last executing test programs: 2m12.828294872s ago: executing program 2 (id=176): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001400)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) bind$alg(r1, 0x0, 0x0) setxattr$incfs_size(0x0, 0x0, &(0x7f0000000240), 0x8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x7e, 0x0, 0x9, [0x1000, 0x1, 0x0, 0x0, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xff}}, {@remote}, {@multicast2}, {@private=0xa010100, 0x40000}, {@empty, 0x803}, {@broadcast, 0x52b4}, {@empty}]}, @noop, @noop, @noop]}}}}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = dup(r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) 1m49.067946412s ago: executing program 2 (id=176): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001400)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) bind$alg(r1, 0x0, 0x0) setxattr$incfs_size(0x0, 0x0, &(0x7f0000000240), 0x8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x7e, 0x0, 0x9, [0x1000, 0x1, 0x0, 0x0, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xff}}, {@remote}, {@multicast2}, {@private=0xa010100, 0x40000}, {@empty, 0x803}, {@broadcast, 0x52b4}, {@empty}]}, @noop, @noop, @noop]}}}}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = dup(r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) 1m27.105336254s ago: executing program 2 (id=176): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001400)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) bind$alg(r1, 0x0, 0x0) setxattr$incfs_size(0x0, 0x0, &(0x7f0000000240), 0x8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x7e, 0x0, 0x9, [0x1000, 0x1, 0x0, 0x0, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xff}}, {@remote}, {@multicast2}, {@private=0xa010100, 0x40000}, {@empty, 0x803}, {@broadcast, 0x52b4}, {@empty}]}, @noop, @noop, @noop]}}}}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = dup(r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) 58.931742035s ago: executing program 2 (id=176): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001400)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) bind$alg(r1, 0x0, 0x0) setxattr$incfs_size(0x0, 0x0, &(0x7f0000000240), 0x8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x7e, 0x0, 0x9, [0x1000, 0x1, 0x0, 0x0, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xff}}, {@remote}, {@multicast2}, {@private=0xa010100, 0x40000}, {@empty, 0x803}, {@broadcast, 0x52b4}, {@empty}]}, @noop, @noop, @noop]}}}}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = dup(r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) 39.73804572s ago: executing program 2 (id=176): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001400)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) bind$alg(r1, 0x0, 0x0) setxattr$incfs_size(0x0, 0x0, &(0x7f0000000240), 0x8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x7e, 0x0, 0x9, [0x1000, 0x1, 0x0, 0x0, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xff}}, {@remote}, {@multicast2}, {@private=0xa010100, 0x40000}, {@empty, 0x803}, {@broadcast, 0x52b4}, {@empty}]}, @noop, @noop, @noop]}}}}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = dup(r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) 17.737417845s ago: executing program 2 (id=176): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001400)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) bind$alg(r1, 0x0, 0x0) setxattr$incfs_size(0x0, 0x0, &(0x7f0000000240), 0x8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x7e, 0x0, 0x9, [0x1000, 0x1, 0x0, 0x0, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xff}}, {@remote}, {@multicast2}, {@private=0xa010100, 0x40000}, {@empty, 0x803}, {@broadcast, 0x52b4}, {@empty}]}, @noop, @noop, @noop]}}}}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = dup(r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) 9.368535671s ago: executing program 3 (id=1033): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)={0x3, 0x0, [{0x1, 0x87, &(0x7f0000000300)=""/135}, {0x1000, 0x1000, &(0x7f0000001ec0)=""/4096}, {0x0, 0x0, 0x0}]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c8"], 0x7) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, 0x0, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x10, 0x4, 0x0) socket$inet(0x2, 0x3, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x4}], 0x2) 9.087044855s ago: executing program 4 (id=1037): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") open$dir(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 8.110678665s ago: executing program 1 (id=1038): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 8.065025089s ago: executing program 3 (id=1039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x5, 0x8, 0x4, 0xffffffffffffffff, 0xb5c8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="7db75f6b9900"/17, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x6, 0x97e8, 0x9, 0x1402, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xf}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0x18}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r7, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000280)=""/123, 0x7b}, {0x0}, {&(0x7f0000000540)=""/74, 0x4a}, {&(0x7f0000000bc0)=""/111, 0x6f}], 0x5}}], 0x1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000002500)={'veth1_to_bridge\x00', &(0x7f00000024c0)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x34000010) sendmsg$nl_route(r0, 0x0, 0x0) 6.852038918s ago: executing program 3 (id=1041): socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x6}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf+VrUvVQC7bFVtKi3U0a2wYPtYLYU8Fa7zUmmxCyyYbspm1CkRTvCiIqePLkRfAPEKR/gggFvUsVRbTVgwd1ZWdnaxt3m0i3OzX5fGA67zvv7j7P27Az88687ARwaJ2LiJsRMRIRlyJiPN+e5sutdvudzutePH80316SaLXu/jmJJN/W/awkX5+IiJ2IOBoRX70V8Y3kv+M2trZX5mq16kZerzRX1yuNre3Ly6tzS9Wl6trMzPS12euzV2enBtLPiYi48aXff/87P/nyjV989sFv7/3x4jfbaY3l7a/2Y5A6XS9l/xddoxGx8S6CFWAkX5f6tH97ZIjJAACwp/Y5/kcj4lPZ+f94jGRnpwAAAMBB0vrCWPwjiWgBAAAAB1aazYFN0nI+F2As0rRc7szh/XgcT2v1RvMzi/XNtYXOXNmJKKWLy7XqVD5XeCJKSbs+nc+x7dav7KrPRMTJiPje+LGsXp6v1xaKvvgBAAAAh8SJXeP/v41n4/8jRecFAAAADNhE0QkAAAAA75zxPwAAABx8xv8AAABwoH3l9u320uo+/3rh/tbmSv3+5YVqY6W8ujlfnq9vrJeX6vWl7Df7Vvf6vFq9vv65WNt8WGlWG81KY2v73mp9c615b/m1R2ADAAAAQ3Ty7JPfJBGx8/lj2dL2QdFJAUOR7NGePSTkWV753RASAoZmpOgEgMKMFp0AUJhS0QkAhdvrOkDfyTu/HHwuAADAuzH5if73/10bgIMtLToBAGDo3P+Hw6v0+gzAq8VlAhTlI3u0v/39/1brf0oIAAAYuLFsSdJyfi9wLNK0XI74MHssQClZXK5Vp/Lxwa/HS0fa9ensncmec4YBAAAAAAAAAAAAAAAAAAAAAAAAgI5WK4kWAAAAcKBFpH9Isl/zj5gcvzC2+/rAB8nfx7N1RDz40d0fPJxrNjem29v/8nJ784f59itFXMEAAAAAduuO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpBfPH813l2HG/dMXI2KiZ/yzR7PV0ShFxPG/JjH6yvuSiBgZQPydxxFxqlf8pJ1WTEQni17xjxUYP42IEwOID4fZk/b+52av718a57J17+/faL68rf77vzS6+7+RPvufD/cZ4/TTn1X6xn8ccXq09/6nGz/pE//8PuN//Wvb2/3aWj+OmOx5/Elei1Vprq5XGlvbl5dX55aqS9W1mZnpa7PXZ6/OTlUWl2vV/N+eMb77yZ//6039P94n/sQe/b+wz/7/8+nD5x/rFEu94l883/v4e6pP/DQ/9n06L7fbJ7vlnU75VWd++qszb+r/Qp/+v/z79zjQtmNe3Gf/L9351rN9vhQAGILG1vbKXK1W3fh/LKTxXqShMJDCkfcjDYVOoeg9EwAAMGj/OekvOhMAAAAAAAAAAAAAAAAAAAA4vIbxc2K7Y+4U01UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6dwAAAP//sf7Zeg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x9, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x3c, 0x32, 0x301, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x3c}}, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000001c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r8, &(0x7f0000002f40)=""/4098, 0x1002) 5.48351494s ago: executing program 4 (id=1042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 5.36386521s ago: executing program 3 (id=1043): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_mmap}, {@dfltuid}, {@nodevmap}, {@access_uid}], [{@obj_type={'obj_type', 0x3d, ')\f:'}}, {@uid_lt}, {@fowner_eq}, {@euid_eq}, {@obj_type={'obj_type', 0x3d, 'trans=fd,'}}]}}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x0, 0x0) 5.306117035s ago: executing program 4 (id=1044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r6) 4.252973701s ago: executing program 1 (id=1045): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) sendto(r0, &(0x7f0000005840)=' ', 0x1, 0x0, &(0x7f00000058c0)=@l2tp={0x2, 0x0, @local}, 0x80) 4.14534569s ago: executing program 0 (id=1046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)="d93e8a6872acbe8794503a8c07956986f5f87321ff1226b242ad5c08ab6d60c364", &(0x7f00000005c0), 0xf, r0}, 0x38) 4.111592973s ago: executing program 3 (id=1047): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x20000000, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000)=0x1, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x3e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x800) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) 4.02792594s ago: executing program 4 (id=1048): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000240)={0x8, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, 0x0) dup(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180000d3300e11a0a7b8db000000000085000000230000001811acbdc7d9a71c08db33c26d09db0000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="000000000000000096c9514f2923", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000300)) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r10, 0x5425, 0x0) 3.962488405s ago: executing program 0 (id=1049): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)={0x3, 0x0, [{0x1, 0x87, &(0x7f0000000300)=""/135}, {0x1000, 0x1000, &(0x7f0000001ec0)=""/4096}, {0x0, 0x0, 0x0}]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c8"], 0x7) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sample_threshold\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x10, 0x4, 0x0) socket$inet(0x2, 0x3, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x4}], 0x2) 3.942010667s ago: executing program 1 (id=1050): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x38011, 0xffffffffffffffff, 0x0) 3.010923823s ago: executing program 0 (id=1051): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f22"], 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x2a}, @l2cap_cid_signaling={{0x26}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x1000}}, @l2cap_create_chan_rsp={{0xd, 0xf, 0x8}, {0x4, 0x2, 0x0, 0x6}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0xfffe, 0x64, 0x7, 0x2}}, @l2cap_disconn_req={{0x6, 0x5, 0x4}, {0x81}}]}}, 0x2f) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x1000, 0x3, 0x1, 0x1d48, 0xffffffffffffffff, 0x5fff, '\x00', 0x0, r0, 0x0, 0x1, 0x4}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000000700000095000000000000009500a50500000000d86f894ddd8ca6ff240a54d810057bb4b9e974dfdc1217c7306fa9c1697d91424e6d4249f617e13229998cf6bef567cc3704aae2f47a6b8c921e40c2fe45003ec86aa697187fe8d6646dd363a5cf9175691ebcb28b38f794ca6fe9846379c5cfac7100dc5a37fcc756451d39"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0xd9, &(0x7f0000002440)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0xa3, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, [0x5], "aca1efcef249844bf2be967fa2cdafc52aa4dbe3ba9e6a1ca0b2dbc2a5e68409ac1b0180d6beeff0be8ad440fa750b4848978960ce2b0988c5e8dcff8fab55ab1df8a95ce45013bd5a03ebadfc3fa339de2945a4e319c87cb4b1c09896"}}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e06"], 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000200001c0012800b00010067656e65766500000c0002"], 0x44}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) mknod(&(0x7f0000000000)='./file0\x00', 0x80, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0x0, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x100000000000000}, 0x38) socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) unshare(0x2c060000) unshare(0x24020400) 2.871429224s ago: executing program 4 (id=1052): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000000001000000000000"], 0x28}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x2fe) ioctl$KDSKBLED(r0, 0x4b65, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x7f83bd0a) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c90012000ec6d61001be95c03f000700"], 0x17) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(0x0, 0x9) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/55, 0x37) syz_emit_vhci(&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x40010, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.80292012s ago: executing program 1 (id=1053): r0 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0x4000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) eventfd2(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x9362, 0x0) 2.589758518s ago: executing program 1 (id=1054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) statfs(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000380)=""/166) unlinkat(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x2c, 0x4, 0x0) 2.451464519s ago: executing program 3 (id=1055): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000103010100092100080001220300090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000c00)={0x40, 0x30, 0x14a, "e06b445add4c442714794296ef846b0a1aa5fcf5b6ca593b3b7c2109676c29c10a70858f7ca79c628564312f19772ad07c874ef6d2647725f61c04ead80e3facceac265629349c2c70509733c4645289677b6c5c4c798034353a35094226f416b3d42241cc6642de71cb2e3c54cbaf463d1782e2f91e29730a43b06300ca1c7046c5ae8b2a659aeb007a7f96ea138b0b416ea7ea39a9d3587208344fb44ad6beb817de92766e22d691ae979e0ca512fd06c01f17bd997187486bf873ad0cb105452a121f08149cb606ce40e67e25cc2b4583a758206349a8f34515c724980000e928fc4db71d11bae0c4a91ebb8e820e27b1710eb8211c000000000000000000"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$setperm(0x5, 0x0, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 1.732718288s ago: executing program 0 (id=1056): socket$netlink(0x10, 0x3, 0x4) write(0xffffffffffffffff, &(0x7f0000000080)="2f00000014000f3f03000000120f0af710004003009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) 1.609568628s ago: executing program 0 (id=1057): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="89103e0bf951ce9cc94c715d6af8624bfb2be6f55f8780ff401cffb864ae0b974b5aed1df8e9660daf7ee529685522026cf81458f535502d7eb5120a43bb25acb9d42418c11cf3fb24dd34f52e3763d294b42ce54204bf8735dde22cd91765e3553ab6c027a1fea827170180b5591e783d5fac49eb7273043c99d3a3d4f1c620aead98dd228bd9ab03ebc9573a44a5827b4ff7667dfe7cc5", 0x98}, {&(0x7f0000000940)="81f275e50ad7925fa670601313fdc2f2604ddfe23770875735f3df9aeadb9431c9e15b50965a0642", 0x28}], 0x2}, 0x0) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000340)=""/154, 0x9a}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 662.591766ms ago: executing program 0 (id=1058): openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100"/18, 0x12) getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) socket$inet6(0xa, 0x802, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) read(r3, &(0x7f0000000000)=""/101, 0x65) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) 41.143867ms ago: executing program 1 (id=1059): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) io_setup(0x685, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000b80)=[&(0x7f00000001c0)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000580)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) read(r0, &(0x7f0000000100)=""/170, 0xaa) r4 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000003c0)=0x5) 0s ago: executing program 4 (id=1060): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) utimes(0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}) kernel console output (not intermixed with test programs): endpoint descriptors, different from the interface descriptor's value: 2 [ 269.696790][ T7] usb 4-1: config 1 interface 0 has no altsetting 0 [ 269.864594][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.880402][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.894174][ T7] usb 4-1: Product: 樓 [ 269.898389][ T7] usb 4-1: Manufacturer: ᠊ [ 269.913390][ T7] usb 4-1: SerialNumber: ࠓ [ 269.934767][ T6755] Non-string source [ 269.977709][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 269.977724][ T26] audit: type=1326 audit(1720571770.393:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.0.698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x0 [ 270.065873][ T5925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.296311][ T5925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.318074][ T7] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 270.358053][ T7] usb 4-1: USB disconnect, device number 11 [ 270.384002][ T5925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.504246][ T5925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.215850][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 271.749023][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.766693][ T3557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.776030][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.786187][ T3557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.806658][ T3557] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.814537][ T3557] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.357403][ T6778] loop0: detected capacity change from 0 to 32768 [ 272.475152][ T6778] non-latin1 character 0x163 found in JFS file name [ 272.511001][ T6778] mount with iocharset=utf8 to access [ 272.605301][ T6783] loop1: detected capacity change from 0 to 40427 [ 272.654096][ T6783] F2FS-fs (loop1): invalid crc value [ 272.676796][ T7] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 272.700137][ T6783] F2FS-fs (loop1): Found nat_bits in checkpoint [ 272.706173][ T5925] device hsr_slave_0 left promiscuous mode [ 272.743475][ T5925] device hsr_slave_1 left promiscuous mode [ 272.789671][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.812072][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.831800][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.867273][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.887350][ T6783] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 272.890541][ T5925] device bridge_slave_1 left promiscuous mode [ 272.927254][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.007437][ T5925] device bridge_slave_0 left promiscuous mode [ 273.029400][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.150424][ T5925] device veth1_macvtap left promiscuous mode [ 273.156508][ T5925] device veth0_macvtap left promiscuous mode [ 273.163521][ T5925] device veth1_vlan left promiscuous mode [ 273.169523][ T5925] device veth0_vlan left promiscuous mode [ 273.177520][ T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 273.198863][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.247296][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.277253][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 273.403891][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 273.416457][ T7] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 273.440589][ T7] usb 5-1: Manufacturer: syz [ 273.458998][ T7] usb 5-1: config 0 descriptor?? [ 273.878022][ T3557] Bluetooth: hci2: command tx timeout [ 273.906602][ T5522] syz-executor: attempt to access beyond end of device [ 273.906602][ T5522] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 273.960749][ T7] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 273.978766][ T7] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 273.990965][ T7] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 274.165214][ T7] usb 5-1: USB disconnect, device number 16 [ 274.536289][ T5925] team0 (unregistering): Port device team_slave_1 removed [ 274.607612][ T5925] team0 (unregistering): Port device team_slave_0 removed [ 274.678263][ T5925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.784801][ T5925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.532991][ T5925] bond0 (unregistering): Released all slaves [ 275.699031][ T6843] device wlan1 entered promiscuous mode [ 275.712387][ T6843] device wlan1 left promiscuous mode [ 275.959980][ T3557] Bluetooth: hci2: command tx timeout [ 276.031927][ T6796] chnl_net:caif_netlink_parms(): no params data found [ 276.126499][ T6873] loop4: detected capacity change from 0 to 512 [ 276.281637][ T6873] EXT4-fs (loop4): 1 orphan inode deleted [ 276.287458][ T6873] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 276.360340][ T6873] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038 (0x7fffffff) [ 276.389530][ T26] audit: type=1326 audit(1720571776.797:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 276.416012][ T26] audit: type=1326 audit(1720571776.797:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 276.448940][ T26] audit: type=1326 audit(1720571776.827:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 276.580219][ T26] audit: type=1326 audit(1720571776.827:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 276.643454][ T6796] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.673265][ T26] audit: type=1326 audit(1720571776.827:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 276.695914][ T26] audit: type=1326 audit(1720571776.827:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 276.696209][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.737823][ T26] audit: type=1326 audit(1720571776.827:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 277.340660][ T6796] device bridge_slave_0 entered promiscuous mode [ 277.452802][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.476911][ T26] audit: type=1326 audit(1720571776.827:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 277.531189][ T6861] loop1: detected capacity change from 0 to 32768 [ 277.584904][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.598875][ T6796] device bridge_slave_1 entered promiscuous mode [ 277.605799][ T5802] EXT4-fs (loop4): unmounting filesystem. [ 277.619627][ T26] audit: type=1326 audit(1720571776.827:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 277.643353][ T26] audit: type=1326 audit(1720571776.827:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 277.693847][ T6796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.709496][ T6861] non-latin1 character 0x163 found in JFS file name [ 277.726535][ T6861] mount with iocharset=utf8 to access [ 277.739519][ T6796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.939724][ T6796] team0: Port device team_slave_0 added [ 277.979373][ T6796] team0: Port device team_slave_1 added [ 278.001464][ T152] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 278.041509][ T3557] Bluetooth: hci2: command tx timeout [ 278.817607][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.860742][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.992167][ T6796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.043023][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.063246][ T152] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 279.080477][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.099147][ T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.183713][ T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.207177][ T152] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 279.208179][ T6796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.343707][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.735'. [ 279.404679][ T152] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 279.446549][ T152] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 279.460343][ T6796] device hsr_slave_0 entered promiscuous mode [ 279.505445][ T152] usb 5-1: Manufacturer: syz [ 279.521447][ T6796] device hsr_slave_1 entered promiscuous mode [ 279.539593][ T6796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.544401][ T152] usb 5-1: config 0 descriptor?? [ 279.565958][ T6796] Cannot create hsr debugfs directory [ 279.818079][ T6931] device bridge0 entered promiscuous mode [ 279.879228][ T6931] device bond0 entered promiscuous mode [ 279.920525][ T6931] device bond_slave_0 entered promiscuous mode [ 279.928769][ T6931] device bond_slave_1 entered promiscuous mode [ 280.041694][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 280.055504][ T152] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 280.079925][ T152] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 280.124430][ T3557] Bluetooth: hci2: command tx timeout [ 280.175286][ T152] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 280.197775][ T6943] loop1: detected capacity change from 0 to 2048 [ 280.206557][ T6943] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 280.214328][ T6943] UDF-fs: Scanning with blocksize 512 failed [ 280.223736][ T6943] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.399158][ T152] usb 5-1: USB disconnect, device number 17 [ 280.446453][ T6948] loop0: detected capacity change from 0 to 512 [ 280.549967][ T6948] EXT4-fs (loop0): 1 orphan inode deleted [ 280.598555][ T6948] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 280.613657][ T6948] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038 (0x7fffffff) [ 281.607397][ T3547] EXT4-fs (loop0): unmounting filesystem. [ 283.390239][ T6997] netlink: 6 bytes leftover after parsing attributes in process `syz.1.751'. [ 283.473361][ T6796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.519807][ T6796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.626095][ T6796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.785053][ T6796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.994225][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 283.994241][ T26] audit: type=1326 audit(1720571784.401:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 284.046897][ T26] audit: type=1326 audit(1720571784.401:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 284.116791][ T3596] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 284.140794][ T26] audit: type=1326 audit(1720571784.431:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 284.185206][ T6796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.208359][ T26] audit: type=1326 audit(1720571784.431:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 284.256606][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.274712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.297778][ T6796] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.325612][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.342749][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.362756][ T26] audit: type=1326 audit(1720571784.431:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 284.406066][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.413266][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.472001][ T7014] loop4: detected capacity change from 0 to 2048 [ 284.481531][ T7014] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 284.489283][ T7014] UDF-fs: Scanning with blocksize 512 failed [ 284.501551][ T7014] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.697976][ T3596] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 284.800253][ T26] audit: type=1326 audit(1720571784.431:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 285.215039][ T26] audit: type=1326 audit(1720571784.431:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 285.266528][ T3596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.277888][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.286598][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.294661][ T3596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.304986][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.312134][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.330376][ T3596] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 285.416984][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.474639][ T26] audit: type=1326 audit(1720571784.431:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 285.504477][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.512896][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.521875][ T3596] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 285.537399][ T3596] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 285.559660][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.567472][ T26] audit: type=1326 audit(1720571784.431:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 285.569456][ T3596] usb 2-1: Manufacturer: syz [ 285.601842][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.614357][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.646999][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.656772][ T3596] usb 2-1: config 0 descriptor?? [ 285.669527][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.694329][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.731766][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.750308][ T26] audit: type=1326 audit(1720571784.431:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.0.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 285.796031][ T6796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.268236][ T3596] usbhid 2-1:0.0: can't add hid device: -71 [ 286.291915][ T3596] usbhid: probe of 2-1:0.0 failed with error -71 [ 286.328435][ T3596] usb 2-1: USB disconnect, device number 7 [ 286.336681][ T6796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.482529][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.491356][ T6550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.903517][ T7049] netlink: 6 bytes leftover after parsing attributes in process `syz.1.762'. [ 286.980071][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.991004][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.026393][ T6796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.097020][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.116396][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.314253][ T7062] Driver unsupported XDP return value 0 on prog (id 199) dev N/A, expect packet loss! [ 287.340432][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.353314][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.362417][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.371810][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.382939][ T6796] device veth0_vlan entered promiscuous mode [ 287.449489][ T6796] device veth1_vlan entered promiscuous mode [ 287.508838][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 287.543354][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 287.609108][ T6796] device veth0_macvtap entered promiscuous mode [ 287.629420][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.650516][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.664502][ T6796] device veth1_macvtap entered promiscuous mode [ 287.681572][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.710026][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.746047][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.802938][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.836349][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.935029][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.956677][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.739655][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.780960][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.797102][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.815168][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.826949][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.860771][ T6796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.886028][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.918332][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.942199][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.986640][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.026842][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.089828][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.099688][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.158303][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.178647][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.199836][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.246051][ T6796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.270048][ T3593] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 289.300224][ T6796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.326313][ T6796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.355007][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.369218][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.393174][ T6796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.408851][ T6796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.428729][ T6796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.470128][ T6796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.748939][ T7111] loop1: detected capacity change from 0 to 512 [ 289.772978][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.790558][ T3593] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 289.796327][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.811804][ T3593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.846355][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 289.846370][ T26] audit: type=1326 audit(1720571790.247:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 289.865373][ T3593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.905048][ T3593] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 289.911725][ T3589] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 289.929487][ T7111] EXT4-fs (loop1): 1 orphan inode deleted [ 289.949802][ T7111] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 289.960681][ T26] audit: type=1326 audit(1720571790.287:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 289.961509][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.984244][ T26] audit: type=1326 audit(1720571790.287:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 290.000601][ T7111] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038 (0x7fffffff) [ 290.013742][ T26] audit: type=1326 audit(1720571790.287:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 290.051366][ T3593] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 290.080535][ T26] audit: type=1326 audit(1720571790.287:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 290.094463][ T3760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.105817][ T3593] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 290.145833][ T3760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.178035][ T3593] usb 5-1: Manufacturer: syz [ 290.185778][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 290.197681][ T3593] usb 5-1: config 0 descriptor?? [ 290.202972][ T26] audit: type=1326 audit(1720571790.287:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 290.265720][ T26] audit: type=1326 audit(1720571790.287:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 290.349589][ T26] audit: type=1326 audit(1720571790.287:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 290.417358][ T26] audit: type=1326 audit(1720571790.287:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 290.487232][ T3589] usb 4-1: config index 0 descriptor too short (expected 25970, got 36) [ 290.500874][ T3589] usb 4-1: config 116 has too many interfaces: 99, using maximum allowed: 32 [ 290.513098][ T26] audit: type=1326 audit(1720571790.287:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 290.530097][ T3589] usb 4-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 290.563025][ T3589] usb 4-1: config 116 has 0 interfaces, different from the descriptor's value: 99 [ 290.590521][ T3589] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 290.620459][ T3589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.797214][ T3593] usbhid 5-1:0.0: can't add hid device: -71 [ 290.805082][ T3593] usbhid: probe of 5-1:0.0 failed with error -71 [ 290.853267][ T3593] usb 5-1: USB disconnect, device number 18 [ 291.032425][ T7110] input: syz1 as /devices/virtual/input/input12 [ 291.128434][ T3589] usb 4-1: USB disconnect, device number 12 [ 292.239257][ T3760] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.626545][ T5522] EXT4-fs (loop1): unmounting filesystem. [ 292.627940][ T3760] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.757208][ T3760] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.839120][ T3760] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.792659][ T3560] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.838739][ T3560] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.849127][ T3560] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.872590][ T3560] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.889106][ T3560] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 294.896671][ T3560] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.938999][ T3701] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 294.969633][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 294.969648][ T26] audit: type=1326 audit(1720571795.364:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 295.001876][ T26] audit: type=1326 audit(1720571795.364:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 295.024802][ T26] audit: type=1326 audit(1720571795.403:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 295.047591][ T26] audit: type=1326 audit(1720571795.403:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 295.075604][ T26] audit: type=1326 audit(1720571795.403:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 295.179211][ T26] audit: type=1326 audit(1720571795.403:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 295.292555][ T7206] loop1: detected capacity change from 0 to 512 [ 295.311142][ T26] audit: type=1326 audit(1720571795.403:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 295.334325][ T3701] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 295.352185][ T3701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.435253][ T3701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.450602][ T3760] device hsr_slave_0 left promiscuous mode [ 295.450661][ T7206] EXT4-fs (loop1): 1 orphan inode deleted [ 295.479313][ T26] audit: type=1326 audit(1720571795.403:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 295.513955][ T7206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 295.525616][ T3701] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 295.552220][ T7206] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038 (0x7fffffff) [ 295.599273][ T3760] device hsr_slave_1 left promiscuous mode [ 295.630835][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.634234][ T26] audit: type=1326 audit(1720571795.403:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 295.664075][ T3701] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 295.687520][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.722315][ T3701] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 295.734046][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.761887][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.764463][ T3701] usb 4-1: Manufacturer: syz [ 295.800357][ T3760] device bridge_slave_1 left promiscuous mode [ 295.805598][ T3701] usb 4-1: config 0 descriptor?? [ 295.824759][ T3760] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.842435][ T26] audit: type=1326 audit(1720571795.403:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 295.900786][ T3760] device bridge_slave_0 left promiscuous mode [ 295.921691][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.055329][ T3760] device veth1_macvtap left promiscuous mode [ 296.061410][ T3760] device veth0_macvtap left promiscuous mode [ 296.087948][ T3760] device veth1_vlan left promiscuous mode [ 296.093807][ T3760] device veth0_vlan left promiscuous mode [ 296.424963][ T3701] usbhid 4-1:0.0: can't add hid device: -71 [ 296.433914][ T3701] usbhid: probe of 4-1:0.0 failed with error -71 [ 296.499796][ T3701] usb 4-1: USB disconnect, device number 13 [ 296.935130][ T3560] Bluetooth: hci2: command tx timeout [ 298.502963][ T3760] team0 (unregistering): Port device team_slave_1 removed [ 298.583631][ T3760] team0 (unregistering): Port device team_slave_0 removed [ 298.654909][ T3760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.738400][ T3760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.016605][ T3560] Bluetooth: hci2: command tx timeout [ 299.608575][ T6550] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 299.707828][ T3760] bond0 (unregistering): Released all slaves [ 299.896296][ T5522] EXT4-fs (loop1): unmounting filesystem. [ 299.988298][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'. [ 300.010213][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'. [ 300.019604][ T6550] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 300.037946][ T6550] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.186046][ T6550] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.199299][ T6550] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 300.911037][ T7280] tty tty23: ldisc open failed (-12), clearing slot 22 [ 300.919364][ T7282] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 300.930398][ T7283] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 301.028639][ T6550] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 301.037855][ T6550] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 301.048854][ T6550] usb 1-1: Manufacturer: syz [ 301.055171][ T6550] usb 1-1: config 0 descriptor?? [ 301.097837][ T3560] Bluetooth: hci2: command tx timeout [ 301.142155][ T7193] chnl_net:caif_netlink_parms(): no params data found [ 301.685174][ T7300] netlink: 9396 bytes leftover after parsing attributes in process `syz.1.818'. [ 301.900431][ T3560] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 301.909299][ T3560] Bluetooth: hci0: Injecting HCI hardware error event [ 301.920576][ T3557] Bluetooth: hci0: hardware error 0x00 [ 302.010581][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.029787][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.108281][ T6550] usbhid 1-1:0.0: can't add hid device: -71 [ 302.114308][ T6550] usbhid: probe of 1-1:0.0 failed with error -71 [ 302.123535][ T7193] device bridge_slave_0 entered promiscuous mode [ 302.162728][ T6550] usb 1-1: USB disconnect, device number 20 [ 302.209536][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.216670][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.295878][ T7193] device bridge_slave_1 entered promiscuous mode [ 302.434781][ T7193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.476261][ T7193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.689449][ T7325] loop0: detected capacity change from 0 to 1024 [ 302.763711][ T7325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.817422][ T7193] team0: Port device team_slave_0 added [ 303.178966][ T48] Bluetooth: hci2: command tx timeout [ 303.979331][ T3557] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 305.234430][ T7372] loop0: detected capacity change from 0 to 256 [ 305.281770][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 305.281784][ T26] audit: type=1326 audit(1720571805.677:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 305.389170][ T26] audit: type=1326 audit(1720571805.677:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 305.394806][ T7372] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 305.455709][ T26] audit: type=1326 audit(1720571805.677:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 305.500906][ T26] audit: type=1326 audit(1720571805.677:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 305.581557][ T26] audit: type=1326 audit(1720571805.677:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 305.638610][ T26] audit: type=1326 audit(1720571805.677:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 305.719283][ T26] audit: type=1326 audit(1720571805.677:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 305.775467][ T26] audit: type=1326 audit(1720571805.717:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 305.848840][ T26] audit: type=1326 audit(1720571805.717:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 305.899395][ T26] audit: type=1326 audit(1720571805.717:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 306.129425][ T7378] loop0: detected capacity change from 0 to 256 [ 306.183462][ T7378] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 306.914886][ T7395] autofs4:pid:7395:autofs_fill_super: called with bogus options [ 308.744283][ T7411] loop0: detected capacity change from 0 to 32768 [ 309.131506][ T7423] autofs4:pid:7423:autofs_fill_super: called with bogus options [ 309.422300][ T3557] Bluetooth: hci3: command 0x0406 tx timeout [ 310.326895][ T7193] team0: Port device team_slave_1 added [ 310.456470][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.512302][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.586605][ T7193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.631748][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.652573][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.769430][ T7193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.942218][ T7449] loop0: detected capacity change from 0 to 512 [ 310.951244][ T7449] ext4: Unknown parameter 'smackfsroot' [ 311.744582][ T7193] device hsr_slave_0 entered promiscuous mode [ 311.775191][ T7455] autofs4:pid:7455:autofs_fill_super: called with bogus options [ 311.786135][ T7193] device hsr_slave_1 entered promiscuous mode [ 311.861229][ T7193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.903631][ T7193] Cannot create hsr debugfs directory [ 312.011484][ T7463] loop0: detected capacity change from 0 to 1024 [ 312.101806][ T7463] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 312.237672][ T7447] loop4: detected capacity change from 0 to 32768 [ 312.403788][ T3618] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 312.489409][ T3618] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 48 with error 28 [ 312.532862][ T3618] EXT4-fs (loop0): This should not happen!! Data will be lost [ 312.532862][ T3618] [ 312.576314][ T3618] EXT4-fs (loop0): Total free blocks count 0 [ 312.582354][ T3618] EXT4-fs (loop0): Free/Dirty block details [ 312.693424][ T3618] EXT4-fs (loop0): free_blocks=68451041280 [ 312.763140][ T3618] EXT4-fs (loop0): dirty_blocks=48 [ 312.785262][ T3618] EXT4-fs (loop0): Block reservation details [ 312.803427][ T3618] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 312.827219][ T3547] EXT4-fs (loop0): unmounting filesystem. [ 313.194255][ T7502] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 314.353042][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 314.353056][ T26] audit: type=1326 audit(1720571814.733:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 314.587741][ T26] audit: type=1326 audit(1720571814.733:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 314.655336][ T7193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.681499][ T7193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.691816][ T26] audit: type=1326 audit(1720571814.733:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 314.737124][ T7193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 314.752377][ T7515] loop0: detected capacity change from 0 to 512 [ 314.776017][ T7193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.787665][ T26] audit: type=1326 audit(1720571814.733:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 314.920273][ T26] audit: type=1326 audit(1720571814.733:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 315.007631][ T7193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.030317][ T26] audit: type=1326 audit(1720571814.733:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 315.067738][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.076371][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.096679][ T7193] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.120834][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.140131][ T26] audit: type=1326 audit(1720571814.733:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 315.172895][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.201677][ T7515] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 315.253564][ T7515] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038 (0x7fffffff) [ 315.293641][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.300826][ T3627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.315593][ T26] audit: type=1326 audit(1720571814.733:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 315.361035][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 315.369154][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.387975][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.399314][ T26] audit: type=1326 audit(1720571814.733:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 315.424730][ T7517] loop1: detected capacity change from 0 to 32768 [ 315.440307][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.447434][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.464337][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.489205][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.506582][ T26] audit: type=1326 audit(1720571814.733:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 315.547751][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.577269][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.610070][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.637100][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.656277][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.664549][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.698096][ T7193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.729696][ T3547] EXT4-fs (loop0): unmounting filesystem. [ 315.822699][ T7193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.914420][ T7524] loop4: detected capacity change from 0 to 2048 [ 316.027434][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 316.041429][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 316.050789][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.106383][ T7524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 316.128087][ T7531] loop1: detected capacity change from 0 to 1024 [ 316.227666][ T7527] loop0: detected capacity change from 0 to 256 [ 316.254776][ T7524] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 316.298900][ T7531] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 316.299119][ T7527] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 316.337953][ T7524] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4095 with max blocks 2 with error 28 [ 316.402264][ T7538] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 316.469634][ T3760] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 316.501013][ T7524] EXT4-fs (loop4): This should not happen!! Data will be lost [ 316.501013][ T7524] [ 316.516462][ T3760] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 48 with error 28 [ 316.539140][ T7524] EXT4-fs (loop4): Total free blocks count 0 [ 316.571402][ T3760] EXT4-fs (loop1): This should not happen!! Data will be lost [ 316.571402][ T3760] [ 316.640472][ T7538] EXT4-fs (loop4): This should not happen!! Data will be lost [ 316.640472][ T7538] [ 316.669657][ T3760] EXT4-fs (loop1): Total free blocks count 0 [ 316.693738][ T3760] EXT4-fs (loop1): Free/Dirty block details [ 316.700041][ T7538] EXT4-fs (loop4): Total free blocks count 0 [ 316.700084][ T7524] EXT4-fs (loop4): Free/Dirty block details [ 316.722759][ T3760] EXT4-fs (loop1): free_blocks=68451041280 [ 316.728944][ T7538] EXT4-fs (loop4): Free/Dirty block details [ 316.734946][ T7538] EXT4-fs (loop4): free_blocks=2415919104 [ 316.740786][ T3760] EXT4-fs (loop1): dirty_blocks=48 [ 316.747291][ T3760] EXT4-fs (loop1): Block reservation details [ 316.753409][ T3760] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 316.781743][ T5522] EXT4-fs (loop1): unmounting filesystem. [ 316.835417][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.861124][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.896298][ T3593] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 316.913480][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.941035][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 316.951278][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 316.981399][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 316.990450][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.009116][ T7193] device veth0_vlan entered promiscuous mode [ 317.019872][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 317.029350][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 317.049652][ T7193] device veth1_vlan entered promiscuous mode [ 317.065221][ T7554] loop1: detected capacity change from 0 to 512 [ 317.091751][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 317.115469][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 317.131189][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.141704][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.155456][ T7193] device veth0_macvtap entered promiscuous mode [ 317.179904][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 317.192656][ T7193] device veth1_macvtap entered promiscuous mode [ 317.224193][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.239199][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.250307][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.264014][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.277783][ T3593] usb 5-1: config index 0 descriptor too short (expected 20498, got 18) [ 317.291093][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.302746][ T3593] usb 5-1: New USB device found, idVendor=04b4, idProduct=bd29, bcdDevice= 0.c7 [ 317.316058][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.329593][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.338508][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.363203][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.377152][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.392028][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.414289][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.425680][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 317.439405][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 317.450955][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.464432][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.478729][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.492005][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.505480][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.520398][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.530637][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.554161][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.577144][ T7554] EXT4-fs (loop1): 1 orphan inode deleted [ 317.589202][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.595577][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.633793][ T7554] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 317.667994][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.684905][ T14] usb 5-1: USB disconnect, device number 19 [ 317.694536][ T7554] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038 (0x7fffffff) [ 317.749187][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.819600][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.872288][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 317.883374][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 317.917664][ T7193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.941143][ T7193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.991412][ T7193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.027158][ T7193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.598458][ T3760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.640106][ T3760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.691786][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 318.742819][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.774352][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.819874][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 318.829402][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 318.880346][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 319.542852][ T7592] loop0: detected capacity change from 0 to 1024 [ 319.586726][ T7592] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.451714][ T3760] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.798898][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 320.798913][ T26] audit: type=1326 audit(1720571821.190:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 320.921983][ T3760] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.934113][ T26] audit: type=1326 audit(1720571821.220:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 320.961746][ T7590] loop4: detected capacity change from 0 to 32768 [ 320.997578][ T26] audit: type=1326 audit(1720571821.220:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 321.132945][ T26] audit: type=1326 audit(1720571821.220:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 321.168131][ T3760] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.185762][ T26] audit: type=1326 audit(1720571821.240:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 321.217584][ T26] audit: type=1326 audit(1720571821.240:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 321.257754][ T26] audit: type=1326 audit(1720571821.240:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 321.343719][ T26] audit: type=1326 audit(1720571821.240:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 321.401497][ T3760] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.435452][ T26] audit: type=1326 audit(1720571821.240:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 321.477848][ T26] audit: type=1326 audit(1720571821.240:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 321.520635][ T5522] EXT4-fs (loop1): unmounting filesystem. [ 323.008292][ T3596] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 323.016485][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.052856][ T3560] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.061670][ T3560] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.070285][ T3560] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.097662][ T3560] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 323.111066][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 323.122768][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 323.123016][ T3560] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.388650][ T3596] usb 4-1: config index 0 descriptor too short (expected 25970, got 36) [ 323.410579][ T3596] usb 4-1: config 116 has too many interfaces: 99, using maximum allowed: 32 [ 323.524974][ T3596] usb 4-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 323.585407][ T3760] device hsr_slave_0 left promiscuous mode [ 323.624109][ T3760] device hsr_slave_1 left promiscuous mode [ 323.636118][ T3596] usb 4-1: config 116 has 0 interfaces, different from the descriptor's value: 99 [ 323.664466][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.693748][ T3596] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 323.701481][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.764698][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.799602][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.809079][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.871545][ T3760] device bridge_slave_1 left promiscuous mode [ 323.894984][ T3760] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.978937][ T3760] device bridge_slave_0 left promiscuous mode [ 323.989275][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.130984][ T3760] device veth1_macvtap left promiscuous mode [ 324.151216][ T3760] device veth0_macvtap left promiscuous mode [ 324.157344][ T3760] device veth1_vlan left promiscuous mode [ 324.180884][ T7641] input: syz1 as /devices/virtual/input/input13 [ 324.209499][ T3760] device veth0_vlan left promiscuous mode [ 324.260217][ T7636] loop0: detected capacity change from 0 to 40427 [ 324.317391][ T7636] F2FS-fs (loop0): invalid crc value [ 324.354282][ T3588] usb 4-1: USB disconnect, device number 14 [ 324.394606][ T7636] F2FS-fs (loop0): Found nat_bits in checkpoint [ 324.463853][ T7673] loop4: detected capacity change from 0 to 1024 [ 324.524388][ T7673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.535670][ T7636] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 324.622651][ T7681] loop1: detected capacity change from 0 to 512 [ 324.639336][ T7636] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 324.695968][ T7636] syz.0.902: attempt to access beyond end of device [ 324.695968][ T7636] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 324.754268][ T7681] EXT4-fs (loop1): 1 orphan inode deleted [ 324.782041][ T7681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 324.811072][ T7681] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038 (0x7fffffff) [ 325.192580][ T3557] Bluetooth: hci2: command tx timeout [ 326.115395][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 326.115410][ T26] audit: type=1326 audit(1720571826.498:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 326.208098][ T26] audit: type=1326 audit(1720571826.498:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 326.244574][ T26] audit: type=1326 audit(1720571826.498:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 326.283229][ T26] audit: type=1326 audit(1720571826.498:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 326.342509][ T26] audit: type=1326 audit(1720571826.498:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 326.393306][ T26] audit: type=1326 audit(1720571826.498:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 326.435521][ T26] audit: type=1326 audit(1720571826.498:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 326.484809][ T26] audit: type=1326 audit(1720571826.498:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 326.560284][ T26] audit: type=1326 audit(1720571826.498:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 326.586698][ T3760] team0 (unregistering): Port device team_slave_1 removed [ 326.607354][ T26] audit: type=1326 audit(1720571826.498:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.0.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5749d75bd9 code=0x7ffc0000 [ 326.662908][ T3760] team0 (unregistering): Port device team_slave_0 removed [ 326.729200][ T3760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.791741][ T3557] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 326.803175][ T3557] Bluetooth: hci5: Injecting HCI hardware error event [ 326.812668][ T3760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.814010][ T3557] Bluetooth: hci5: hardware error 0x00 [ 327.270604][ T3560] Bluetooth: hci2: command tx timeout [ 327.403005][ T7707] loop0: detected capacity change from 0 to 2048 [ 327.493080][ T7707] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 328.760910][ T3760] bond0 (unregistering): Released all slaves [ 328.863081][ T7714] loop4: detected capacity change from 0 to 512 [ 328.871204][ T3557] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 328.941090][ T7714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 329.072587][ T7714] EXT4-fs (loop4): 1 orphan inode deleted [ 329.078617][ T7714] EXT4-fs (loop4): 1 truncate cleaned up [ 329.090912][ T7714] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 329.136002][ T3547] EXT4-fs (loop0): unmounting filesystem. [ 329.148734][ T7714] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 329.180033][ T7714] EXT4-fs (loop4): Remounting filesystem read-only [ 329.269679][ T5522] EXT4-fs (loop1): unmounting filesystem. [ 329.302110][ T5802] EXT4-fs (loop4): unmounting filesystem. [ 329.354550][ T3557] Bluetooth: hci2: command tx timeout [ 329.522842][ T7649] chnl_net:caif_netlink_parms(): no params data found [ 330.012209][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.031048][ T6550] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 330.083527][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.109696][ T7649] device bridge_slave_0 entered promiscuous mode [ 330.138102][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.167679][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.190286][ T7649] device bridge_slave_1 entered promiscuous mode [ 330.281309][ T6550] usb 1-1: Using ep0 maxpacket: 32 [ 330.286781][ T7649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.327487][ T7649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.401827][ T6550] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 330.429827][ T6550] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 330.464663][ T6550] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 330.496574][ T6550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.526060][ T6550] usb 1-1: config 0 descriptor?? [ 330.557445][ T7649] team0: Port device team_slave_0 added [ 330.564055][ T7743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 330.580948][ T7738] loop1: detected capacity change from 0 to 40427 [ 330.586671][ T7649] team0: Port device team_slave_1 added [ 330.594802][ T6550] hub 1-1:0.0: USB hub found [ 330.673999][ T7738] F2FS-fs (loop1): invalid crc value [ 330.753832][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.767650][ T7738] F2FS-fs (loop1): Found nat_bits in checkpoint [ 330.774327][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.808890][ T6550] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 330.909282][ T7649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.976242][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.997756][ T7738] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 331.026804][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.092637][ T7649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.104001][ T7738] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 331.202409][ T7649] device hsr_slave_0 entered promiscuous mode [ 331.219886][ T7649] device hsr_slave_1 entered promiscuous mode [ 331.229738][ T7738] syz.1.921: attempt to access beyond end of device [ 331.229738][ T7738] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 331.259115][ T7649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.281740][ T7649] Cannot create hsr debugfs directory [ 331.421818][ T6550] usbhid 1-1:0.0: can't add hid device: -32 [ 331.427944][ T6550] usbhid: probe of 1-1:0.0 failed with error -32 [ 331.431615][ T3557] Bluetooth: hci2: command tx timeout [ 332.374763][ T7649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 332.437982][ T7649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.510213][ T7649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.550783][ T7649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 332.893780][ T3588] usb 1-1: USB disconnect, device number 21 [ 333.063376][ T7802] loop1: detected capacity change from 0 to 512 [ 333.291558][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'. [ 333.883450][ T7802] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 333.923852][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.934853][ T7802] EXT4-fs (loop1): orphan cleanup on readonly fs [ 333.974559][ T7802] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.936: bad orphan inode 15 [ 334.020459][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.032198][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.049177][ T7802] ext4_test_bit(bit=14, block=18) = 1 [ 334.080785][ T7802] is_bad_inode(inode)=0 [ 334.097496][ T7649] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.111576][ T7802] NEXT_ORPHAN(inode)=1023 [ 334.129920][ T7802] max_ino=32 [ 334.134601][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.149421][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.166304][ T7802] i_nlink=0 [ 334.182529][ T7802] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2926: inode #15: comm syz.1.936: corrupted xattr block 19 [ 334.199386][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.206570][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.229691][ T7802] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 334.267838][ T7802] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 334.277608][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.293543][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.317731][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.345039][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.352210][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.380925][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.398221][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.427378][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.449993][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.459719][ T5522] EXT4-fs (loop1): unmounting filesystem. [ 334.486306][ T7649] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.527802][ T7649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.578893][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.591576][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.603127][ T6550] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 334.621460][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.651128][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.672407][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.781606][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.824244][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.861686][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 334.861696][ T26] audit: type=1326 audit(1720571835.235:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 334.899608][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.981839][ T26] audit: type=1326 audit(1720571835.235:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 335.043161][ T6550] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.069854][ T6550] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.102481][ T26] audit: type=1326 audit(1720571835.235:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 335.133475][ T6550] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 335.149251][ T6550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.181190][ T6550] usb 1-1: config 0 descriptor?? [ 335.198699][ T26] audit: type=1326 audit(1720571835.235:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 335.299732][ T26] audit: type=1326 audit(1720571835.235:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 335.348702][ T26] audit: type=1326 audit(1720571835.235:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 335.391739][ T26] audit: type=1326 audit(1720571835.235:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 335.437596][ T26] audit: type=1326 audit(1720571835.235:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 335.444339][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.467670][ T26] audit: type=1326 audit(1720571835.235:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 335.508073][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.527657][ T7649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.537451][ T26] audit: type=1326 audit(1720571835.265:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 335.578809][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.596830][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.656819][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.670593][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.684960][ T7649] device veth0_vlan entered promiscuous mode [ 335.691744][ T152] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 335.708980][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.722175][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.736163][ T7649] device veth1_vlan entered promiscuous mode [ 335.787365][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 335.799675][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 335.808798][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 335.818618][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 335.838032][ T7649] device veth0_macvtap entered promiscuous mode [ 335.853832][ T7649] device veth1_macvtap entered promiscuous mode [ 335.878890][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.907020][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.918888][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.937880][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.963665][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.989143][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.028983][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.039923][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.050464][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.061382][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.075189][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.091075][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.099518][ T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.111952][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.119987][ T3701] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 336.127761][ T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.140039][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.148717][ T152] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 336.159910][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.168556][ T152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.180070][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.195909][ T152] usb 4-1: config 0 descriptor?? [ 336.201039][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.211799][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.236402][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.253599][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.271990][ T7834] loop4: detected capacity change from 0 to 2048 [ 336.278512][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.288464][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.300378][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.311942][ T7649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.332399][ T7649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.352130][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.364862][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.380008][ T3701] usb 2-1: Using ep0 maxpacket: 32 [ 336.387835][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.394322][ T7834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 336.407403][ T7649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.434690][ T7649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.503460][ T3701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 336.516609][ T3701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 336.528040][ T3701] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 336.537378][ T152] usbhid 4-1:0.0: can't add hid device: -71 [ 336.547040][ T3701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.555459][ T152] usbhid: probe of 4-1:0.0 failed with error -71 [ 336.585380][ T7649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.597281][ T152] usb 4-1: USB disconnect, device number 15 [ 336.604648][ T3701] usb 2-1: config 0 descriptor?? [ 336.605370][ T7649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.624599][ T7829] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 336.638273][ T6550] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000C/input/input14 [ 336.645494][ T3701] hub 2-1:0.0: USB hub found [ 337.243782][ T3701] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 337.269980][ T6550] uclogic 0003:256C:006D.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 337.272163][ T5802] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 337.288849][ T6550] usb 1-1: USB disconnect, device number 22 [ 337.433694][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.441973][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.452188][ T5802] EXT4-fs (loop4): unmounting filesystem. [ 337.469676][ T7601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.507666][ T7601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.555995][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 337.575567][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 337.683789][ T3701] usbhid 2-1:0.0: can't add hid device: -32 [ 337.692165][ T3701] usbhid: probe of 2-1:0.0 failed with error -32 [ 338.154216][ T3701] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 338.434701][ T3701] usb 4-1: Using ep0 maxpacket: 16 [ 338.556021][ T3701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.822180][ T3701] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 338.839554][ T3701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.848148][ T3701] usb 4-1: Product: syz [ 338.859575][ T3701] usb 4-1: Manufacturer: syz [ 338.867645][ T3701] usb 4-1: SerialNumber: syz [ 338.890870][ T3701] usb 4-1: config 0 descriptor?? [ 338.937643][ T3701] gspca_main: etoms-2.14.0 probing 102c:6151 [ 339.208584][ T3593] usb 2-1: USB disconnect, device number 8 [ 339.331772][ T4387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.771736][ T4387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.892525][ T4387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.050674][ T4387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.195912][ T3596] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 341.385001][ T3596] usb 1-1: device descriptor read/64, error -71 [ 341.407417][ T3701] usb 4-1: USB disconnect, device number 16 [ 341.544291][ T3557] Bluetooth: hci3: unexpected event for opcode 0x080f [ 342.326535][ T3535] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 342.374652][ T3596] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 342.522829][ T3560] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.535056][ T3560] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.543933][ T3560] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.553574][ T3560] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.562980][ T3560] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.565250][ T3596] usb 1-1: device descriptor read/64, error -71 [ 342.576687][ T3560] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.745109][ T3596] usb usb1-port1: attempt power cycle [ 342.867078][ T3535] usb 2-1: config index 0 descriptor too short (expected 25970, got 36) [ 342.885594][ T3535] usb 2-1: config 116 has too many interfaces: 99, using maximum allowed: 32 [ 342.894456][ T3535] usb 2-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 342.920639][ T3535] usb 2-1: config 116 has 0 interfaces, different from the descriptor's value: 99 [ 342.933542][ T3535] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 342.955902][ T3535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.052988][ T4387] device hsr_slave_0 left promiscuous mode [ 343.060357][ T4387] device hsr_slave_1 left promiscuous mode [ 343.073207][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.081559][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.098702][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.125724][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.136164][ T4387] device bridge_slave_1 left promiscuous mode [ 343.142419][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.156209][ T4387] device bridge_slave_0 left promiscuous mode [ 343.163244][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.171493][ T3596] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 343.219112][ T4387] device veth1_macvtap left promiscuous mode [ 343.225330][ T4387] device veth0_macvtap left promiscuous mode [ 343.251890][ T4387] device veth1_vlan left promiscuous mode [ 343.269203][ T4387] device veth0_vlan left promiscuous mode [ 343.275867][ T3596] usb 1-1: device descriptor read/8, error -71 [ 343.380390][ T7885] input: syz1 as /devices/virtual/input/input15 [ 343.395684][ T3588] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 343.403597][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 343.403612][ T26] audit: type=1326 audit(1720571843.772:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 343.455244][ T26] audit: type=1326 audit(1720571843.772:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 343.494414][ T7] usb 2-1: USB disconnect, device number 9 [ 343.498762][ T26] audit: type=1326 audit(1720571843.772:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 343.551259][ T26] audit: type=1326 audit(1720571843.772:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 343.560581][ T3596] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 343.613433][ T26] audit: type=1326 audit(1720571843.772:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 343.677621][ T26] audit: type=1326 audit(1720571843.772:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 343.683375][ T3596] usb 1-1: device descriptor read/8, error -71 [ 343.699951][ T26] audit: type=1326 audit(1720571843.772:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 343.735716][ T26] audit: type=1326 audit(1720571843.772:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 343.759796][ T26] audit: type=1326 audit(1720571843.772:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 343.769965][ T3588] usb 4-1: Using ep0 maxpacket: 32 [ 343.788641][ T26] audit: type=1326 audit(1720571843.772:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.4.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785c975bd9 code=0x7ffc0000 [ 343.826985][ T3596] usb usb1-port1: unable to enumerate USB device [ 343.937742][ T3588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 343.955610][ T3588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 343.982558][ T3588] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 344.075763][ T3588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.116948][ T3588] usb 4-1: config 0 descriptor?? [ 344.139317][ T7905] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 344.202811][ T3588] hub 4-1:0.0: USB hub found [ 344.436159][ T3588] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 344.446026][ T3589] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 344.635981][ T3557] Bluetooth: hci2: command tx timeout [ 344.693798][ T3589] usb 5-1: Using ep0 maxpacket: 16 [ 344.860712][ T4387] team0 (unregistering): Port device team_slave_1 removed [ 344.906420][ T3589] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.925932][ T3589] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.945959][ T3589] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 344.965953][ T3589] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 344.975749][ T3589] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 345.013817][ T3589] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 345.026776][ T4387] team0 (unregistering): Port device team_slave_0 removed [ 345.037155][ T3588] usbhid 4-1:0.0: can't add hid device: -32 [ 345.043748][ T3588] usbhid: probe of 4-1:0.0 failed with error -32 [ 345.155396][ T4387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.206631][ T3589] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.236808][ T3589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.244854][ T3589] usb 5-1: Product: syz [ 345.259963][ T3589] usb 5-1: Manufacturer: syz [ 345.270088][ T3589] usb 5-1: SerialNumber: syz [ 345.282105][ T4387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.556528][ T3589] cdc_ncm 5-1:1.0: bind() failure [ 345.591065][ T3589] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 345.601193][ T3557] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 345.605705][ T3589] cdc_ncm 5-1:1.1: bind() failure [ 345.610202][ T3557] Bluetooth: hci3: Injecting HCI hardware error event [ 345.625738][ T3557] Bluetooth: hci3: hardware error 0x00 [ 345.640297][ T3589] usb 5-1: USB disconnect, device number 20 [ 346.221362][ T4387] bond0 (unregistering): Released all slaves [ 346.666657][ T3589] usb 4-1: USB disconnect, device number 17 [ 346.716841][ T3560] Bluetooth: hci2: command tx timeout [ 347.577252][ T7929] loop1: detected capacity change from 0 to 2048 [ 347.756781][ T3557] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 347.827302][ T7929] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 348.765165][ T7892] chnl_net:caif_netlink_parms(): no params data found [ 348.797473][ T3557] Bluetooth: hci2: command tx timeout [ 349.261077][ T5522] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 349.399008][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.409739][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.456917][ T7892] device bridge_slave_0 entered promiscuous mode [ 349.488755][ T5522] EXT4-fs (loop1): unmounting filesystem. [ 349.495188][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.534993][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.575048][ T7892] device bridge_slave_1 entered promiscuous mode [ 349.705874][ T7892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.774131][ T7892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.993362][ T7892] team0: Port device team_slave_0 added [ 350.032500][ T7892] team0: Port device team_slave_1 added [ 350.203284][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.220591][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.248155][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 350.352185][ T7892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.407450][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.437496][ T7] usb 2-1: device descriptor read/64, error -71 [ 350.455599][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.573691][ T7892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.702137][ T7892] device hsr_slave_0 entered promiscuous mode [ 350.708499][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 350.734661][ T7892] device hsr_slave_1 entered promiscuous mode [ 350.757595][ T7892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.785620][ T7892] Cannot create hsr debugfs directory [ 350.878215][ T3560] Bluetooth: hci2: command tx timeout [ 350.897655][ T7] usb 2-1: device descriptor read/64, error -71 [ 351.018405][ T7] usb usb2-port1: attempt power cycle [ 351.052437][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 351.052453][ T26] audit: type=1326 audit(1720571851.430:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 351.927926][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 351.971078][ T26] audit: type=1326 audit(1720571851.490:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 352.018252][ T7] usb 2-1: device descriptor read/8, error -71 [ 352.102515][ T26] audit: type=1326 audit(1720571851.490:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 352.192184][ T26] audit: type=1326 audit(1720571851.490:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 352.226121][ T26] audit: type=1326 audit(1720571851.500:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 352.315748][ T26] audit: type=1326 audit(1720571851.510:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 352.433545][ T26] audit: type=1326 audit(1720571851.510:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 352.448065][ T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 352.463506][ T3593] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 352.658412][ T7] usb 2-1: device descriptor read/8, error -71 [ 352.743477][ T3593] usb 1-1: Using ep0 maxpacket: 32 [ 352.848996][ T7] usb usb2-port1: unable to enumerate USB device [ 352.869217][ T3593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 353.026769][ T3593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 353.118217][ T26] audit: type=1326 audit(1720571851.510:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 353.211979][ T3593] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 353.237454][ T3593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.278525][ T26] audit: type=1326 audit(1720571851.510:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 353.299341][ T3593] usb 1-1: config 0 descriptor?? [ 353.340575][ T7985] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 353.359787][ T3593] hub 1-1:0.0: USB hub found [ 353.374070][ T26] audit: type=1326 audit(1720571851.530:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f4b75bd9 code=0x7ffc0000 [ 353.658484][ T3593] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 354.618734][ T14] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 354.668768][ T3593] usbhid 1-1:0.0: can't add hid device: -32 [ 354.675724][ T3593] usbhid: probe of 1-1:0.0 failed with error -32 [ 354.802047][ T7892] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 354.833340][ T7892] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 354.896848][ T7892] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 354.920244][ T7892] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 354.998862][ T14] usb 5-1: config index 0 descriptor too short (expected 68, got 36) [ 355.017999][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.082365][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.159392][ T14] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 355.301738][ T7892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.513846][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.547505][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.648038][ T7892] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.739363][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.751759][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.769976][ T14] usb 5-1: config 0 descriptor?? [ 355.851290][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.866793][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.873969][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.082195][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.091523][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.100898][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.110734][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.117850][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.125855][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.138173][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.771886][ T14] hid-rmi 0003:06CB:81A7.000D: unknown main item tag 0x0 [ 356.780400][ T7] usb 1-1: USB disconnect, device number 27 [ 356.793737][ T14] hid-rmi 0003:06CB:81A7.000D: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 356.807477][ T14] usb 5-1: USB disconnect, device number 21 [ 356.927895][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.952502][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.990250][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 357.016599][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 357.050216][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.076978][ T8058] loop1: detected capacity change from 0 to 256 [ 357.085110][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.120185][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.148466][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 357.160869][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.170972][ T8058] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 357.192952][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.220361][ T6548] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 358.354694][ T7892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.410568][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.418101][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.482007][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.502119][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.644281][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.677580][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.741644][ T7892] device veth0_vlan entered promiscuous mode [ 358.799731][ T6548] usb 5-1: config index 0 descriptor too short (expected 25970, got 36) [ 358.845356][ T6548] usb 5-1: config 116 has too many interfaces: 99, using maximum allowed: 32 [ 358.969490][ T6548] usb 5-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 359.046454][ T7892] device veth1_vlan entered promiscuous mode [ 359.175006][ T6548] usb 5-1: config 116 has 0 interfaces, different from the descriptor's value: 99 [ 359.411263][ T6548] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 359.452797][ T6548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.461681][ T7892] device veth0_macvtap entered promiscuous mode [ 359.500563][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.508492][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.516525][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 359.526542][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 359.535660][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 359.544637][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 359.558349][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 359.597741][ T7892] device veth1_macvtap entered promiscuous mode [ 359.630730][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.649917][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.682477][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.710396][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.729765][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.749753][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.779790][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.806333][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.817897][ T8086] input: syz1 as /devices/virtual/input/input16 [ 359.869833][ T3535] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 359.879813][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.919989][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.958060][ T7892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.967100][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.987775][ T3588] usb 5-1: USB disconnect, device number 22 [ 359.989608][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 360.026169][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.066320][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.080378][ T3535] usb 1-1: device descriptor read/64, error -71 [ 360.090054][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.119841][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.129718][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.169832][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.179686][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.215443][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.230144][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.250941][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.269108][ T7892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.291740][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 360.301561][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 360.333260][ T7892] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.360313][ T3535] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 360.373586][ T7892] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.396310][ T7892] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.415774][ T7892] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.537304][ T8102] loop1: detected capacity change from 0 to 40427 [ 360.560661][ T3535] usb 1-1: device descriptor read/64, error -71 [ 360.597603][ T8102] F2FS-fs (loop1): invalid crc value [ 360.604058][ T7601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.621090][ T7601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.640444][ T8102] F2FS-fs (loop1): Found nat_bits in checkpoint [ 360.661129][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 360.681019][ T3535] usb usb1-port1: attempt power cycle [ 360.721806][ T4142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.744662][ T4142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.770854][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 360.800827][ T8102] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 361.126177][ T3535] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 361.370406][ T3535] usb 1-1: device descriptor read/8, error -71 [ 361.402677][ T3618] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.538585][ T3618] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.640285][ T3535] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 361.725778][ T5522] syz-executor: attempt to access beyond end of device [ 361.725778][ T5522] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 361.750525][ T3535] usb 1-1: device descriptor read/8, error -71 [ 361.863526][ T3618] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.882714][ T3535] usb usb1-port1: unable to enumerate USB device [ 362.023077][ T3618] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.481930][ T3557] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.493210][ T3557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.504570][ T3557] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.513761][ T3557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.522955][ T3557] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 364.530275][ T3557] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.267815][ T8191] chnl_net:caif_netlink_parms(): no params data found [ 365.431079][ T3588] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 365.671217][ T3535] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 365.741747][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.748930][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.765100][ T8191] device bridge_slave_0 entered promiscuous mode [ 365.781653][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.807114][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.816994][ T8191] device bridge_slave_1 entered promiscuous mode [ 365.831417][ T3588] usb 2-1: config index 0 descriptor too short (expected 25970, got 36) [ 365.840328][ T3588] usb 2-1: config 116 has too many interfaces: 99, using maximum allowed: 32 [ 365.861147][ T3588] usb 2-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 365.871824][ T3535] usb 5-1: device descriptor read/64, error -71 [ 365.881661][ T3618] device hsr_slave_0 left promiscuous mode [ 365.888440][ T3588] usb 2-1: config 116 has 0 interfaces, different from the descriptor's value: 99 [ 365.898154][ T3588] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 365.913917][ T3588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.921597][ T3618] device hsr_slave_1 left promiscuous mode [ 365.941402][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.966742][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.999168][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.025170][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.043079][ T3618] device bridge_slave_1 left promiscuous mode [ 366.061389][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.073308][ T3618] device bridge_slave_0 left promiscuous mode [ 366.097090][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.188756][ T3618] device veth1_macvtap left promiscuous mode [ 366.208599][ T3618] device veth0_macvtap left promiscuous mode [ 366.231359][ T3618] device veth1_vlan left promiscuous mode [ 366.265104][ T8200] input: syz1 as /devices/virtual/input/input17 [ 366.276688][ T3618] device veth0_vlan left promiscuous mode [ 366.305915][ T3535] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 366.317838][ T3589] usb 2-1: USB disconnect, device number 14 [ 366.521443][ T3535] usb 5-1: device descriptor read/64, error -71 [ 366.568693][ T3557] Bluetooth: hci2: command tx timeout [ 366.641715][ T3535] usb usb5-port1: attempt power cycle [ 367.081545][ T3535] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 367.191830][ T3535] usb 5-1: device descriptor read/8, error -71 [ 367.414284][ T3618] team0 (unregistering): Port device team_slave_1 removed [ 367.477536][ T3535] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 367.486979][ T3618] team0 (unregistering): Port device team_slave_0 removed [ 367.542407][ T3618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.586240][ T3535] usb 5-1: device descriptor read/8, error -71 [ 367.603002][ T3618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.723808][ T3535] usb usb5-port1: unable to enumerate USB device [ 368.290930][ T3618] bond0 (unregistering): Released all slaves [ 368.574729][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.720310][ T3557] Bluetooth: hci2: command tx timeout [ 368.989391][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.684577][ T8191] team0: Port device team_slave_0 added [ 369.716835][ T8191] team0: Port device team_slave_1 added [ 370.019335][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.046439][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.350655][ T8191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.693901][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.700882][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.829466][ T3560] Bluetooth: hci2: command tx timeout [ 370.917790][ T8191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.218928][ T8191] device hsr_slave_0 entered promiscuous mode [ 371.232245][ T3588] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 371.462640][ T3588] usb 2-1: device descriptor read/64, error -71 [ 371.752844][ T3588] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 371.951646][ T8191] device hsr_slave_1 entered promiscuous mode [ 371.986888][ T8191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.992354][ T7] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 372.012339][ T8191] Cannot create hsr debugfs directory [ 372.122602][ T3588] usb 2-1: device descriptor read/64, error -71 [ 372.245232][ T3588] usb usb2-port1: attempt power cycle [ 372.617645][ T7] usb 1-1: config index 0 descriptor too short (expected 25970, got 36) [ 372.626146][ T7] usb 1-1: config 116 has too many interfaces: 99, using maximum allowed: 32 [ 372.634996][ T7] usb 1-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 372.652549][ T7] usb 1-1: config 116 has 0 interfaces, different from the descriptor's value: 99 [ 372.682502][ T7] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 372.721008][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.926874][ T3588] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 372.935589][ T3560] Bluetooth: hci2: command tx timeout [ 373.022618][ T3588] usb 2-1: device descriptor read/8, error -71 [ 373.091063][ T8279] input: syz1 as /devices/virtual/input/input18 [ 373.226558][ T3535] usb 1-1: USB disconnect, device number 32 [ 373.302989][ T3588] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 373.422998][ T3588] usb 2-1: device descriptor read/8, error -71 [ 373.542862][ T3588] usb usb2-port1: unable to enumerate USB device [ 373.759828][ T8191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.942739][ T8191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.997206][ T8191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.078959][ T8191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.235610][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.284613][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 376.310856][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 376.398333][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.454869][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.510202][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.664643][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.676068][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 376.676083][ T26] audit: type=1326 audit(1720571877.044:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 376.730973][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.771779][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.779016][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.812545][ T26] audit: type=1326 audit(1720571877.044:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 376.883229][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.908988][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.932275][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.974649][ T26] audit: type=1326 audit(1720571877.074:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 377.004158][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.011307][ T6547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.039239][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 377.056158][ T26] audit: type=1326 audit(1720571877.074:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 377.095672][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 377.120774][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 377.133282][ T3627] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 377.142176][ T26] audit: type=1326 audit(1720571877.074:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 377.192401][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 377.251126][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 377.267275][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 377.275559][ T26] audit: type=1326 audit(1720571877.074:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 377.308592][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 377.320746][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 377.333556][ T26] audit: type=1326 audit(1720571877.074:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 377.381836][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.433493][ T3627] usb 4-1: Using ep0 maxpacket: 32 [ 377.436602][ T8191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.554729][ T26] audit: type=1326 audit(1720571877.074:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 377.594729][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 378.333601][ T3627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 378.373499][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 378.373555][ T3627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 378.392998][ T26] audit: type=1326 audit(1720571877.074:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 378.515809][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.544020][ T3627] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 378.622081][ T3627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.631566][ T26] audit: type=1326 audit(1720571877.074:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db4b75bd9 code=0x7ffc0000 [ 378.852527][ T3627] usb 4-1: config 0 descriptor?? [ 378.974942][ T8365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 379.014616][ T3627] hub 4-1:0.0: USB hub found [ 379.045692][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.052576][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.053666][ T27] INFO: task kworker/u4:9:3699 blocked for more than 143 seconds. [ 379.114939][ T27] Not tainted 6.1.97-syzkaller #0 [ 379.148544][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.189529][ T27] task:kworker/u4:9 state:D stack:20600 pid:3699 ppid:2 flags:0x00004000 [ 379.218020][ T27] Workqueue: writeback wb_workfn (flush-7:3) [ 379.223792][ T3627] hub 4-1:0.0: 2 ports detected [ 379.236443][ T27] Call Trace: [ 379.247612][ T27] [ 379.257297][ T27] __schedule+0x142d/0x4550 [ 379.271924][ T27] ? __sched_text_start+0x8/0x8 [ 379.288254][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 379.302702][ T27] ? blk_check_plugged+0x250/0x250 [ 379.321725][ T27] ? wq_worker_sleeping+0x5f/0x270 [ 379.341047][ T27] schedule+0xbf/0x180 [ 379.360329][ T27] schedule_preempt_disabled+0xf/0x20 [ 379.380051][ T27] __mutex_lock+0x6b9/0xd80 [ 379.391504][ T27] ? __mutex_lock+0x53c/0xd80 [ 379.402123][ T27] ? jfs_commit_inode+0x242/0x580 [ 379.412990][ T27] ? mutex_lock_nested+0x10/0x10 [ 379.423363][ T27] jfs_commit_inode+0x242/0x580 [ 379.436607][ T27] ? jfs_iget+0x3b0/0x3b0 [ 379.460710][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 379.478509][ T27] jfs_write_inode+0x13f/0x210 [ 379.493636][ T27] __writeback_single_inode+0x67d/0x11e0 [ 379.515881][ T27] writeback_sb_inodes+0xc2b/0x1b20 [ 379.526345][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 379.527982][ T27] ? queue_io+0x630/0x630 [ 379.544595][ T27] ? __writeback_inodes_wb+0x400/0x400 [ 379.548362][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 379.553529][ T27] __writeback_inodes_wb+0x114/0x400 [ 379.575662][ T27] wb_writeback+0x4b1/0xe10 [ 379.586074][ T27] ? percpu_ref_tryget+0x260/0x260 [ 379.594421][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.613159][ T27] ? _find_next_bit+0x11b/0x120 [ 379.631010][ T27] wb_workfn+0xc9e/0x1020 [ 379.649972][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.658522][ T27] ? inode_wait_for_writeback+0x280/0x280 [ 379.669648][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.682596][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 379.700034][ T27] ? print_irqtrace_events+0x210/0x210 [ 379.749993][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 379.758210][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.768986][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.777258][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 379.782728][ T27] ? process_one_work+0x7a9/0x11d0 [ 379.791306][ T8191] device veth0_vlan entered promiscuous mode [ 379.799641][ T27] process_one_work+0x8a9/0x11d0 [ 379.806177][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.815074][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.822463][ T27] ? worker_detach_from_pool+0x260/0x260 [ 379.835413][ T8191] device veth1_vlan entered promiscuous mode [ 379.842415][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 379.852663][ T27] ? kthread_data+0x4e/0xc0 [ 379.878963][ T27] ? wq_worker_running+0x97/0x190 [ 379.898180][ T27] worker_thread+0xa47/0x1200 [ 379.903006][ T27] ? _raw_spin_unlock+0x40/0x40 [ 379.921145][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 379.929308][ T27] kthread+0x28d/0x320 [ 379.935331][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 379.948530][ T27] ? worker_clr_flags+0x190/0x190 [ 379.958012][ T27] ? kthread_blkcg+0xd0/0xd0 [ 379.963501][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 379.979969][ T27] ret_from_fork+0x1f/0x30 [ 379.984780][ T27] [ 379.990497][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.093171][ T3627] usb 4-1: USB disconnect, device number 18 [ 380.099071][ T27] [ 380.099071][ T27] Showing all locks held in the system: [ 380.110074][ T27] 3 locks held by kworker/0:0/7: [ 380.118423][ T8191] device veth0_macvtap entered promiscuous mode [ 380.142869][ T27] #0: ffff8880b983aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 380.155711][ T8191] device veth1_macvtap entered promiscuous mode [ 380.165010][ T27] #1: ffff8880b9827788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 380.198823][ T27] #2: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: gc_worker+0x27a/0x1530 [ 380.227500][ T27] 1 lock held by rcu_tasks_kthre/12: [ 380.232830][ T27] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 380.264037][ T27] 1 lock held by rcu_tasks_trace/13: [ 380.274156][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.294536][ T27] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 380.314125][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.325148][ T27] 1 lock held by khungtaskd/27: [ 380.330024][ T27] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 380.349905][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.371086][ T27] 2 locks held by getty/3306: [ 380.379531][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.396703][ T27] #0: ffff88814bb37098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 380.414022][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.426827][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 380.444009][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.464688][ T27] 3 locks held by kworker/1:3/3588: [ 380.469932][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.481731][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.507154][ T27] #1: ffffc90003f4fd20 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.523889][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.538411][ T27] #2: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 380.553923][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.571964][ T27] 3 locks held by kworker/1:4/3589: [ 380.578550][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.589595][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.608111][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.634076][ T27] #1: ffffc90003f5fd20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.651329][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 380.660575][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.694150][ T27] #2: ffff888051a2d240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 380.705552][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.724256][ T27] 3 locks held by kworker/u4:7/3618: [ 380.729680][ T27] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.741515][ T6549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.761096][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.776991][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.788913][ T27] #1: ffffc90003fdfd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.796637][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.820025][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.820327][ T27] #2: [ 380.830860][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.849491][ T27] ffffffff8e28d810 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 380.853873][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.879035][ T27] 4 locks held by kworker/u4:9/3699: [ 380.883887][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.898428][ T27] #0: ffff888142aa2138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.903905][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.929198][ T27] #1: ffffc9000462fd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.938110][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.961537][ T27] #2: ffff88805ffa20e0 (&type->s_umount_key#96){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 380.971835][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.996605][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.003074][ T27] #3: ffff88805e493008 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x242/0x580 [ 381.017026][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.026516][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.033202][ T27] 4 locks held by syz.3.576/6245: [ 381.049001][ T8191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.054043][ T27] 2 locks held by kworker/1:16/6548: [ 381.063104][ T27] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 381.068180][ T8191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.092869][ T27] #1: ffffc90003a4fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 381.106081][ T8191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.119552][ T27] 2 locks held by syz-executor/8191: [ 381.130568][ T27] 2 locks held by rm/8409: [ 381.134920][ T8191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.139561][ T27] [ 381.153962][ T27] ============================================= [ 381.153962][ T27] [ 381.175459][ T27] NMI backtrace for cpu 0 [ 381.179843][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 381.187666][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 381.197743][ T27] Call Trace: [ 381.201040][ T27] [ 381.204032][ T27] dump_stack_lvl+0x1e3/0x2cb [ 381.208738][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 381.214224][ T27] ? panic+0x764/0x764 [ 381.218308][ T27] ? vprintk_emit+0x622/0x740 [ 381.223008][ T27] ? printk_sprint+0x490/0x490 [ 381.227796][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 381.232933][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 381.237900][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 381.244076][ T27] ? _printk+0xd1/0x111 [ 381.248252][ T27] ? panic+0x764/0x764 [ 381.252340][ T27] ? __wake_up_klogd+0xcc/0x100 [ 381.257206][ T27] ? panic+0x764/0x764 [ 381.261292][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 381.267387][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 381.273479][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 381.279489][ T27] watchdog+0xf88/0xfd0 [ 381.283675][ T27] ? watchdog+0x1f8/0xfd0 [ 381.288027][ T27] kthread+0x28d/0x320 [ 381.292110][ T27] ? hungtask_pm_notify+0x50/0x50 [ 381.297161][ T27] ? kthread_blkcg+0xd0/0xd0 [ 381.301770][ T27] ret_from_fork+0x1f/0x30 [ 381.306225][ T27] [ 381.310114][ T27] Sending NMI from CPU 0 to CPUs 1: [ 381.315578][ C1] NMI backtrace for cpu 1 [ 381.315589][ C1] CPU: 1 PID: 3702 Comm: kworker/u4:10 Not tainted 6.1.97-syzkaller #0 [ 381.315605][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 381.315613][ C1] Workqueue: bat_events batadv_nc_worker [ 381.315637][ C1] RIP: 0010:__lock_acquire+0x90/0x1f80 [ 381.315659][ C1] Code: c1 e8 03 80 3c 10 00 74 12 4c 89 f7 e8 19 a9 77 00 48 ba 00 00 00 00 00 fc ff df 48 c7 c0 20 c1 35 90 49 39 06 75 03 45 31 ff <89> 5c 24 3c 83 fd 01 77 2e 89 e8 49 8d 5c c6 08 48 89 d8 48 c1 e8 [ 381.315671][ C1] RSP: 0018:ffffc900047df9a0 EFLAGS: 00000002 [ 381.315682][ C1] RAX: ffffffff9035c120 RBX: 0000000000000000 RCX: 0000000000000002 [ 381.315692][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff8d12ad00 [ 381.315703][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.315711][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000002 [ 381.315721][ C1] R13: ffff888025acd940 R14: ffffffff8d12ad00 R15: 0000000000000000 [ 381.315730][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 381.315743][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.315754][ C1] CR2: 00007ffe1885eff8 CR3: 000000000ce8e000 CR4: 00000000003506e0 [ 381.315766][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.315775][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.315784][ C1] Call Trace: [ 381.315789][ C1] [ 381.315794][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 381.315813][ C1] ? read_lock_is_recursive+0x10/0x10 [ 381.315833][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 381.315858][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 381.315878][ C1] ? nmi_handle+0x12e/0x440 [ 381.315897][ C1] ? nmi_handle+0x25/0x440 [ 381.315920][ C1] ? __lock_acquire+0x90/0x1f80 [ 381.315936][ C1] ? default_do_nmi+0x62/0x150 [ 381.315950][ C1] ? exc_nmi+0xa8/0x100 [ 381.315963][ C1] ? end_repeat_nmi+0x16/0x31 [ 381.315985][ C1] ? __lock_acquire+0x90/0x1f80 [ 381.316002][ C1] ? __lock_acquire+0x90/0x1f80 [ 381.316019][ C1] ? __lock_acquire+0x90/0x1f80 [ 381.316036][ C1] [ 381.316041][ C1] [ 381.316052][ C1] lock_acquire+0x1f8/0x5a0 [ 381.316068][ C1] ? batadv_nc_worker+0xc7/0x610 [ 381.316088][ C1] ? read_lock_is_recursive+0x10/0x10 [ 381.316107][ C1] ? batadv_nc_worker+0xc7/0x610 [ 381.316123][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 381.316142][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 381.316162][ C1] batadv_nc_worker+0xe8/0x610 [ 381.316179][ C1] ? batadv_nc_worker+0xc7/0x610 [ 381.316195][ C1] ? batadv_nc_worker+0xc7/0x610 [ 381.316212][ C1] ? process_one_work+0x7a9/0x11d0 [ 381.316227][ C1] process_one_work+0x8a9/0x11d0 [ 381.316247][ C1] ? worker_detach_from_pool+0x260/0x260 [ 381.316264][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 381.316279][ C1] ? kthread_data+0x4e/0xc0 [ 381.316298][ C1] ? wq_worker_running+0x97/0x190 [ 381.316318][ C1] worker_thread+0xa47/0x1200 [ 381.316333][ C1] ? _raw_spin_unlock+0x40/0x40 [ 381.316348][ C1] ? __sched_text_start+0x8/0x8 [ 381.316368][ C1] ? _raw_spin_unlock+0x40/0x40 [ 381.316388][ C1] kthread+0x28d/0x320 [ 381.316399][ C1] ? worker_clr_flags+0x190/0x190 [ 381.316413][ C1] ? kthread_blkcg+0xd0/0xd0 [ 381.316426][ C1] ret_from_fork+0x1f/0x30 [ 381.316448][ C1] [ 381.679074][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 381.685965][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 381.693797][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 381.703954][ T27] Call Trace: [ 381.704350][ T8191] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 381.714938][ T27] [ 381.717876][ T27] dump_stack_lvl+0x1e3/0x2cb [ 381.722578][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 381.728057][ T27] ? panic+0x764/0x764 [ 381.732130][ T27] ? llist_add_batch+0x160/0x1d0 [ 381.737081][ T27] ? vscnprintf+0x59/0x80 [ 381.741421][ T27] panic+0x318/0x764 [ 381.745328][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 381.751504][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 381.756900][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 381.763078][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 381.769258][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 381.775444][ T27] watchdog+0xfc7/0xfd0 [ 381.779624][ T27] ? watchdog+0x1f8/0xfd0 [ 381.784006][ T27] kthread+0x28d/0x320 [ 381.788091][ T27] ? hungtask_pm_notify+0x50/0x50 [ 381.793126][ T27] ? kthread_blkcg+0xd0/0xd0 [ 381.797728][ T27] ret_from_fork+0x1f/0x30 [ 381.802169][ T27] [ 381.805434][ T27] Kernel Offset: disabled [ 381.809782][ T27] Rebooting in 86400 seconds..