last executing test programs: 31.971427319s ago: executing program 4 (id=4151): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) 28.607535155s ago: executing program 4 (id=4158): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r0, r1, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, 0x0, 0x0) 28.539000061s ago: executing program 4 (id=4161): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) unshare(0x2c060000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0c000714"], 0xf) wait4(0x0, 0x0, 0x20000000, 0x0) 27.627162969s ago: executing program 4 (id=4164): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x82243, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r2}, 0x18) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 27.540493586s ago: executing program 4 (id=4165): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000200)={'syz0\x00', {}, 0x1, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x7, 0x2, 0x0, 0x800, r4, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) 23.97280434s ago: executing program 0 (id=4175): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) write$P9_RSYMLINK(r0, 0x0, 0x0) 23.944339442s ago: executing program 0 (id=4176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000340)={0xd, 0x7, 0x1, {0x4, '\x96:o@'}}, 0xd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, 0x0, &(0x7f0000000180)) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) timer_delete(0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) 23.02458851s ago: executing program 0 (id=4178): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x0) 22.952353686s ago: executing program 0 (id=4179): setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="8e77ca3389787867582dd0b9999e5e7ce579fc6b2977bf71ab517f68a8ddb58b93c91675a4b5dde502242a66491162f75f9b28f59cd9746ff7140fde3923b99bcc4c2cc72443169b2ab2f90a0f03dd842adba400500327de779dc66f3ebd32a81ebea8b89c9cc7e0f46e28fc1ff127a0", 0x70, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200), 0x0, 0x0, 0x0, 0x407006}, 0x104) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) shutdown(r0, 0x1) 22.928839058s ago: executing program 0 (id=4180): futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) connect$inet(r2, &(0x7f0000002d80)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) 9.872816899s ago: executing program 2 (id=4226): futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") syz_open_procfs(0x0, &(0x7f0000003080)='cmdline\x00') r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RSTATu(r1, 0x0, 0x0) 8.523565854s ago: executing program 0 (id=4190): socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) 7.28081824s ago: executing program 2 (id=4239): unshare(0x62040200) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 5.012262313s ago: executing program 2 (id=4246): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x121240, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = socket(0x10, 0x2, 0x0) ioctl$TIOCSBRK(r1, 0x5450) accept(0xffffffffffffffff, &(0x7f00000001c0)=@qipcrtr, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x5450, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f00000004c0)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000240)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$unix(r4, 0x0, &(0x7f0000000180)) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000300)=""/211, 0xd3}], 0x1) rt_sigreturn() rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) close(r2) memfd_create(&(0x7f0000000540)='-*\'', 0x0) fdatasync(0xffffffffffffffff) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 5.012172193s ago: executing program 3 (id=4247): setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000001c0)="8e77ca3389787867582dd0b9999e5e7ce579fc6b2977bf71ab517f68a8ddb58b93c91675a4b5dde502242a66491162f75f9b28f59cd9746ff7140fde3923b99bcc4c2cc72443169b2ab2f90a0f03dd842adba400500327de779dc66f3ebd32a81ebea8b89c9cc7e0f46e28fc1ff127a0", 0x70, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200), 0x0, 0x0, 0x0, 0x407006}, 0x104) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) shutdown(r0, 0x1) 4.100276311s ago: executing program 3 (id=4248): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) 3.740358961s ago: executing program 3 (id=4251): r0 = memfd_create(&(0x7f00000000c0)='\xc0\x87:*\x18\xc1k\x06\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Q*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2@h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) 3.661706708s ago: executing program 2 (id=4253): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x5451, 0x0) 3.567502476s ago: executing program 1 (id=4255): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$TCXONC(r0, 0x5450, 0x0) 3.479863733s ago: executing program 1 (id=4256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = accept4$inet6(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(r2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002440), &(0x7f0000002480)=0xc) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) setitimer(0x0, 0x0, &(0x7f0000000980)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x5450) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) write$char_usb(r1, 0x0, 0x0) 1.864630941s ago: executing program 1 (id=4257): setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000001c0)="8e77ca3389787867582dd0b9999e5e7ce579fc6b2977bf71ab517f68a8ddb58b93c91675a4b5dde502242a66491162f75f9b28f59cd9746ff7140fde3923b99bcc4c2cc72443169b2ab2f90a0f03dd842adba400500327de779dc66f3ebd32a81ebea8b89c9cc7e0f46e28fc1ff127a0", 0x70, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200), 0x0, 0x0, 0x0, 0x407006}, 0x104) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) shutdown(r0, 0x1) 1.864532201s ago: executing program 2 (id=4258): mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x8901, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) 1.864333341s ago: executing program 3 (id=4259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) memfd_create(0x0, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 165.036796ms ago: executing program 1 (id=4260): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) 110.84322ms ago: executing program 2 (id=4261): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) rt_sigreturn() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 102.668711ms ago: executing program 3 (id=4262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$packet_buf(r2, 0x107, 0x0, 0x0, 0xfffffffffffffd7b) 48.637156ms ago: executing program 1 (id=4263): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/firmware/fdt', 0x0, 0x0) faccessat(r0, &(0x7f0000000540)='.\x00', 0x0) 2.39887ms ago: executing program 1 (id=4264): r0 = socket(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x45) 0s ago: executing program 3 (id=4265): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r1, r0, 0x0) getsockname(r0, 0x0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): amed from eth0 [ 290.736170][T11736] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 290.770628][T11736] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.817095][T11736] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 291.126547][T11736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.166799][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.169219][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.172712][T11736] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.203601][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.206602][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.209151][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.210990][ T5215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.272860][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.275574][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.278325][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.301983][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.303831][ T5215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.317267][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.456947][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.459923][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.466131][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.477830][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.485328][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.504018][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.514796][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.524587][T11856] serio: Serial port pts0 [ 291.561908][T11736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.570622][T11736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.581063][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.583641][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.596977][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.615795][ T361] device hsr_slave_0 left promiscuous mode [ 291.634985][ T361] device hsr_slave_1 left promiscuous mode [ 291.716303][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.718423][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.720938][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.722889][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.743392][ T361] device bridge_slave_1 left promiscuous mode [ 291.745321][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.805284][ T361] device bridge_slave_0 left promiscuous mode [ 291.807091][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.946492][ T361] device veth0_macvtap left promiscuous mode [ 291.948103][ T361] device veth1_vlan left promiscuous mode [ 291.949720][ T361] device veth0_vlan left promiscuous mode [ 292.424115][ T4072] Bluetooth: hci4: command 0x041b tx timeout [ 292.458564][ T361] team0 (unregistering): Port device team_slave_1 removed [ 292.468225][ T361] team0 (unregistering): Port device team_slave_0 removed [ 292.476533][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.528233][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.770444][ T361] bond0 (unregistering): Released all slaves [ 292.890906][T11864] @: renamed from syztnl2 [ 292.950934][T11898] udc-core: couldn't find an available UDC or it's busy [ 292.952769][T11898] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 293.119457][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.121706][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.159863][T11736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.540506][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.543411][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.590142][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.601716][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.631035][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.644609][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.659367][T11736] device veth0_vlan entered promiscuous mode [ 293.687322][T11736] device veth1_vlan entered promiscuous mode [ 293.739565][T11736] device veth0_macvtap entered promiscuous mode [ 293.746241][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 293.749011][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 293.753557][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.759027][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.765974][T11736] device veth1_macvtap entered promiscuous mode [ 293.804212][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.807827][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.813660][T11736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.823772][T11736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.826906][T11736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.830064][T11736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.833551][T11736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.846382][T11736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.849106][T11736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.851743][T11736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.881097][T11736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.885191][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.890915][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.915835][T11736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.918812][T11736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.921381][T11736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.933804][T11736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.942622][T11736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.960046][T11736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.962794][T11736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.973223][T11736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.983277][T11736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.053913][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.056821][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.068700][T11736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.071084][T11736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.073379][T11736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.093902][T11736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.225259][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.227574][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.231361][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 294.285997][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.288171][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.292450][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 294.432775][T11967] "syz.2.3310" (11967) uses obsolete ecb(arc4) skcipher [ 294.504089][ T5386] Bluetooth: hci4: command 0x040f tx timeout [ 296.583774][ T4012] Bluetooth: hci4: command 0x0419 tx timeout [ 298.730902][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3359'. [ 299.176561][T12087] loop4: detected capacity change from 0 to 512 [ 299.404103][T12089] udc-core: couldn't find an available UDC or it's busy [ 299.406009][T12089] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 299.419406][T12087] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 301.050743][T12108] loop4: detected capacity change from 0 to 512 [ 301.104373][T12112] udc-core: couldn't find an available UDC or it's busy [ 301.106390][T12112] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 301.169095][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 301.169107][ T26] audit: type=1326 audit(301.140:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb50bea8 code=0x7fc00000 [ 301.279100][T12122] udc-core: couldn't find an available UDC or it's busy [ 301.281082][T12122] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 301.357269][T12123] loop4: detected capacity change from 0 to 1024 [ 302.666138][T12157] loop3: detected capacity change from 0 to 2048 [ 302.729618][T12157] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.760468][ T26] audit: type=1326 audit(302.730:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12156 comm="syz.3.3389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1647ea8 code=0x7ffc0000 [ 302.767713][ T26] audit: type=1326 audit(302.740:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12156 comm="syz.3.3389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1647ea8 code=0x7ffc0000 [ 302.787420][ T26] audit: type=1326 audit(302.750:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12156 comm="syz.3.3389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1647ea8 code=0x7ffc0000 [ 302.808783][ T26] audit: type=1326 audit(302.750:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12156 comm="syz.3.3389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1647ea8 code=0x7ffc0000 [ 302.846461][ T26] audit: type=1326 audit(302.750:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12156 comm="syz.3.3389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1647ea8 code=0x7ffc0000 [ 302.864983][ T26] audit: type=1326 audit(302.750:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12156 comm="syz.3.3389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1647ea8 code=0x7ffc0000 [ 302.888803][ T26] audit: type=1326 audit(302.760:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12156 comm="syz.3.3389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1647ea8 code=0x7ffc0000 [ 302.910571][ T26] audit: type=1326 audit(302.760:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12156 comm="syz.3.3389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1647ea8 code=0x7ffc0000 [ 302.939498][ T26] audit: type=1326 audit(302.760:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12156 comm="syz.3.3389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1647ea8 code=0x7ffc0000 [ 303.064319][ T4562] Bluetooth: hci5: command 0x0406 tx timeout [ 303.098777][T12163] loop3: detected capacity change from 0 to 1024 [ 303.252894][T12163] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.375401][T12173] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 303.470770][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3399'. [ 303.823829][ T4012] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 303.857687][T12189] loop4: detected capacity change from 0 to 2048 [ 303.944780][T12189] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.146600][T12159] loop2: detected capacity change from 0 to 65536 [ 304.168747][T12182] loop3: detected capacity change from 0 to 32768 [ 304.169248][T12191] loop4: detected capacity change from 0 to 512 [ 304.194075][ T4012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.198293][T12182] XFS: noikeep mount option is deprecated. [ 304.203813][ T4012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.206758][ T4012] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.214819][ T4012] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.219669][ T4012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.226455][T12191] EXT4-fs (loop4): orphan cleanup on readonly fs [ 304.231670][T12191] EXT4-fs error (device loop4): ext4_find_extent:929: inode #4: comm syz.4.3404: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 304.238569][ T4012] usb 1-1: config 0 descriptor?? [ 304.250007][T12191] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 304.257811][T12159] XFS (loop2): Mounting V5 Filesystem [ 304.259879][T12191] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 304.280355][T12191] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 304.310924][T12159] XFS (loop2): Ending clean mount [ 304.322640][T12182] XFS (loop3): Mounting V5 Filesystem [ 304.328720][T12159] XFS (loop2): Quotacheck needed: Please wait. [ 304.352060][ T136] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2c8/0xb58, inode 0x25 dinode [ 304.379224][T12167] loop1: detected capacity change from 0 to 65536 [ 304.381116][ T136] XFS (loop2): Unmount and run xfs_repair [ 304.382540][ T136] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 304.385012][ T136] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 304.387279][ T136] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 304.389706][ T136] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 304.391983][ T136] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 304.395699][ T136] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 304.398051][ T136] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 304.400490][ T136] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 304.402692][ T136] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 304.451524][T12159] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 304.481570][T12183] udc-core: couldn't find an available UDC or it's busy [ 304.483425][T12183] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 304.502646][T12182] XFS (loop3): Ending clean mount [ 304.545470][T12182] XFS (loop3): Quotacheck needed: Please wait. [ 304.574226][T12167] XFS (loop1): Mounting V5 Filesystem [ 304.598735][T12220] udc-core: couldn't find an available UDC or it's busy [ 304.600664][T12220] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 304.628030][ T7279] XFS (loop2): Unmounting Filesystem [ 304.699496][T12182] XFS (loop3): Quotacheck: Done. [ 304.844402][T12167] XFS (loop1): Ending clean mount [ 304.851762][T12167] overlayfs: missing 'lowerdir' [ 304.887943][ T6907] XFS (loop3): Unmounting Filesystem [ 304.951810][ T6909] XFS (loop1): Unmounting Filesystem [ 304.970190][ T4012] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 305.020169][ T4012] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 306.331129][T12235] udc-core: couldn't find an available UDC or it's busy [ 306.344012][T12235] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 306.594075][ T3320] usb 1-1: reset high-speed USB device number 24 using dummy_hcd [ 307.114847][T12257] udc-core: couldn't find an available UDC or it's busy [ 307.130379][T12257] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 307.293075][T12267] loop3: detected capacity change from 0 to 1024 [ 307.560876][T12274] udc-core: couldn't find an available UDC or it's busy [ 307.562827][T12274] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 307.682263][T12267] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 308.203109][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 308.203123][ T26] audit: type=1326 audit(308.170:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12282 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 308.253291][ T26] audit: type=1326 audit(308.200:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12282 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=77 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 309.099861][T12290] udc-core: couldn't find an available UDC or it's busy [ 309.101706][T12290] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 309.138214][ T26] audit: type=1326 audit(308.200:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12282 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 309.185602][ T26] audit: type=1326 audit(308.200:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12282 comm="syz.0.3430" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 310.434004][ T3320] usb 1-1: device descriptor read/64, error -71 [ 310.460100][ T26] audit: type=1326 audit(310.430:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.3436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb50bea8 code=0x7ffc0000 [ 310.467010][ T26] audit: type=1326 audit(310.430:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.3436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffbb50bea8 code=0x7ffc0000 [ 310.479863][ T26] audit: type=1326 audit(310.430:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.3436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb50bea8 code=0x7ffc0000 [ 310.486035][ T26] audit: type=1326 audit(310.430:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.3436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffbb50bea8 code=0x7ffc0000 [ 310.492292][ T26] audit: type=1326 audit(310.430:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.3436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb50bea8 code=0x7ffc0000 [ 310.508043][ T26] audit: type=1326 audit(310.430:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.3436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffffbb50bea8 code=0x7ffc0000 [ 310.594592][T12309] loop7: detected capacity change from 0 to 16384 [ 310.660529][T12311] loop1: detected capacity change from 0 to 128 [ 310.684493][T12311] FAT-fs (loop1): Unrecognized mount option "utv8=0" or missing value [ 310.703914][ T3320] usb 1-1: reset high-speed USB device number 24 using dummy_hcd [ 310.753191][ T3320] usb 1-1: device reset changed ep0 maxpacket size! [ 310.764618][ T5386] usb 1-1: USB disconnect, device number 24 [ 310.943995][ T5386] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 311.597249][ T5386] usb 1-1: Using ep0 maxpacket: 8 [ 311.714613][ T5386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.723824][ T5386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.726687][ T5386] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 311.729258][ T5386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.748440][ T5386] usb 1-1: config 0 descriptor?? [ 311.931036][T12326] chnl_net:caif_netlink_parms(): no params data found [ 311.981261][T12326] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.983201][T12326] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.985906][T12326] device bridge_slave_0 entered promiscuous mode [ 311.989917][T12326] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.991803][T12326] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.994937][T12326] device bridge_slave_1 entered promiscuous mode [ 312.032396][T12326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.084991][T12326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.146883][T12326] team0: Port device team_slave_0 added [ 312.165002][T12326] team0: Port device team_slave_1 added [ 312.214630][T12326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.221294][T12326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.232212][ T5386] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 312.239272][ T5386] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 312.247593][ T5386] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 312.261735][ T5386] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 312.276593][ T5386] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 312.287673][T12326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.290724][ T5386] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 312.307899][ T5386] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 312.309547][T12326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.311779][T12326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.318758][T12326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.329030][ T5386] playstation 0003:054C:0CE6.0003: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 312.353980][T12337] loop3: detected capacity change from 0 to 128 [ 313.204579][ T5386] playstation 0003:054C:0CE6.0003: Invalid reportID received, expected 9 got 0 [ 313.207221][ T5386] playstation 0003:054C:0CE6.0003: Failed to retrieve DualSense pairing info: -22 [ 313.209616][ T5386] playstation 0003:054C:0CE6.0003: Failed to get MAC address from DualSense [ 313.245224][ T5386] playstation 0003:054C:0CE6.0003: Failed to create dualsense. [ 313.259618][ T5386] playstation: probe of 0003:054C:0CE6.0003 failed with error -22 [ 313.284355][T12337] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 313.317341][T12326] device hsr_slave_0 entered promiscuous mode [ 313.364946][T12326] device hsr_slave_1 entered promiscuous mode [ 313.413223][ T5386] usb 1-1: USB disconnect, device number 25 [ 313.415507][T12326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.417463][T12326] Cannot create hsr debugfs directory [ 313.863901][ T4566] Bluetooth: hci1: command 0x0409 tx timeout [ 314.433033][T12326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.446859][T12359] udc-core: couldn't find an available UDC or it's busy [ 314.448776][T12359] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 314.491819][T12326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.581193][T12326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.773181][T12361] netlink: 'syz.4.3458': attribute type 10 has an invalid length. [ 314.827760][T12361] team0: Port device wlan1 added [ 315.219330][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 315.219912][ T26] audit: type=1326 audit(314.940:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.0.3459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 315.659713][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.673850][ T26] audit: type=1326 audit(314.940:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.0.3459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 315.679102][ T26] audit: type=1326 audit(315.080:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.0.3459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=82 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 315.716449][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.727545][ T26] audit: type=1326 audit(315.080:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.0.3459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 315.732845][ T26] audit: type=1326 audit(315.080:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.0.3459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 315.741701][ T26] audit: type=1326 audit(315.090:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.0.3459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8cb05444 code=0x7ffc0000 [ 315.747359][ T26] audit: type=1326 audit(315.100:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.0.3459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8cb05444 code=0x7ffc0000 [ 315.752827][ T26] audit: type=1326 audit(315.100:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.0.3459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 315.759801][ T26] audit: type=1326 audit(315.100:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.0.3459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 315.765331][ T26] audit: type=1326 audit(315.140:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.0.3459" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=159 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 315.796604][T12326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.978438][ T1533] Bluetooth: hci1: command 0x041b tx timeout [ 317.459238][T12385] loop2: detected capacity change from 0 to 512 [ 319.056446][T12385] EXT4-fs (loop2): Ignoring removed bh option [ 319.110545][T12385] EXT4-fs error (device loop2): __ext4_iget:4872: inode #12: block 2: comm syz.2.3465: invalid block [ 319.115314][T12385] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3465: couldn't read orphan inode 12 (err -117) [ 319.124109][T12385] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 319.199570][T12385] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 319.215047][T12396] ptrace attach of "./syz-executor exec"[6046] was attempted by "./syz-executor exec"[12396] [ 319.295769][ T4562] Bluetooth: hci1: command 0x040f tx timeout [ 319.447430][T12326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.483993][ T4012] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 319.606111][T12326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.645992][T12326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.674108][ T4012] usb 1-1: device descriptor read/64, error -71 [ 319.696845][T12326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.944037][ T4012] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 319.957151][T12326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.994518][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.997225][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.011040][T12326] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.040318][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.043120][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.046663][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.048688][ T6273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.069133][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.081895][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.092359][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.102667][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.104739][ T6273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.133877][ T4012] usb 1-1: device descriptor read/64, error -71 [ 320.150787][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.156819][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.166788][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.185893][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.211994][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.218197][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.236152][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.246379][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.259239][ T4012] usb usb1-port1: attempt power cycle [ 320.264560][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.272542][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.282851][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.295372][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.594184][T12326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.598433][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.600913][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.645781][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.648595][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.664001][ T4012] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 320.714370][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.717569][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.720803][T12326] device veth0_vlan entered promiscuous mode [ 320.723253][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.736429][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.754039][ T4012] usb 1-1: device descriptor read/8, error -71 [ 320.762372][T12326] device veth1_vlan entered promiscuous mode [ 320.816505][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 320.819604][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 320.822328][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.833977][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.847254][T12326] device veth0_macvtap entered promiscuous mode [ 320.851834][T12326] device veth1_macvtap entered promiscuous mode [ 320.904990][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.907815][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.910411][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.913111][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.953796][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.956681][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.959307][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.962063][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.993796][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.996459][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.000339][T12326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.002654][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 321.024724][ T4012] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 321.036702][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 321.054402][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.072823][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.079846][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.082574][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.113824][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.114062][ T4012] usb 1-1: device descriptor read/8, error -71 [ 321.116600][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.120863][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.133725][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.136456][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.139256][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.141811][T12326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.183798][T12326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.187627][T12326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.194746][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.197597][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.235168][T12326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.237518][T12326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.239810][T12326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.242107][T12326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.245651][ T4012] usb usb1-port1: unable to enumerate USB device [ 321.303905][ T4564] Bluetooth: hci1: command 0x0419 tx timeout [ 321.716632][ T6273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.718912][ T6273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.723921][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 321.788237][ T361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.790530][ T361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.796160][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 321.947781][T12416] netlink: 'syz.2.3472': attribute type 10 has an invalid length. [ 322.212371][T12416] team0: Port device wlan1 added [ 324.213337][T12434] fuse: Bad value for 'fd' [ 324.228061][T12430] fuse: Bad value for 'fd' [ 324.479208][T12444] process 'syz.0.3482' launched './file0' with NULL argv: empty string added [ 325.575300][T12455] udc-core: couldn't find an available UDC or it's busy [ 325.577136][T12455] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 325.600382][T12455] loop4: detected capacity change from 0 to 256 [ 325.778672][T12457] loop3: detected capacity change from 0 to 512 [ 325.830054][T12457] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 325.894710][T12457] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 1: comm syz.3.3487: invalid block [ 325.897912][T12457] EXT4-fs (loop3): Remounting filesystem read-only [ 325.899677][T12457] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3487: couldn't read orphan inode 11 (err -117) [ 325.924944][T12457] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,init_itable,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 327.085929][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3487'. [ 327.280770][ T5215] device hsr_slave_0 left promiscuous mode [ 327.320475][ T5215] device hsr_slave_1 left promiscuous mode [ 327.384816][ T5215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.386825][ T5215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.390812][ T5215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.392850][ T5215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.424287][ T5215] device bridge_slave_1 left promiscuous mode [ 327.426030][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.475705][ T5215] device bridge_slave_0 left promiscuous mode [ 327.477454][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.624637][ T5215] device veth1_macvtap left promiscuous mode [ 327.626329][ T5215] device veth0_macvtap left promiscuous mode [ 327.627936][ T5215] device veth1_vlan left promiscuous mode [ 327.629492][ T5215] device veth0_vlan left promiscuous mode [ 330.201165][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3497'. [ 330.220941][T12481] loop1: detected capacity change from 0 to 4096 [ 330.282110][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3498'. [ 330.289945][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3498'. [ 330.311464][T12481] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 330.393937][T12481] ntfs3: loop1: failed to convert "c46c" to iso8859-1 [ 330.521028][ T5215] team0 (unregistering): Port device team_slave_1 removed [ 330.556940][ T5215] team0 (unregistering): Port device team_slave_0 removed [ 330.586569][ T5215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.646830][ T5215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.862587][ T5215] bond0 (unregistering): Released all slaves [ 330.978279][T12468] netlink: 'syz.3.3491': attribute type 7 has an invalid length. [ 330.980392][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3491'. [ 334.892586][T12566] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3520'. [ 334.926615][T12566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3520'. [ 335.017204][T12573] dccp_invalid_packet: P.Data Offset(10) too large [ 335.252375][T12591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3530'. [ 335.406736][T12608] loop3: detected capacity change from 0 to 256 [ 335.454680][T12608] FAT-fs (loop3): Unrecognized mount option "nŒnumtail=0" or missing value [ 335.527517][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 335.527532][ T26] audit: type=1326 audit(335.500:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 335.543907][ T26] audit: type=1326 audit(335.500:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 335.560149][ T26] audit: type=1326 audit(335.500:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 335.647907][ T26] audit: type=1326 audit(335.500:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 337.091226][ T26] audit: type=1326 audit(335.500:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 337.150217][ T26] audit: type=1326 audit(335.500:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 337.156003][ T26] audit: type=1326 audit(335.500:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 337.161571][ T26] audit: type=1326 audit(335.500:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 337.167408][ T26] audit: type=1326 audit(335.500:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 337.173175][ T26] audit: type=1326 audit(335.500:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.0.3541" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8cb06ea8 code=0x7ffc0000 [ 338.616505][ T4013] udevd[4013]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 339.436104][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 339.500047][ T4039] udevd[4039]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 339.598792][ T4039] udevd[4039]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 340.037690][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3553'. [ 340.056167][ T4039] udevd[4039]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 340.059788][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 340.424831][T12674] device hsr0 entered promiscuous mode [ 340.427616][T12671] device hsr0 left promiscuous mode [ 342.214501][T12703] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 344.307582][T12715] loop4: detected capacity change from 0 to 1024 [ 344.365884][T12715] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 344.365927][T12715] EXT4-fs (loop4): write access will be enabled during recovery [ 344.366115][T12715] JBD2: no valid journal superblock found [ 344.366137][T12715] EXT4-fs (loop4): error loading journal [ 344.695019][T12725] dccp_v4_rcv: dropped packet with invalid checksum [ 344.992406][T12739] 9pnet: p9_errstr2errno: server reported unknown error [ 347.172378][T12762] loop2: detected capacity change from 0 to 1024 [ 347.349981][T12762] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 347.352124][T12762] EXT4-fs (loop2): write access will be enabled during recovery [ 347.354382][T12762] JBD2: no valid journal superblock found [ 347.355863][T12762] EXT4-fs (loop2): error loading journal [ 347.723857][T12771] netlink: 'syz.0.3596': attribute type 1 has an invalid length. [ 347.886082][T12771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3596'. [ 347.904268][T12771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.037833][T12789] dccp_v4_rcv: dropped packet with invalid checksum [ 349.312439][T12810] input: syz0 as /devices/virtual/input/input10 [ 349.842747][T12810] Bluetooth: Can't allocate semaphore structure [ 349.882839][T12809] input: syz0 as /devices/virtual/input/input11 [ 349.917082][T12807] loop3: detected capacity change from 0 to 1024 [ 350.051478][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3610'. [ 350.073649][T12807] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 350.182222][T12819] udc-core: couldn't find an available UDC or it's busy [ 350.208412][T12819] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 352.855122][T12858] ucma_write: process 1254 (syz.3.3625) changed security contexts after opening file descriptor, this is not allowed. [ 352.968796][T12860] netlink: 'syz.3.3626': attribute type 20 has an invalid length. [ 353.474772][T12870] udc-core: couldn't find an available UDC or it's busy [ 353.483911][T12870] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 355.207866][T12906] udc-core: couldn't find an available UDC or it's busy [ 355.209728][T12906] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 356.763530][T12899] syz.0.3640 (12899): drop_caches: 1 [ 359.667559][T12951] udc-core: couldn't find an available UDC or it's busy [ 359.672808][T12951] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 359.768818][T12957] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3651'. [ 359.819051][T12958] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3659'. [ 359.824068][T12953] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3659'. [ 359.892181][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 359.892196][ T26] audit: type=1326 audit(359.860:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12960 comm="syz.4.3660" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a7e9ea8 code=0x0 [ 362.545194][ T26] audit: type=1326 audit(362.520:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.0.3674" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x0 [ 365.904630][ T26] audit: type=1326 audit(365.880:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.3.3689" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1647ea8 code=0x0 [ 367.029626][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 367.049164][T13053] udc-core: couldn't find an available UDC or it's busy [ 367.050978][T13053] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 367.791411][ T26] audit: type=1326 audit(367.760:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.2.3706" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb50bea8 code=0x0 [ 376.825473][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.827211][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.489254][T13306] Injecting memory failure for pfn 0x1b6f09 at process virtual address 0x205d5000 [ 378.539661][T13306] Memory failure: 0x1b6f09: recovery action for reserved kernel page: Ignored [ 379.839967][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3811'. [ 382.602148][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3838'. [ 382.614684][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3839'. [ 387.107573][T13449] input: syz0 as /devices/virtual/input/input13 [ 388.417886][T13451] chnl_net:caif_netlink_parms(): no params data found [ 389.465508][T13451] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.467495][T13451] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.469989][T13451] device bridge_slave_0 entered promiscuous mode [ 389.503622][T13451] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.505664][T13451] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.508409][T13451] device bridge_slave_1 entered promiscuous mode [ 389.554430][T13451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.558971][T13451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.596292][T13451] team0: Port device team_slave_0 added [ 389.599772][T13451] team0: Port device team_slave_1 added [ 389.643917][T13451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.645998][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.652729][T13451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.665718][T13451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.667506][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.684054][T13451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.703999][ T4023] Bluetooth: hci3: command 0x1003 tx timeout [ 389.706220][ T4027] Bluetooth: hci3: sending frame failed (-49) [ 389.875775][T13451] device hsr_slave_0 entered promiscuous mode [ 389.928886][T13451] device hsr_slave_1 entered promiscuous mode [ 389.963998][T13451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.966146][T13451] Cannot create hsr debugfs directory [ 390.023857][ T4023] Bluetooth: hci6: command 0x0409 tx timeout [ 391.166019][T13486] loop4: detected capacity change from 0 to 256 [ 391.178873][T13451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.252957][T13451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.490225][T13451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.870032][T13490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3874'. [ 392.106079][T13451] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.246060][ T1533] Bluetooth: hci3: command 0x1001 tx timeout [ 392.247891][ T4027] Bluetooth: hci3: sending frame failed (-49) [ 392.249753][ T1533] Bluetooth: hci6: command 0x041b tx timeout [ 392.442946][T13451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 392.496496][T13451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 392.526975][T13451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 392.567850][T13451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 392.774234][T13451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.788417][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 392.790841][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 392.805778][T13451] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.819222][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 392.821937][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 392.825497][ T4092] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.827418][ T4092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.844117][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 392.864131][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 392.870646][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 392.873254][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.875162][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.885051][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 392.898014][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 392.901134][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 392.906472][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 392.925266][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 392.931676][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 392.939303][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 392.947345][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 392.955434][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 392.961202][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 392.968135][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 392.973030][T13451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 393.174611][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 393.176911][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 393.186730][T13451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.224924][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 393.227735][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 393.273062][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 393.276016][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 393.278869][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 393.285288][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 393.293649][T13451] device veth0_vlan entered promiscuous mode [ 393.312822][T13451] device veth1_vlan entered promiscuous mode [ 393.890516][T13521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3886'. [ 394.274044][ T4562] Bluetooth: hci6: command 0x040f tx timeout [ 394.276844][ T4562] Bluetooth: hci3: command 0x1009 tx timeout [ 394.341218][T13451] device veth0_macvtap entered promiscuous mode [ 394.346471][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 394.349248][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 394.382430][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 394.387052][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 394.406337][T13451] device veth1_macvtap entered promiscuous mode [ 394.413067][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 394.495051][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.497962][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.500518][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.503145][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.529923][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.532807][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.550968][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.554159][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.556587][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.559274][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.593465][T13451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.597664][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 394.600784][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 394.614800][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.617536][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.620124][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.622692][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.627951][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.630599][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.633200][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.660871][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.663390][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.681648][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.685786][T13451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.695039][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 394.697891][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 394.701976][T13451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.706366][T13451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.712910][T13451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.716445][T13451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.820472][ T5215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.822655][ T5215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.830798][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 394.882653][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.892417][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.902913][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 395.142637][T13538] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3892'. [ 396.074716][ T361] device hsr_slave_0 left promiscuous mode [ 396.114400][ T361] device hsr_slave_1 left promiscuous mode [ 396.184015][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.186094][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.204638][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.206721][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.210304][ T361] device bridge_slave_1 left promiscuous mode [ 396.212143][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.275038][ T361] device bridge_slave_0 left promiscuous mode [ 396.276890][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.353999][ T4023] Bluetooth: hci6: command 0x0419 tx timeout [ 396.374729][ T361] device veth1_macvtap left promiscuous mode [ 396.376357][ T361] device veth0_macvtap left promiscuous mode [ 396.377948][ T361] device veth1_vlan left promiscuous mode [ 396.379480][ T361] device veth0_vlan left promiscuous mode [ 397.085164][ T361] team0 (unregistering): Port device team_slave_1 removed [ 397.106282][ T361] team0 (unregistering): Port device team_slave_0 removed [ 397.126631][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.180168][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.381645][ T361] bond0 (unregistering): Released all slaves [ 397.602457][T13566] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3903'. [ 397.853407][T13553] chnl_net:caif_netlink_parms(): no params data found [ 398.040204][T13553] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.042024][T13553] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.074652][T13553] device bridge_slave_0 entered promiscuous mode [ 398.085427][T13553] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.094064][T13553] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.104393][T13553] device bridge_slave_1 entered promiscuous mode [ 398.182021][T13553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.236235][T13553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.285186][T13553] team0: Port device team_slave_0 added [ 398.288644][T13553] team0: Port device team_slave_1 added [ 398.375662][T13553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.377519][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.405240][T13553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.409729][T13553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.424092][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.430968][T13553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.556006][T13553] device hsr_slave_0 entered promiscuous mode [ 398.584269][T13553] device hsr_slave_1 entered promiscuous mode [ 398.623973][T13553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.625966][T13553] Cannot create hsr debugfs directory [ 398.923012][ T1533] Bluetooth: hci0: command 0x0409 tx timeout [ 398.969335][T13553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.235613][T13582] input: syz0 as /devices/virtual/input/input14 [ 399.932193][T13553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.025815][T13553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.089546][T13553] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.395026][T13553] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 400.454041][T13553] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 400.512382][T13553] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 400.565699][T13553] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 400.606119][T13593] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3913'. [ 400.796407][T13553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.887366][T13553] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.889495][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 400.891978][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 400.981675][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 400.984395][ T3320] Bluetooth: hci0: command 0x041b tx timeout [ 400.994948][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 400.997382][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.999389][ T5214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.025485][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 401.032734][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 401.054491][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.056520][ T5214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.084512][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 401.087148][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 401.118724][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 401.164132][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 401.169010][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 401.171835][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 401.176491][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 401.179465][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 401.182603][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.090674][T13553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.099953][T13553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 402.111806][ T1533] Bluetooth: hci1: command 0x1003 tx timeout [ 402.113525][ T4040] Bluetooth: hci1: sending frame failed (-49) [ 402.122233][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 402.127621][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.141556][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.399124][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 402.401256][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 402.419627][T13553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.464426][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 402.467294][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 402.491199][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 402.494351][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 402.497149][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 402.510546][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 402.517561][T13553] device veth0_vlan entered promiscuous mode [ 402.525269][T13553] device veth1_vlan entered promiscuous mode [ 402.554587][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 402.557273][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 402.560328][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 402.571713][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 402.580058][T13553] device veth0_macvtap entered promiscuous mode [ 402.586006][T13553] device veth1_macvtap entered promiscuous mode [ 402.608942][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.611868][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.625344][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.628128][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.634272][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.641026][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.647275][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.650027][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.657405][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.660326][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.685127][T13553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.687827][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 402.690765][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 402.693338][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 402.707455][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 402.721967][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.727615][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.730201][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.732900][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.774064][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.776829][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.779431][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.782219][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.789633][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.802311][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.811289][T13553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.820466][T13553] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.826961][T13553] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.831643][T13553] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.837801][T13553] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.852041][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 402.855128][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 402.940169][ T4092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.942586][ T4092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.947706][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 402.983233][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.986206][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.991194][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 403.064335][ T5386] Bluetooth: hci0: command 0x040f tx timeout [ 403.213299][T13625] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3923'. [ 404.184790][ T5386] Bluetooth: hci1: command 0x1001 tx timeout [ 404.186712][ T4040] Bluetooth: hci1: sending frame failed (-49) [ 404.380947][T13653] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3935'. [ 405.144045][ T5386] Bluetooth: hci0: command 0x0419 tx timeout [ 405.355976][ T361] device hsr_slave_0 left promiscuous mode [ 405.404385][ T361] device hsr_slave_1 left promiscuous mode [ 405.483976][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.486225][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.489350][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.492669][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.499222][ T361] device bridge_slave_1 left promiscuous mode [ 405.503407][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.555292][ T361] device bridge_slave_0 left promiscuous mode [ 405.559459][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.654302][ T361] device veth1_macvtap left promiscuous mode [ 405.656068][ T361] device veth0_macvtap left promiscuous mode [ 405.657764][ T361] device veth1_vlan left promiscuous mode [ 405.659391][ T361] device veth0_vlan left promiscuous mode [ 406.091604][ T361] team0 (unregistering): Port device team_slave_1 removed [ 406.107661][ T361] team0 (unregistering): Port device team_slave_0 removed [ 406.121339][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.154238][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.265522][ T7] Bluetooth: hci1: command 0x1009 tx timeout [ 406.285309][ T361] bond0 (unregistering): Released all slaves [ 406.371321][T13680] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3947'. [ 407.866642][T13720] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3964'. [ 409.590462][T13734] chnl_net:caif_netlink_parms(): no params data found [ 409.740340][T13734] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.742339][T13734] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.774806][T13734] device bridge_slave_0 entered promiscuous mode [ 409.785477][T13734] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.787549][T13734] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.790281][T13734] device bridge_slave_1 entered promiscuous mode [ 409.924678][T13734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.929379][T13734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.996434][T13734] team0: Port device team_slave_0 added [ 410.000122][T13734] team0: Port device team_slave_1 added [ 410.083418][T13734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.085392][T13734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.092020][T13734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.134252][T13734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.136853][T13734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.143614][T13734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.197556][T13757] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3976'. [ 410.349151][T13734] device hsr_slave_0 entered promiscuous mode [ 410.391293][T13734] device hsr_slave_1 entered promiscuous mode [ 410.433790][T13734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.435750][T13734] Cannot create hsr debugfs directory [ 410.636637][T13734] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.700837][T13734] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.770275][T13734] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.908886][T13734] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.081108][ T1533] Bluetooth: hci3: command 0x0409 tx timeout [ 411.340159][T13734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 411.385841][T13778] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3986'. [ 411.389028][T13734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 411.425732][T13734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 411.524977][T13734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 411.739240][T13734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.792755][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 411.795822][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.801161][T13734] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.834834][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 411.837570][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 411.839983][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.841831][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.863547][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 411.869042][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 411.874485][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 411.895249][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.897147][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.899492][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 411.942096][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 411.945209][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 411.951778][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 411.962599][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 411.972485][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 411.981325][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 411.994940][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 412.004502][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 412.007059][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 412.021586][T13734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 412.047636][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 412.269252][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 412.271641][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.300052][T13734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.650618][ T361] team0: Port device wlan1 removed [ 412.722440][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 412.730790][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 412.808307][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 412.811092][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 412.824851][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 412.834651][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 412.838890][T13734] device veth0_vlan entered promiscuous mode [ 412.913284][T13734] device veth1_vlan entered promiscuous mode [ 413.015539][ T361] device hsr_slave_0 left promiscuous mode [ 413.059982][ T361] device hsr_slave_1 left promiscuous mode [ 413.143914][ T4072] Bluetooth: hci3: command 0x041b tx timeout [ 413.174541][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.176642][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.179935][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.181987][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.230834][ T361] device bridge_slave_1 left promiscuous mode [ 413.232643][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.306185][ T361] device bridge_slave_0 left promiscuous mode [ 413.307912][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.225120][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 415.797179][ T361] device veth1_macvtap left promiscuous mode [ 415.798970][ T361] device veth0_macvtap left promiscuous mode [ 415.800690][ T361] device veth1_vlan left promiscuous mode [ 415.802354][ T361] device veth0_vlan left promiscuous mode [ 416.830753][ T361] team0 (unregistering): Port device team_slave_1 removed [ 416.849079][ T361] team0 (unregistering): Port device team_slave_0 removed [ 416.862888][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.955875][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.852510][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 418.060474][ T361] bond0 (unregistering): Released all slaves [ 418.910473][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 418.913038][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 418.922334][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 418.926883][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 418.947640][T13734] device veth0_macvtap entered promiscuous mode [ 418.953312][T13734] device veth1_macvtap entered promiscuous mode [ 418.983830][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 418.987590][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.990423][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.001999][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.014190][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.016782][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.019554][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.022084][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.028869][T13848] udc-core: couldn't find an available UDC or it's busy [ 419.030658][T13848] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 419.053769][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.061827][T13734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.079461][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.092529][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.098980][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.101645][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.126570][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.138916][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.146910][T13734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.159006][T13734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.168391][T13734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.170508][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 419.173641][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.178785][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 419.188576][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 419.197338][T13734] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.202605][T13734] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.209232][T13734] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.304123][ T4073] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 419.517575][T13734] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.101569][ T5214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.104286][ T5214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.114446][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 420.166302][ T4073] usb 1-1: Using ep0 maxpacket: 32 [ 420.177581][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.179952][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.186316][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 420.314232][ T4073] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 420.319736][ T4073] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 420.322292][ T4073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.342461][ T4073] usb 1-1: config 0 descriptor?? [ 421.144130][T13843] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 421.175655][ T4073] hub 1-1:0.0: bad descriptor, ignoring hub [ 421.177269][ T4073] hub: probe of 1-1:0.0 failed with error -5 [ 421.181839][ T4073] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 421.336982][T13881] udc-core: couldn't find an available UDC or it's busy [ 421.338776][T13881] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 421.344332][ T26] audit: type=1326 audit(421.320:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13878 comm="syz.4.4013" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e745ea8 code=0x0 [ 422.052624][T13891] device syzkaller1 entered promiscuous mode [ 422.160495][T13899] udc-core: couldn't find an available UDC or it's busy [ 422.162418][T13899] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 422.613627][ T4073] usb 1-1: USB disconnect, device number 30 [ 423.634460][T13911] udc-core: couldn't find an available UDC or it's busy [ 423.636429][T13911] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 425.838615][ T26] audit: type=1326 audit(425.810:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13927 comm="syz.0.4030" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x0 [ 426.980678][T13941] udc-core: couldn't find an available UDC or it's busy [ 426.990677][T13941] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 428.751153][T13964] netlink: 'syz.4.4038': attribute type 4 has an invalid length. [ 431.089556][ T5386] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 431.092251][ T5386] Bluetooth: hci0: Injecting HCI hardware error event [ 431.097109][ T4033] Bluetooth: hci0: hardware error 0x00 [ 431.462844][ T4040] Bluetooth: Frame is too long (len 10, expected len 9) [ 432.194907][ T26] audit: type=1326 audit(431.990:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13976 comm="syz.3.4044" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81eccea8 code=0x0 [ 432.594485][T13971] ODEBUG: Out of memory. ODEBUG disabled [ 434.440692][ T7] Bluetooth: hci2: command 0x2016 tx timeout [ 434.646734][T14012] udc-core: couldn't find an available UDC or it's busy [ 434.648626][T14012] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 436.418381][ T13] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 436.420704][ T13] Bluetooth: hci5: Injecting HCI hardware error event [ 436.422825][ T144] Bluetooth: hci5: hardware error 0x00 [ 436.492449][T14031] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4062'. [ 436.504428][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 436.594542][ T26] audit: type=1326 audit(436.530:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14034 comm="syz.0.4064" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x0 [ 436.652794][T14038] device bridge1 entered promiscuous mode [ 436.940640][T14058] udc-core: couldn't find an available UDC or it's busy [ 436.942573][T14058] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 437.612925][ T4040] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 438.293782][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.295487][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.337857][T14071] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4077'. [ 438.581377][ T26] audit: type=1326 audit(438.550:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.4.4085" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e745ea8 code=0x0 [ 440.904634][ T3320] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 440.906960][ T3320] Bluetooth: hci6: Injecting HCI hardware error event [ 440.909237][ T4040] Bluetooth: hci6: hardware error 0x00 [ 440.930417][T14115] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 440.935549][T14115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 440.939239][T14115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 440.942664][T14115] device bridge_slave_0 left promiscuous mode [ 440.946191][T14115] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.990180][T14115] device bridge_slave_1 left promiscuous mode [ 440.992122][T14115] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.076247][T14115] bond0: (slave bond_slave_0): Releasing backup interface [ 441.079095][T14124] netlink: 'syz.2.4096': attribute type 21 has an invalid length. [ 441.154193][T14115] bond0: (slave bond_slave_1): Releasing backup interface [ 441.335854][T14115] team0: Port device team_slave_0 removed [ 441.615004][T14115] team0: Port device team_slave_1 removed [ 441.617317][T14115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.619598][T14115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.624653][T14115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.629016][T14115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.921552][T14120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.971772][T14120] bond0: (slave caif0): The slave device specified does not support setting the MAC address [ 441.975548][T14120] bond0: (slave caif0): Error -95 calling set_mac_address [ 442.011108][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4097'. [ 442.967845][ T26] audit: type=1326 audit(442.940:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.4.4100" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e745ea8 code=0x0 [ 444.218126][T14175] binder: 14162:14175 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 444.221467][T14175] binder: 14162:14175 ioctl c03064ca 20000140 returned -22 [ 445.123671][ T4564] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 445.125977][ T4564] Bluetooth: hci3: Injecting HCI hardware error event [ 445.128059][ T4033] Bluetooth: hci3: hardware error 0x00 [ 445.304744][ T4564] Bluetooth: hci1: command 0x0409 tx timeout [ 445.371733][T14154] chnl_net:caif_netlink_parms(): no params data found [ 445.465532][ T26] audit: type=1326 audit(445.440:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.0.4120" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x0 [ 447.384581][ T4564] Bluetooth: hci1: command 0x041b tx timeout [ 447.674822][T14154] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.698693][T14154] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.714303][T14154] device bridge_slave_0 entered promiscuous mode [ 447.764953][T14154] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.766946][T14154] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.769565][T14154] device bridge_slave_1 entered promiscuous mode [ 448.594597][T14218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.752139][ T26] audit: type=1326 audit(448.720:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.0.4132" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb06ea8 code=0x0 [ 448.980108][ T361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.997111][T14154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.008680][T14154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.068359][T14154] team0: Port device team_slave_0 added [ 449.082689][T14154] team0: Port device team_slave_1 added [ 449.105364][T14154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.107244][T14154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.124847][T14154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.954191][ T4073] Bluetooth: hci1: command 0x040f tx timeout [ 449.989955][ T361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.079560][T14154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.081346][T14154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.089786][T14154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.256752][T14158] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 450.967861][ T361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.986171][T14246] binder: 14238:14246 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 451.055605][T14255] binder: 14238:14255 ioctl c03064ca 20000140 returned -22 [ 451.704693][T14154] device hsr_slave_0 entered promiscuous mode [ 451.894192][T14154] device hsr_slave_1 entered promiscuous mode [ 452.025673][ T4564] Bluetooth: hci1: command 0x0419 tx timeout [ 452.040271][ T361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.127133][ T26] audit: type=1326 audit(452.100:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14269 comm="syz.3.4147" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81eccea8 code=0x0 [ 453.507344][T14291] udc-core: couldn't find an available UDC or it's busy [ 453.512872][T14292] udc-core: couldn't find an available UDC or it's busy [ 453.524873][T14291] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 453.537818][T14292] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 455.590038][T14303] 9pnet: Insufficient options for proto=fd [ 457.960250][T14344] input: syz0 as /devices/virtual/input/input15 [ 459.579690][ T361] team0: Port device wlan1 removed [ 459.598098][T14154] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 459.651618][T14154] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 459.695654][T14154] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 459.795395][T14154] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 459.839380][T14380] serio: Serial port pts1 [ 460.011227][T14154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.018937][ T361] device hsr_slave_0 left promiscuous mode [ 460.054206][ T361] device hsr_slave_1 left promiscuous mode [ 460.143957][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.146067][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.148701][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.150763][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.158768][ T361] device bridge_slave_1 left promiscuous mode [ 460.160479][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.183864][ T4073] Bluetooth: hci4: command 0x1003 tx timeout [ 460.185631][ T4040] Bluetooth: hci4: sending frame failed (-49) [ 460.194874][ T361] device bridge_slave_0 left promiscuous mode [ 460.196772][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.328276][ T361] device veth1_macvtap left promiscuous mode [ 460.330029][ T361] device veth0_macvtap left promiscuous mode [ 460.331741][ T361] device veth1_vlan left promiscuous mode [ 460.333346][ T361] device veth0_vlan left promiscuous mode [ 460.714568][ T361] team0 (unregistering): Port device team_slave_1 removed [ 460.738584][ T361] team0 (unregistering): Port device team_slave_0 removed [ 460.753569][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.798457][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.988970][ T361] bond0 (unregistering): Released all slaves [ 461.095554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 461.097965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 461.104287][T14154] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.113207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.116912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.119393][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.121325][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.125200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 461.135216][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.138317][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.140909][ T4085] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.142796][ T4085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.152504][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 461.155894][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 461.168544][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 461.173376][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 461.178379][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.181249][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.254156][T14154] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.256890][T14154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.271360][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 461.274183][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.276801][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.281473][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 461.297613][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.300350][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 462.264313][ T4073] Bluetooth: hci4: command 0x1001 tx timeout [ 462.267172][ T4040] Bluetooth: hci4: sending frame failed (-49) [ 462.277242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 462.280564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 462.297269][T14154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.312411][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 462.315315][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 462.335279][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 462.337802][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 462.340570][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 462.343327][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 462.356961][T14154] device veth0_vlan entered promiscuous mode [ 462.387370][T14154] device veth1_vlan entered promiscuous mode [ 462.410277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 462.412826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 462.426877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 462.429455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 462.436463][T14154] device veth0_macvtap entered promiscuous mode [ 462.440657][T14154] device veth1_macvtap entered promiscuous mode [ 462.529000][T14154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.531791][T14154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.543829][T14154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.546619][T14154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.559554][T14154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.562445][T14154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.573022][T14154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.579956][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 462.582517][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 462.586357][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 462.594282][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 462.598660][T14154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.601607][T14154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.610204][T14154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.612922][T14154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.616002][T14154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.618756][T14154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.622318][T14154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.628007][T14154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.630215][T14154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.632463][T14154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.635161][T14154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.657831][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 462.753504][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 463.445474][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.447707][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.496343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 463.516028][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.518408][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.531746][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 464.459269][ T4011] Bluetooth: hci4: command 0x1009 tx timeout [ 465.956101][T14440] chnl_net:caif_netlink_parms(): no params data found [ 466.194730][T14440] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.196766][T14440] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.199494][T14440] device bridge_slave_0 entered promiscuous mode [ 466.202773][T14440] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.233846][T14440] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.237290][T14440] device bridge_slave_1 entered promiscuous mode [ 466.312935][T14440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.337617][T14440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.385083][T14440] team0: Port device team_slave_0 added [ 466.395564][T14440] team0: Port device team_slave_1 added [ 466.428995][T14440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.430909][T14440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.458451][T14440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.462725][T14440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.478719][T14440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.499003][T14440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.585942][T14440] device hsr_slave_0 entered promiscuous mode [ 466.624198][T14440] device hsr_slave_1 entered promiscuous mode [ 466.674127][T14440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.676155][T14440] Cannot create hsr debugfs directory [ 466.823793][ T4564] Bluetooth: hci7: command 0x0409 tx timeout [ 466.827659][T14440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.887520][T14440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.936633][T14440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.026228][T14440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.265376][T14440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 467.398045][T14440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 467.467139][T14440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 467.505921][T14440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 467.718158][T14440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.742325][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.747968][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.758543][T14440] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.771914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.775415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.777868][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.779679][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.819124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.830802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.838448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.847417][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.849391][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.869569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.900119][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.908777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.915877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.921924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.936523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 467.964220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.983165][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.001829][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.057500][T14474] chnl_net:caif_netlink_parms(): no params data found [ 468.185376][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.188171][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.873551][T14440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 468.931243][ T4564] Bluetooth: hci7: command 0x041b tx timeout [ 468.953434][T14474] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.955999][T14474] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.958601][T14474] device bridge_slave_0 entered promiscuous mode [ 468.962415][T14474] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.973995][T14474] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.976509][T14474] device bridge_slave_1 entered promiscuous mode [ 469.069451][T14474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.090862][T14474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.058680][ T4562] Bluetooth: hci2: command 0x0409 tx timeout [ 470.069303][T14474] team0: Port device team_slave_0 added [ 470.073169][T14474] team0: Port device team_slave_1 added [ 470.195308][T14474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.197159][T14474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.213911][T14474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.237514][T14474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.239380][T14474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.259977][T14474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.803510][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.813927][ T4092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.829654][ T361] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.855350][T14440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.934808][T14474] device hsr_slave_0 entered promiscuous mode [ 470.954239][T14474] device hsr_slave_1 entered promiscuous mode [ 470.993914][ T4012] Bluetooth: hci7: command 0x040f tx timeout [ 471.003890][T14474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.005844][T14474] Cannot create hsr debugfs directory [ 471.038335][ T361] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.068810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 471.071452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 471.132837][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.136777][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.140894][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.153575][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.171618][ T361] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.202939][T14440] device veth0_vlan entered promiscuous mode [ 471.232241][T14440] device veth1_vlan entered promiscuous mode [ 471.261380][ T361] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.306298][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 471.308817][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 471.311326][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.314969][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.319974][T14440] device veth0_macvtap entered promiscuous mode [ 471.336339][T14440] device veth1_macvtap entered promiscuous mode [ 471.360531][T14440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.363282][T14440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.372489][T14440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.396736][T14440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.404003][T14440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.409434][T14440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.412032][T14440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.427248][T14440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.561534][T14440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.574490][T14440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.583894][T14440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.586477][T14440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.603584][T14440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.606793][T14440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.609562][T14440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.612163][T14440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.623362][T14440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.628412][T14440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.630739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 471.633232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 471.636459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 471.652300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 471.658035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 471.670618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 471.680399][T14440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.682858][T14440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.699039][T14440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.701414][T14440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.158514][ T4085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.160929][ T4085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.166611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 472.310738][ T4012] Bluetooth: hci2: command 0x041b tx timeout [ 472.501169][ T4085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.503348][ T4085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.508577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 473.156459][T14474] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 473.196039][T14474] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 473.355898][T14474] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 473.407260][T14474] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 473.657505][T14474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.680020][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 473.682601][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.695647][T14474] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.712984][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.717305][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.720092][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.722054][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.730685][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.745832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.748632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.751382][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.753402][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.354426][ T4012] Bluetooth: hci2: command 0x040f tx timeout [ 474.395489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 474.586159][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 474.591086][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 474.606768][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 474.634002][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 474.637009][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 474.639811][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 474.651431][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 474.684166][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.694412][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 474.702390][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 474.715424][T14474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 474.897956][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 474.900176][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 474.908435][T14474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.897256][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 475.900060][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 476.012659][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 476.015376][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 476.019102][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 476.021346][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 476.048856][T14474] device veth0_vlan entered promiscuous mode [ 476.115405][T14474] device veth1_vlan entered promiscuous mode [ 476.152420][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 476.155056][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 476.157665][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 476.160170][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 476.172955][T14474] device veth0_macvtap entered promiscuous mode [ 476.177622][T14474] device veth1_macvtap entered promiscuous mode [ 476.257848][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.260788][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.263398][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.270929][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.273502][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.291193][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.301343][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.304134][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.306705][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.309421][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.334552][T14474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.336832][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 476.339609][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 476.356384][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 476.373213][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 476.382341][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.385322][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.387922][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.391219][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.413946][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.416756][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.419345][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.422160][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.433847][ T5386] Bluetooth: hci2: command 0x0419 tx timeout [ 476.457322][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.460001][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.478254][T14474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.526859][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 476.529710][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 476.535589][T14474] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.537921][T14474] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.540254][T14474] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.542562][T14474] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.737831][ T361] device hsr_slave_0 left promiscuous mode [ 476.784217][ T361] device hsr_slave_1 left promiscuous mode [ 476.877756][ T361] device hsr_slave_0 left promiscuous mode [ 476.905284][ T361] device hsr_slave_1 left promiscuous mode [ 476.963827][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.965881][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.974791][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.976833][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.981987][ T361] device bridge_slave_1 left promiscuous mode [ 476.990913][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.024636][ T361] device bridge_slave_0 left promiscuous mode [ 477.026379][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.144638][ T361] device veth1_macvtap left promiscuous mode [ 477.146521][ T361] device veth0_macvtap left promiscuous mode [ 477.148157][ T361] device veth1_vlan left promiscuous mode [ 477.149681][ T361] device veth0_vlan left promiscuous mode [ 477.234177][ T361] device veth0_macvtap left promiscuous mode [ 477.235865][ T361] device veth1_vlan left promiscuous mode [ 477.237614][ T361] device veth0_vlan left promiscuous mode [ 477.779670][ T361] bond0 (unregistering): Released all slaves [ 477.859174][ T361] bond1 (unregistering): Released all slaves [ 477.980986][ T361] team0 (unregistering): Port device team_slave_1 removed [ 477.991518][ T361] team0 (unregistering): Port device team_slave_0 removed [ 478.002208][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.039989][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.210562][ T361] bond0 (unregistering): Released all slaves [ 478.350088][ T4085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.363980][ T4085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.394170][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 478.440592][ T6580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.442780][ T6580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.448493][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 480.948088][T14687] syz.1.4256 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 480.951635][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 483.416555][ T361] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.461433][ T361] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.510171][ T361] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.569421][ T361] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.775519][ T361] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.829817][ T361] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.895893][ T361] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.940719][ T361] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=0 req=4190 state=1 status=67 (errno 9: Bad file descriptor) [ 484.975544][T14758] chnl_net:caif_netlink_parms(): no params data found [ 485.026952][T14758] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.028984][T14758] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.031527][T14758] device bridge_slave_0 entered promiscuous mode [ 485.040251][T14758] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.042114][T14758] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.047313][T14758] device bridge_slave_1 entered promiscuous mode [ 485.084792][T14758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.089320][T14758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.110172][T14758] team0: Port device team_slave_0 added [ 485.113480][T14758] team0: Port device team_slave_1 added [ 485.166300][T14758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.168171][T14758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.176130][T14758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.180411][T14758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.182293][T14758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.190882][T14758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.265875][T14758] device hsr_slave_0 entered promiscuous mode [ 485.314281][T14758] device hsr_slave_1 entered promiscuous mode [ 485.353931][T14758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.355960][T14758] Cannot create hsr debugfs directory [ 486.079320][T14758] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 486.106374][T14758] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 486.171470][T14758] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 486.216127][T14758] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 486.333621][T14758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.341867][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 486.344629][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 486.349328][T14758] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.354371][T14586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 486.364077][T14586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 486.366535][T14586] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.368423][T14586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.381318][T14586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 486.386325][T14586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 486.388942][T14586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 486.391399][T14586] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.393277][T14586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.416792][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 486.419702][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 486.422403][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 486.427181][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 486.429856][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 486.432639][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 486.435871][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 486.438361][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 486.446412][T14758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.449600][T14758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 486.452104][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 486.455837][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 486.458889][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 486.587646][T14586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 486.589744][T14586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 486.598947][T14758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.775491][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 486.778180][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 486.789928][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 486.792508][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 486.795700][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 486.799602][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 486.804664][T14758] device veth0_vlan entered promiscuous mode [ 486.816273][T14758] device veth1_vlan entered promiscuous mode [ 486.824174][ T5386] Bluetooth: hci0: command 0x0409 tx timeout [ 486.897358][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 486.901691][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 486.905321][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 486.907868][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 486.925244][T14758] device veth0_macvtap entered promiscuous mode [ 486.932253][T14758] device veth1_macvtap entered promiscuous mode [ 486.969503][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.972203][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.975152][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.977826][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.980359][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.983061][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.986067][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.988768][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.991387][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.994286][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.998382][T14758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.000373][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 487.003205][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 487.007095][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 487.009831][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 487.047158][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.049753][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.052440][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.058242][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.060847][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.063528][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.072176][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.077811][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.080512][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.083323][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.088776][T14758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.091383][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 487.094470][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 487.100276][ T361] device hsr_slave_0 left promiscuous mode [ 487.134128][ T361] device hsr_slave_1 left promiscuous mode [ 487.234541][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.236637][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.239187][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.241177][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.245152][ T361] device bridge_slave_1 left promiscuous mode [ 487.247000][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.305054][ T361] device bridge_slave_0 left promiscuous mode [ 487.306770][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.337619][ T361] device hsr_slave_0 left promiscuous mode [ 487.384208][ T361] device hsr_slave_1 left promiscuous mode [ 487.483857][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.485948][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.488422][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.490430][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.492811][ T361] device bridge_slave_1 left promiscuous mode [ 487.494986][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.545499][ T361] device bridge_slave_0 left promiscuous mode [ 487.547124][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.674070][ T361] device veth1_macvtap left promiscuous mode [ 487.675690][ T361] device veth0_macvtap left promiscuous mode [ 487.677249][ T361] device veth1_vlan left promiscuous mode [ 487.678864][ T361] device veth0_vlan left promiscuous mode [ 487.774044][ T361] device veth1_macvtap left promiscuous mode [ 487.775693][ T361] device veth0_macvtap left promiscuous mode [ 487.777321][ T361] device veth1_vlan left promiscuous mode [ 487.778921][ T361] device veth0_vlan left promiscuous mode [ 488.084242][ T361] team0 (unregistering): Port device team_slave_1 removed [ 488.093257][ T361] team0 (unregistering): Port device team_slave_0 removed [ 488.101566][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.139703][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.270019][ T361] bond0 (unregistering): Released all slaves [ 488.446644][ T361] team0 (unregistering): Port device team_slave_1 removed [ 488.463489][ T361] team0 (unregistering): Port device team_slave_0 removed [ 488.471487][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.513505][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.639341][ T361] bond0 (unregistering): Released all slaves [ 488.775929][T14758] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.778283][T14758] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.781106][T14758] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.783369][T14758] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.853573][ T6580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.864930][ T6580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.877222][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 488.878957][ T5468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.881326][ T5468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.888778][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 488.914053][ T4012] Bluetooth: hci0: command 0x041b tx timeout [ 492.611074][ T361] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.659542][ T361] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.711143][ T361] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.762391][ T361] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.906495][ T361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.951203][ T361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.991037][ T361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.040345][ T361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.189009][ T361] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.229722][ T361] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.280003][ T361] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.334049][ T361] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0