: device descriptor read/64, error -71 [ 233.225998][ T927] usb 5-1: USB disconnect, device number 6 [ 233.352828][ T5106] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 233.364145][ T5096] usb usb3-port1: attempt power cycle [ 233.602445][ T5149] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 233.799032][ T5149] usb 2-1: Using ep0 maxpacket: 16 [ 233.819127][ T5096] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 233.847881][ T5149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 233.861942][ T5149] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 233.886139][ T5149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.886763][ T5096] usb 3-1: device descriptor read/8, error -71 [ 233.899379][ T5149] usb 2-1: config 0 descriptor?? [ 234.221104][ T5096] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 234.259670][ T5096] usb 3-1: device descriptor read/8, error -71 [ 234.392066][ T5096] usb usb3-port1: unable to enumerate USB device [ 234.513774][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.552054][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.667442][ T5149] hid (null): unknown global tag 0x83 [ 234.673677][ T5149] hid (null): unknown global tag 0xc [ 234.680086][ T3847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.691735][ T5149] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1 [ 234.700444][ T3847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.706169][ T5149] hid-generic 0003:0158:0100.0015: unexpected long global item [ 234.719474][ T5106] Bluetooth: hci3: command tx timeout [ 234.727372][ T3847] bond0 (unregistering): Released all slaves [ 234.746458][ T6784] chnl_net:caif_netlink_parms(): no params data found [ 234.746517][ T5149] hid-generic 0003:0158:0100.0015: probe with driver hid-generic failed with error -22 [ 234.916986][ T5289] usb 2-1: USB disconnect, device number 15 [ 235.359857][ T5106] Bluetooth: hci0: command tx timeout [ 235.959896][ T3847] hsr_slave_0: left promiscuous mode [ 235.973528][ T3847] hsr_slave_1: left promiscuous mode [ 236.311939][ T3847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.329729][ T3847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.350090][ T3847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.366338][ T3847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.391212][ T3847] veth1_macvtap: left promiscuous mode [ 236.400173][ T3847] veth0_macvtap: left promiscuous mode [ 236.405906][ T3847] veth1_vlan: left promiscuous mode [ 236.423704][ T3847] veth0_vlan: left promiscuous mode [ 236.799191][ T5106] Bluetooth: hci3: command tx timeout [ 236.996386][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.999659][ T5111] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 237.007224][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.023732][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.033421][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.045314][ T5108] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 237.053872][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.057336][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 238.105593][ T3847] team0 (unregistering): Port device team_slave_1 removed [ 238.201016][ T3847] team0 (unregistering): Port device team_slave_0 removed [ 238.760162][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 238.856042][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.886661][ T5108] Bluetooth: hci3: command tx timeout [ 238.891457][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.919237][ T6784] bridge_slave_0: entered allmulticast mode [ 238.938371][ T6784] bridge_slave_0: entered promiscuous mode [ 239.009798][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.017072][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.040832][ T5108] Bluetooth: hci0: command tx timeout [ 239.041437][ T6784] bridge_slave_1: entered allmulticast mode [ 239.123326][ T6784] bridge_slave_1: entered promiscuous mode [ 239.129194][ T5108] Bluetooth: hci1: command tx timeout [ 239.383140][ T6784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.518323][ T6784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.814117][ T6901] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.375'. [ 239.877188][ T6784] team0: Port device team_slave_0 added [ 239.897522][ T6899] netlink: 'syz.0.375': attribute type 41 has an invalid length. [ 241.103649][ T6784] team0: Port device team_slave_1 added [ 241.204813][ T5108] Bluetooth: hci1: command tx timeout [ 241.344273][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.359309][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.385298][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.409205][ T6784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.552506][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.585823][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.646586][ T6784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.697162][ T6917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'. [ 241.709304][ T29] audit: type=1326 audit(1719555268.831:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.1.380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x0 [ 241.809031][ T5151] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 242.094101][ T6784] hsr_slave_0: entered promiscuous mode [ 242.110590][ T6784] hsr_slave_1: entered promiscuous mode [ 242.124845][ T6784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.134721][ T6784] Cannot create hsr debugfs directory [ 242.970280][ T5151] usb 1-1: Using ep0 maxpacket: 16 [ 243.009316][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 243.028987][ T5151] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 243.050894][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 243.052244][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.076682][ T5151] usb 1-1: config 0 descriptor?? [ 243.279106][ T5108] Bluetooth: hci1: command tx timeout [ 243.370899][ T3847] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.519812][ T6947] netlink: 'syz.1.382': attribute type 10 has an invalid length. [ 243.606661][ T6956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.382'. [ 243.630901][ T3847] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.744111][ T5151] usbhid 1-1:0.0: can't add hid device: -71 [ 243.761434][ T5151] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 243.791559][ T5151] usb 1-1: USB disconnect, device number 11 [ 243.816870][ T5147] udevd[5147]: setting owner of /dev/bus/usb/001/011 to uid=0, gid=0 failed: No such file or directory [ 243.862387][ T3847] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.958206][ T6864] chnl_net:caif_netlink_parms(): no params data found [ 244.062301][ T3847] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.518966][ T29] audit: type=1326 audit(1719555271.651:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.0.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb702d75b29 code=0x0 [ 244.605647][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.630641][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.649268][ T6864] bridge_slave_0: entered allmulticast mode [ 244.658466][ T6864] bridge_slave_0: entered promiscuous mode [ 244.694385][ T6977] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.386'. [ 244.735834][ T6974] netlink: 'syz.2.386': attribute type 41 has an invalid length. [ 244.964423][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.452080][ T5108] Bluetooth: hci1: command tx timeout [ 245.482329][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.514439][ T6864] bridge_slave_1: entered allmulticast mode [ 245.539104][ T6864] bridge_slave_1: entered promiscuous mode [ 246.034388][ T6864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.053481][ T6864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.291821][ T3847] bridge_slave_1: left allmulticast mode [ 246.306460][ T3847] bridge_slave_1: left promiscuous mode [ 246.326146][ T3847] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.350974][ T3847] bridge_slave_0: left allmulticast mode [ 246.360851][ T3847] bridge_slave_0: left promiscuous mode [ 246.377801][ T3847] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.410415][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 247.036997][ T6991] loop0: detected capacity change from 0 to 40427 [ 247.103610][ T6991] F2FS-fs (loop0): invalid crc value [ 247.123473][ T6991] F2FS-fs (loop0): Found nat_bits in checkpoint [ 247.265763][ T6991] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 247.499659][ T3847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.690031][ T7002] syz.0.389: attempt to access beyond end of device [ 247.690031][ T7002] loop0: rw=2049, sector=53248, nr_sectors = 1544 limit=40427 [ 247.721075][ T29] audit: type=1800 audit(1719555274.721:431): pid=7002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.389" name="file2" dev="loop0" ino=10 res=0 errno=0 [ 247.796647][ T3847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.866674][ T3847] bond0 (unregistering): Released all slaves [ 247.913041][ T6864] team0: Port device team_slave_0 added [ 247.998305][ T6864] team0: Port device team_slave_1 added [ 248.172979][ T6262] syz-executor: attempt to access beyond end of device [ 248.172979][ T6262] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.209285][ T6262] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 248.290977][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.303497][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.337532][ T6864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.415003][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.422319][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.455375][ T6864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.519067][ T5148] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 248.720290][ T5148] usb 3-1: Using ep0 maxpacket: 16 [ 248.753975][ T5148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 248.797376][ T5148] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 248.824562][ T5148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.842673][ T6784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 248.861512][ T5148] usb 3-1: config 0 descriptor?? [ 248.870407][ T6784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 248.954587][ T6784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 248.993375][ T6784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.056681][ T3847] hsr_slave_0: left promiscuous mode [ 249.072562][ T3847] hsr_slave_1: left promiscuous mode [ 249.081148][ T7004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'. [ 249.101436][ T3847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.124275][ T3847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.152190][ T3847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.160774][ T3847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.231840][ T3847] veth1_macvtap: left promiscuous mode [ 249.258189][ T3847] veth0_macvtap: left promiscuous mode [ 249.264313][ T3847] veth1_vlan: left promiscuous mode [ 249.275960][ T3847] veth0_vlan: left promiscuous mode [ 249.320648][ T7016] netlink: 'syz.0.392': attribute type 10 has an invalid length. [ 249.483424][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.505187][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.540294][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.573488][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.607523][ T5148] hid-generic 0003:0158:0100.0016: unknown main item tag 0x1 [ 249.623939][ T5148] hid-generic 0003:0158:0100.0016: unexpected long global item [ 249.634589][ T5148] hid-generic 0003:0158:0100.0016: probe with driver hid-generic failed with error -22 [ 249.816227][ T5148] usb 3-1: USB disconnect, device number 21 [ 250.107568][ T3847] team0 (unregistering): Port device team_slave_1 removed [ 250.156158][ T3847] team0 (unregistering): Port device team_slave_0 removed [ 250.835872][ T6864] hsr_slave_0: entered promiscuous mode [ 250.850492][ T6864] hsr_slave_1: entered promiscuous mode [ 250.857287][ T6864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.873280][ T6864] Cannot create hsr debugfs directory [ 251.106289][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 252.234509][ T7040] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.397'. [ 252.282211][ T7035] netlink: 'syz.2.397': attribute type 41 has an invalid length. [ 255.046708][ T6864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.086652][ T6864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.136069][ T6864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.169572][ T6864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.189270][ T1791] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 255.291191][ T6784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.306687][ T7051] loop0: detected capacity change from 0 to 40427 [ 255.350797][ T7051] F2FS-fs (loop0): invalid crc value [ 255.415441][ T7051] F2FS-fs (loop0): Found nat_bits in checkpoint [ 255.555305][ T6784] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.570146][ T7051] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 256.181923][ T7090] syz.0.400: attempt to access beyond end of device [ 256.181923][ T7090] loop0: rw=2049, sector=53248, nr_sectors = 1544 limit=40427 [ 256.374479][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.383354][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.393873][ T29] audit: type=1800 audit(1719555283.301:432): pid=7090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.400" name="file2" dev="loop0" ino=10 res=0 errno=0 [ 256.427226][ T1791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.475099][ T1791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.517956][ T1791] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 256.545073][ T1791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 256.573220][ T1791] usb 2-1: SerialNumber: syz [ 256.702294][ T7094] netlink: 'syz.2.406': attribute type 10 has an invalid length. [ 256.735592][ T7094] netlink: 32 bytes leftover after parsing attributes in process `syz.2.406'. [ 256.760241][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.822757][ T1791] usb 2-1: 0:2 : does not exist [ 256.836745][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.861088][ T6262] syz-executor: attempt to access beyond end of device [ 256.861088][ T6262] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.878517][ T6262] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 256.881412][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.892755][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.898421][ T1791] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 256.956046][ T1791] usb 2-1: USB disconnect, device number 16 [ 257.081012][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.088272][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.117256][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.124578][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.235039][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.242315][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.429054][ T5147] udevd[5147]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.849972][ T7106] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.409'. [ 257.943218][ T7101] netlink: 'syz.2.409': attribute type 41 has an invalid length. [ 258.909294][ T7118] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 259.444981][ T6784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.511080][ T7139] netlink: 32 bytes leftover after parsing attributes in process `syz.0.414'. [ 259.526689][ T7146] netlink: 32 bytes leftover after parsing attributes in process `syz.2.415'. [ 259.664155][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.839645][ T5096] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 260.041320][ T5096] usb 1-1: Using ep0 maxpacket: 16 [ 260.061351][ T5096] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 260.103756][ T6784] veth0_vlan: entered promiscuous mode [ 260.105404][ T5096] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 260.148108][ T5096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.180799][ T5096] usb 1-1: config 0 descriptor?? [ 260.281376][ T6784] veth1_vlan: entered promiscuous mode [ 260.619791][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.649729][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.692563][ T5096] hid (null): unknown global tag 0x83 [ 260.730934][ T5096] hid (null): unknown global tag 0xc [ 260.752811][ T6784] veth0_macvtap: entered promiscuous mode [ 260.770540][ T5096] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 260.778040][ T5096] hid-generic 0003:0158:0100.0017: unexpected long global item [ 260.802915][ T7152] loop1: detected capacity change from 0 to 40427 [ 260.814753][ T5096] hid-generic 0003:0158:0100.0017: probe with driver hid-generic failed with error -22 [ 260.837053][ T7152] F2FS-fs (loop1): invalid crc value [ 260.871703][ T6864] veth0_vlan: entered promiscuous mode [ 260.887178][ T7152] F2FS-fs (loop1): Found nat_bits in checkpoint [ 260.924416][ T6784] veth1_macvtap: entered promiscuous mode [ 260.947479][ T927] usb 1-1: USB disconnect, device number 12 [ 261.006609][ T6864] veth1_vlan: entered promiscuous mode [ 261.075651][ T7152] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 261.502021][ T7189] syz.1.416: attempt to access beyond end of device [ 261.502021][ T7189] loop1: rw=2049, sector=53248, nr_sectors = 1544 limit=40427 [ 261.905099][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.909183][ T29] audit: type=1800 audit(1719555288.551:433): pid=7189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.416" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 261.939059][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.958927][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.980174][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.994710][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.018436][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.035745][ T5094] syz-executor: attempt to access beyond end of device [ 262.035745][ T5094] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 262.037163][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.078251][ T5094] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 262.111317][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.142765][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.168982][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.188878][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.198783][ T6784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.233027][ T6784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.260876][ T6784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.303518][ T6784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.348678][ T6784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.359284][ T6784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.368055][ T6784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.476086][ T6864] veth0_macvtap: entered promiscuous mode [ 262.581990][ T6864] veth1_macvtap: entered promiscuous mode [ 262.812309][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.866141][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.904553][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.929296][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.965662][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.008876][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.034077][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.063791][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.090153][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.179543][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.215584][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.248411][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.296959][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.326542][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.357803][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.408973][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.459226][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.495257][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.563695][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.604463][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.630052][ T6864] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.669316][ T6864] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.688517][ T6864] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.719009][ T6864] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.895887][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.929046][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.202126][ T7203] loop1: detected capacity change from 0 to 32768 [ 264.524168][ T7239] syz.1.421: attempt to access beyond end of device [ 264.524168][ T7239] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 264.587055][ T7239] lbmIODone: I/O error in JFS log [ 264.614229][ T7239] *** Log Format Error ! *** [ 264.628006][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.641267][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.696410][ T7239] lmLogInit: exit(-22) [ 264.738356][ T7239] lmLogOpen: exit(-22) [ 265.159969][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.167994][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.639726][ T5096] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 265.766327][ T29] audit: type=1800 audit(1719555292.901:434): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.436" name="file0" dev="sda1" ino=1991 res=0 errno=0 [ 265.907567][ T5096] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 265.915921][ T29] audit: type=1804 audit(1719555292.921:435): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.436" name="/root/syzkaller.CLhB8M/44/file0" dev="sda1" ino=1991 res=1 errno=0 [ 265.996862][ T5096] usb 3-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 266.090699][ T5096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.159771][ T5096] usb 3-1: Product: syz [ 266.167329][ T5096] usb 3-1: Manufacturer: syz [ 266.183709][ T5096] usb 3-1: SerialNumber: syz [ 266.209930][ T5096] usb 3-1: config 0 descriptor?? [ 266.242771][ T5096] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 266.283197][ T5096] ftdi_sio ttyUSB0: unknown device type: 0x1689 [ 266.724313][ T5108] Bluetooth: hci1: unexpected event 0x09 length: 10 > 3 [ 266.763862][ T5108] Bluetooth: hci1: SCO packet for unknown connection handle 1039 [ 267.063805][ T7288] input: syz0 as /devices/virtual/input/input5 [ 267.125636][ T7288] input: failed to attach handler leds to device input5, error: -6 [ 267.140680][ T7247] loop3: detected capacity change from 0 to 40427 [ 267.159951][ T7247] F2FS-fs (loop3): invalid crc value [ 267.198776][ T7247] F2FS-fs (loop3): Found nat_bits in checkpoint [ 267.382006][ T7247] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 267.829747][ T7303] syz.3.429: attempt to access beyond end of device [ 267.829747][ T7303] loop3: rw=2049, sector=53248, nr_sectors = 1544 limit=40427 [ 267.866514][ T29] audit: type=1800 audit(1719555294.881:436): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.429" name="file2" dev="loop3" ino=10 res=0 errno=0 [ 268.331456][ T7308] Illegal XDP return value 4294967274 on prog (id 38) dev syz_tun, expect packet loss! [ 268.372834][ T6784] syz-executor: attempt to access beyond end of device [ 268.372834][ T6784] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 268.388091][ T7308] loop4: detected capacity change from 0 to 512 [ 268.409361][ T6784] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 268.510329][ T7312] loop1: detected capacity change from 0 to 128 [ 268.582180][ T7308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.625248][ T5893] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 268.677029][ T7308] ext4 filesystem being mounted at /root/syzkaller.j1ILtX/2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.754945][ T5145] usb 3-1: USB disconnect, device number 22 [ 268.787712][ T5145] ftdi_sio 3-1:0.0: device disconnected [ 268.888031][ T6864] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.993449][ T7290] loop0: detected capacity change from 0 to 32768 [ 269.126569][ T7319] loop2: detected capacity change from 0 to 1024 [ 269.211320][ T7319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.225341][ T7322] loop3: detected capacity change from 0 to 2048 [ 269.292786][ T7322] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 269.316122][ T7322] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 269.328575][ T7319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.340474][ T7322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.580729][ T7328] syz.0.442: attempt to access beyond end of device [ 269.580729][ T7328] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 269.595040][ T7328] lbmIODone: I/O error in JFS log [ 269.601610][ T7328] *** Log Format Error ! *** [ 269.815054][ T29] audit: type=1800 audit(1719555296.821:437): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.447" name="bus" dev="loop3" ino=1368 res=0 errno=0 [ 270.435288][ T7328] lmLogInit: exit(-22) [ 270.474196][ T7328] lmLogOpen: exit(-22) [ 270.566164][ T7319] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 236 with max blocks 8 with error 28 [ 270.619070][ T7319] EXT4-fs (loop2): This should not happen!! Data will be lost [ 270.619070][ T7319] [ 270.701276][ T7319] EXT4-fs (loop2): Total free blocks count 0 [ 270.707526][ T7319] EXT4-fs (loop2): Free/Dirty block details [ 270.740160][ T7319] EXT4-fs (loop2): free_blocks=0 [ 270.757283][ T7319] EXT4-fs (loop2): dirty_blocks=0 [ 270.778965][ T7319] EXT4-fs (loop2): Block reservation details [ 270.785037][ T7319] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 270.879885][ T5108] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 270.888981][ T5108] Bluetooth: hci1: Injecting HCI hardware error event [ 270.897942][ T5106] Bluetooth: hci1: hardware error 0x00 [ 270.994449][ T5104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.568318][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 271.785329][ T7336] loop1: detected capacity change from 0 to 32768 [ 272.196633][ T7370] loop3: detected capacity change from 0 to 2048 [ 272.250983][ T7336] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=none,background_compression=lz4,str_hash=crc64,nojournal_transaction_names [ 272.280151][ T7370] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 272.308291][ T7370] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 272.327347][ T7336] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 272.347757][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.355923][ T7370] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.374253][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.385468][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.389425][ T7336] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 272.389425][ T7336] running recovery passes: check_allocations [ 272.412349][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.437087][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.449822][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.460301][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.775344][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.804795][ T29] audit: type=1800 audit(1719555299.931:438): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.464" name="bus" dev="loop3" ino=1368 res=0 errno=0 [ 273.057726][ T7336] bcachefs (loop1): accounting_read... done [ 273.064889][ T5106] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 273.089350][ T7336] bcachefs (loop1): alloc_read... done [ 273.094958][ T7336] bcachefs (loop1): stripes_read... done [ 273.159408][ T7336] bcachefs (loop1): snapshots_read... done [ 273.209155][ T7336] bcachefs (loop1): check_allocations... [ 273.226609][ T7379] loop4: detected capacity change from 0 to 1024 [ 273.255571][ T7336] btree ptr not marked in member info btree allocated bitmap [ 273.255641][ T7336] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4fe84214937890c3 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 273.276510][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.488035][ T7336] bcachefs (loop1): inconsistency detected - emergency read only at journal seq 10 [ 273.501155][ T7336] bcachefs (loop1): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 273.509430][ T7336] bcachefs (loop1): bch2_gc_btree(): error fsck_errors_not_fixed [ 273.521599][ T7336] bcachefs (loop1): bch2_gc_btrees(): error fsck_errors_not_fixed [ 273.539145][ T7336] bcachefs (loop1): bch2_check_allocations(): error fsck_errors_not_fixed [ 273.550578][ T7336] bcachefs (loop1): bch2_fs_recovery(): error fsck_errors_not_fixed [ 273.564812][ T7336] bcachefs (loop1): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 273.577773][ T7336] bcachefs (loop1): shutting down [ 273.580727][ T52] team0: Port device netdevsim0 removed [ 273.593616][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.645851][ T7336] bcachefs (loop1): shutdown complete [ 273.769143][ T1791] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 273.964716][ T1791] usb 5-1: not running at top speed; connect to a high speed hub [ 273.981259][ T52] bridge_slave_1: left allmulticast mode [ 273.992130][ T52] bridge_slave_1: left promiscuous mode [ 274.017832][ T1791] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 274.033358][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.046345][ T1791] usb 5-1: config 1 interface 0 altsetting 37 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.076380][ T52] bridge_slave_0: left allmulticast mode [ 274.082455][ T52] bridge_slave_0: left promiscuous mode [ 274.088198][ T1791] usb 5-1: config 1 interface 0 has no altsetting 0 [ 274.098877][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.119365][ T1791] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.138581][ T1791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.147386][ T1791] usb 5-1: Product: 䢰┣㋅ໞʢ婟Ⅼ劖໑႓웞黾吱巼姮訌㥿त貮똑⼛ᆑ昦䷃ [ 274.198466][ T29] audit: type=1326 audit(1719555301.331:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.3.470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14b7375b29 code=0x0 [ 274.209498][ T1791] usb 5-1: SerialNumber: syz [ 274.220199][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.530778][ T7379] syz.4.466: attempt to access beyond end of device [ 274.530778][ T7379] loop4: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 274.561537][ T7379] Buffer I/O error on dev loop4, logical block 2889, lost async page write [ 274.579938][ T5111] Bluetooth: hci0: command tx timeout [ 275.120172][ T5106] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 275.877547][ T1791] cdc_ether 5-1:1.0: skipping garbage [ 275.888212][ T1791] usb 5-1: bad CDC descriptors [ 275.953735][ T1791] usb 5-1: USB disconnect, device number 7 [ 276.202161][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.235435][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.287621][ T52] bond0 (unregistering): Released all slaves [ 276.410504][ T7417] loop1: detected capacity change from 0 to 512 [ 276.422144][ T7417] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.709080][ T5111] Bluetooth: hci0: command tx timeout [ 276.751166][ T7417] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.476: corrupted in-inode xattr: invalid ea_ino [ 276.769077][ T7417] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.476: couldn't read orphan inode 12 (err -117) [ 276.789400][ T7417] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.200028][ T5106] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 277.223145][ T5094] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 277.759900][ T29] audit: type=1326 audit(1719555304.901:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.1.482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f657b175b29 code=0x0 [ 278.069121][ T52] hsr_slave_0: left promiscuous mode [ 278.121087][ T52] hsr_slave_1: left promiscuous mode [ 278.143167][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.153660][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.597069][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.647406][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.719215][ T5106] Bluetooth: hci0: command tx timeout [ 278.813827][ T52] veth1_macvtap: left promiscuous mode [ 278.826266][ T7425] loop2: detected capacity change from 0 to 32768 [ 278.850805][ T52] veth0_macvtap: left promiscuous mode [ 278.865689][ T52] veth1_vlan: left promiscuous mode [ 278.919099][ T52] veth0_vlan: left promiscuous mode [ 279.047155][ T7452] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 279.054093][ T7452] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 279.086724][ T7454] loop1: detected capacity change from 0 to 2048 [ 279.103908][ T7452] vhci_hcd vhci_hcd.0: Device attached [ 279.130788][ T7454] udf: Bad value for 'session' [ 279.163043][ T7457] syz.2.479: attempt to access beyond end of device [ 279.163043][ T7457] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 279.189552][ T7457] lbmIODone: I/O error in JFS log [ 279.194730][ T7457] *** Log Format Error ! *** [ 279.221813][ T7457] lmLogInit: exit(-22) [ 279.236260][ T7457] lmLogOpen: exit(-22) [ 279.309096][ T5151] vhci_hcd: vhci_device speed not set [ 279.408970][ T5151] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 279.724208][ T7455] vhci_hcd: connection reset by peer [ 279.741529][ T53] vhci_hcd: stop threads [ 279.748305][ T53] vhci_hcd: release socket [ 279.758685][ T53] vhci_hcd: disconnect device [ 280.197685][ T52] team0 (unregistering): Port device team_slave_1 removed [ 280.247560][ T52] team0 (unregistering): Port device team_slave_0 removed [ 280.722476][ T7472] loop4: detected capacity change from 0 to 256 [ 280.753405][ T7472] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.795626][ T7472] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 280.807997][ T5106] Bluetooth: hci0: command tx timeout [ 280.979795][ T29] audit: type=1326 audit(1719555308.121:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.4.491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25b3d75b29 code=0x0 [ 281.071615][ T7371] chnl_net:caif_netlink_parms(): no params data found [ 281.139431][ T7446] team0: Port device team_slave_0 removed [ 281.146194][ T7446] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 281.394813][ T7480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.493'. [ 281.426496][ T7483] netlink: 'syz.1.494': attribute type 10 has an invalid length. [ 281.524173][ T7488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.494'. [ 281.569320][ T927] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 281.593140][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.619057][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.633261][ T7371] bridge_slave_0: entered allmulticast mode [ 281.647152][ T7371] bridge_slave_0: entered promiscuous mode [ 281.674226][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.694182][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.713262][ T7371] bridge_slave_1: entered allmulticast mode [ 281.743567][ T7371] bridge_slave_1: entered promiscuous mode [ 281.789784][ T927] usb 4-1: Using ep0 maxpacket: 32 [ 281.811099][ T927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 281.834161][ T927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 281.879051][ T927] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 281.914073][ T927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.955669][ T7371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.955822][ T927] usb 4-1: config 0 descriptor?? [ 281.994118][ T7478] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.995367][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 282.025143][ T927] hub 4-1:0.0: USB hub found [ 282.033817][ T7371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.137630][ T7505] team0: entered promiscuous mode [ 282.169060][ T7505] team_slave_0: entered promiscuous mode [ 282.192473][ T7505] team_slave_1: entered promiscuous mode [ 282.224300][ T927] hub 4-1:0.0: 4 ports detected [ 282.231698][ T927] hub 4-1:0.0: insufficient power available to use all downstream ports [ 282.243963][ T7496] team0: left promiscuous mode [ 282.259277][ T7496] team_slave_0: left promiscuous mode [ 282.276375][ T7496] team_slave_1: left promiscuous mode [ 282.306733][ T7371] team0: Port device team_slave_0 added [ 282.399804][ T7371] team0: Port device team_slave_1 added [ 282.431906][ T927] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 282.457154][ T927] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 282.492898][ T927] usbhid 4-1:0.0: can't add hid device: -71 [ 282.519793][ T927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 282.590545][ T927] usb 4-1: USB disconnect, device number 20 [ 282.603100][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.623513][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.691592][ T7371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.714382][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.751984][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.821328][ T7371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.971406][ T7371] hsr_slave_0: entered promiscuous mode [ 283.003414][ T7371] hsr_slave_1: entered promiscuous mode [ 283.079043][ T7371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.124321][ T7491] loop2: detected capacity change from 0 to 40427 [ 283.129901][ T7371] Cannot create hsr debugfs directory [ 283.137946][ T7491] F2FS-fs (loop2): invalid crc value [ 283.169156][ T7491] F2FS-fs (loop2): Found nat_bits in checkpoint [ 283.366778][ T7491] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 283.656416][ T7535] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 283.867739][ T7538] syz.2.495: attempt to access beyond end of device [ 283.867739][ T7538] loop2: rw=2049, sector=53248, nr_sectors = 1544 limit=40427 [ 284.456234][ T29] audit: type=1800 audit(1719555310.971:442): pid=7538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.495" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 284.541266][ T5104] syz-executor: attempt to access beyond end of device [ 284.541266][ T5104] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.559016][ T5104] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 284.569329][ T5151] vhci_hcd: vhci_device speed not set [ 284.853118][ T7550] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 284.865360][ T7550] netlink: 32 bytes leftover after parsing attributes in process `syz.3.505'. [ 286.281888][ T7371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.527224][ T7371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.632281][ T7371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.708261][ T7597] loop3: detected capacity change from 0 to 512 [ 286.751511][ T7597] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.762908][ T7598] loop1: detected capacity change from 0 to 128 [ 286.776188][ T7597] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 286.810295][ T7371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.817326][ T7597] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 286.916398][ T7597] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.517: corrupted in-inode xattr: e_value out of bounds [ 286.944002][ T7597] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.517: couldn't read orphan inode 15 (err -117) [ 286.972514][ T7600] netlink: 'syz.4.518': attribute type 10 has an invalid length. [ 286.993125][ T7597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.010406][ T7600] netlink: 32 bytes leftover after parsing attributes in process `syz.4.518'. [ 287.260499][ T29] audit: type=1800 audit(1719555314.401:443): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.517" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 287.739684][ T6784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.747330][ T7586] loop2: detected capacity change from 0 to 40427 [ 287.789642][ T7586] F2FS-fs (loop2): invalid crc value [ 287.818679][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.836876][ T7586] F2FS-fs (loop2): Found nat_bits in checkpoint [ 288.065019][ T7586] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 288.079957][ T7371] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.117535][ T7629] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 288.124126][ T7629] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 288.302460][ T7629] vhci_hcd vhci_hcd.0: Device attached [ 288.363310][ T7637] loop3: detected capacity change from 0 to 256 [ 288.502334][ T7638] syz.2.513: attempt to access beyond end of device [ 288.502334][ T7638] loop2: rw=2049, sector=53248, nr_sectors = 1544 limit=40427 [ 288.609334][ T46] vhci_hcd: vhci_device speed not set [ 288.921116][ T29] audit: type=1800 audit(1719555315.551:444): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.513" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 288.980009][ T5104] syz-executor: attempt to access beyond end of device [ 288.980009][ T5104] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 289.029087][ T46] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 289.052255][ T7631] vhci_hcd: connection closed [ 289.054154][ T7633] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 289.067120][ T5104] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 289.080178][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.087499][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.089065][ T7637] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 289.113269][ T35] vhci_hcd: stop threads [ 289.122824][ T35] vhci_hcd: release socket [ 289.146442][ T35] vhci_hcd: disconnect device [ 289.148147][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.158370][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.203965][ T29] audit: type=1800 audit(1719555316.321:445): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.525" name="bus" dev="loop3" ino=1048610 res=0 errno=0 [ 290.998121][ T7371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.012802][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 291.141095][ T7665] team0: entered promiscuous mode [ 291.153623][ T7665] team_slave_1: entered promiscuous mode [ 291.183573][ T7662] team0: left promiscuous mode [ 291.188437][ T7662] team_slave_1: left promiscuous mode [ 291.404433][ T7672] loop3: detected capacity change from 0 to 512 [ 291.451632][ T7672] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.485978][ T7672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 291.567942][ T7672] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.531: corrupted in-inode xattr: e_value out of bounds [ 291.611394][ T7672] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.531: couldn't read orphan inode 15 (err -117) [ 291.631915][ T7672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.776060][ T7371] veth0_vlan: entered promiscuous mode [ 291.836777][ T29] audit: type=1800 audit(1719555318.971:446): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.531" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 292.215555][ T7702] loop1: detected capacity change from 0 to 2048 [ 292.268586][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 292.310187][ T7702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.324968][ T7707] netlink: 'syz.4.537': attribute type 10 has an invalid length. [ 292.376263][ T7702] ext4 filesystem being mounted at /root/syzkaller.2bNaJC/122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.397542][ T7707] netlink: 32 bytes leftover after parsing attributes in process `syz.4.537'. [ 292.456998][ T7371] veth1_vlan: entered promiscuous mode [ 292.487319][ T6784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.806262][ T5094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.978554][ T7371] veth0_macvtap: entered promiscuous mode [ 293.010235][ T7722] loop2: detected capacity change from 0 to 512 [ 293.027513][ T927] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.062356][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 293.115744][ T7722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.171788][ T7371] veth1_macvtap: entered promiscuous mode [ 293.191912][ T7729] team0: entered promiscuous mode [ 293.197024][ T7729] team_slave_0: entered promiscuous mode [ 293.207366][ T7722] ext4 filesystem being mounted at /root/syzkaller.nthvK9/124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.237864][ T7732] loop3: detected capacity change from 0 to 512 [ 293.251338][ T7729] team_slave_1: entered promiscuous mode [ 293.304587][ T7724] team0: left promiscuous mode [ 293.318452][ T7732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.336180][ T7724] team_slave_0: left promiscuous mode [ 293.336270][ T7732] ext4 filesystem being mounted at /root/syzkaller.cro9rN/32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.361044][ T7724] team_slave_1: left promiscuous mode [ 293.575673][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.589323][ T6784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.620676][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.659332][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.713276][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.748972][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.788864][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.816518][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.839456][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.866267][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.006305][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.037635][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.063168][ T29] audit: type=1326 audit(1719555321.201:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b7375b29 code=0x7ffc0000 [ 294.087989][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.133194][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.150688][ T29] audit: type=1326 audit(1719555321.201:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b7375b29 code=0x7ffc0000 [ 294.156866][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.188980][ T46] vhci_hcd: vhci_device speed not set [ 294.248439][ T29] audit: type=1326 audit(1719555321.221:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14b7375b29 code=0x7ffc0000 [ 294.300850][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.320979][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.339030][ T29] audit: type=1326 audit(1719555321.221:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b7375b29 code=0x7ffc0000 [ 294.372637][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.396978][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.539070][ T29] audit: type=1326 audit(1719555321.221:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b7375b29 code=0x7ffc0000 [ 294.650448][ T29] audit: type=1326 audit(1719555321.221:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14b7375b29 code=0x7ffc0000 [ 294.676317][ T29] audit: type=1326 audit(1719555321.221:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b7375b29 code=0x7ffc0000 [ 294.699646][ T29] audit: type=1326 audit(1719555321.241:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f14b7375b29 code=0x7ffc0000 [ 294.705662][ T7371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.723452][ T29] audit: type=1326 audit(1719555321.241:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b7375b29 code=0x7ffc0000 [ 294.723511][ T29] audit: type=1326 audit(1719555321.241:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b7375b29 code=0x7ffc0000 [ 294.907300][ T7371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.078216][ T7371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.300718][ T7371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.625655][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.551'. [ 296.937220][ T7794] loop3: detected capacity change from 0 to 2048 [ 296.996247][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 297.007171][ T7794] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 297.020007][ T7798] loop1: detected capacity change from 0 to 512 [ 297.040603][ T7794] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 297.074253][ T7799] team0: entered promiscuous mode [ 297.081832][ T7794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.088538][ T7799] team_slave_0: entered promiscuous mode [ 297.104210][ T7799] team_slave_1: entered promiscuous mode [ 297.115213][ T7798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.115531][ T7795] team0: left promiscuous mode [ 297.137298][ T7795] team_slave_0: left promiscuous mode [ 297.143239][ T7795] team_slave_1: left promiscuous mode [ 297.149420][ T7798] ext4 filesystem being mounted at /root/syzkaller.2bNaJC/128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.389289][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.398581][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.793329][ T5104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.958618][ T3847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.978355][ T5094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.004337][ T3847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.579089][ T5289] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 298.834352][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.872123][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.890111][ T5289] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 298.913605][ T5106] Bluetooth: Wrong link type (-71) [ 298.918963][ T5106] Bluetooth: Unknown BR/EDR signaling command 0xfb [ 298.925661][ T5106] Bluetooth: Wrong link type (-22) [ 298.931693][ T5106] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 298.938425][ T5106] Bluetooth: Wrong link type (-22) [ 298.944384][ T5106] Bluetooth: hci3: link tx timeout [ 298.951696][ T5106] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 298.969092][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.005162][ T5289] usb 2-1: config 0 descriptor?? [ 299.069307][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 299.233948][ T7836] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 299.240533][ T7836] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 299.319771][ T7836] vhci_hcd vhci_hcd.0: Device attached [ 299.408413][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 299.477285][ T7844] team0: entered promiscuous mode [ 299.489171][ T46] vhci_hcd: vhci_device speed not set [ 299.506503][ T7844] team_slave_0: entered promiscuous mode [ 299.568322][ T7844] team_slave_1: entered promiscuous mode [ 299.579255][ T46] usb 17-1: new full-speed USB device number 4 using vhci_hcd [ 299.612871][ T7843] team0: left promiscuous mode [ 299.636282][ T7843] team_slave_0: left promiscuous mode [ 299.645251][ T5289] usb 2-1: language id specifier not provided by device, defaulting to English [ 299.672948][ T7843] team_slave_1: left promiscuous mode [ 299.960993][ T7838] vhci_hcd: connection reset by peer [ 299.971361][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 299.989301][ T52] vhci_hcd: stop threads [ 300.006529][ T52] vhci_hcd: release socket [ 300.035463][ T52] vhci_hcd: disconnect device [ 300.237118][ T5289] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #100: -71 [ 300.252344][ T7854] netlink: 'syz.2.571': attribute type 2 has an invalid length. [ 300.268455][ T5289] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 300.298948][ T7854] netlink: 132 bytes leftover after parsing attributes in process `syz.2.571'. [ 300.299498][ T5289] uclogic 0003:256C:006D.0018: failed probing pen v1 parameters: -71 [ 300.363288][ T5289] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 300.385798][ T5289] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 300.433442][ T5289] usb 2-1: USB disconnect, device number 17 [ 300.959383][ T5106] Bluetooth: hci3: command tx timeout [ 301.132425][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 301.132446][ T29] audit: type=1326 audit(1719555328.271:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b3d75b29 code=0x7ffc0000 [ 301.247881][ T29] audit: type=1326 audit(1719555328.271:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b3d75b29 code=0x7ffc0000 [ 301.363497][ T29] audit: type=1326 audit(1719555328.271:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25b3d75b29 code=0x7ffc0000 [ 301.395586][ T29] audit: type=1326 audit(1719555328.271:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b3d75b29 code=0x7ffc0000 [ 301.493137][ T29] audit: type=1326 audit(1719555328.271:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b3d75b29 code=0x7ffc0000 [ 301.614169][ T29] audit: type=1326 audit(1719555328.271:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25b3d75b29 code=0x7ffc0000 [ 301.636347][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.745248][ T29] audit: type=1326 audit(1719555328.271:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b3d75b29 code=0x7ffc0000 [ 301.767498][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.849515][ T29] audit: type=1326 audit(1719555328.271:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b3d75b29 code=0x7ffc0000 [ 301.923664][ T29] audit: type=1326 audit(1719555328.271:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25b3d75b29 code=0x7ffc0000 [ 302.032910][ T29] audit: type=1326 audit(1719555328.391:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7864 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b3d75b29 code=0x7ffc0000 [ 302.501242][ T7896] loop2: detected capacity change from 0 to 256 [ 302.588153][ T7896] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 303.057770][ T5111] Bluetooth: hci3: command 0x0406 tx timeout [ 304.118310][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.688248][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 304.719448][ T46] vhci_hcd: vhci_device speed not set [ 304.789160][ T7940] team0: entered promiscuous mode [ 304.794278][ T7940] team_slave_0: entered promiscuous mode [ 304.859274][ T7940] team_slave_1: entered promiscuous mode [ 304.884661][ T7939] team0: left promiscuous mode [ 304.928663][ T7939] team_slave_0: left promiscuous mode [ 304.982435][ T7939] team_slave_1: left promiscuous mode [ 305.976012][ T7955] loop4: detected capacity change from 0 to 32768 [ 306.063294][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 306.163085][ T7995] team0: entered promiscuous mode [ 306.173022][ T7995] team_slave_0: entered promiscuous mode [ 306.197268][ T7995] team_slave_1: entered promiscuous mode [ 306.237783][ T7997] syz.4.605: attempt to access beyond end of device [ 306.237783][ T7997] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 306.251623][ T7997] lbmIODone: I/O error in JFS log [ 306.256783][ T7997] *** Log Format Error ! *** [ 306.262118][ T7997] lmLogInit: exit(-22) [ 306.266331][ T7997] lmLogOpen: exit(-22) [ 306.293898][ T7986] team0: left promiscuous mode [ 306.300332][ T7986] team_slave_0: left promiscuous mode [ 306.306213][ T7986] team_slave_1: left promiscuous mode [ 307.237289][ T8026] netlink: 'syz.4.631': attribute type 2 has an invalid length. [ 307.273413][ T8026] netlink: 132 bytes leftover after parsing attributes in process `syz.4.631'. [ 307.338510][ T8030] loop1: detected capacity change from 0 to 512 [ 307.550390][ T8030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.636216][ T8030] ext4 filesystem being mounted at /root/syzkaller.2bNaJC/139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.776737][ T8038] loop0: detected capacity change from 0 to 512 [ 307.804591][ T8040] loop4: detected capacity change from 0 to 512 [ 307.843484][ T8040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 307.894453][ T8038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.935245][ T5094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.991854][ T8038] ext4 filesystem being mounted at /root/syzkaller.4iNfru/12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.993771][ T8040] EXT4-fs (loop4): 1 orphan inode deleted [ 308.017400][ T8040] EXT4-fs (loop4): 1 truncate cleaned up [ 308.026192][ T8040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.076954][ T6864] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.128026][ T8038] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN PTI [ 308.128060][ T8038] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 308.128086][ T8038] CPU: 0 UID: 60928 PID: 8038 Comm: syz.0.635 Not tainted 6.10.0-rc5-next-20240627-syzkaller #0 [ 308.128114][ T8038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 308.128128][ T8038] RIP: 0010:xdp_do_redirect+0x63/0xb40 [ 308.128166][ T8038] Code: c3 08 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ec 04 91 f8 4c 8b 23 4d 8d 74 24 38 4c 89 f3 48 c1 eb 03 <42> 0f b6 04 2b 84 c0 0f 85 fc 07 00 00 41 8b 2e 89 ee 83 e6 02 31 [ 308.128187][ T8038] RSP: 0018:ffffc90003bc7828 EFLAGS: 00010202 [ 308.128209][ T8038] RAX: 1ffff11004147a81 RBX: 0000000000000007 RCX: 0000000000040000 [ 308.128225][ T8038] RDX: ffffc9000995a000 RSI: 00000000000001bc RDI: 00000000000001bd [ 308.128240][ T8038] RBP: ffffc90003bc79b0 R08: 0000000000000005 R09: ffffffff866b25e9 [ 308.128257][ T8038] R10: 0000000000000005 R11: ffff888020a3bc00 R12: 0000000000000000 [ 308.128272][ T8038] R13: dffffc0000000000 R14: 0000000000000038 R15: ffffc90003bc7af0 [ 308.128288][ T8038] FS: 00007f0eec8726c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 308.128308][ T8038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.128324][ T8038] CR2: 00007f74e16a7d58 CR3: 00000000183ee000 CR4: 00000000003506f0 [ 308.128344][ T8038] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 308.128358][ T8038] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 308.128373][ T8038] Call Trace: [ 308.128382][ T8038] [ 308.128391][ T8038] ? __die_body+0x88/0xe0 [ 308.128427][ T8038] ? die_addr+0x108/0x140 [ 308.128460][ T8038] ? exc_general_protection+0x3dd/0x5d0 [ 308.128503][ T8038] ? asm_exc_general_protection+0x26/0x30 [ 308.128535][ T8038] ? tun_xdp_act+0x89/0xb70 [ 308.128566][ T8038] ? xdp_do_redirect+0x63/0xb40 [ 308.128590][ T8038] ? xdp_do_redirect+0x2e/0xb40 [ 308.128619][ T8038] tun_xdp_act+0xe9/0xb70 [ 308.128650][ T8038] ? tun_get_user+0x84c/0x4560 [ 308.128678][ T8038] ? __pfx___cant_migrate+0x10/0x10 [ 308.128706][ T8038] ? __pfx_tun_xdp_act+0x10/0x10 [ 308.128740][ T8038] tun_get_user+0x346d/0x4560 [ 308.128769][ T8038] ? tun_get_user+0x84c/0x4560 [ 308.128807][ T8038] ? __pfx_tun_get_user+0x10/0x10 [ 308.128840][ T8038] ? tun_get+0x1e/0x2f0 [ 308.128878][ T8038] ? tun_get+0x1e/0x2f0 [ 308.128903][ T8038] ? tun_get+0x27d/0x2f0 [ 308.128927][ T8038] tun_chr_write_iter+0x113/0x1f0 [ 308.128965][ T8038] vfs_write+0xa72/0xc90 [ 308.128998][ T8038] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 308.129025][ T8038] ? __pfx_vfs_write+0x10/0x10 [ 308.129054][ T8038] ? do_futex+0x392/0x560 [ 308.129093][ T8038] ksys_write+0x1a0/0x2c0 [ 308.129130][ T8038] ? __pfx_ksys_write+0x10/0x10 [ 308.129163][ T8038] ? do_syscall_64+0x100/0x230 [ 308.129187][ T8038] ? do_syscall_64+0xb6/0x230 [ 308.129210][ T8038] do_syscall_64+0xf3/0x230 [ 308.129232][ T8038] ? clear_bhb_loop+0x35/0x90 [ 308.129264][ T8038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.129303][ T8038] RIP: 0033:0x7f0eebb746df [ 308.129328][ T8038] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8b 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8c 02 00 48 [ 308.129348][ T8038] RSP: 002b:00007f0eec872010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 308.129374][ T8038] RAX: ffffffffffffffda RBX: 00007f0eebd03fa0 RCX: 00007f0eebb746df [ 308.129391][ T8038] RDX: 000000000000003e RSI: 0000000020000280 RDI: 00000000000000c8 [ 308.129406][ T8038] RBP: 00007f0eebbf6756 R08: 0000000000000000 R09: 0000000000000000 [ 308.129421][ T8038] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000000 [ 308.129435][ T8038] R13: 000000000000000b R14: 00007f0eebd03fa0 R15: 00007fff40695cd8 [ 308.129462][ T8038] [ 308.129469][ T8038] Modules linked in: [ 308.129547][ T8038] ---[ end trace 0000000000000000 ]--- [ 308.514228][ T8038] RIP: 0010:xdp_do_redirect+0x63/0xb40 [ 308.520100][ T8038] Code: c3 08 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ec 04 91 f8 4c 8b 23 4d 8d 74 24 38 4c 89 f3 48 c1 eb 03 <42> 0f b6 04 2b 84 c0 0f 85 fc 07 00 00 41 8b 2e 89 ee 83 e6 02 31 [ 308.539944][ T8038] RSP: 0018:ffffc90003bc7828 EFLAGS: 00010202 [ 308.546066][ T8038] RAX: 1ffff11004147a81 RBX: 0000000000000007 RCX: 0000000000040000 [ 308.554189][ T8038] RDX: ffffc9000995a000 RSI: 00000000000001bc RDI: 00000000000001bd [ 308.562234][ T8038] RBP: ffffc90003bc79b0 R08: 0000000000000005 R09: ffffffff866b25e9 [ 308.570293][ T8038] R10: 0000000000000005 R11: ffff888020a3bc00 R12: 0000000000000000 [ 308.578295][ T8038] R13: dffffc0000000000 R14: 0000000000000038 R15: ffffc90003bc7af0 [ 308.586326][ T8038] FS: 00007f0eec8726c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 308.595320][ T8038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.601993][ T8038] CR2: 00007f74e16a7d58 CR3: 00000000183ee000 CR4: 00000000003506f0 [ 308.610027][ T8038] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 308.618001][ T8038] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 308.626143][ T8038] Kernel panic - not syncing: Fatal exception in interrupt [ 308.633941][ T8038] Kernel Offset: disabled [ 308.638271][ T8038] Rebooting in 86400 seconds..