last executing test programs: 35m37.729246983s ago: executing program 32 (id=209): socket$rds(0x15, 0x5, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x900, 0x1a4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) unshare(0x62040200) 32m46.256605344s ago: executing program 33 (id=649): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000080)={0xd46, 0x3, 0x6, 0x7}, 0x8) sendmmsg$inet6(r4, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000005c0)="9b", 0x1}], 0x1}}], 0x1, 0x8044) r5 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)="1b2556fe", 0x4, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 31m19.26182343s ago: executing program 34 (id=812): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000074c0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)="22029d3f34478dd7c6b4bd558580024dd4f3ed025977593fc8e4fc4340ed1a6612d271302e2b6f5f27b6da7bc441df1c08989d0e13e86549d437c61da3460c0ada77dbc3c34e7b469e25f86a8add71df58a707341eb74dc1f5224bee25a1be1747a7d899881e49f8975a6939695133329eb1ee253f4f1cd61236769fcd34f95086bae5b16ac2ac9540373774e91addd881875513b8c10535fa77b433bd88638abf49dbaa8d3f5f1dd85242968e6ecf19934150d008d609b3c0dab89c04c18eb4c43121", 0xc3}], 0x1, &(0x7f0000000600)=[{0x78, 0x117, 0xc, "3f5e6f3c9d1f8d06d8f766041e136f07c46f6f8bf0b0ef1c36bd429062a2829645abc5bda597269123c2f53019bdbda5beb3020b265982c5567246fc92044a26bb42571ba0457357eea7b69b335cdb849e8fead78ffcafd96eda33b7c548c2212b1dbffa1c825d67"}, {0x68, 0x0, 0x3, "ba9992248ef488b974dc307be4f83e92a17eb435279af8d5de5634ee1cee22a29f155527ebcf978ffe2340c2120bc2b346e29e779a7e8bdd1320606b9373afd3a6b966da4bc02f5152e89c3d06e87d38c432"}, {0x10, 0x10d, 0x5}, {0x18, 0x119, 0x4, "0d24ab"}], 0x108}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[{0x20, 0x10b, 0x40000000, "73800dffba0a629a3f23ab0b2c73e25d"}, {0x10, 0x88, 0x1}, {0xff0, 0x119, 0x0, "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"}, {0x40, 0x104, 0x9d9e, "7d6e08a52f4ec24fabc631a10fb07aa8696575317af579a6d8221f525f68548e781697d15cd33a26eae04c40"}, {0xc8, 0x10e, 0x1, "737ca9a65a972e68397bec44d739fef045529546298edbccd4db585a9fe86ec9624d77b9d1b263631a3c9a687cb2f7a2ce412d0254394c3cad8aa3f268476ccd2e04e7be517485576cf80c57a39c7bc18d07b143de87df39db7861e3bac904e322e85bdf574479e9d2b3e112dee26267c400e133e1a867f1b47e9b6619fcdc10ab496c6b8f942134c4fe8a6a1a321113b1e0c2f344976f2b550a1846f2317554eeb894666ce176c71a0d8b0557133c18fb79d5c3f1"}], 0x1128}}, {{&(0x7f0000000880)=@x25, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000002780)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006300)}}], 0x4, 0x8044) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x900, 0x1a4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) unshare(0x62040200) 30m37.159136144s ago: executing program 35 (id=908): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf8a}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd0}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) dup(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1, 0x0, 0x0, 0x80}, 0x810) recvmmsg(0xffffffffffffffff, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) 25m45.587528778s ago: executing program 36 (id=1388): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/4084, 0xff4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433", 0xda) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) 24m53.514726506s ago: executing program 37 (id=1472): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/4084, 0xff4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433", 0xda) r3 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pause() 22m22.636254076s ago: executing program 38 (id=1706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540), 0x0) 22m22.364083758s ago: executing program 39 (id=1707): syz_io_uring_setup(0x28e2, &(0x7f0000000140)={0x0, 0xe4d0, 0x2, 0x1, 0x35c}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) pipe(&(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 22m17.947982043s ago: executing program 40 (id=1714): ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, &(0x7f0000000040)) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) mmap(&(0x7f0000f6e000/0x4000)=nil, 0x4000, 0xb, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000240)=[{0xe29a, 0x21e5, 0x11f}, {0x800, 0x5, 0x100000000}, {0x5, 0x42a, 0x100000000}, {0x441, 0x8}, {0x5, 0x100000009, 0x7fffffffffffffff}], 0x5, 0x201, 0x0, 0x0, 0xa5, 0x7c}) socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000400)={0x6, 0x6, 0x0, [{0xa2, 0x5, 0x6, 0xff, 0xff, 0x5, 0x7, '\x00', 0x6}, {0x9, 0x65b6, 0x100000000000002, 0x7, 0xf8, 0xe, 0x1d, '\x00', 0x1}, {0x5, 0x8, 0x1, 0x1, 0x9, 0x7f, 0x1, '\x00', 0x3}, {0x80000000, 0x6, 0x8, 0xf7, 0x6, 0x7, 0x2, '\x00', 0x2}, {0x0, 0xc00000, 0x0, 0x8, 0x7, 0x2, 0xfc, '\x00', 0x8}, {0xd, 0x81, 0x100, 0x8, 0xaa, 0x1, 0x4, '\x00', 0x5}]}) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbfs(0x0, 0x77, 0x101301) read$FUSE(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x200c9, 0x500}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xffffa888}, 0x20000880) bind(r6, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x3, 0x0, {0xa, 0x4e22, 0x9, @empty, 0x3ff}}}, 0x80) 11m1.815554325s ago: executing program 41 (id=2733): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$pagemap(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x403, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) 10m57.400049984s ago: executing program 42 (id=2737): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433", 0xda) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) 10m55.423794289s ago: executing program 43 (id=2739): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019780)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000101ac1414aa00"/55], 0x184}, 0x1, 0x0, 0x0, 0x44014}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x20003f) socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x4000045) 7m3.909244399s ago: executing program 5 (id=3055): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x2641d82c) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 7m2.459678133s ago: executing program 5 (id=3060): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x18da, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x401a}, &(0x7f0000000100), &(0x7f0000ffe000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) 6m55.030353745s ago: executing program 5 (id=3070): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000050000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, &(0x7f00000030c0)={0x765, {"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", 0x1000}}, 0x1006) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x35, 0x0, 0x1}, {0x1c, 0xf7, 0x0, 0x4}, {0x6, 0x0, 0x6, 0x5635}]}) syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, 0x0, 0x0) 6m53.766087935s ago: executing program 5 (id=3073): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000580)='./file0/file0\x00', 0x0, 0x111016, 0x0) 6m52.363072765s ago: executing program 5 (id=3074): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000005c0)) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6m52.353920389s ago: executing program 5 (id=3077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) 6m50.823224973s ago: executing program 44 (id=3077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) 5m20.409280698s ago: executing program 3 (id=3268): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000011140100000000000000000008004a0001000000080003000100000008004a000100000008000100"], 0x48}, 0x1, 0x0, 0x0, 0x48d10}, 0x0) 5m18.125374505s ago: executing program 3 (id=3273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f00000005c0)={{0x7, 0x2, 0xb175, 0x1, 'syz1\x00', 0x9f}, 0x1, [0x0, 0x4, 0x3, 0x4, 0x6, 0x5, 0x40, 0xfffffffffffffffb, 0x2, 0x0, 0x480000000000, 0x8, 0x80, 0x6, 0x7, 0x2, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x7f, 0x2, 0x6, 0x7326, 0x6, 0x8e17, 0x619, 0x6657, 0x1, 0x6, 0xd, 0x8, 0x100000001, 0x6, 0x0, 0x7fffffff, 0x5, 0x0, 0x7fff, 0x8000, 0x5, 0x5b1e, 0x4ced, 0x1, 0x80000001, 0x80, 0x8, 0x4, 0x0, 0x1000, 0x390, 0x6, 0x3, 0x9, 0x0, 0x0, 0x8, 0x0, 0x3e, 0x10, 0x46, 0x1, 0xfffffffffffffbff, 0xffffffffffff0001, 0x5, 0x8, 0x3, 0x3, 0x6, 0x4, 0xff, 0x7, 0x2493, 0xc, 0xe, 0xc5, 0x2, 0x0, 0x0, 0x5, 0x8, 0x9, 0xfff, 0x100, 0x2, 0x2, 0x81, 0x9, 0x5, 0x7, 0x2, 0x3, 0x9, 0x4, 0x8e9, 0x7, 0x1, 0x6, 0x100010000000, 0x2, 0xacc, 0x906d, 0xb, 0x10001, 0x9, 0x7, 0xfffffffffffffffe, 0x2f80, 0x0, 0xb3af, 0x80000001, 0xfffffffeffffffff, 0x2, 0x1, 0x5, 0x4, 0x8, 0x85a, 0xffffffffffff4e0a, 0x0, 0x200, 0x9, 0x1, 0x10000, 0x8, 0x2, 0x6, 0xd491]}) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44810, 0x0, 0x0) 5m15.090104871s ago: executing program 3 (id=3276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x240080d4) 5m13.686354692s ago: executing program 3 (id=3280): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0xfff0, 0x20000000, 0x4, 0x1, 0x0, r0, 0x0, 0x0, 0xffffffffffffff7f}]) 5m12.212115064s ago: executing program 3 (id=3286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x52, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 5m8.890033139s ago: executing program 3 (id=3289): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYRES64=r0], 0x40}}, 0x0) close(0x4) 4m52.90387343s ago: executing program 45 (id=3289): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYRES64=r0], 0x40}}, 0x0) close(0x4) 1m15.802108322s ago: executing program 1 (id=3832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x497, 0x0, &(0x7f00000004c0), &(0x7f0000000280)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) 1m10.673655525s ago: executing program 1 (id=3844): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000002200)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1000}) 1m8.874759631s ago: executing program 1 (id=3849): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f0000000140)=[{0x1e, 0x0, 0x0, 0x0}, {0x5, 0x11, 0x0, 0x0}], 0x2}) 1m4.541432631s ago: executing program 1 (id=3856): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x80000, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x10182, 0x85) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x2) socket(0xa, 0x5, 0x0) execve(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000640)) 1m3.743648252s ago: executing program 8 (id=3863): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000462000/0x1000)=nil, 0x1000, 0x200000000000004, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000600)="7163b8f02a63af6ef19a7d300900000000229d9ebbc24460c234ae2b00eec0d28844f2b47d502e3952a81efc65f0d58182d1ef63ad", 0x35}], 0x1) 1m2.953878722s ago: executing program 1 (id=3867): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) mount$fuse(0x0, 0x0, 0x0, 0x10008, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xfffffff2}}, './file0\x00'}) 1m1.978042375s ago: executing program 8 (id=3870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m0.785962698s ago: executing program 8 (id=3873): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x5}}, 0x20) 1m0.481630423s ago: executing program 8 (id=3875): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x6, 0x229, &(0x7f00000005c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xec3294b766e88361, 0x4) 57.427059663s ago: executing program 8 (id=3878): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x170, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0x0, 0xff], [], 'lo\x00', 'geneve1\x00'}, 0x0, 0x108, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x14}, {0xc000400000000001}], 0x1, 0x2}}, @common=@hl={{0x28}, {0x2, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 56.4141082s ago: executing program 1 (id=3881): unshare(0x26000400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19) writev(r0, 0x0, 0x0) 55.157195101s ago: executing program 46 (id=3881): unshare(0x26000400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19) writev(r0, 0x0, 0x0) 53.29793435s ago: executing program 8 (id=3888): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f0000000140)=[{0x1e, 0x0, 0x0, 0x0}, {0x5, 0x11, 0x0, 0x0}], 0x2}) 52.490257826s ago: executing program 47 (id=3888): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f0000000140)=[{0x1e, 0x0, 0x0, 0x0}, {0x5, 0x11, 0x0, 0x0}], 0x2}) 10.246422951s ago: executing program 0 (id=4055): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x1, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x8, 0x5, 0x3, 0x4, 0x7, 0x3, 0x1, 0x6, 0x101, 0x8000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1fb) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x2) 9.930109268s ago: executing program 0 (id=4058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0x4660, 0x400, 0x3, 0x1ec}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) 9.04582616s ago: executing program 0 (id=4062): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000000101080000000000000000020000002c"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x0, 0x6, 0x70bd26, 0x25dfdbfa, {{}, {@void, @val={0xc, 0x99, {0x2, 0x49}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x4000800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) pwrite64(r1, &(0x7f0000000300)="572654b114b1a9e1879a390786dd", 0xc0, 0x100000000) 7.440044836s ago: executing program 0 (id=4065): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/219, 0xdb}], 0x1, 0x200019, 0x0) 6.200226708s ago: executing program 0 (id=4073): r0 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.838051909s ago: executing program 7 (id=4077): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x1, 0xc000, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_NET_NS_PID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc084) 4.732725259s ago: executing program 7 (id=4080): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xffffffffffffffff, 0x208, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000480)="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", 0x0, 0x68fe, 0x0, 0x1, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x18, 0x5a, 0x1, 0x70bd26, 0x2, {0x2}, [{0x4}]}, 0x18}}, 0x10040000) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4.547104217s ago: executing program 4 (id=4082): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/212, 0xd4}], 0x1, 0x1000, 0x0) 4.437674878s ago: executing program 6 (id=4083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, 0x0, &(0x7f00000004c0), &(0x7f0000000280)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) 4.290175366s ago: executing program 7 (id=4084): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x2, 0x6, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x5, 0x2, 0xa1}) 4.056852506s ago: executing program 6 (id=4086): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/219, 0xdb}], 0x1, 0x200019, 0x0) 4.009214377s ago: executing program 4 (id=4088): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000780)={0x8, 0x0, 0x27f}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) shutdown(r0, 0x2) 3.927139233s ago: executing program 7 (id=4089): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x44180, 0x72) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 3.540397403s ago: executing program 6 (id=4091): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x80000, 0xfffffffd) bind$inet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x1015a, 0x10002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 3.508895083s ago: executing program 4 (id=4092): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x6, 0x6, ':yE', 0x2, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local, [], "6a2ef9bed8415b3a"}}}}}}}, 0x0) 3.189989383s ago: executing program 4 (id=4093): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c2, &(0x7f0000000080)={[{@fat=@nfs}, {@fat=@errors_continue}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}]}, 0xfe, 0x25f, &(0x7f0000000140)="$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") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb4) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 3.055765463s ago: executing program 2 (id=4094): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x80000, 0xfffffffd) bind$inet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x1015a, 0x10002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1204011, &(0x7f00000011c0)={[], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/141, 0x8d) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) 2.667096203s ago: executing program 4 (id=4095): pipe(0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044805) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000019080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf, 0x0, 0x80b}}}, 0x7) unshare(0x10800) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) 2.502039327s ago: executing program 7 (id=4096): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x5}}, 0x20) 2.206038039s ago: executing program 7 (id=4099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, 0x0, &(0x7f00000004c0), &(0x7f0000000280)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67200000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) 1.994007083s ago: executing program 9 (id=4100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.946292183s ago: executing program 2 (id=4101): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x2, 0x6, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x5, 0x2, 0xa1}) 1.629100578s ago: executing program 0 (id=4102): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00'}, 0x10) r0 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) 1.553311476s ago: executing program 9 (id=4103): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/219, 0xdb}], 0x1, 0x200019, 0x0) 1.51627863s ago: executing program 2 (id=4104): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c094) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000045c0)=@newtfilter={0x84, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x54, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x8, 0x0, 0x8, 0x80, {0x4, 0x1, 0x0, 0x2, 0x61f, 0x10000}, {0x5, 0x1, 0x6b4a, 0x9, 0xa6, 0x10000}, 0x4, 0x80000001, 0xc6}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 1.109269603s ago: executing program 2 (id=4105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x10, 0xf}, {}, {0xf, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xfb3a}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) 1.017819406s ago: executing program 9 (id=4106): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x0, r2}, 0x10) 929.052797ms ago: executing program 6 (id=4107): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x2) 838.78817ms ago: executing program 9 (id=4108): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x8001, 0x800, 0x4, 0x3, 0x1a, 0x8, 0x0, 0x0, 0x20}}, 0x50) fallocate(r0, 0x1, 0xfdff, 0xfff) 629.68929ms ago: executing program 2 (id=4109): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x192) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x10042, 0x80) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x101000, 0x5e) setresuid(0x0, 0xee00, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 629.096114ms ago: executing program 6 (id=4110): r0 = epoll_create1(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x406, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x90000014}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000580)={0xa0002008}) syz_clone(0x100300, 0x0, 0xfffffffffffffd4e, 0xfffffffffffffffe, 0x0, 0x0) 542.034661ms ago: executing program 9 (id=4111): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x5}}, 0x20) 188.27878ms ago: executing program 4 (id=4112): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, 0x0) 152.281558ms ago: executing program 9 (id=4113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x255, &(0x7f0000000a00)=ANY=[], 0x0) 69.616889ms ago: executing program 2 (id=4114): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 0s ago: executing program 6 (id=4115): r0 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): ype 2 family 0 port 6081 - 0 [ 1949.344323][ T7270] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.588018][T18959] hsr_slave_0: entered promiscuous mode [ 1949.626889][T18959] hsr_slave_1: entered promiscuous mode [ 1949.663350][T18959] debugfs: 'hsr0' already exists in 'hsr' [ 1949.669188][T18959] Cannot create hsr debugfs directory [ 1949.686295][T19011] chnl_net:caif_netlink_parms(): no params data found [ 1949.878439][T19015] chnl_net:caif_netlink_parms(): no params data found [ 1949.921830][T12773] Bluetooth: hci5: command tx timeout [ 1949.949103][T18988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1949.956654][T18988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.963991][T18988] bridge_slave_0: entered allmulticast mode [ 1949.971992][T18988] bridge_slave_0: entered promiscuous mode [ 1949.981051][T18988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1949.989942][T18988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.997706][T18988] bridge_slave_1: entered allmulticast mode [ 1950.016949][T18988] bridge_slave_1: entered promiscuous mode [ 1950.810193][T18988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1951.017303][T18988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1952.523624][T18988] team0: Port device team_slave_0 added [ 1953.422373][T19011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1953.440965][T19011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.452011][T19011] bridge_slave_0: entered allmulticast mode [ 1953.476106][T19011] bridge_slave_0: entered promiscuous mode [ 1953.957878][T18988] team0: Port device team_slave_1 added [ 1954.035443][T19015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.049598][T19015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.066863][T19015] bridge_slave_0: entered allmulticast mode [ 1954.127810][T19015] bridge_slave_0: entered promiscuous mode [ 1954.279002][T19011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1954.328070][T19011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1954.350196][T19011] bridge_slave_1: entered allmulticast mode [ 1954.557969][T19011] bridge_slave_1: entered promiscuous mode [ 1955.167391][T18988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1955.183888][T18988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1955.210375][T18988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1955.246852][T19015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1955.254457][T19015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1955.261997][T19015] bridge_slave_1: entered allmulticast mode [ 1955.269463][T19015] bridge_slave_1: entered promiscuous mode [ 1955.314679][T18988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1955.322283][T18988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1955.348524][T18988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1955.498758][T19015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1955.560974][T19011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1955.662568][T19015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1955.692556][T19011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1955.701939][T14153] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1955.865767][T14153] usb 4-1: Using ep0 maxpacket: 8 [ 1955.880644][T14153] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1955.908373][T14153] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1955.953844][T14153] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1955.994211][T14153] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1956.064545][T14153] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1956.127434][T14153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.190474][T19015] team0: Port device team_slave_0 added [ 1956.237798][T19011] team0: Port device team_slave_0 added [ 1956.249065][T14153] hub 4-1:1.0: bad descriptor, ignoring hub [ 1956.257501][T19011] team0: Port device team_slave_1 added [ 1956.268635][T14153] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1956.279122][T14153] cdc_wdm 4-1:1.0: skipping garbage [ 1956.301876][T14153] cdc_wdm 4-1:1.0: skipping garbage [ 1956.326575][T14153] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1956.343983][T18988] hsr_slave_0: entered promiscuous mode [ 1956.349967][T14153] cdc_wdm 4-1:1.0: Unknown control protocol [ 1956.361117][T18988] hsr_slave_1: entered promiscuous mode [ 1956.373349][T18988] debugfs: 'hsr0' already exists in 'hsr' [ 1956.379073][T18988] Cannot create hsr debugfs directory [ 1956.390483][T19015] team0: Port device team_slave_1 added [ 1956.486600][ T5959] kernel read not supported for file /snd/controlC0 (pid: 5959 comm: kworker/1:6) [ 1956.535054][T19015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1956.544545][T19015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1956.574049][T14153] usb 4-1: USB disconnect, device number 11 [ 1956.590461][T19015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1956.654425][T19011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1956.671402][T19011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1956.708072][T19011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1956.843796][T19015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1956.857980][T19015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1956.886777][T19015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1956.902077][T14153] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1956.913058][T19011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1956.920088][T19011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1956.946304][T19011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1957.551453][T14153] usb 4-1: Using ep0 maxpacket: 8 [ 1957.571215][T14153] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.603634][T14153] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1957.621834][T14153] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1957.668518][T14153] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1957.717728][T14153] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1957.735434][T14153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.773215][T14153] hub 4-1:1.0: bad descriptor, ignoring hub [ 1957.779595][T14153] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1957.780808][T19011] hsr_slave_0: entered promiscuous mode [ 1957.787730][T14153] cdc_wdm 4-1:1.0: skipping garbage [ 1957.794865][T19011] hsr_slave_1: entered promiscuous mode [ 1957.805581][T19011] debugfs: 'hsr0' already exists in 'hsr' [ 1957.808674][T14153] cdc_wdm 4-1:1.0: skipping garbage [ 1957.811298][T19011] Cannot create hsr debugfs directory [ 1957.828498][T14153] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1957.839233][T14153] cdc_wdm 4-1:1.0: Unknown control protocol [ 1957.849082][ T7270] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.898880][T19015] hsr_slave_0: entered promiscuous mode [ 1957.905977][T19015] hsr_slave_1: entered promiscuous mode [ 1957.920023][T19015] debugfs: 'hsr0' already exists in 'hsr' [ 1957.931747][T19015] Cannot create hsr debugfs directory [ 1957.988128][ T7270] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.011571][ T7058] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1958.092363][T11515] usb 4-1: USB disconnect, device number 12 [ 1958.093842][ T7270] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.181999][ T7058] usb 3-1: Using ep0 maxpacket: 32 [ 1958.191594][ T7058] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1958.199610][ T7058] usb 3-1: config 0 has no interface number 0 [ 1958.217567][ T7058] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1958.226722][ T7058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.234749][ T7058] usb 3-1: Product: syz [ 1958.238922][ T7058] usb 3-1: Manufacturer: syz [ 1958.240808][ T7270] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.243719][ T7058] usb 3-1: SerialNumber: syz [ 1958.246674][ T7058] usb 3-1: config 0 descriptor?? [ 1958.274475][ T7058] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1958.283456][ T7058] usb 3-1: selecting invalid altsetting 1 [ 1958.291207][ T7058] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1958.316405][ T7058] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1958.337455][ T7058] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1958.349597][ T7058] usb 3-1: media controller created [ 1958.398592][ T7058] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1958.446377][T18959] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1958.560854][T18959] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1959.149696][T18959] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1959.255235][T18959] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1959.369011][ T7270] bridge_slave_1: left allmulticast mode [ 1959.379380][ T7270] bridge_slave_1: left promiscuous mode [ 1959.393636][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1959.415384][ T7270] bridge_slave_0: left allmulticast mode [ 1959.422611][ T7270] bridge_slave_0: left promiscuous mode [ 1959.436015][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.462258][ T7270] bridge_slave_1: left allmulticast mode [ 1959.475999][ T7270] bridge_slave_1: left promiscuous mode [ 1959.489296][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1959.512802][ T7270] bridge_slave_0: left allmulticast mode [ 1959.518541][ T7270] bridge_slave_0: left promiscuous mode [ 1959.528243][ T7058] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1959.538541][ T7058] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1959.551789][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.581041][ T7058] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1959.593400][ T7270] bridge_slave_1: left allmulticast mode [ 1959.599117][ T7270] bridge_slave_1: left promiscuous mode [ 1959.605928][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1959.632840][ T7270] bridge_slave_0: left allmulticast mode [ 1959.638668][ T7270] bridge_slave_0: left promiscuous mode [ 1959.645715][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1960.260386][ T7058] usb 3-1: USB disconnect, device number 13 [ 1960.715542][ T7270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1960.727750][ T7270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1960.738015][ T7270] bond0 (unregistering): Released all slaves [ 1960.974866][ T7270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1960.986268][ T7270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1960.997387][ T7270] bond0 (unregistering): Released all slaves [ 1961.250556][ T7270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1961.267411][ T7270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1961.277800][ T7270] bond0 (unregistering): Released all slaves [ 1961.542779][T18959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1961.618552][T19176] netlink: 'syz.3.3124': attribute type 4 has an invalid length. [ 1961.731008][T18959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1961.812976][T18988] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1961.873275][T18971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.880479][T18971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1961.889753][T18988] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1961.905242][T18988] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1961.930450][T18988] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1962.017148][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1962.024364][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1962.557187][ T7270] hsr_slave_0: left promiscuous mode [ 1962.652150][ T7270] hsr_slave_1: left promiscuous mode [ 1962.659070][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1962.666621][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1962.676278][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1962.689856][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1962.710610][ T7270] hsr_slave_0: left promiscuous mode [ 1962.717790][ T7270] hsr_slave_1: left promiscuous mode [ 1962.726582][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1962.735900][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1962.755079][ T7270] hsr_slave_0: left promiscuous mode [ 1962.763004][ T7270] hsr_slave_1: left promiscuous mode [ 1962.770065][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1962.777745][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1962.788664][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1962.802642][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1962.904191][ T7270] veth1_macvtap: left promiscuous mode [ 1962.909823][ T7270] veth0_macvtap: left promiscuous mode [ 1962.917615][ T7270] veth1_vlan: left promiscuous mode [ 1962.923140][ T7270] veth0_vlan: left promiscuous mode [ 1962.930354][ T7270] veth1_vlan: left promiscuous mode [ 1962.935877][ T7270] veth0_vlan: left promiscuous mode [ 1962.942134][ T7270] veth1_macvtap: left promiscuous mode [ 1962.947778][ T7270] veth0_macvtap: left promiscuous mode [ 1962.953497][ T7270] veth1_vlan: left promiscuous mode [ 1962.958941][ T7270] veth0_vlan: left promiscuous mode [ 1964.810162][ T7270] team0 (unregistering): Port device team_slave_1 removed [ 1964.885101][ T7270] team0 (unregistering): Port device team_slave_0 removed [ 1966.753897][ T7270] team0 (unregistering): Port device team_slave_1 removed [ 1966.825224][ T7270] team0 (unregistering): Port device team_slave_0 removed [ 1968.030444][ T7270] team0 (unregistering): Port device team_slave_1 removed [ 1968.067046][ T7270] team0 (unregistering): Port device team_slave_0 removed [ 1968.417291][T19197] warning: `syz.2.3128' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1969.607833][T18988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1970.183926][T18988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1970.197749][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.204863][ T9742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1970.227168][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1970.234372][ T9742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1970.362756][T19229] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1970.374537][T19229] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1971.353326][T18959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1971.404310][T19015] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1971.485650][T19015] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1971.572934][T19015] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1971.662137][T19015] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1971.865609][T19011] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1971.892817][T19011] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1971.948165][T19011] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1971.971323][T19011] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1972.264359][T18988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1973.315309][ T7270] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.323020][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1973.337042][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1973.345567][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1973.362233][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1973.373788][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1973.468631][ T7270] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.563400][ T7270] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.636446][T19015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1973.682693][ T7270] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.793166][T18959] veth0_vlan: entered promiscuous mode [ 1973.841549][T19015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1973.885633][T18959] veth1_vlan: entered promiscuous mode [ 1973.904816][T19261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1973.911971][T19261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1973.951913][T19261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1973.959012][T19261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1973.977061][T19011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1973.984534][T18988] veth0_vlan: entered promiscuous mode [ 1974.038294][ T7270] bridge_slave_1: left allmulticast mode [ 1974.045134][ T7270] bridge_slave_1: left promiscuous mode [ 1974.050849][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.067955][ T7270] bridge_slave_0: left allmulticast mode [ 1974.073807][ T7270] bridge_slave_0: left promiscuous mode [ 1974.079551][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.497724][ T7270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1974.517601][ T7270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1974.537947][ T7270] bond0 (unregistering): Released all slaves [ 1975.242352][T18988] veth1_vlan: entered promiscuous mode [ 1975.298244][T19269] chnl_net:caif_netlink_parms(): no params data found [ 1975.334681][T19011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1975.354554][T19261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1975.361722][T19261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1975.375042][T19261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1975.382188][T19261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1975.415683][T18959] veth0_macvtap: entered promiscuous mode [ 1975.454322][ T5876] Bluetooth: hci4: command tx timeout [ 1975.497428][T18959] veth1_macvtap: entered promiscuous mode [ 1975.563693][ T7058] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1975.738600][T18988] veth0_macvtap: entered promiscuous mode [ 1975.738847][ T7058] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1975.746795][T19269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1975.763531][ T7058] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1975.779677][ T7058] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1975.785140][T19269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1975.798008][ T7058] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1975.807330][ T7058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.817345][T19269] bridge_slave_0: entered allmulticast mode [ 1975.823490][ T7058] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1975.833629][T19269] bridge_slave_0: entered promiscuous mode [ 1975.844508][T19269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1975.852613][T19269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1975.859778][T19269] bridge_slave_1: entered allmulticast mode [ 1975.868180][T19269] bridge_slave_1: entered promiscuous mode [ 1975.879739][T18959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1975.893951][ T7058] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1975.910653][ T7270] hsr_slave_0: left promiscuous mode [ 1975.917681][ T7270] hsr_slave_1: left promiscuous mode [ 1975.924557][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1975.932736][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1975.940533][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1975.947995][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1975.968457][ T7270] veth1_macvtap: left promiscuous mode [ 1975.974208][ T7270] veth0_macvtap: left promiscuous mode [ 1975.979827][ T7270] veth1_vlan: left promiscuous mode [ 1975.985309][ T7270] veth0_vlan: left promiscuous mode [ 1976.040505][ T7058] usb 4-1: USB disconnect, device number 13 [ 1976.407199][ T7270] team0 (unregistering): Port device team_slave_1 removed [ 1976.439471][ T7270] team0 (unregistering): Port device team_slave_0 removed [ 1976.769426][T18988] veth1_macvtap: entered promiscuous mode [ 1976.825307][T18959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1976.870068][T19015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1976.915537][T19015] veth0_vlan: entered promiscuous mode [ 1977.001115][T19015] veth1_vlan: entered promiscuous mode [ 1977.045188][T19269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1977.114328][ T6296] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1977.525888][ T5876] Bluetooth: hci4: command tx timeout [ 1977.667510][T19269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1977.764629][T18988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1977.793083][ T6296] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1977.892817][T19269] team0: Port device team_slave_0 added [ 1977.965323][T18988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1977.991480][ T6296] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1978.033392][T19269] team0: Port device team_slave_1 added [ 1978.340149][ T6296] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1978.613833][T19269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1978.644640][T19269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1978.679037][T19269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1978.702610][T19269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1978.709558][T19269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1978.750986][T19269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1978.779779][T19015] veth0_macvtap: entered promiscuous mode [ 1978.799870][T19015] veth1_macvtap: entered promiscuous mode [ 1978.823875][T19261] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1978.921552][T19261] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1978.931496][T19261] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1978.999391][T19015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1979.016948][T19011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1979.057855][T19261] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.106106][T19015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1979.141965][T15269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1979.149779][T15269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1979.152447][T19269] hsr_slave_0: entered promiscuous mode [ 1979.164266][T19269] hsr_slave_1: entered promiscuous mode [ 1979.179906][T19269] debugfs: 'hsr0' already exists in 'hsr' [ 1979.187042][T19269] Cannot create hsr debugfs directory [ 1979.326249][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.336626][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.392657][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.402855][ T6296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1979.403769][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.410671][ T6296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1979.530890][ T1300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1979.551002][ T1300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1979.603780][ T5876] Bluetooth: hci4: command tx timeout [ 1979.661540][T19011] veth0_vlan: entered promiscuous mode [ 1980.177842][ T7270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.265751][ T7270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.348454][T19011] veth1_vlan: entered promiscuous mode [ 1980.533778][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.547981][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.719459][ T1300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.728834][T19011] veth0_macvtap: entered promiscuous mode [ 1980.809719][ T1300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.913108][T19011] veth1_macvtap: entered promiscuous mode [ 1981.747646][ T5876] Bluetooth: hci4: command tx timeout [ 1982.301147][T19339] netlink: 'syz.1.3078': attribute type 10 has an invalid length. [ 1982.351143][T19339] team0: Port device dummy0 added [ 1982.380674][T19011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1982.460899][T19011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1983.566293][T19336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.065996][T19353] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3156'. [ 1986.512238][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.518551][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.585446][T19355] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1986.596502][T19355] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1986.606220][T19355] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1986.725914][ T7270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1986.745282][ T7270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1986.799667][ T7270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.911187][T19269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1987.988189][T19269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1988.058590][ T7270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.074508][T19269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1988.081290][ T7270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1988.129784][T19269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1989.323206][T15269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1989.331058][T15269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1992.103566][T19414] overlay: Unknown parameter '/' [ 1992.778394][T19269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1993.062549][ T5877] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1993.316076][ T5877] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1993.351416][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.366530][T19269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1993.396191][ T5877] usb 4-1: Product: syz [ 1993.400361][ T5877] usb 4-1: Manufacturer: syz [ 1993.451547][ T5877] usb 4-1: SerialNumber: syz [ 1993.456605][T15269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.463753][T15269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1993.565653][T19426] bridge_slave_0: left allmulticast mode [ 1993.595282][T19426] bridge_slave_0: left promiscuous mode [ 1993.612526][T19426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1993.676708][T19426] bridge_slave_1: left allmulticast mode [ 1993.762857][T19426] bridge_slave_1: left promiscuous mode [ 1993.779379][T19426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.820077][T19426] bond0: (slave bond_slave_0): Releasing backup interface [ 1993.883993][T19426] bond0: (slave bond_slave_1): Releasing backup interface [ 1993.982360][T19426] team0: Port device team_slave_0 removed [ 1994.021784][ T5945] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1994.036284][T19426] team0: Port device team_slave_1 removed [ 1994.059063][T19426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1994.074452][T19426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1994.094301][T19426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1994.101787][T19426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1994.191475][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 1994.225099][T19261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1994.232238][T19261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1994.262116][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1994.325830][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1994.397254][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1994.449474][ T5945] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1994.466472][T19269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1994.488329][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1994.498053][T19269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1994.522493][ T5945] usb 1-1: config 0 descriptor?? [ 1994.956565][ T5945] hid_parser_main: 6 callbacks suppressed [ 1994.956595][ T5945] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 1995.017468][ T5945] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 1995.054613][ T5945] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 1995.067510][ T5877] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1995.101349][ T5945] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 1995.127287][ T5945] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 1995.779976][T19269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1995.855095][ T5945] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 1995.888681][ T5945] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 1995.904034][ T5945] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1995.970269][T19269] veth0_vlan: entered promiscuous mode [ 1995.988132][T19188] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1996.015550][ T5945] usb 1-1: USB disconnect, device number 4 [ 1996.030474][T19188] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1996.052952][T19269] veth1_vlan: entered promiscuous mode [ 1996.068110][T19188] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1996.101541][T19188] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1996.198316][T19269] veth0_macvtap: entered promiscuous mode [ 1996.218016][T19269] veth1_macvtap: entered promiscuous mode [ 1996.274370][T19269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1996.380448][T19269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1996.609089][ T5877] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 1996.641730][ T5877] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1996.670287][ T9736] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1996.676935][ T5877] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1996.690269][ T9736] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1996.719243][ T5877] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1996.741360][ T9736] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1996.766257][ T5877] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1996.781225][ T9736] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1996.817766][ T5877] usb 4-1: USB disconnect, device number 14 [ 1996.980439][ T1300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1997.031580][ T1300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1997.082043][ T1300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1997.094082][ T1300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1998.131114][ T5876] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1998.390374][T19491] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3197'. [ 2000.604257][ T5945] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 2002.391545][ T5945] usb 10-1: config index 0 descriptor too short (expected 63186, got 210) [ 2002.401769][ T5945] usb 10-1: config 0 has an invalid interface number: 106 but max is 0 [ 2002.410017][ T5945] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.499657][ T5945] usb 10-1: config 0 has no interface number 0 [ 2002.594780][ T5945] usb 10-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2002.678297][ T5945] usb 10-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2002.986220][ T5945] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2003.722829][ T5945] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.744057][ T5945] usb 10-1: config 0 descriptor?? [ 2004.069965][T19188] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2004.897316][ T5945] usb 10-1: can't set config #0, error -71 [ 2004.951758][ T5945] usb 10-1: USB disconnect, device number 3 [ 2005.061527][T19188] usb 9-1: Using ep0 maxpacket: 32 [ 2005.089880][T19188] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 2005.133788][T19188] usb 9-1: config 0 has no interface number 0 [ 2005.140020][T19188] usb 9-1: too many endpoints for config 0 interface 184 altsetting 7: 247, using maximum allowed: 30 [ 2005.191635][T19188] usb 9-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 2005.245322][T19188] usb 9-1: config 0 interface 184 has no altsetting 0 [ 2005.273685][T19188] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2005.287670][T19188] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.347852][T19188] usb 9-1: Product: syz [ 2006.221551][T19188] usb 9-1: Manufacturer: syz [ 2006.226166][T19188] usb 9-1: SerialNumber: syz [ 2006.266183][T19188] usb 9-1: config 0 descriptor?? [ 2006.433487][T19188] usb 9-1: can't set config #0, error -71 [ 2006.476947][T19188] usb 9-1: USB disconnect, device number 4 [ 2007.602372][T19468] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2008.181707][T19468] usb 4-1: Using ep0 maxpacket: 32 [ 2008.191787][T19468] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2008.208259][T19468] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2008.257988][T19468] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 2008.306412][T19468] usb 4-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 2008.344781][T19468] usb 4-1: Product: syz [ 2008.348970][T19468] usb 4-1: Manufacturer: syz [ 2008.758772][T19468] usb 4-1: SerialNumber: syz [ 2008.815797][T19468] usb 4-1: config 0 descriptor?? [ 2008.825250][T19468] usb 4-1: no audio or video endpoints found [ 2009.038478][T19468] usb 4-1: USB disconnect, device number 15 [ 2011.789360][T19595] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3226'. [ 2011.798518][T19595] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3226'. [ 2011.807850][T19595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3226'. [ 2016.641451][T19468] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2017.061665][T19468] usb 9-1: Using ep0 maxpacket: 32 [ 2017.078618][T19468] usb 9-1: config 1 has an invalid interface number: 118 but max is 0 [ 2017.090585][T19468] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2017.100323][T19468] usb 9-1: config 1 has no interface number 0 [ 2018.047825][T19468] usb 9-1: config 1 interface 118 has no altsetting 0 [ 2018.054795][T19468] usb 9-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=ff.8c [ 2018.071797][T19468] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.140216][T19644] netlink: 'syz.3.3240': attribute type 1 has an invalid length. [ 2018.231163][T19644] netlink: 'syz.3.3240': attribute type 4 has an invalid length. [ 2018.329842][T19468] usb 9-1: string descriptor 0 read error: -71 [ 2018.337011][T19644] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.3240'. [ 2018.349184][T19468] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 2018.383855][T19468] usb 9-1: selecting invalid altsetting 0 [ 2018.420947][T19468] usb 9-1: USB disconnect, device number 5 [ 2018.457051][ T2339] usb 9-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 2018.490377][ T2339] usb 9-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 2024.536003][T19697] binder: 19696:19697 unknown command 0 [ 2024.581739][T19697] binder: 19696:19697 ioctl c0306201 200000000080 returned -22 [ 2029.061168][ T5945] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2030.092910][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2030.121594][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2030.141262][ T5945] usb 1-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 2030.151042][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.985932][ T5945] usb 1-1: config 0 descriptor?? [ 2031.014582][ T5945] usb 1-1: can't set config #0, error -71 [ 2031.043164][ T5945] usb 1-1: USB disconnect, device number 5 [ 2031.059395][T19730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3268'. [ 2032.378740][T19188] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2034.201579][T19188] usb 3-1: Using ep0 maxpacket: 8 [ 2034.273166][T19188] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 2034.281456][T19188] usb 3-1: config 0 has no interface number 0 [ 2034.302699][T19188] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2034.727123][T19188] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2034.795936][T19188] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2034.860013][T19188] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2034.924122][T19188] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2034.959225][T19188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.008120][T19188] usb 3-1: config 0 descriptor?? [ 2035.035249][T19188] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2035.253104][ T5959] usb 3-1: USB disconnect, device number 14 [ 2035.280807][ T5959] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 2035.451472][T19188] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2036.244674][ T5876] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2036.254326][ T5876] Bluetooth: hci5: Injecting HCI hardware error event [ 2036.270354][T12773] Bluetooth: hci5: hardware error 0x00 [ 2036.521446][T19188] usb 1-1: Using ep0 maxpacket: 8 [ 2036.602274][T19188] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2036.611320][T19188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.674861][T19188] usb 1-1: Product: syz [ 2036.679305][ T5876] Bluetooth: Frame is too long (len 18, expected len 4) [ 2036.721527][T19188] usb 1-1: Manufacturer: syz [ 2036.736179][T19188] usb 1-1: SerialNumber: syz [ 2036.786629][T19188] usb 1-1: config 0 descriptor?? [ 2037.025472][T19188] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2037.811602][T19188] gspca_sonixj: reg_w1 err -110 [ 2037.816545][T19188] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 2038.801533][T12773] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2041.365905][ T5877] usb 1-1: USB disconnect, device number 6 [ 2041.477600][T12773] Bluetooth: hci1: Malformed LE Event: 0x1b [ 2041.824529][T19798] input: syz1 as /devices/virtual/input/input8 [ 2042.631788][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3293'. [ 2042.640684][T19801] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3293'. [ 2042.737704][T19803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2047.045371][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.051850][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2047.304085][T19834] input: syz1 as /devices/virtual/input/input9 [ 2047.572536][T11769] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2047.724599][T11769] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2047.769454][T11769] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2047.799577][T11769] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2047.848922][T11769] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2047.868995][T11769] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.888391][T19846] serio: Serial port ptm0 [ 2047.902637][T11769] usb 10-1: Product: syz [ 2047.913640][T11769] usb 10-1: Manufacturer: syz [ 2047.922891][T11769] usb 10-1: SerialNumber: syz [ 2047.953179][T11769] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 2047.963457][T11769] cdc_ncm 10-1:1.0: bind() failure [ 2048.177060][T11434] usb 10-1: USB disconnect, device number 4 [ 2050.213029][T19188] libceph: connect (1)[c::]:6789 error -101 [ 2050.219428][T19188] libceph: mon0 (1)[c::]:6789 connect error [ 2050.578129][T19859] ceph: No mds server is up or the cluster is laggy [ 2050.610853][T19188] libceph: connect (1)[c::]:6789 error -101 [ 2050.682880][T19188] libceph: mon0 (1)[c::]:6789 connect error [ 2055.281722][T19901] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3324'. [ 2055.326100][T19901] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3324'. [ 2055.344589][T19901] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3324'. [ 2055.374096][T19901] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3324'. [ 2055.511898][T19911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3327'. [ 2056.092595][T19188] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2056.140094][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 2056.501721][T19188] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 2056.511032][T19188] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2057.344203][T19188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2057.411736][T19188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2057.649567][T19188] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2057.664786][T19188] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2057.682470][T19188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.467158][T19188] usb 1-1: config 0 descriptor?? [ 2058.482388][T19906] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2059.859084][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 2060.814538][T19188] usb 1-1: can't set config #0, error -71 [ 2060.840673][T19188] usb 1-1: USB disconnect, device number 7 [ 2062.969036][T19958] /dev/nullb0: Can't open blockdev [ 2063.438558][T19960] syzkaller1: entered promiscuous mode [ 2063.472824][T19960] syzkaller1: entered allmulticast mode [ 2063.567450][T18555] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2063.577630][T18555] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2063.585928][T18555] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2063.600868][T18555] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2063.618997][T18555] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2064.481643][T12773] Bluetooth: hci2: command 0x0406 tx timeout [ 2064.491466][T12773] Bluetooth: hci3: command 0x0406 tx timeout [ 2065.690140][ T5876] Bluetooth: hci6: command tx timeout [ 2067.657967][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2067.771909][ T5876] Bluetooth: hci6: command tx timeout [ 2068.134453][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.186728][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2069.328429][T20018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'. [ 2069.577166][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029b76c00: rx timeout, send abort [ 2069.907588][ T5876] Bluetooth: hci6: command tx timeout [ 2071.179636][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2072.269639][ T5876] Bluetooth: hci6: command tx timeout [ 2072.275122][T16617] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2072.307928][T16617] Bluetooth: hci4: Injecting HCI hardware error event [ 2072.317189][T16617] Bluetooth: hci4: hardware error 0x00 [ 2075.007392][ T36] bridge_slave_1: left allmulticast mode [ 2075.051890][ T36] bridge_slave_1: left promiscuous mode [ 2075.088109][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.114044][T20055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3372'. [ 2075.553406][ T36] bridge_slave_0: left allmulticast mode [ 2075.623119][ T36] bridge_slave_0: left promiscuous mode [ 2075.648259][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 2077.041848][T16617] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2079.282365][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2079.351979][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2079.789447][ T36] bond0 (unregistering): Released all slaves [ 2080.927776][T19964] chnl_net:caif_netlink_parms(): no params data found [ 2082.616560][ T36] IPVS: stopping backup sync thread 18709 ... [ 2082.891279][ T2339] pvrusb2: request_firmware fatal error with code=-110 [ 2083.080433][ T2339] pvrusb2: Failure uploading firmware1 [ 2083.100070][ T2339] pvrusb2: Device initialization was not successful. [ 2083.155042][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2083.196232][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2083.226922][T19468] pvrusb2: Device being rendered inoperable [ 2083.601103][T16617] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 2084.151572][T19964] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.159385][T19964] bridge0: port 1(bridge_slave_0) entered disabled state [ 2084.763019][T19964] bridge_slave_0: entered allmulticast mode [ 2084.773041][T19964] bridge_slave_0: entered promiscuous mode [ 2084.782936][T19964] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.790120][T19964] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.797310][T19964] bridge_slave_1: entered allmulticast mode [ 2084.810154][T19964] bridge_slave_1: entered promiscuous mode [ 2085.071994][T20136] netlink: 'syz.0.3395': attribute type 1 has an invalid length. [ 2086.876437][ T36] hsr_slave_0: left promiscuous mode [ 2086.917074][ T36] hsr_slave_1: left promiscuous mode [ 2086.942293][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2086.949678][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2087.183124][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2087.675016][T16617] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2087.711448][T16617] Bluetooth: hci2: Injecting HCI hardware error event [ 2087.745851][T16617] Bluetooth: hci2: hardware error 0x00 [ 2087.926122][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2088.140039][ T36] veth1_macvtap: left promiscuous mode [ 2088.170316][ T36] veth0_macvtap: left promiscuous mode [ 2088.200382][ T36] veth1_vlan: left promiscuous mode [ 2088.238028][ T36] veth0_vlan: left promiscuous mode [ 2090.013027][T16617] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2091.027333][ T36] team0 (unregistering): Port device team_slave_1 removed [ 2091.186993][ T36] team0 (unregistering): Port device team_slave_0 removed [ 2091.553272][T20185] overlayfs: failed to resolve './bus': -40 [ 2095.389400][T19964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2095.484933][T20172] syzkaller1: entered promiscuous mode [ 2095.507962][T20172] syzkaller1: entered allmulticast mode [ 2095.532072][T20196] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 2095.541543][T20196] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 2095.551186][T20196] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2095.604611][T19964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2098.016790][T20208] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3419'. [ 2098.080710][T19964] team0: Port device team_slave_0 added [ 2098.265810][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055d64c00: rx timeout, send abort [ 2099.086399][T19964] team0: Port device team_slave_1 added [ 2099.679414][T19964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2099.744816][T19964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2099.783468][T19964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2099.829146][T19964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2099.864337][T19964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2099.905739][T19964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2101.373125][T19964] hsr_slave_0: entered promiscuous mode [ 2101.385674][T19964] hsr_slave_1: entered promiscuous mode [ 2108.673117][T19964] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.694839][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2108.701922][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2111.105946][T19964] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.118924][T19964] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.984212][T19964] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.462254][T20352] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.3462'. [ 2123.904662][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2123.914606][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2123.923331][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2123.932173][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2123.939749][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2126.011604][ T5876] Bluetooth: hci0: command tx timeout [ 2127.129206][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3472'. [ 2128.019765][T20377] chnl_net:caif_netlink_parms(): no params data found [ 2128.091684][ T5876] Bluetooth: hci0: command tx timeout [ 2129.306271][T19261] bridge_slave_1: left allmulticast mode [ 2129.315163][T19261] bridge_slave_1: left promiscuous mode [ 2129.320914][T19261] bridge0: port 2(bridge_slave_1) entered disabled state [ 2129.355852][T19261] bridge_slave_0: left allmulticast mode [ 2129.376014][T19261] bridge_slave_0: left promiscuous mode [ 2129.381890][T19261] bridge0: port 1(bridge_slave_0) entered disabled state [ 2129.714748][T19261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2129.851337][T19261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2129.923681][T19261] bond0 (unregistering): Released all slaves [ 2129.982746][T20426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3480'. [ 2129.998201][T20426] bridge_slave_1: left allmulticast mode [ 2130.004162][T20426] bridge_slave_1: left promiscuous mode [ 2130.010234][T20426] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.114291][T20426] bridge_slave_0: left allmulticast mode [ 2130.121529][T20426] bridge_slave_0: left promiscuous mode [ 2130.130253][T20426] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.162128][ T5876] Bluetooth: hci0: command tx timeout [ 2131.298585][T19261] hsr_slave_0: left promiscuous mode [ 2131.605995][T19261] hsr_slave_1: left promiscuous mode [ 2132.394777][ T5876] Bluetooth: hci0: command tx timeout [ 2132.457212][T19261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2132.918630][T19261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2136.504689][T19261] team0 (unregistering): Port device team_slave_1 removed [ 2136.593620][T19261] team0 (unregistering): Port device team_slave_0 removed [ 2137.045594][T20491] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3499'. [ 2143.921810][T20533] usb usb8: usbfs: process 20533 (syz.0.3510) did not claim interface 0 before use [ 2144.008674][T20377] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.025382][T20377] bridge0: port 1(bridge_slave_0) entered disabled state [ 2144.061991][T20377] bridge_slave_0: entered allmulticast mode [ 2144.095020][T20377] bridge_slave_0: entered promiscuous mode [ 2144.195517][T20377] bridge0: port 2(bridge_slave_1) entered blocking state [ 2144.205025][T20377] bridge0: port 2(bridge_slave_1) entered disabled state [ 2144.340006][T20377] bridge_slave_1: entered allmulticast mode [ 2144.348416][T20377] bridge_slave_1: entered promiscuous mode [ 2144.854602][T20377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2145.633917][T20377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2147.258460][T20377] team0: Port device team_slave_0 added [ 2147.561952][T20377] team0: Port device team_slave_1 added [ 2147.985214][T20377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2147.994676][T20557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3518'. [ 2148.000102][T20377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2148.051023][T20377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2148.091690][T20557] netlink: 'syz.1.3518': attribute type 7 has an invalid length. [ 2148.099421][T20557] netlink: 'syz.1.3518': attribute type 8 has an invalid length. [ 2148.127843][T20377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2148.137546][T20377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2148.189935][T20377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2148.251514][T20557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3518'. [ 2148.367686][T20377] hsr_slave_0: entered promiscuous mode [ 2148.397510][T20377] hsr_slave_1: entered promiscuous mode [ 2152.037725][T20377] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2152.292229][T20377] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2153.113506][T20377] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2153.693273][T20592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3527'. [ 2154.371750][T20377] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2156.045749][T20613] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 2156.078672][T20377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2156.210211][T20377] 8021q: adding VLAN 0 to HW filter on device team0 [ 2156.238469][T20619] binder: 20618:20619 ioctl 80081272 200000000300 returned -22 [ 2157.542918][T19261] bridge0: port 1(bridge_slave_0) entered blocking state [ 2157.550118][T19261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2157.708695][T19261] bridge0: port 2(bridge_slave_1) entered blocking state [ 2157.715880][T19261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2157.780811][T20377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2157.831466][T20377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2160.628536][T20661] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 2161.727080][T20377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2165.706159][T20707] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2165.792262][T19468] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2165.933088][T20707] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2165.951445][T19468] usb 3-1: Using ep0 maxpacket: 32 [ 2165.961632][T19468] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 2165.969936][T19468] usb 3-1: config 0 has no interface number 0 [ 2165.976233][T20377] veth0_vlan: entered promiscuous mode [ 2165.985889][T19468] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2165.995138][T19468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.035591][T19468] usb 3-1: Product: syz [ 2166.041742][T19468] usb 3-1: Manufacturer: syz [ 2166.051261][T19468] usb 3-1: SerialNumber: syz [ 2166.058684][T20707] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.083240][T19468] usb 3-1: config 0 descriptor?? [ 2166.090850][T20377] veth1_vlan: entered promiscuous mode [ 2166.098970][T19468] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2166.134810][T19468] dvb-usb: bulk message failed: -22 (2/0) [ 2166.145291][T19468] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2166.180418][T19468] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2166.191078][T20707] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.212112][T19468] usb 3-1: media controller created [ 2166.242752][T20377] veth0_macvtap: entered promiscuous mode [ 2166.255133][T20377] veth1_macvtap: entered promiscuous mode [ 2166.284259][T19468] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2166.312453][T20712] cxusb: i2c wr: len=85 is too big! [ 2166.312453][T20712] [ 2166.351753][T19468] cxusb: set interface failed [ 2166.356871][T19468] dvb-usb: bulk message failed: -22 (1/0) [ 2166.370817][T20377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2166.411498][T20377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2166.438634][T15269] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.521857][T19468] DVB: Unable to find symbol lgdt330x_attach() [ 2166.526156][T19301] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.547700][T19468] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2166.554009][T19301] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.641208][T19301] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.671004][T19301] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.755497][T19301] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.771462][T19301] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.801562][T19468] rc_core: IR keymap rc-dvico-portable not found [ 2166.808990][T19301] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.817342][T19468] Registered IR keymap rc-empty [ 2166.832350][T19468] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2166.873620][T19468] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input10 [ 2166.965029][T19468] dvb-usb: schedule remote query interval to 100 msecs. [ 2166.998411][T19468] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2167.033668][T19468] usb 3-1: USB disconnect, device number 15 [ 2167.153181][T20726] netlink: 548 bytes leftover after parsing attributes in process `syz.1.3562'. [ 2167.287847][T19301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2167.306591][T19301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2168.470675][T20719] netlink: 'syz.1.3562': attribute type 29 has an invalid length. [ 2168.564862][T18971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2168.595127][T18971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2168.660961][T19468] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2168.733312][T20733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3565'. [ 2168.765769][T20733] netlink: 'syz.0.3565': attribute type 7 has an invalid length. [ 2168.811520][T20733] netlink: 'syz.0.3565': attribute type 8 has an invalid length. [ 2168.819246][T20733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3565'. [ 2169.992428][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2169.998805][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2173.295084][T19468] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2175.261444][T19468] usb 10-1: Using ep0 maxpacket: 8 [ 2175.569962][T19468] usb 10-1: device descriptor read/all, error -71 [ 2177.497377][ T5876] block nbd9: Receive control failed (result -32) [ 2177.625054][T20774] block nbd9: shutting down sockets [ 2177.782970][T20787] sock: sock_set_timeout: `syz.2.3580' (pid 20787) tries to set negative timeout [ 2179.724674][T20798] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2179.736299][T20798] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2181.606806][ T5959] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 2182.101470][ T5959] usb 8-1: Using ep0 maxpacket: 16 [ 2182.133133][ T5959] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2182.188670][ T5959] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2182.253780][ T5959] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2182.270689][ T5959] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2182.479689][ T5959] usb 8-1: Product: syz [ 2182.484405][ T5959] usb 8-1: Manufacturer: syz [ 2182.489001][ T5959] usb 8-1: SerialNumber: syz [ 2182.520182][ T5959] usb 8-1: config 0 descriptor?? [ 2182.528476][ T5959] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2183.267358][ T5959] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 2183.429040][T19188] libceph: connect (1)[c::]:6789 error -101 [ 2183.441819][T19188] libceph: mon0 (1)[c::]:6789 connect error [ 2183.668022][T19188] libceph: connect (1)[c::]:6789 error -101 [ 2183.687289][T19188] libceph: mon0 (1)[c::]:6789 connect error [ 2183.722209][ T5959] em28xx 8-1:0.0: chip ID is em2874 [ 2183.979787][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 2184.078880][T20821] ceph: No mds server is up or the cluster is laggy [ 2184.462441][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 2184.607020][T11769] usb 8-1: USB disconnect, device number 14 [ 2184.620653][T11769] em28xx 8-1:0.0: Disconnecting em28xx [ 2184.665181][T11769] em28xx 8-1:0.0: Freeing device [ 2187.296972][ T30] audit: type=1326 audit(1756633437.519:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20852 comm="syz.8.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9213b8ebe9 code=0x7ffc0000 [ 2187.847175][ T30] audit: type=1326 audit(1756633437.519:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20852 comm="syz.8.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9213b8ebe9 code=0x7ffc0000 [ 2188.891491][ T30] audit: type=1326 audit(1756633437.559:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20852 comm="syz.8.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f9213b8ebe9 code=0x7ffc0000 [ 2188.951630][ T30] audit: type=1326 audit(1756633437.559:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20852 comm="syz.8.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9213b8ebe9 code=0x7ffc0000 [ 2189.071478][ T30] audit: type=1326 audit(1756633437.559:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20852 comm="syz.8.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9213b8ebe9 code=0x7ffc0000 [ 2193.513499][T11434] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2193.705952][T11434] usb 1-1: Using ep0 maxpacket: 32 [ 2193.726986][T11434] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2193.761494][T11434] usb 1-1: config 0 has no interface number 0 [ 2193.789047][T11434] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2193.941506][T11434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2194.662205][T11434] usb 1-1: Product: syz [ 2194.666401][T11434] usb 1-1: Manufacturer: syz [ 2194.671011][T11434] usb 1-1: SerialNumber: syz [ 2194.839834][T11434] usb 1-1: config 0 descriptor?? [ 2194.865314][T11434] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2194.914668][T11434] usb 1-1: selecting invalid altsetting 1 [ 2194.935563][T11434] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2194.992394][T11434] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2195.038320][T11434] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2195.082610][T11434] usb 1-1: media controller created [ 2195.287514][T11434] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2195.586281][T11434] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2195.601700][T11434] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2195.952098][T11434] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2196.080451][T11434] usb 1-1: USB disconnect, device number 8 [ 2202.543913][ T5959] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2203.101667][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 2203.124389][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2203.161833][T11769] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2203.181349][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2203.461531][T11769] usb 9-1: Using ep0 maxpacket: 32 [ 2204.141870][ T5959] usb 1-1: string descriptor 0 read error: -71 [ 2204.148315][ T5959] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2204.159307][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.248512][T11769] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2204.271434][T11769] usb 9-1: config 0 has no interface number 0 [ 2204.321771][T11769] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2204.353581][ T5959] usb 1-1: config 0 descriptor?? [ 2204.393610][ T5959] usb 1-1: can't set config #0, error -71 [ 2204.431482][T11769] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.439479][T11769] usb 9-1: Product: syz [ 2204.455181][ T5959] usb 1-1: USB disconnect, device number 9 [ 2204.583617][T11769] usb 9-1: Manufacturer: syz [ 2204.607538][T11769] usb 9-1: SerialNumber: syz [ 2204.642726][T11769] usb 9-1: config 0 descriptor?? [ 2205.761060][T11769] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2206.214368][T11769] usb 9-1: selecting invalid altsetting 1 [ 2206.220132][T11769] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2207.007048][T11769] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2207.055853][T11769] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2207.109620][T11769] usb 9-1: media controller created [ 2207.278353][T11769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2207.401688][T11769] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2207.408712][T11769] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2207.517452][T21006] 9pnet_virtio: no channels available for device [ 2207.579605][T11769] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2209.511139][T11769] usb 9-1: USB disconnect, device number 6 [ 2211.427038][T21032] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3651'. [ 2211.436649][T21032] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3651'. [ 2211.445867][T21032] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3651'. [ 2219.810206][T19188] IPVS: starting estimator thread 0... [ 2220.121624][T21111] IPVS: using max 23 ests per chain, 55200 per kthread [ 2229.846980][T21198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3704'. [ 2231.919607][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2231.927196][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2232.143794][ T5876] Bluetooth: hci3: unexpected event for opcode 0x080b [ 2236.193594][ T5876] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2236.211935][ T5876] Bluetooth: hci3: Injecting HCI hardware error event [ 2236.220802][ T5876] Bluetooth: hci3: hardware error 0x00 [ 2236.304251][T19188] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2237.203102][T19188] usb 3-1: Using ep0 maxpacket: 8 [ 2237.353498][T19188] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 2237.381469][T19188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2237.416076][T19188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2237.430218][T19188] usb 3-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 2237.490735][T19188] usb 3-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 2237.511486][T19188] usb 3-1: Product: syz [ 2237.515653][T19188] usb 3-1: Manufacturer: syz [ 2237.910083][T19188] usb 3-1: SerialNumber: syz [ 2238.132546][T19188] usb 3-1: config 0 descriptor?? [ 2238.144058][T19188] smsusb:smsusb_probe: board id=2, interface number 0 [ 2239.052566][T19188] smsusb:smsusb_probe: Device initialized with return code -19 [ 2239.371921][ T5876] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2239.673794][T19188] usb 3-1: USB disconnect, device number 16 [ 2242.555490][T21272] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3725'. [ 2244.038778][T19188] IPVS: starting estimator thread 0... [ 2244.211657][T21285] IPVS: using max 31 ests per chain, 74400 per kthread [ 2249.243700][T21327] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3742'. [ 2249.280378][ T5876] Bluetooth: hci0: command 0x0406 tx timeout [ 2250.982083][T16617] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 2254.742983][T21379] nbd: socks must be embedded in a SOCK_ITEM attr [ 2255.002039][T21379] block nbd0: shutting down sockets [ 2257.059723][T21395] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2259.591653][T19188] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2260.028161][T19188] usb 10-1: Using ep0 maxpacket: 32 [ 2260.300021][T19188] usb 10-1: config 0 has an invalid interface number: 66 but max is 0 [ 2260.313165][T19188] usb 10-1: config 0 has no interface number 0 [ 2260.323151][T19188] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2260.332371][T19188] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.340455][T19188] usb 10-1: Product: syz [ 2260.361511][T19188] usb 10-1: Manufacturer: syz [ 2260.366212][T19188] usb 10-1: SerialNumber: syz [ 2260.614529][T19188] usb 10-1: config 0 descriptor?? [ 2260.624108][T19188] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2260.638462][T19188] dvb-usb: bulk message failed: -22 (2/0) [ 2260.655040][T19188] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2261.462477][T19188] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2261.523526][T19188] usb 10-1: media controller created [ 2261.650613][T19188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2262.071727][T19188] cxusb: set interface failed [ 2262.130248][T19188] dvb-usb: bulk message failed: -22 (1/0) [ 2262.415732][T21449] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2262.540495][T19188] DVB: Unable to find symbol lgdt330x_attach() [ 2262.585243][T19188] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2263.086150][T19188] rc_core: IR keymap rc-dvico-portable not found [ 2263.182195][T19188] Registered IR keymap rc-empty [ 2263.511076][T19188] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 2263.635558][T19188] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input11 [ 2263.736543][T19188] dvb-usb: schedule remote query interval to 100 msecs. [ 2263.761768][T19188] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2263.784267][T19188] usb 10-1: USB disconnect, device number 7 [ 2264.264520][T21475] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3794'. [ 2264.274140][T21475] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3794'. [ 2264.283270][T21475] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3794'. [ 2265.353315][T19188] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2265.753081][T16617] Bluetooth: hci1: unexpected event for opcode 0x080b [ 2266.801599][T19468] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 2267.551472][T19468] usb 8-1: Using ep0 maxpacket: 32 [ 2267.559838][T19468] usb 8-1: config 0 has an invalid interface number: 66 but max is 0 [ 2267.568127][T19468] usb 8-1: config 0 has no interface number 0 [ 2267.576834][T19468] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2267.585886][T19468] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.624745][T19468] usb 8-1: Product: syz [ 2267.644650][T19468] usb 8-1: Manufacturer: syz [ 2267.660945][T19468] usb 8-1: SerialNumber: syz [ 2267.697149][T19468] usb 8-1: config 0 descriptor?? [ 2267.848142][T19468] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2267.861557][T19468] dvb-usb: bulk message failed: -22 (2/0) [ 2267.869896][T19468] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2267.881765][T19468] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2267.897784][T19468] usb 8-1: media controller created [ 2267.931283][T19468] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2268.462676][T19468] cxusb: set interface failed [ 2268.467378][T19468] dvb-usb: bulk message failed: -22 (1/0) [ 2268.827942][T19468] DVB: Unable to find symbol lgdt330x_attach() [ 2268.872654][T19468] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2269.761591][T16617] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2269.770181][T16617] Bluetooth: hci1: Injecting HCI hardware error event [ 2269.780727][ T5876] Bluetooth: hci1: hardware error 0x00 [ 2271.271463][T19468] rc_core: IR keymap rc-dvico-portable not found [ 2271.277844][T19468] Registered IR keymap rc-empty [ 2271.292680][T19468] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 2271.319991][T19468] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input13 [ 2271.345418][T19468] dvb-usb: schedule remote query interval to 100 msecs. [ 2271.352483][T19468] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2271.364102][T19468] usb 8-1: USB disconnect, device number 15 [ 2272.763835][T19468] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2273.121784][ T5876] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2273.166858][T21542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2274.174434][T21557] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 2274.271771][T21557] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2274.731590][ T7058] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 2274.901899][ T7058] usb 8-1: device descriptor read/64, error -71 [ 2276.377084][ T7058] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 2276.591841][ T7058] usb 8-1: device descriptor read/64, error -71 [ 2277.594144][ T7058] usb usb8-port1: attempt power cycle [ 2278.074923][ T7058] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 2278.341510][ T7058] usb 8-1: device not accepting address 18, error -71 [ 2281.961501][T19188] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2283.113202][T19188] usb 2-1: device descriptor read/64, error -71 [ 2283.351731][T19188] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2284.533697][T19188] usb 2-1: device descriptor read/64, error -71 [ 2284.642038][T19188] usb usb2-port1: attempt power cycle [ 2285.651574][T19188] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2285.901641][T19188] usb 2-1: device not accepting address 4, error -71 [ 2289.060017][T19468] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2289.221541][T19468] usb 3-1: device descriptor read/64, error -71 [ 2289.526161][T19468] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2289.721519][T19468] usb 3-1: device descriptor read/64, error -71 [ 2290.099368][T19468] usb usb3-port1: attempt power cycle [ 2291.333686][T21686] loop8: detected capacity change from 0 to 16 [ 2291.793463][T21690] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3876'. [ 2291.803064][T21690] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3876'. [ 2291.813548][T21690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3876'. [ 2291.849694][T21686] erofs (device loop8): mounted with root inode @ nid 36. [ 2292.559032][T21686] overlayfs: failed to get redirect (-117) [ 2292.819006][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2292.828266][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2293.066050][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.206304][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.697554][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2295.163538][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.717933][ T13] bridge_slave_1: left allmulticast mode [ 2296.739854][ T13] bridge_slave_1: left promiscuous mode [ 2296.781978][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 2296.859088][ T13] bridge_slave_0: left allmulticast mode [ 2296.885853][ T13] bridge_slave_0: left promiscuous mode [ 2296.926243][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2296.931657][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 2297.111501][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 2297.155100][ T10] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 2297.191532][ T10] usb 3-1: config 0 has no interface number 0 [ 2297.239597][ T10] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2297.271467][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2297.279537][ T10] usb 3-1: Product: syz [ 2297.301604][ T10] usb 3-1: Manufacturer: syz [ 2297.311519][ T10] usb 3-1: SerialNumber: syz [ 2297.326397][T16617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2297.327640][ T10] usb 3-1: config 0 descriptor?? [ 2297.357034][T16617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2297.368816][T16617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2297.380375][T16617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2297.390272][T16617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2297.423490][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2297.528701][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 2297.573245][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2297.605903][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2297.622245][ T10] usb 3-1: media controller created [ 2297.694468][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2297.844524][ T10] cxusb: set interface failed [ 2297.871043][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 2298.111961][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 2298.141448][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2298.286965][T16617] Bluetooth: hci0: unexpected event for opcode 0x080b [ 2299.318599][ T10] rc_core: IR keymap rc-dvico-portable not found [ 2299.325037][ T10] Registered IR keymap rc-empty [ 2299.400110][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2299.441513][T16617] Bluetooth: hci1: command tx timeout [ 2301.303989][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input15 [ 2301.341708][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 2301.348791][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2301.383457][ T10] usb 3-1: USB disconnect, device number 20 [ 2301.465362][T21744] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3895'. [ 2301.521734][T16617] Bluetooth: hci1: command tx timeout [ 2301.588010][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2301.675264][ T5876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2301.685783][ T5876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2301.693756][ T5876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2301.701997][ T5876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2301.709794][ T5876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2302.157817][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2302.183695][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2302.215026][ T13] bond0 (unregistering): Released all slaves [ 2302.317622][T21745] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 2302.333101][T21745] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 2302.342002][ T5876] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2302.350601][ T5876] Bluetooth: hci0: Injecting HCI hardware error event [ 2302.362610][T16617] Bluetooth: hci0: hardware error 0x00 [ 2302.742351][T21764] loop9: detected capacity change from 0 to 164 [ 2303.001919][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2303.161581][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 2303.180182][ T10] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 2303.201599][ T10] usb 1-1: config 0 has no interface number 0 [ 2303.228540][ T13] hsr_slave_0: left promiscuous mode [ 2303.238760][ T10] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2303.251312][ T13] hsr_slave_1: left promiscuous mode [ 2303.256091][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.262198][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2303.268103][ T10] usb 1-1: Product: syz [ 2303.294352][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2303.602203][ T5876] Bluetooth: hci1: command tx timeout [ 2303.724271][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2303.763585][ T5876] Bluetooth: hci5: command tx timeout [ 2303.937785][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2304.060417][ T13] veth1_macvtap: left promiscuous mode [ 2304.073830][ T10] usb 1-1: Manufacturer: syz [ 2304.078457][ T10] usb 1-1: SerialNumber: syz [ 2304.088337][ T10] usb 1-1: config 0 descriptor?? [ 2304.094052][ T13] veth0_macvtap: left promiscuous mode [ 2304.105093][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2304.113429][ T13] veth1_vlan: left promiscuous mode [ 2304.118780][ T13] veth0_vlan: left promiscuous mode [ 2304.124093][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 2304.133382][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2304.150658][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2304.159684][ T10] usb 1-1: media controller created [ 2304.206569][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2304.261806][ T10] cxusb: set interface failed [ 2304.266521][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 2304.481878][T16617] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2304.552158][T21765] cxusb: i2c wr: len=85 is too big! [ 2304.552158][T21765] [ 2305.402847][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 2305.409068][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2305.681772][T16617] Bluetooth: hci1: command tx timeout [ 2305.682182][ T10] rc_core: IR keymap rc-dvico-portable not found [ 2305.719528][ T10] Registered IR keymap rc-empty [ 2305.732546][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 2305.792802][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input17 [ 2305.839816][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 2306.049106][T16617] Bluetooth: hci5: command tx timeout [ 2306.071558][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2306.093075][ T10] usb 1-1: USB disconnect, device number 10 [ 2307.096795][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2307.344093][T21818] loop9: detected capacity change from 0 to 164 [ 2308.091864][T16617] Bluetooth: hci5: command tx timeout [ 2310.392173][ T5876] Bluetooth: hci5: command tx timeout [ 2310.584054][T11769] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2310.695504][ T13] team0 (unregistering): Port device team_slave_1 removed [ 2311.061458][T11769] usb 1-1: Using ep0 maxpacket: 32 [ 2311.093616][T11769] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 2311.103177][T11769] usb 1-1: config 0 has no interface number 0 [ 2311.139595][T11769] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2311.175601][T11769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.195861][T11769] usb 1-1: Product: syz [ 2311.200049][T11769] usb 1-1: Manufacturer: syz [ 2311.231496][T11769] usb 1-1: SerialNumber: syz [ 2311.249398][T11769] usb 1-1: config 0 descriptor?? [ 2311.290415][T11769] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2311.311474][T11769] dvb-usb: bulk message failed: -22 (2/0) [ 2311.319490][ T13] team0 (unregistering): Port device team_slave_0 removed [ 2311.334074][T11769] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2311.362205][T11769] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2311.382119][T11769] usb 1-1: media controller created [ 2311.436826][T11769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2311.493470][T21843] cxusb: i2c wr: len=85 is too big! [ 2311.493470][T21843] [ 2311.514318][T11769] cxusb: set interface failed [ 2311.521237][T11769] dvb-usb: bulk message failed: -22 (1/0) [ 2311.954581][T11769] DVB: Unable to find symbol lgdt330x_attach() [ 2311.973241][T11769] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2312.145077][T11769] rc_core: IR keymap rc-dvico-portable not found [ 2312.151788][T11769] Registered IR keymap rc-empty [ 2312.166104][T11769] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 2312.200843][T11769] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input19 [ 2312.234166][T11769] dvb-usb: schedule remote query interval to 100 msecs. [ 2312.260415][T11769] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2312.406032][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 2312.415574][T11769] usb 1-1: USB disconnect, device number 11 [ 2312.645064][T11769] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2313.571337][ T13] team0 (unregistering): Port device dummy0 removed [ 2315.716258][ T13] IPVS: stop unused estimator thread 0... [ 2315.779639][T21747] chnl_net:caif_netlink_parms(): no params data found [ 2316.112379][T21715] chnl_net:caif_netlink_parms(): no params data found [ 2316.978450][T21747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2317.010944][T21747] bridge0: port 1(bridge_slave_0) entered disabled state [ 2317.049907][T21747] bridge_slave_0: entered allmulticast mode [ 2317.078798][T21747] bridge_slave_0: entered promiscuous mode [ 2317.127785][ T13] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2317.274289][T21747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2317.287595][T21747] bridge0: port 2(bridge_slave_1) entered disabled state [ 2317.295339][T21747] bridge_slave_1: entered allmulticast mode [ 2317.303431][T21747] bridge_slave_1: entered promiscuous mode [ 2317.443095][ T13] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2317.501491][T11769] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2317.543540][T21747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2317.584624][ T13] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2317.627712][T21715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2317.649375][T21715] bridge0: port 1(bridge_slave_0) entered disabled state [ 2317.666847][T11769] usb 1-1: Using ep0 maxpacket: 32 [ 2317.677110][T21715] bridge_slave_0: entered allmulticast mode [ 2317.703020][T11769] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 2317.718755][T21715] bridge_slave_0: entered promiscuous mode [ 2317.761132][T11769] usb 1-1: config 0 has no interface number 0 [ 2317.785322][T21715] bridge0: port 2(bridge_slave_1) entered blocking state [ 2317.793017][T21715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2317.800256][T21715] bridge_slave_1: entered allmulticast mode [ 2317.809283][T21715] bridge_slave_1: entered promiscuous mode [ 2317.822003][T11769] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2317.831441][T11769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.839444][T11769] usb 1-1: Product: syz [ 2317.843752][T11769] usb 1-1: Manufacturer: syz [ 2317.844828][T21747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2317.848350][T11769] usb 1-1: SerialNumber: syz [ 2317.865081][T11769] usb 1-1: config 0 descriptor?? [ 2317.889854][T11769] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2317.907923][T11769] dvb-usb: bulk message failed: -22 (2/0) [ 2317.932124][T11769] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2317.949907][ T13] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2317.962425][T11769] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2317.970448][T11769] usb 1-1: media controller created [ 2318.060177][T11769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2318.077586][T21942] dvb-usb: bulk message failed: -22 (3/0) [ 2318.142216][T11769] cxusb: set interface failed [ 2318.146902][T11769] dvb-usb: bulk message failed: -22 (1/0) [ 2318.185751][T21715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2318.309842][T11769] DVB: Unable to find symbol lgdt330x_attach() [ 2318.319675][T11769] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2318.322352][T21747] team0: Port device team_slave_0 added [ 2318.374397][T21715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2318.521588][T11769] rc_core: IR keymap rc-dvico-portable not found [ 2318.536612][T11769] Registered IR keymap rc-empty [ 2318.554724][T21747] team0: Port device team_slave_1 added [ 2318.562773][T11769] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 2318.576579][T11769] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input20 [ 2318.650721][T11769] dvb-usb: schedule remote query interval to 100 msecs. [ 2318.681497][T11769] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2318.721168][T11769] usb 1-1: USB disconnect, device number 12 [ 2318.752893][T21960] input: syz1 as /devices/virtual/input/input21 [ 2318.828471][T21715] team0: Port device team_slave_0 added [ 2318.892091][T11769] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2318.978817][T21715] team0: Port device team_slave_1 added [ 2319.272580][T21747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2319.304436][T21747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.330379][ C1] vkms_vblank_simulate: vblank timer overrun [ 2319.337570][T21747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2319.355993][T21747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2319.363096][T21747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.472925][T21977] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3972'. [ 2319.482526][T21977] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3972'. [ 2319.491652][T21977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3972'. [ 2319.617952][T21747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2320.201695][T21715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2320.233439][T21715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2320.413957][T21715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2320.652759][T21715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2320.677616][T21715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2320.799478][T21715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2321.131636][ T5945] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2321.351512][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 2321.389759][ T5945] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 2321.438600][ T5945] usb 3-1: config 0 has no interface number 0 [ 2321.485358][ T5945] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2321.543335][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2321.591621][ T5945] usb 3-1: Product: syz [ 2321.621731][ T5945] usb 3-1: Manufacturer: syz [ 2321.626364][ T5945] usb 3-1: SerialNumber: syz [ 2321.702596][ T5945] usb 3-1: config 0 descriptor?? [ 2321.730836][ T5945] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2321.808943][ T5945] dvb-usb: bulk message failed: -22 (2/0) [ 2321.894384][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2321.932881][T21996] dvb-usb: bulk message failed: -22 (3/0) [ 2321.949188][ T5945] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2321.979440][ T5945] usb 3-1: media controller created [ 2322.097214][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2322.230644][ T5945] cxusb: set interface failed [ 2322.259240][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 2322.504699][ T5945] DVB: Unable to find symbol lgdt330x_attach() [ 2322.547068][ T5945] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2322.815760][ T5945] rc_core: IR keymap rc-dvico-portable not found [ 2322.822557][ T5945] Registered IR keymap rc-empty [ 2322.828493][ T5945] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2322.859452][ T5945] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input22 [ 2322.904926][ T5945] dvb-usb: schedule remote query interval to 100 msecs. [ 2322.940429][ T5945] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2322.976834][ T5945] usb 3-1: USB disconnect, device number 21 [ 2323.073878][ T5945] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2323.258969][ T13] bond0 (unregistering): Released all slaves [ 2323.284108][T21747] hsr_slave_0: entered promiscuous mode [ 2323.308384][T21747] hsr_slave_1: entered promiscuous mode [ 2323.320741][T21747] debugfs: 'hsr0' already exists in 'hsr' [ 2323.371479][T21747] Cannot create hsr debugfs directory [ 2324.021798][T21715] hsr_slave_0: entered promiscuous mode [ 2324.056424][T21715] hsr_slave_1: entered promiscuous mode [ 2324.078342][T21715] debugfs: 'hsr0' already exists in 'hsr' [ 2324.085111][T21715] Cannot create hsr debugfs directory [ 2324.593122][ T13] hsr_slave_0: left promiscuous mode [ 2324.636939][ T13] hsr_slave_1: left promiscuous mode [ 2324.707734][ T13] veth1_macvtap: left promiscuous mode [ 2324.937404][ T13] veth0_macvtap: left promiscuous mode [ 2324.943168][ T13] veth1_vlan: left promiscuous mode [ 2324.948521][ T13] veth0_vlan: left promiscuous mode [ 2326.381495][ T5877] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 2326.581558][ T5877] usb 8-1: Using ep0 maxpacket: 32 [ 2326.590215][ T5877] usb 8-1: config 0 has an invalid interface number: 66 but max is 0 [ 2326.627517][ T5877] usb 8-1: config 0 has no interface number 0 [ 2326.663574][ T5877] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2326.728273][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.744942][ T5877] usb 8-1: Product: syz [ 2326.776490][T22063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4004'. [ 2326.813596][ T5877] usb 8-1: Manufacturer: syz [ 2326.825999][ T5877] usb 8-1: SerialNumber: syz [ 2327.016219][ T5877] usb 8-1: config 0 descriptor?? [ 2327.040456][ T5877] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2327.112045][ T5877] dvb-usb: bulk message failed: -22 (2/0) [ 2327.193440][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2327.242389][T22050] dvb-usb: bulk message failed: -22 (3/0) [ 2327.306719][ T5877] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2327.331490][ T5877] usb 8-1: media controller created [ 2327.436919][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2327.685020][ T5877] cxusb: set interface failed [ 2327.690077][ T5877] dvb-usb: bulk message failed: -22 (1/0) [ 2327.875144][ T5877] DVB: Unable to find symbol lgdt330x_attach() [ 2327.904673][ T5877] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2328.135214][ T5877] rc_core: IR keymap rc-dvico-portable not found [ 2328.153938][ T5877] Registered IR keymap rc-empty [ 2328.189310][ T5877] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 2328.228485][ T5877] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input23 [ 2328.521839][ T5877] dvb-usb: schedule remote query interval to 100 msecs. [ 2329.321688][ T5877] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2329.334950][ T5877] usb 8-1: USB disconnect, device number 20 [ 2329.478499][ T5877] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2331.213888][ T13] IPVS: stop unused estimator thread 0... [ 2331.342856][T22106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4019'. [ 2332.019492][T21747] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2332.100278][T21747] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2332.268210][T21747] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2332.306984][T21747] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2332.540995][T22136] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4026'. [ 2332.551249][T22136] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4026'. [ 2332.560418][T22136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4026'. [ 2333.514581][T21747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2333.548308][T21715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2333.602867][T21715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2333.623826][T21715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2333.677188][T21747] 8021q: adding VLAN 0 to HW filter on device team0 [ 2333.693214][T21715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2333.746137][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state [ 2333.753348][ T6296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2333.818789][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 2333.825997][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2334.163270][T21715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2334.279442][T21715] 8021q: adding VLAN 0 to HW filter on device team0 [ 2334.484216][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state [ 2334.491360][ T6296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2334.526201][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state [ 2334.533366][ T6296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2335.169284][T21747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2335.845351][T21715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2337.278054][T21747] veth0_vlan: entered promiscuous mode [ 2337.342687][T21747] veth1_vlan: entered promiscuous mode [ 2337.464611][T21747] veth0_macvtap: entered promiscuous mode [ 2337.514450][T21747] veth1_macvtap: entered promiscuous mode [ 2337.576693][T21747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2337.622409][T21747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2338.464925][ T9736] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2338.591771][T22231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2338.623676][ T9736] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2338.656725][ T9736] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2338.716757][ T9736] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.050426][T21715] veth0_vlan: entered promiscuous mode [ 2340.131319][T21715] veth1_vlan: entered promiscuous mode [ 2340.181521][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2340.189371][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2340.299206][T21715] veth0_macvtap: entered promiscuous mode [ 2340.376675][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2340.378781][T21715] veth1_macvtap: entered promiscuous mode [ 2340.398323][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2340.500596][T21715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2340.570093][T21715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2340.639378][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.910602][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.936812][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.966609][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.383111][ T7270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2341.411876][ T7270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2341.423079][T22263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2341.771508][ T9736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2342.581629][T22268] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4063'. [ 2342.590738][T22268] netlink: 116 bytes leftover after parsing attributes in process `syz.7.4063'. [ 2342.601474][T22268] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4063'. [ 2342.670428][ T9736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2343.818974][T22284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4068'. [ 2344.114593][T22291] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2344.151906][T22291] block device autoloading is deprecated and will be removed. [ 2345.103717][T22310] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4078'. [ 2345.112888][T22310] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4078'. [ 2345.121962][T22310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4078'. [ 2347.189809][T22350] loop4: detected capacity change from 0 to 512 [ 2455.271407][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2455.278380][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22397/1:b..l P22396/3:b..l [ 2455.288285][ C1] rcu: (detected by 1, t=10502 jiffies, g=149017, q=171 ncpus=2) [ 2455.296092][ C1] task:syz.6.4110 state:R running task stack:24120 pid:22396 tgid:22396 ppid:21747 task_flags:0x400640 flags:0x00004002 [ 2455.310470][ C1] Call Trace: [ 2455.313748][ C1] [ 2455.316682][ C1] __schedule+0x1190/0x5de0 [ 2455.321217][ C1] ? lock_acquire+0x179/0x350 [ 2455.325925][ C1] ? find_held_lock+0x2b/0x80 [ 2455.330624][ C1] ? __pfx___schedule+0x10/0x10 [ 2455.335490][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.341134][ C1] ? page_table_check_set+0x631/0x750 [ 2455.346532][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.352195][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 2455.358560][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2455.363963][ C1] preempt_schedule_common+0x44/0xc0 [ 2455.369270][ C1] preempt_schedule_thunk+0x16/0x30 [ 2455.374507][ C1] _raw_spin_unlock+0x3e/0x50 [ 2455.379199][ C1] filemap_map_pages+0xe15/0x1670 [ 2455.384281][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 2455.389778][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.395438][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 2455.400922][ C1] do_pte_missing+0xe39/0x3ba0 [ 2455.405706][ C1] ? find_held_lock+0x2b/0x80 [ 2455.410398][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.416049][ C1] __handle_mm_fault+0x152a/0x2a50 [ 2455.421192][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.426838][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 2455.432317][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.437959][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 2455.443431][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.449074][ C1] ? find_held_lock+0x2b/0x80 [ 2455.453780][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.459422][ C1] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 2455.465507][ C1] handle_mm_fault+0x589/0xd10 [ 2455.470299][ C1] __get_user_pages+0x551/0x34a0 [ 2455.475264][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 2455.480648][ C1] ? __kernel_write_iter+0x5a5/0xb10 [ 2455.485956][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.491610][ C1] get_dump_page+0x257/0x3d0 [ 2455.496216][ C1] ? __pfx_get_dump_page+0x10/0x10 [ 2455.501343][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.507004][ C1] dump_user_range+0x195/0xb70 [ 2455.511811][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 2455.517128][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.522777][ C1] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 2455.528951][ C1] ? __pfx_writenote+0x10/0x10 [ 2455.533727][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.539388][ C1] elf_core_dump+0x2929/0x3b60 [ 2455.544187][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 2455.549304][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.554947][ C1] ? kasan_save_stack+0x42/0x60 [ 2455.559815][ C1] ? kasan_save_stack+0x33/0x60 [ 2455.564681][ C1] ? kasan_save_track+0x14/0x30 [ 2455.569553][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 2455.574338][ C1] ? vfs_coredump+0x1dca/0x5670 [ 2455.579209][ C1] ? get_signal+0x22e3/0x26d0 [ 2455.583897][ C1] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 2455.589647][ C1] ? 0xffffffffff600000 [ 2455.593859][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.599515][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.605168][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.610826][ C1] ? vfs_coredump+0x2b97/0x5670 [ 2455.615704][ C1] vfs_coredump+0x2b97/0x5670 [ 2455.620434][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 2455.625489][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.631136][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 2455.636114][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.641762][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 2455.646733][ C1] ? lock_acquire+0x179/0x350 [ 2455.651450][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.657110][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.662759][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 2455.667552][ C1] ? __kernel_text_address+0xd/0x40 [ 2455.672761][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.678410][ C1] ? unwind_get_return_address+0x59/0xa0 [ 2455.684056][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.689706][ C1] ? arch_stack_walk+0xa6/0x100 [ 2455.694594][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.700254][ C1] ? stack_trace_save+0x8e/0xc0 [ 2455.705129][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2455.710527][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.716180][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 2455.721671][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.727321][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 2455.732372][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.738019][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 2455.743665][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 2455.749669][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.755318][ C1] ? rcu_is_watching+0x12/0xc0 [ 2455.760108][ C1] get_signal+0x22e3/0x26d0 [ 2455.764658][ C1] ? __pfx_get_signal+0x10/0x10 [ 2455.769528][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.775180][ C1] ? force_sig_fault+0xc4/0x100 [ 2455.780092][ C1] ? __pfx_force_sig_fault+0x10/0x10 [ 2455.785408][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 2455.790980][ C1] ? find_held_lock+0x2b/0x80 [ 2455.795674][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2455.801876][ C1] irqentry_exit_to_user_mode+0x12a/0x270 [ 2455.807625][ C1] asm_exc_page_fault+0x26/0x30 [ 2455.812488][ C1] RIP: 0033:0x7fead1f8ebf1 [ 2455.816900][ C1] RSP: 002b:fffffffffffffd40 EFLAGS: 00010217 [ 2455.822974][ C1] RAX: 0000000000000000 RBX: 00007fead21c5fa0 RCX: 00007fead1f8ebe9 [ 2455.830943][ C1] RDX: 9999999999999999 RSI: fffffffffffffd40 RDI: 0000000000100200 [ 2455.838918][ C1] RBP: 00007fead2011e19 R08: 0000000000000000 R09: 0000000000000000 [ 2455.846886][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2455.854851][ C1] R13: 00007fead21c6038 R14: 00007fead21c5fa0 R15: 00007ffc3705db48 [ 2455.862840][ C1] [ 2455.865852][ C1] task:syz.9.4113 state:R running task stack:28040 pid:22397 tgid:22397 ppid:18988 task_flags:0x40004c flags:0x00004000 [ 2455.879419][ C1] Call Trace: [ 2455.882698][ C1] [ 2455.885636][ C1] __schedule+0x1190/0x5de0 [ 2455.890169][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 2455.895156][ C1] ? __pfx___schedule+0x10/0x10 [ 2455.900020][ C1] ? lock_acquire+0x179/0x350 [ 2455.904726][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.910385][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.916030][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 2455.921067][ C1] ? find_held_lock+0x2b/0x80 [ 2455.925755][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2455.931148][ C1] preempt_schedule_common+0x44/0xc0 [ 2455.936453][ C1] preempt_schedule_thunk+0x16/0x30 [ 2455.941677][ C1] _raw_spin_unlock+0x3e/0x50 [ 2455.946365][ C1] unmap_page_range+0xf77/0x42c0 [ 2455.951360][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 2455.956738][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.962380][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 2455.967344][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.972994][ C1] ? uprobe_munmap+0x20/0x5c0 [ 2455.977684][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 2455.983597][ C1] unmap_vmas+0x218/0x470 [ 2455.987946][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 2455.992821][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2455.998496][ C1] exit_mmap+0x1b9/0xb90 [ 2456.002752][ C1] ? trace_contention_end+0xdd/0x130 [ 2456.008066][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 2456.012859][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.018513][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 2456.023512][ C1] __mmput+0x12a/0x410 [ 2456.027601][ C1] mmput+0x62/0x70 [ 2456.031346][ C1] do_exit+0x7c7/0x2bf0 [ 2456.035536][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.041188][ C1] ? __pfx_do_exit+0x10/0x10 [ 2456.045813][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.051465][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 2456.056875][ C1] do_group_exit+0xd3/0x2a0 [ 2456.061410][ C1] __x64_sys_exit_group+0x3e/0x50 [ 2456.066466][ C1] x64_sys_call+0x14fa/0x1720 [ 2456.071159][ C1] do_syscall_64+0xcd/0x4c0 [ 2456.075692][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2456.081595][ C1] RIP: 0033:0x7f3f3db8ebe9 [ 2456.086010][ C1] RSP: 002b:00007ffc1fbab868 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2456.094433][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3f3db8ebe9 [ 2456.102407][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 2456.110376][ C1] RBP: 00007ffc1fbab8cc R08: 000000061fbab95f R09: 00000000000927c0 [ 2456.118356][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000009f [ 2456.126328][ C1] R13: 00000000000927c0 R14: 000000000023db40 R15: 00007ffc1fbab920 [ 2456.134317][ C1] [ 2456.137334][ C1] rcu: rcu_preempt kthread starved for 10342 jiffies! g149017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2456.148633][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2456.158599][ C1] rcu: RCU grace-period kthread stack dump: [ 2456.164477][ C1] task:rcu_preempt state:R running task stack:27368 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2456.178031][ C1] Call Trace: [ 2456.181305][ C1] [ 2456.184237][ C1] __schedule+0x1190/0x5de0 [ 2456.188773][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 2456.193748][ C1] ? __pfx___schedule+0x10/0x10 [ 2456.198622][ C1] ? find_held_lock+0x2b/0x80 [ 2456.203320][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.208981][ C1] schedule+0xe7/0x3a0 [ 2456.213066][ C1] schedule_timeout+0x123/0x290 [ 2456.217925][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2456.223311][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2456.228629][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.234275][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2456.240099][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.245746][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 2456.251238][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 2456.256012][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.261661][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2456.266950][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2456.272170][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 2456.277107][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 2456.281971][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2456.287801][ C1] rcu_gp_kthread+0x270/0x380 [ 2456.292484][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2456.297681][ C1] ? rcu_is_watching+0x12/0xc0 [ 2456.302462][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2456.307673][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.313319][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.318964][ C1] ? __kthread_parkme+0x19e/0x250 [ 2456.324008][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2456.329215][ C1] kthread+0x3c5/0x780 [ 2456.333304][ C1] ? __pfx_kthread+0x10/0x10 [ 2456.337901][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.343550][ C1] ? rcu_is_watching+0x12/0xc0 [ 2456.348326][ C1] ? __pfx_kthread+0x10/0x10 [ 2456.352930][ C1] ret_from_fork+0x5d7/0x6f0 [ 2456.357528][ C1] ? __pfx_kthread+0x10/0x10 [ 2456.362127][ C1] ret_from_fork_asm+0x1a/0x30 [ 2456.366932][ C1] [ 2456.369940][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2456.376252][ C1] CPU: 1 UID: 0 PID: 19011 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 2456.385798][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2456.395845][ C1] RIP: 0010:smp_call_function_many_cond+0xe02/0x1600 [ 2456.402535][ C1] Code: 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 15 00 0c 00 f3 90 41 0f b6 45 00 <40> 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 ff 83 e0 01 41 [ 2456.422147][ C1] RSP: 0000:ffffc9000dc978a8 EFLAGS: 00000293 [ 2456.428216][ C1] RAX: 0000000000000000 RBX: ffff8880b8441ec0 RCX: ffffffff81af8b61 [ 2456.436185][ C1] RDX: ffff888054b8bc00 RSI: ffffffff81af8b3b RDI: 0000000000000005 [ 2456.444150][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 2456.452115][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 2456.460078][ C1] R13: ffffed10170883d9 R14: 0000000000000001 R15: 0000000000000000 [ 2456.468047][ C1] FS: 0000555590c87500(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 2456.476980][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2456.483561][ C1] CR2: 0000555590ca25c8 CR3: 0000000048e6f000 CR4: 0000000000350ef0 [ 2456.491533][ C1] Call Trace: [ 2456.494800][ C1] [ 2456.497732][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 2456.503124][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 2456.508361][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 2456.514721][ C1] ? lock_acquire+0x179/0x350 [ 2456.519434][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 2456.524652][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 2456.530044][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 2456.535177][ C1] flush_tlb_mm_range+0x4a0/0x17a0 [ 2456.540306][ C1] ? page_table_check_clear+0x362/0x740 [ 2456.545887][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.551530][ C1] ? __page_table_check_pte_clear+0xa9/0x100 [ 2456.557537][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 2456.563115][ C1] ? __pfx_pte_mkwrite+0x10/0x10 [ 2456.568078][ C1] ptep_clear_flush+0x136/0x180 [ 2456.572939][ C1] do_wp_page+0x1683/0x4f00 [ 2456.577466][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 2456.582327][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.587984][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2456.593368][ C1] ? ___pte_offset_map+0x2ad/0x4f0 [ 2456.598501][ C1] __handle_mm_fault+0x1b2d/0x2a50 [ 2456.603643][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.609294][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 2456.614779][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2456.620428][ C1] ? lock_vma_under_rcu+0x1eb/0x530 [ 2456.625664][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2456.631244][ C1] handle_mm_fault+0x589/0xd10 [ 2456.636032][ C1] ? __bpf_trace_exceptions+0x1/0x40 [ 2456.641350][ C1] do_user_addr_fault+0x60c/0x1370 [ 2456.646480][ C1] ? rcu_is_watching+0x12/0xc0 [ 2456.651266][ C1] exc_page_fault+0x5c/0xb0 [ 2456.655792][ C1] asm_exc_page_fault+0x26/0x30 [ 2456.660649][ C1] RIP: 0033:0x7ff84014d03f [ 2456.665065][ C1] Code: 8d 34 19 48 39 d5 48 89 75 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 eb 80 48 8d 0d 21 e9 0e 00 48 8d 15 25 fb 0e 00 bf 01 [ 2456.684678][ C1] RSP: 002b:00007ffde418e1a0 EFLAGS: 00010206 [ 2456.690749][ C1] RAX: 0000000000018a41 RBX: 0000000000008040 RCX: 0000555590c9a590 [ 2456.698719][ C1] RDX: 0000000000008041 RSI: 0000555590ca25c0 RDI: 0000000000000004 [ 2456.706689][ C1] RBP: 00007ff840397cc0 R08: 0000000000000000 R09: 0000000000000000 [ 2456.714665][ C1] R10: 0000000000001000 R11: 0000000000000802 R12: 0000000000008030 [ 2456.722637][ C1] R13: 0000000000000076 R14: 00007ff840397d20 R15: 0000000000000000 [ 2456.730632][ C1] [ 2597.781690][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 246s! [syz-executor:19011] [ 2597.781725][ C1] Modules linked in: [ 2597.781741][ C1] irq event stamp: 2620737 [ 2597.781754][ C1] hardirqs last enabled at (2620736): [] __local_bh_enable_ip+0xa4/0x120 [ 2597.781812][ C1] hardirqs last disabled at (2620737): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 2597.781870][ C1] softirqs last enabled at (2620670): [] handle_softirqs+0x5be/0x8e0 [ 2597.781929][ C1] softirqs last disabled at (2620673): [] __irq_exit_rcu+0x109/0x170 [ 2597.782000][ C1] CPU: 1 UID: 0 PID: 19011 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 2597.782048][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2597.782071][ C1] RIP: 0010:kasan_check_range+0x159/0x1b0 [ 2597.782116][ C1] Code: 2c 48 89 c2 48 85 c0 75 ad 48 89 da 4c 89 d8 4c 29 da e9 46 ff ff ff 48 85 d2 74 18 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 0a <80> 38 00 74 f2 e9 75 ff ff ff 5b b8 01 00 00 00 5d 41 5c e9 9a 56 [ 2597.782153][ C1] RSP: 0000:ffffc90000a084f8 EFLAGS: 00000286 [ 2597.782180][ C1] RAX: fffffbfff2157152 RBX: fffffbfff2157153 RCX: ffffffff8ae292a2 [ 2597.782206][ C1] RDX: fffffbfff2157153 RSI: 0000000000000008 RDI: ffffffff90ab8a90 [ 2597.782231][ C1] RBP: fffffbfff2157152 R08: 0000000000000000 R09: fffffbfff2157152 [ 2597.782255][ C1] R10: ffffffff90ab8a97 R11: 0000000000000000 R12: 0000000000000000 [ 2597.782279][ C1] R13: ffff888053372868 R14: ffff8880773edf00 R15: ffffc90000a08b28 [ 2597.782308][ C1] FS: 0000555590c87500(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 2597.782340][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2597.782365][ C1] CR2: 0000555590ca25c8 CR3: 0000000048e6f000 CR4: 0000000000350ef0 [ 2597.782390][ C1] Call Trace: [ 2597.782401][ C1] [ 2597.782417][ C1] trace_cfg80211_return_bss+0x52/0x200 [ 2597.782460][ C1] cfg80211_inform_single_bss_data+0x9b6/0x1df0 [ 2597.782523][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 2597.782606][ C1] ? find_held_lock+0x2b/0x80 [ 2597.782658][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.782714][ C1] ? cfg80211_inform_bss_data+0x224/0x3bd0 [ 2597.782759][ C1] cfg80211_inform_bss_data+0x224/0x3bd0 [ 2597.782807][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.782851][ C1] ? mark_held_locks+0x49/0x80 [ 2597.782907][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 2597.782956][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.783000][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 2597.783046][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.783090][ C1] ? ieee80211_rx_handlers+0xe7f/0x9a60 [ 2597.783141][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 2597.783195][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.783238][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 2597.783301][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 2597.783353][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.783397][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 2597.783456][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.783500][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 2597.783563][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.783606][ C1] ? ieee80211_prepare_and_rx_handle+0x1ba8/0x77f0 [ 2597.783669][ C1] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 2597.783734][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 2597.783777][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 2597.783827][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.783870][ C1] ? find_held_lock+0x2b/0x80 [ 2597.783912][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.783958][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.784002][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 2597.784047][ C1] ieee80211_scan_rx+0x4cf/0xb30 [ 2597.784083][ C1] ? ieee80211_clean_skb+0x1a6/0x740 [ 2597.784131][ C1] ieee80211_rx_list+0x1bdb/0x2980 [ 2597.784188][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 2597.784231][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 2597.784307][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.784359][ C1] ieee80211_rx_napi+0xdc/0x410 [ 2597.784404][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 2597.784447][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2597.784495][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.784539][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2597.784594][ C1] ieee80211_handle_queued_frames+0xd5/0x130 [ 2597.784662][ C1] tasklet_action_common+0x284/0x400 [ 2597.784722][ C1] handle_softirqs+0x219/0x8e0 [ 2597.784777][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2597.784826][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.784875][ C1] __irq_exit_rcu+0x109/0x170 [ 2597.784920][ C1] irq_exit_rcu+0x9/0x30 [ 2597.784964][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2597.785012][ C1] [ 2597.785024][ C1] [ 2597.785038][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2597.785079][ C1] RIP: 0010:smp_call_function_many_cond+0xdfd/0x1600 [ 2597.785130][ C1] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 15 00 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 [ 2597.785166][ C1] RSP: 0000:ffffc9000dc978a8 EFLAGS: 00000293 [ 2597.785193][ C1] RAX: 0000000000000000 RBX: ffff8880b8441ec0 RCX: ffffffff81af8b61 [ 2597.785218][ C1] RDX: ffff888054b8bc00 RSI: ffffffff81af8b3b RDI: 0000000000000005 [ 2597.785241][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 2597.785264][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 2597.785287][ C1] R13: ffffed10170883d9 R14: 0000000000000001 R15: 0000000000000000 [ 2597.785324][ C1] ? smp_call_function_many_cond+0xe21/0x1600 [ 2597.785373][ C1] ? smp_call_function_many_cond+0xdfb/0x1600 [ 2597.785429][ C1] ? smp_call_function_many_cond+0xdfb/0x1600 [ 2597.785483][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 2597.785533][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 2597.785599][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 2597.785663][ C1] ? lock_acquire+0x179/0x350 [ 2597.785727][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 2597.785785][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 2597.785845][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 2597.785908][ C1] flush_tlb_mm_range+0x4a0/0x17a0 [ 2597.785968][ C1] ? page_table_check_clear+0x362/0x740 [ 2597.786029][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.786070][ C1] ? __page_table_check_pte_clear+0xa9/0x100 [ 2597.786126][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 2597.786183][ C1] ? __pfx_pte_mkwrite+0x10/0x10 [ 2597.786241][ C1] ptep_clear_flush+0x136/0x180 [ 2597.786289][ C1] do_wp_page+0x1683/0x4f00 [ 2597.786355][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 2597.786393][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.786444][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2597.786497][ C1] ? ___pte_offset_map+0x2ad/0x4f0 [ 2597.786543][ C1] __handle_mm_fault+0x1b2d/0x2a50 [ 2597.786602][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.786652][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 2597.786707][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2597.786753][ C1] ? lock_vma_under_rcu+0x1eb/0x530 [ 2597.786818][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2597.786881][ C1] handle_mm_fault+0x589/0xd10 [ 2597.786933][ C1] ? __bpf_trace_exceptions+0x1/0x40 [ 2597.786997][ C1] do_user_addr_fault+0x60c/0x1370 [ 2597.787039][ C1] ? rcu_is_watching+0x12/0xc0 [ 2597.787090][ C1] exc_page_fault+0x5c/0xb0 [ 2597.787140][ C1] asm_exc_page_fault+0x26/0x30 [ 2597.787175][ C1] RIP: 0033:0x7ff84014d03f [ 2597.787203][ C1] Code: 8d 34 19 48 39 d5 48 89 75 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 eb 80 48 8d 0d 21 e9 0e 00 48 8d 15 25 fb 0e 00 bf 01 [ 2597.787239][ C1] RSP: 002b:00007ffde418e1a0 EFLAGS: 00010206 [ 2597.787266][ C1] RAX: 0000000000018a41 RBX: 0000000000008040 RCX: 0000555590c9a590 [ 2597.787290][ C1] RDX: 0000000000008041 RSI: 0000555590ca25c0 RDI: 0000000000000004 [ 2597.787314][ C1] RBP: 00007ff840397cc0 R08: 0000000000000000 R09: 0000000000000000 [ 2597.787337][ C1] R10: 0000000000001000 R11: 0000000000000802 R12: 0000000000008030 [ 2597.787361][ C1] R13: 0000000000000076 R14: 00007ff840397d20 R15: 0000000000000000 [ 2597.787408][ C1] [ 2597.787422][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2598.581787][ C0] NMI backtrace for cpu 0 [ 2598.581811][ C0] CPU: 0 UID: 0 PID: 22400 Comm: syz.4.4112 Not tainted syzkaller #0 PREEMPT(full) [ 2598.581850][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2598.581876][ C0] RIP: 0010:hlock_class+0xb/0x70 [ 2598.581921][ C0] Code: ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f b7 47 20 66 25 ff 1f 0f b7 c0 <48> 0f a3 05 3d e1 45 14 73 15 48 8d 04 80 48 8d 04 80 48 8d 04 c5 [ 2598.581954][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00000002 [ 2598.581980][ C0] RAX: 000000000000006d RBX: ffff888021f9c6f0 RCX: 00000000f8797233 [ 2598.582002][ C0] RDX: 0000000000000000 RSI: ffff888021f9c740 RDI: ffff888021f9c718 [ 2598.582024][ C0] RBP: 0000000000000000 R08: 0000000000080000 R09: 0000000000000001 [ 2598.582045][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888021f9c740 [ 2598.582066][ C0] R13: ffff888021f9bc00 R14: 0000000000000002 R15: 0000000000000002 [ 2598.582089][ C0] FS: 00007f8997dc96c0(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 2598.582117][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2598.582139][ C0] CR2: 00007f8997dc8f98 CR3: 0000000068a45000 CR4: 0000000000350ef0 [ 2598.582161][ C0] Call Trace: [ 2598.582172][ C0] [ 2598.582183][ C0] __lock_acquire+0xa9f/0x1ce0 [ 2598.582246][ C0] lock_acquire+0x179/0x350 [ 2598.582297][ C0] ? debug_object_deactivate+0x135/0x3a0 [ 2598.582336][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2598.582376][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 2598.582415][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 2598.582455][ C0] ? debug_object_deactivate+0x135/0x3a0 [ 2598.582490][ C0] debug_object_deactivate+0x135/0x3a0 [ 2598.582524][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 2598.582562][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 2598.582602][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2598.582639][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2598.582683][ C0] __hrtimer_run_queues+0x46f/0xad0 [ 2598.582730][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2598.582770][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2598.582816][ C0] hrtimer_interrupt+0x397/0x8e0 [ 2598.582867][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 2598.582910][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 2598.582955][ C0] [ 2598.582966][ C0] [ 2598.582978][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2598.583014][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 2598.583058][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 fc 02 f6 48 89 df e8 2e 50 03 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 4f f3 f5 65 8b 05 0e ac 41 08 85 c0 74 16 5b [ 2598.583090][ C0] RSP: 0018:ffffc9000b6ffca8 EFLAGS: 00000246 [ 2598.583115][ C0] RAX: 0000000000000002 RBX: ffff8880b8427c80 RCX: 0000000000000007 [ 2598.583136][ C0] RDX: 0000000000000000 RSI: ffffffff8de4eeac RDI: ffffffff8c163000 [ 2598.583158][ C0] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001 [ 2598.583178][ C0] R10: ffffffff90ab8a97 R11: 0000000000000000 R12: 0000000000000000 [ 2598.583199][ C0] R13: 0000022335f3c2b5 R14: dffffc0000000000 R15: ffff8880b8427c80 [ 2598.583235][ C0] clock_was_set+0x599/0x870 [ 2598.583279][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 2598.583319][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2598.583358][ C0] ? rcu_is_watching+0x12/0xc0 [ 2598.583399][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2598.583444][ C0] do_settimeofday64+0x35d/0x540 [ 2598.583493][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 2598.583540][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2598.583579][ C0] ? qat_uclo_map_obj+0x4a5e/0x51c0 [ 2598.583633][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2598.583688][ C0] ? capable+0xd4/0x110 [ 2598.583727][ C0] do_sys_settimeofday64+0x1dc/0x260 [ 2598.583783][ C0] __x64_sys_clock_settime+0x1c1/0x2a0 [ 2598.583821][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 2598.583857][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2598.583911][ C0] do_syscall_64+0xcd/0x4c0 [ 2598.583959][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2598.583992][ C0] RIP: 0033:0x7f8996f8ebe9 [ 2598.584018][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2598.584050][ C0] RSP: 002b:00007f8997dc9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 2598.584080][ C0] RAX: ffffffffffffffda RBX: 00007f89971c5fa0 RCX: 00007f8996f8ebe9 [ 2598.584102][ C0] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 2598.584122][ C0] RBP: 00007f8997011e19 R08: 0000000000000000 R09: 0000000000000000 [ 2598.584143][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2598.584164][ C0] R13: 00007f89971c6038 R14: 00007f89971c5fa0 R15: 00007ffe3b049a18 [ 2598.584197][ C0] [ 2598.584780][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 2599.059576][ C1] CPU: 1 UID: 0 PID: 19011 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 2599.070710][ C1] Tainted: [L]=SOFTLOCKUP [ 2599.075029][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2599.085086][ C1] Call Trace: [ 2599.088362][ C1] [ 2599.091201][ C1] dump_stack_lvl+0x3d/0x1f0 [ 2599.095812][ C1] vpanic+0x6e8/0x7a0 [ 2599.099826][ C1] ? __pfx_vpanic+0x10/0x10 [ 2599.104359][ C1] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2599.110366][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.116025][ C1] panic+0xca/0xd0 [ 2599.119775][ C1] ? __pfx_panic+0x10/0x10 [ 2599.124218][ C1] ? nmi_backtrace_stall_check+0x6e/0x540 [ 2599.129950][ C1] ? irq_work_queue+0xce/0x100 [ 2599.134729][ C1] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2599.140740][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.146388][ C1] ? __wake_up_klogd.part.0+0x99/0xf0 [ 2599.151773][ C1] ? watchdog_timer_fn+0x5f9/0x7d0 [ 2599.156898][ C1] ? watchdog_timer_fn+0x5ec/0x7d0 [ 2599.162025][ C1] watchdog_timer_fn+0x60a/0x7d0 [ 2599.166982][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 2599.172456][ C1] __hrtimer_run_queues+0x5ed/0xad0 [ 2599.177685][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2599.183421][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.189084][ C1] hrtimer_interrupt+0x397/0x8e0 [ 2599.194044][ C1] ? kfree+0x2b4/0x4d0 [ 2599.198146][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 2599.204142][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 2599.209806][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2599.215800][ C1] RIP: 0010:kasan_check_range+0x159/0x1b0 [ 2599.221535][ C1] Code: 2c 48 89 c2 48 85 c0 75 ad 48 89 da 4c 89 d8 4c 29 da e9 46 ff ff ff 48 85 d2 74 18 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 0a <80> 38 00 74 f2 e9 75 ff ff ff 5b b8 01 00 00 00 5d 41 5c e9 9a 56 [ 2599.241150][ C1] RSP: 0000:ffffc90000a084f8 EFLAGS: 00000286 [ 2599.247225][ C1] RAX: fffffbfff2157152 RBX: fffffbfff2157153 RCX: ffffffff8ae292a2 [ 2599.255200][ C1] RDX: fffffbfff2157153 RSI: 0000000000000008 RDI: ffffffff90ab8a90 [ 2599.263171][ C1] RBP: fffffbfff2157152 R08: 0000000000000000 R09: fffffbfff2157152 [ 2599.271145][ C1] R10: ffffffff90ab8a97 R11: 0000000000000000 R12: 0000000000000000 [ 2599.279114][ C1] R13: ffff888053372868 R14: ffff8880773edf00 R15: ffffc90000a08b28 [ 2599.287099][ C1] ? trace_cfg80211_return_bss+0x52/0x200 [ 2599.292840][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.298493][ C1] trace_cfg80211_return_bss+0x52/0x200 [ 2599.304052][ C1] cfg80211_inform_single_bss_data+0x9b6/0x1df0 [ 2599.310323][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 2599.317148][ C1] ? find_held_lock+0x2b/0x80 [ 2599.321856][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.327507][ C1] ? cfg80211_inform_bss_data+0x224/0x3bd0 [ 2599.333323][ C1] cfg80211_inform_bss_data+0x224/0x3bd0 [ 2599.338969][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.344612][ C1] ? mark_held_locks+0x49/0x80 [ 2599.349402][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 2599.354707][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.360355][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 2599.365661][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.371308][ C1] ? ieee80211_rx_handlers+0xe7f/0x9a60 [ 2599.376879][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 2599.382972][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.388623][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 2599.393597][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 2599.399434][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.405080][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 2599.410134][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.415782][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 2599.420749][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.426398][ C1] ? ieee80211_prepare_and_rx_handle+0x1ba8/0x77f0 [ 2599.432937][ C1] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 2599.439038][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 2599.444693][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 2599.450878][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.456527][ C1] ? find_held_lock+0x2b/0x80 [ 2599.461217][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.466867][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.472516][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 2599.478338][ C1] ieee80211_scan_rx+0x4cf/0xb30 [ 2599.483285][ C1] ? ieee80211_clean_skb+0x1a6/0x740 [ 2599.488591][ C1] ieee80211_rx_list+0x1bdb/0x2980 [ 2599.493739][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 2599.499209][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 2599.504190][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.509846][ C1] ieee80211_rx_napi+0xdc/0x410 [ 2599.514712][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 2599.520187][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2599.525413][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.531056][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2599.536885][ C1] ieee80211_handle_queued_frames+0xd5/0x130 [ 2599.542902][ C1] tasklet_action_common+0x284/0x400 [ 2599.548222][ C1] handle_softirqs+0x219/0x8e0 [ 2599.553015][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2599.558319][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.563973][ C1] __irq_exit_rcu+0x109/0x170 [ 2599.568668][ C1] irq_exit_rcu+0x9/0x30 [ 2599.572927][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2599.578581][ C1] [ 2599.581510][ C1] [ 2599.584437][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2599.590429][ C1] RIP: 0010:smp_call_function_many_cond+0xdfd/0x1600 [ 2599.597129][ C1] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 15 00 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 [ 2599.616748][ C1] RSP: 0000:ffffc9000dc978a8 EFLAGS: 00000293 [ 2599.622824][ C1] RAX: 0000000000000000 RBX: ffff8880b8441ec0 RCX: ffffffff81af8b61 [ 2599.630797][ C1] RDX: ffff888054b8bc00 RSI: ffffffff81af8b3b RDI: 0000000000000005 [ 2599.638769][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 2599.646743][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 2599.654723][ C1] R13: ffffed10170883d9 R14: 0000000000000001 R15: 0000000000000000 [ 2599.662704][ C1] ? smp_call_function_many_cond+0xe21/0x1600 [ 2599.668795][ C1] ? smp_call_function_many_cond+0xdfb/0x1600 [ 2599.674890][ C1] ? smp_call_function_many_cond+0xdfb/0x1600 [ 2599.680979][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 2599.686365][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 2599.691605][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 2599.697984][ C1] ? lock_acquire+0x179/0x350 [ 2599.702700][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 2599.707922][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 2599.713324][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 2599.718470][ C1] flush_tlb_mm_range+0x4a0/0x17a0 [ 2599.723617][ C1] ? page_table_check_clear+0x362/0x740 [ 2599.729214][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.734862][ C1] ? __page_table_check_pte_clear+0xa9/0x100 [ 2599.740879][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 2599.746478][ C1] ? __pfx_pte_mkwrite+0x10/0x10 [ 2599.751439][ C1] ptep_clear_flush+0x136/0x180 [ 2599.756302][ C1] do_wp_page+0x1683/0x4f00 [ 2599.760836][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 2599.765702][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.771359][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2599.776747][ C1] ? ___pte_offset_map+0x2ad/0x4f0 [ 2599.781880][ C1] __handle_mm_fault+0x1b2d/0x2a50 [ 2599.787027][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.792677][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 2599.798162][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2599.803813][ C1] ? lock_vma_under_rcu+0x1eb/0x530 [ 2599.809052][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2599.814630][ C1] handle_mm_fault+0x589/0xd10 [ 2599.819415][ C1] ? __bpf_trace_exceptions+0x1/0x40 [ 2599.824736][ C1] do_user_addr_fault+0x60c/0x1370 [ 2599.829856][ C1] ? rcu_is_watching+0x12/0xc0 [ 2599.834646][ C1] exc_page_fault+0x5c/0xb0 [ 2599.839167][ C1] asm_exc_page_fault+0x26/0x30 [ 2599.844021][ C1] RIP: 0033:0x7ff84014d03f [ 2599.848436][ C1] Code: 8d 34 19 48 39 d5 48 89 75 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 eb 80 48 8d 0d 21 e9 0e 00 48 8d 15 25 fb 0e 00 bf 01 [ 2599.868063][ C1] RSP: 002b:00007ffde418e1a0 EFLAGS: 00010206 [ 2599.874133][ C1] RAX: 0000000000018a41 RBX: 0000000000008040 RCX: 0000555590c9a590 [ 2599.882102][ C1] RDX: 0000000000008041 RSI: 0000555590ca25c0 RDI: 0000000000000004 [ 2599.890069][ C1] RBP: 00007ff840397cc0 R08: 0000000000000000 R09: 0000000000000000 [ 2599.898037][ C1] R10: 0000000000001000 R11: 0000000000000802 R12: 0000000000008030 [ 2599.906007][ C1] R13: 0000000000000076 R14: 00007ff840397d20 R15: 0000000000000000 [ 2599.914003][ C1] [ 2601.078860][ C1] Shutting down cpus with NMI [ 2601.084298][ C1] Kernel Offset: disabled [ 2601.088617][ C1] Rebooting in 86400 seconds..