last executing test programs: 25.954759663s ago: executing program 1 (id=1250): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) 24.861872902s ago: executing program 1 (id=1253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x203, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x8002, r0}, 0x38) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1a343e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0), &(0x7f00000024c0), 0x6, r0}, 0x38) 23.054066538s ago: executing program 1 (id=1264): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}, @IFLA_MACSEC_SCB={0x5}]}}}]}, 0x44}}, 0x0) 22.722760076s ago: executing program 1 (id=1271): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setreuid(0x0, 0xee01) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b405000000000000611018000000000066000000000000009500000000000000dfedaffdd7afa0f5f8fa9255ef78e4c4860a6bf3f2e04331232edd01343e4baede7ddfbe9b1616ece114d7d4ce18ef7c4a23cc52b77221e6f190b4d616490911670ca371d2f873930a877d694aa9436a1f7cd332dabb8d9c440a08c1e07fa2099558014c563d1d7794dd5f4780da7b79"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 22.336474776s ago: executing program 1 (id=1273): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r3}, 0x18) 21.296196181s ago: executing program 1 (id=1278): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmmsg$unix(r5, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4087, 0x1000}], 0x1, 0x0, 0x3c}}], 0x1, 0x0, 0x0) dup3(r2, r1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xeefffdeb) 12.787112492s ago: executing program 2 (id=1312): timer_create(0x0, 0x0, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_getoverrun(0x0) 8.86640305s ago: executing program 2 (id=1323): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8.688445715s ago: executing program 2 (id=1324): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) r3 = fanotify_init(0x202, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) ftruncate(r0, 0x10000) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) 8.490912821s ago: executing program 2 (id=1325): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f0000000340)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8}, {@fat=@discard}, {@utf8no}, {@fat=@nfs}, {@fat=@flush}, {@shortname_mixed}, {@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@shortname_lower}, {@utf8}]}, 0xfe, 0x2aa, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20}, 0x20) 7.893985539s ago: executing program 2 (id=1327): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000004,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,iocharset=iso8859-15,utf8,umask=00000000000000000177777,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,umask=00000000000000000005454,dmask=00000000000000000000011,euid=', @ANYRESDEC, @ANYBLOB=',uid>', @ANYRES8=0x0, @ANYBLOB="2c7375626a5f747970653d696f636861727365742c7375626a5f747970653d2c99708160e42db27072726f72733d636f6e74696e75652c726f6f74636f6e746578743d73797361646d5f752c7375626a5f757365723dc5b09b45c8a2fec720b73428c62e2e2c7375626a5f726f6c653d666f", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x21, 0x14ff, &(0x7f0000003f40)="$eJzs3AvUjdXWOPA511oPL0k7yX3NNR92vFgkSS5JckmS5EiSW0KSJElI7rckJCH3JPeQ3EJyv99yT5IkSRISkqz/0On7dE7n+/ed7zvfMMZ552+MZ7xr7mfP9cy15zve53n2O/b+tv3gynWrVKjNzPC/gn/90Q0AUgCgHwBcBwARAJTIUiLL5f0ZNHb73x1E/Gs9NO1qVyCuJul/2ib9T9uk/2mb9D9tk/6nbdL/tE36n7ZJ/4VIy7ZNz3m9bGl3k/f/0zI5//8bOVJkzJcbitzY4Z9Ikf6nbdL/tE36n7ZJ/9M26X/aJv1P26T/aZv0X4i07H/+3rH87+DfYbvav39CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIdKG8+EKAwD/Mb7adQkhhBBCCCGEEOJfJ6S/2hUIIYQQQgghhBDi/x6CAg0GIkgH6SEFMkBGuAYywbWQGa6DBFwPWeAGyAo3QjbIDjkgJ+SC3JAHLBA4YIghL+SDJNwE+aEApEJBKASFwUMRKAo3QzG4BYrDrVACboOScDuUgtJQBsrCHVAO7oTycBdUgLuhIlSCylAF7oGqcC9Ug/ugOtwPNeABqAkPQi34C9SGh6AOPAx14RGoB49CfWgADaERNP4f5b8IneEl6AJdoRt0hx7QE3pBb+gDfaEfvAz9IeW312YQDIbXYAi8DkPhDRgGw2EEvAkjYRSMhjEwFsbBeHgLJsDbMBHegUkwGabAVJgG02EGvAszYRbMhvdgDrwPc2EezIcFsBA+gEWwGJbAh7AUPoJlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW3wMWyHHbATdsFu2AN74RPYB5/CfvgMDsDn/2T+ub/L74CAgAoVGjSYDtNhCqZgRsyImTATZsbMmMAEZsEsmBWzYjbMViAH5sBcmAvzYB4kJGRkzIt5MYlJzI/5MRVTsRAWQo8ei2JRLIa3YHEsjiWwBJbEklgKS2NpLItlsRyWw/JYHitgBayIFbEyVsZ78B68F6thNayO1bEG1sCaWBNrYS2sjbWxDtbBulgX62E9rI/1sSE2xMbYGJtgE2yKTbE5NscW2AJbYktsha2wNbbGNtgG22JbbIftsD22xw7YETvii/givoQvYVesqLpjD+yBvbAX9sG+2Bdfxv74Cr6Cr+JAHISD8TV8DV/HoXgWh+FwHIEjsJwahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/A9nIPv4/s4D+fhAlyIC3ERLsYluASX4jlchstxBa7EVbgaV+FaXIdrcQNuxA24GTfjVtyKH+PHuAN34C7chXvQAOAn+Cl+igPxAB7Ag3gQD+EhPIyH8QgewaN4FI/hMTyOx/EEnsCTeApP4yk8g2fwLJ7D83geL+AFvIjP5/q6zp6C6weCuswoo9KpdCpFpaiMKqPKpDKpzCqzSqiEyqKyqKwqq8qmsqkcKofKpXKpPCqPIkWKVazyqrwqqZIqv8qvUlWqKqQKKa+8KqqKqmKqmCquiqsS6jZVUt2uSqnSqpkvq8qqcqq5L6/uUhVUBVVRVVKVVRVVRVVVVVU1VU1VV9VVDVVD1VQPqlqqO/bBh9TlztRVg7CeGoz1VQPVUDVSr+Njqokaik1VM9VcPaGG4zBsqZr4Vupp1VqNxjbqWTUGn1Pt1Dhsr15QHVRH1Um9qDqrpr6L6qomYXfVQ03FXqq36qP6qplYSV3uWGX1qhqoBqnB6jW1AF9XQ9UbapgarkaoN9VINUqNVmPUWDVOjVdvqQnqbTVRvaMmqclqipqqpqnpaoZ6V81Us9Rs9Z6ao95Xc9U8NV8tUAvVB2qRWqyWqA/VUvWRWqaWqxVqpVqlVqs1aq1ap9arDWqj2qQ2qy1qq9qmPlbb1Q61U+1Su9UetVd9ovapT9V+9Zk6oD5XB9UX6pD6Uh1WX6kj6mt1VH2jjqlv1XH1nTqhvlcn1Sl1Wv2gzqgf1Vl1Tp1XP6kL6md1Uf2iLqmgQKNWWmujI51Op9cpOoPOqK/RmfS1OrO+Tif09TqLvkFn1TfqbDq7zqFz6lw6t86jrSbtNOtY59X5dFLfpPPrAjpVF9SFdGHtdRFdVN+si+lbdHF9qy6hb9Ml9e26lC6ty+iy+g5dTt+py+u7dAV9t66oK+nKuoq+R1fV9+pq+j5dXd+va+gHdE39oK6l/6Jr64d0Hf2wrqsf0fX0o7q+bqAb6ka6sX5MN9GP66a6mW6un9At9JO6pX5Kt9JP69b6Gd1GP6vb6ud0O/28bq9f0B10R91J/6Iv6aC76K66m+6ue+ieupfurfvovrqffln316/oAfpVPVAP0oP1a3qIfl0P1W/oYXq4HqHf1CP1KD1aj9Fj9Tg9Xr+lJ+i39UT9jp6kJ+speqqepqfrPr/NNPu/kf/2P8gf8OvRt+pt+mO9Xe/QO/UuvVvv0Xv1Xr1P79P79X59QB/QB/VBfUgf0of1YX1EH9FH9VF9TB/Tx/VxfUKf0Cf1Kf2T/kGf0T/qs/qcPqd/0hf0BX3xt9cADBpltDEmMulMepNiMpiM5hqTyVxrMpvrTMJcb7KYG0xWc6PJZrKbHCanyWVymzzGGjLOsIlNXpPPJM1N+NtJ0xQyhY03RUxRc/M/k2/ymwIm1RT8m/w/q6+xaWyamCamqWlqmpvmpoVpYVqalqaVaWVam9amjWlj2pq2pp1pZ9qb9qaD6WA6mU6ms+lsupguppvpZnqYnqaX6W36mL6mn3nZ9Df9zQAzwAw0A81gM9gMMUPMUDPUDDPDzAgzwow0I81oM9qMNWPNeDPeTDATzEQz0Uwyk8wUM8VMM9PMDDPDzDQzzWwz28wxc8xcM9fMN/PNQrPQLDKLzBKzxCw1S80ys9wsNyvNSrParDZrzVqz3qw3G81Gs9lsNsvSbzPbzHaz3ew0O81us9vsNXvNPrPP7Df7zQFzwBw0B80hc8gcNofNEXPEHDVHzTFzzBw3x80Jc8KcNCfNaXPanDFnzFlz1pw3580Fc8FcNBfNJXPp8mVfpCIVmchE6aJ0UUqUEmWMMkaZokxR5ihzlIgSUZYoS5Q1ujHKFmWPckQ5o1xR7ihPZCOKXMRRHOWN8kXJ6KYof1QgSo0KRoWiwpGPikRFo5ujYtEtUfHo1qhEdFtUMro9KhWVjspEZaM7onLRnVH56K6oQnR3VDGqFFWOqkT3RFWje6Nq0X1R9ej+qEb0QFQzejCqFf0lqh09FNWJHo7qRo9E9aJHo/pRg6hh1Chq/C+dP4Sz2R/3XWxX2812tz1sT9vL9rZ9bF/bz75s+9tX7AD7qh1oB9nB9jU7xL5uh9o37DA73I6wb9qRdpQdbcfYsXacHW/fshPs23aifcdOspPtFDvVTrPT7Qz7rp1pZ9nZ9j07x75v59p5dr5dYBfaD+wiu9gusR/apfYju8wutyvsSrvKrrZr7Fq7zq63G+xGu8lutlvsVrvNfmy32x12p91ld9s9dq/9xO6zn9r99jN7wH5uD9ov7CH7pT1sv7JH7Nf2qP3GHrPf2uP2O3vCfm9P2lP2tP3BnrE/2rP2nD1vf7IX7M/2ov3FXrLh8sX95dM7GTKUjtJRCqVQRspImSgTZabMlKAEZaEslJWyUjbKRjkoB+WiXJSH8tBlTEx5KS8lKUn5KT+lUioVokLkyVNRKkrFqBgVp+JUgkpQSSpJpagUlaEydAfdQXfSnXQX3UV3091UiSpRFapCVakqVaNqVJ2qUw2qQTWpJtWiWlSbalMdqkN1qS7Vo3pUn+pTQ2pIjakxNaEm1JSaUnNqTi2oBbWkltSKWlFrak1tqA21pbbUjtpRe2pPHagDdaJO1Jk6UxfqQt2oG/WgHtSLelEf6kP9qB/1p/40gAbQQBpIg2kwDaEhNJSG0jAaTiPoTRpJo2g0jaGxNI7G03iaQBNoIk2kSTSJptAUmkbTaAbNoJk0k2bTbJpDc2guzaX5NJ8W0kJaRItoCS2hpbSUltEyWkEraBWtojW0htbROtpAG2gTbaIttIW20TbaTttpJ+2k3bSb9tJe2kf7aD/tpwN0gA7SQTpEh+gwHaYjdISO0lE6RsfoOB2nE3SCTtJJOk2n6QydobN0ls7TebpAP9NF+oUuUaAUl8FldNe4TO5al9ld5/4+zuFyulwut8vjrMvmsv9NTM65VFfQFXKFnXdFXFF3s0u9fEv1u7iUK+3KuLLuDlfO3enK/yGu6u511dx9rrq731Vx9/xNXMM94Gq6R1wt96ir7Rq4Oq6Rq+secfXco66+a+AaukauhXvStXRPuVbuadfaPfOHeJFb7Na59W6D2+j2uU/defeTO+a+dRfcz66L6+r6uZddf/eKG+BedQPdoD/EI9ybbqQb5Ua7MW6sG/eHeIqb6qa56W6Ge9fNdLP+EC90H7g5bomb6+a5+W7Br/Hlmpa4D91S95Fb5pa7FW6lW+VWuzVu7X/WutJtdlvcVrfXfeK2ux1up9vldrs9v8aX17HffeYOuM/dUfeNO+S+dIfdcXfEff1rfHl9x9137oT73p10p9xp94M74350Z925X9d/ee0/uF/cJRccMLJizYYjTsfpOYUzcEa+hjPxtZyZr+MEX89Z+AbOyjdyNs7OOTgn5+LcnIctEztmjjkv5+Mk38T5uQCnckEuxIXZcxEuyjdzMb6Fi/OtXIJv45J8O5fi0lyGy/IdXI7v5PJ8F1fgu7kiV+LKXIXv4ap8L1fj+7g63881+AGuyQ9yLf4L1+aHuA4/zHX5Ea7Hj3J9bsANuRE35se4CT/OTbkZN+cnuAU/yS35KW7FT3Nrfobb8LPclp/jdvw8t+cXuAN35E78Infml7gLd+Vu3J17cE/uxb25D/flfvwy9+dXeAC/ygN5EA/m13gIv85D+Q0exsN5BL/JI3kUj+YxPJbH8Xh+iyfw2zyR3+FJPJmn8FSextN5Br/LM3kWz+b3eA6/z3N5Hs/nBbyQP+BFvJiX8Ie8lD/iZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+Vt/DFv5x28k3fxbt7De/kT3sef8n7+jA/w53yQv+BD/CUf5q/4CH/NR/kbPsbf8nH+jk/w93yST/Fp/oHP8I98ls/xef6JL/DPfJF/4UscGGKMVaxjE0dxujh9nBJniDPG18SZ4mvjzPF1cSK+Ps4S3xBnjW+Ms8XZ4xxxzjhXnDvOE9uYYhdzHMd543xxMr4pzh8XiFPjgnGhuHDs4yJx0fjmuFh8S1w8vjUuEd8Wl4xvj0vFpeNH7i8b3xGXi++My8d3xRXiu+OKcaW4clwlvieuGt8bV4vvi6vH98fF4wfimvGDMfz2eZU68cNx3fiRuF78aFw/bhA3jBvFjePH4ibx43HTuFncPH4ibhE/GbeMn4pbxU/HreNn/nR/t7h73CPuGfeMQ7hPz08uSC5MfpBclFycXJL8MLk0+VFyWXJ5ckVyZXJVcnVyTXJtcl1yfXJDcmNyU3JzcktyazKEKunBo1dee+Mjn86n9yk+g8/or/GZ/LU+s7/OJ/z1Pou/wWf1N/psPrvP4XP6XD63z+OtJ+88+9jn9fl80t/k8/sCPtUX9IV8Ye99EV/UN/KNfWPfxD/um/pmvrl/wj/hn/RP+qf8U/5p39o/49v4Z31b/5xv55/3z/sXfAff0XfyL/rO/iXfxXf13Xw338P38L18L9/H9/H9fD/f3/f3A/wAP9AP9IP9YD/ED/FD/VA/zA/zI/wIP9KP9KP9aD/Wj/Xj/Xg/wU/wE/1EP8lP8lP8FD/NT/Mz/Aw/08/0s/1sPyd1jp/r5/r5fr5f6Bf6RX6RX+KX+KV+qV/ml/kVfoVf5Vf5NX6NX+fX+Q1+g9/kN/ktfovf5rf57X673+l3+t1+t9/r9/p9fp/f7/f7A/6AP+gP+kP+kD/sv/JH/Nf+qP/GH/Pf+uP+O3/Cf+9P+lP+tP/Bn/E/+rP+nD/vf/IX/M/+ov/FX/LBj0+8lZiQeDsxMfFOYlJicmJKYmpiWmJ6Ykbi3cTMxKzE7MR7iTmJ9xNzE/MS8xMLEgsTHyQWJRYnliQ+TCxNfJRYllieWJFYmViVWJ0IIff2OOQN+UIy3BTyhwIhNRQMhULh4EORUDTcHIqFW0LxcGsoEW4LJcPtoVQoHcqER0P90CA0DI1C4/BYaBIeD01Ds9A8PBFahCdDy/BUaBWeDq3DM6FNeDa0Dc+FduH50D68EDqEjqFTeDF0Di+FLqFr6Ba6hx6hZ+gVeoc+oW/oF14O/cMrYUB4NQwMg8Lg8FoYEl4PQ8MbYVgYHkaEN8PIMCqMDmPC2DAujA9vhQnh7TAxvBMmhclhSpgapoXpYUZ4N8wMs8Ls8F6YE94Pc8O8MD8sCAvDB2FRWByWhA/D0vBRWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy1ha9gWPg7bw46wM+wKu8OesDd8EvaFT8P+8Fk4ED4PB8MX4VD4MhwOX4Uj4etwNHwTjoVvw/HwXTgRvg8nw6lwOvwQzoQfw9lwLpwPP4UL4edwMfwSLsln1oQQQggh/lt6/sn+7v/gMQMA6rdxDwC4dkfOI7/frwFgU7a/jnurXC0SAPB01/YP/cdWsWK3bt1+e+4yDVG+eQCQ+LsD/BYvh+bwJLSCZlDsH9bXW3W8wH8yf/I2gIy/y0mBK/GV+b/4L+Z/7IkRi0rG57P8f+afB5Ca70pOBrgSL4fml1cDzaD4fzF/9iZ/Un+GL8cDNP1dTia4El+pvyg8Ds9Aq795phBCCCGEEEII8Ve9VZm2f3b/fPn+PJe5kpMersR/dn8uhBBCCCGEEEKIq++5jp2eeqxVq2ZtZSADGcjgPwdX+y+TEEIIIYQQ4l/tykX/lccyXM2ChBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKINOh3X/qVAQD+T75O7GqvUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLja/l8AAAD//+hQN/Q=") mknod(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) 5.575772797s ago: executing program 2 (id=1338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x105) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) r1 = getpid() sched_setaffinity(r1, 0x0, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000500)={0x36, 0x0, 0x3}, &(0x7f0000000540)=[{}, {}, {}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r4, 0xff, 0x1, 0x0, &(0x7f00000001c0)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 5.238291695s ago: executing program 3 (id=1342): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000001c0), 0x1, 0x76a, &(0x7f0000000fc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) close(r0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 4.383120474s ago: executing program 3 (id=1349): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)='(+\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000280)='&\x00') mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 4.359470246s ago: executing program 4 (id=1350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="32000e0080000000ffffffffffffffffffffffff0802110000000000000000000000000064000000010004060000000000000000080026006c09000008000c006400000008000d00000000001c005a80180000801400040005"], 0x84}}, 0x0) 4.073266579s ago: executing program 4 (id=1353): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000001140)={0x24, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 4.016091294s ago: executing program 3 (id=1354): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1b) r1 = fcntl$dupfd(r0, 0x0, r0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) 3.81713245s ago: executing program 3 (id=1355): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) 3.670684552s ago: executing program 3 (id=1356): bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_read_part_table(0x403d, &(0x7f0000000000)="$eJzs0DFKxEAYBeA3ihAFS8FyjiCRWNqlsfQEigYs7BQ7G72X4DUsPIKdtUI2xTYLYSFbfV/zP5gZ5vH310lKktrW28fnelYf7mvbdfVpuKsX59mBkvRXY2rynpLDJAdzHt4cf/8sXW5xv0cbj5ppnpxmb4plTH/7a7cuP1c7HGeS17e5X399DC9bdQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw5kAAAAAIT5W+fRfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI0CAAD//77BETc=") 2.626178797s ago: executing program 0 (id=1359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x3c}}, 0x0) 2.286901115s ago: executing program 0 (id=1360): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000004,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,iocharset=iso8859-15,utf8,umask=00000000000000000177777,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,umask=00000000000000000005454,dmask=00000000000000000000011,euid=', @ANYRESDEC, @ANYBLOB=',uid>', @ANYRES8=0x0, @ANYBLOB="2c7375626a5f747970653d696f636861727365742c7375626a5f747970653d2c99708160e42db27072726f72733d636f6e74696e75652c726f6f74636f6e746578743d73797361646d5f752c7375626a5f757365723dc5b09b45c8a2fec720b73428c62e2e2c7375626a5f726f6c653d666f", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x21, 0x14ff, &(0x7f0000003f40)="$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") mknod(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) 1.945502542s ago: executing program 0 (id=1361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.838897421s ago: executing program 4 (id=1362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="32000e0080000000ffffffffffffffffffffffff0802110000000000000000000000000064000000010004060000000000000000080026006c09000008000c006400000008000d00000000001c005a80180000801400040005"], 0x84}}, 0x0) 1.789657455s ago: executing program 3 (id=1363): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04e04020"], 0x7) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="232205000000"], 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) rmdir(0x0) pivot_root(0x0, &(0x7f0000000540)='./file0/file0\x00') sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="e5ffffff00000000240012800c0001006d6163766c616e0014000280080001000800000006f602000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 1.630284648s ago: executing program 0 (id=1364): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) 1.405519596s ago: executing program 4 (id=1365): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e640000000014000280070000000000000005001d"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.310253054s ago: executing program 0 (id=1366): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) 988.20455ms ago: executing program 0 (id=1367): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef2885630182700008"], 0xffdd) 441.803085ms ago: executing program 4 (id=1368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x3c}}, 0x0) 0s ago: executing program 4 (id=1369): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x98, 0x0, 0x130, 0x0, 0x2f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x98, 0x0, 0x130, 0x0, 0x2f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r3, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r4, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001980)=[{0xffffffffffffffff}, {0x0}], 0x2}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000080)={0xffffffff, 0x4}) shutdown(0xffffffffffffffff, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) socket(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) kernel console output (not intermixed with test programs): 300:14): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.827" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 247.052504][ T6727] loop3: detected capacity change from 0 to 256 [ 247.089093][ T6614] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.116822][ T6726] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 247.162356][ T27] audit: type=1804 audit(2000000165.540:15): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.830" name="/newroot/46/file0/file1" dev="loop3" ino=1048677 res=1 errno=0 [ 247.187865][ T3564] Bluetooth: hci6: command tx timeout [ 247.284172][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.354309][ T6726] Remounting filesystem read-only [ 247.427411][ T6614] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.487782][ T6729] netlink: 68 bytes leftover after parsing attributes in process `syz.3.831'. [ 247.498098][ T6292] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 247.524067][ T6729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.831'. [ 247.535424][ T6292] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 247.563878][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.573701][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.581160][ T6292] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 247.596104][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.614004][ T6292] NILFS (loop2): discard dirty page: offset=4096, ino=18 [ 247.625504][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.633840][ T6292] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 247.647164][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.692169][ T6292] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 247.707726][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.714876][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.742843][ T6292] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 247.755256][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.774033][ T6292] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 247.787761][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.814318][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.823546][ T6292] NILFS (loop2): discard dirty block: blocknr=27, size=4096 [ 247.846928][ T6292] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 247.855009][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.862163][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.886481][ T6292] NILFS (loop2): discard dirty block: blocknr=28, size=4096 [ 247.910250][ T6292] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 247.946462][ T6292] NILFS (loop2): discard dirty block: blocknr=29, size=4096 [ 247.964087][ T6292] NILFS (loop2): discard dirty page: offset=270336, ino=3 [ 247.971225][ T6731] loop3: detected capacity change from 0 to 4096 [ 248.006808][ T6731] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 248.016463][ T6292] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 248.027840][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.063899][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.110415][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.137923][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.167519][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.182906][ T6731] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 248.210137][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.227234][ T6722] loop4: detected capacity change from 0 to 32768 [ 248.235384][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.285537][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.295092][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.356817][ T6731] ntfs3: loop3: Failed to load $Extend. [ 248.381676][ T6548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.424235][ T6722] XFS (loop4): Mounting V5 Filesystem [ 248.447578][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.455621][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.477415][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.525109][ T3552] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x1df/0x2a0, xfs_agf block 0x1 [ 248.529422][ T6614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.553728][ T5956] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 248.566119][ T3552] XFS (loop4): Unmount and run xfs_repair [ 248.577663][ T6614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.601313][ T3552] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 248.611116][ T6740] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 248.628355][ T6744] device bond0 entered promiscuous mode [ 248.633913][ T6744] device bond_slave_0 entered promiscuous mode [ 248.640241][ T3552] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 20 00 XAGF.......... . [ 248.673318][ T3552] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01 ................ [ 248.686961][ T6744] device bond_slave_1 entered promiscuous mode [ 248.693954][ T6614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.698255][ T3552] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 248.716227][ T6614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.734282][ T6749] openvswitch: netlink: Message has 1 unknown bytes. [ 248.745413][ T3552] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d b8 00 00 00 00 ................ [ 248.775926][ T6740] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 248.793349][ T3552] 00000040: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 248.811474][ T3552] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 248.834830][ T3552] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 248.873610][ T3552] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 248.897553][ T6722] XFS (loop4): metadata I/O error in "xfs_read_agf+0x2e2/0x680" at daddr 0x1 len 1 error 74 [ 248.934129][ T6722] XFS (loop4): Error -117 reserving per-AG metadata reserve pool. [ 248.963734][ T6722] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1d4/0x200 (fs/xfs/xfs_fsops.c:579). Shutting down filesystem. [ 248.994627][ T6722] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 249.043708][ T6739] device bond0 left promiscuous mode [ 249.067599][ T6722] XFS (loop4): Ending clean mount [ 249.073261][ T6722] XFS (loop4): Failed to initialize disk quotas. [ 249.105531][ T6739] device bond_slave_0 left promiscuous mode [ 249.147169][ T6739] device bond_slave_1 left promiscuous mode [ 249.171931][ T6722] XFS (loop4): Error -5 reserving per-AG metadata reserve pool. [ 249.304082][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.316292][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.347350][ T6262] XFS (loop4): Unmounting Filesystem [ 249.391678][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.476004][ T6614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.512251][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.532057][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.592750][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.634350][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.688130][ T6614] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.713049][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.727925][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.739937][ T6548] device veth0_vlan entered promiscuous mode [ 249.772893][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.791168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.817849][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.847195][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.856405][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.863500][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.954952][ T6548] device veth1_vlan entered promiscuous mode [ 249.968052][ T6773] openvswitch: netlink: Message has 1 unknown bytes. [ 249.998615][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.027485][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.035563][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.082646][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.117142][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.124254][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.158383][ T6774] loop4: detected capacity change from 0 to 2048 [ 250.230792][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.265829][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.285913][ T6774] loop4: p1 < > p3 p4 < > [ 250.291371][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.317428][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.334540][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.355722][ T6782] dccp_invalid_packet: P.Data Offset(224) too large [ 250.364998][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.377220][ T6774] loop4: p3 start 4259840 is beyond EOD, truncated [ 250.408200][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.431335][ T6786] loop2: detected capacity change from 0 to 64 [ 250.438559][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.496008][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.524319][ T6785] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 250.548010][ T6787] device bond0 entered promiscuous mode [ 250.553600][ T6787] device bond_slave_0 entered promiscuous mode [ 250.635962][ T6787] device bond_slave_1 entered promiscuous mode [ 250.666160][ T6548] device veth0_macvtap entered promiscuous mode [ 250.707332][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.715721][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.777541][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.785990][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.817101][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.841545][ T6614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.872551][ T6787] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 251.018044][ T6548] device veth1_macvtap entered promiscuous mode [ 251.085868][ T6783] device bond0 left promiscuous mode [ 251.117622][ T6783] device bond_slave_0 left promiscuous mode [ 251.123664][ T6783] device bond_slave_1 left promiscuous mode [ 251.181605][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.254785][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.281046][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.323657][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.361385][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.412388][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.465694][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.513514][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.545244][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.582458][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.635454][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.674254][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.700679][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.770751][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.839812][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.880796][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.940406][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.999024][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.012993][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.047604][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.056449][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.085731][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.106427][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.116518][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.116544][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.116566][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.116586][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.116605][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.116625][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.116645][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.116671][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.116692][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.116711][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.116732][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.116751][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.116770][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.162809][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.313244][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.315145][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.333271][ T6548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.362251][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.363225][ T6548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.396536][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.399918][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.414158][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.441050][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.446470][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.464142][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.467479][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.506962][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.519272][ T6548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.542968][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.543849][ T6548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.576426][ T6548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.581086][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.595298][ T6548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.623019][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.646084][ T6614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.670522][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.701419][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.723217][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.745919][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.773798][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.804481][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.812099][ T6614] device veth0_vlan entered promiscuous mode [ 252.824993][ T3552] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.844789][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.864380][ T3552] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 252.882391][ T6614] device veth1_vlan entered promiscuous mode [ 252.899515][ T4481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.913145][ T4481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.948383][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.955873][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.003264][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.032562][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.044571][ T3564] Bluetooth: Unexpected continuation frame (len 4) [ 253.073133][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.113623][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.156166][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.194729][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.223551][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.297268][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.340089][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.397509][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.636801][ T3596] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 253.797090][ T3564] Bluetooth: hci5: unexpected event 0x01 length: 11 > 1 [ 253.953917][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 254.031189][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 254.070050][ T6614] device veth0_macvtap entered promiscuous mode [ 254.096602][ T3596] usb 4-1: config 0 has no interfaces? [ 254.102161][ T3596] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 254.118814][ T6614] device veth1_macvtap entered promiscuous mode [ 254.144602][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.198376][ T3596] usb 4-1: config 0 descriptor?? [ 254.209028][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.247100][ T6822] loop4: detected capacity change from 0 to 32768 [ 254.254605][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.286281][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.319486][ T27] audit: type=1800 audit(2000000172.700:16): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.859" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 254.336451][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.387608][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.419092][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.436455][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.471467][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.491580][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.516471][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.542649][ T27] audit: type=1326 audit(2000000172.920:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.3.855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f133fb75b59 code=0x0 [ 254.542931][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.613350][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.645464][ T6614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.653728][ T26] usb 4-1: USB disconnect, device number 10 [ 254.690082][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.708593][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.747618][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.781124][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.804222][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.828085][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.849802][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.880043][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.911389][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.951381][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.002220][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.050493][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.081333][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.109023][ T6614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.139787][ T6614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.180180][ T6614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.215042][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.237536][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.265511][ T6614] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.284115][ T6614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.298670][ T6614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.312032][ T6614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.461106][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.465038][ T6846] loop2: detected capacity change from 0 to 4096 [ 255.495913][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.517910][ T6846] ntfs: (device loop2): parse_options(): Invalid fmask option argument: 0000000000000000010000 [ 255.541369][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.581598][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.592311][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.598659][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.633826][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.676514][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 256.238412][ T6864] program syz.2.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.266669][ T153] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 256.390181][ T3596] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 256.516435][ T153] usb 1-1: Using ep0 maxpacket: 8 [ 257.319724][ T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 257.357220][ T153] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 257.466735][ T3596] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 257.498113][ T3596] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 257.530481][ T3596] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.563410][ T3596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.576529][ T153] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=14.01 [ 257.606029][ T153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.626267][ T153] usb 1-1: Product: syz [ 257.637662][ T6862] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 257.664785][ T153] usb 1-1: Manufacturer: syz [ 257.681984][ T153] usb 1-1: SerialNumber: syz [ 257.681990][ T6874] loop3: detected capacity change from 0 to 4096 [ 257.682721][ T6874] ntfs: (device loop3): parse_options(): Invalid fmask option argument: 0000000000000000010000 [ 257.730875][ T153] usb 1-1: config 0 descriptor?? [ 257.817625][ T153] usbserial_generic 1-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 257.837481][ T153] usbserial_generic 1-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 257.899098][ T22] usb 5-1: USB disconnect, device number 9 [ 257.934981][ T153] usbserial_generic 1-1:0.0: generic converter detected [ 257.976340][ T153] usb 1-1: generic converter now attached to ttyUSB0 [ 258.204578][ T6879] loop3: detected capacity change from 0 to 736 [ 258.379015][ T6879] Symlink component flag not implemented [ 258.385518][ T6879] Symlink component flag not implemented (121) [ 258.435384][ T153] usb 1-1: USB disconnect, device number 9 [ 258.460819][ T153] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 258.513455][ T153] usbserial_generic 1-1:0.0: device disconnected [ 259.833550][ T6900] loop2: detected capacity change from 0 to 256 [ 259.891944][ T6900] FAT-fs (loop2): Unrecognized mount option "sTkrtname=winnt" or missing value [ 259.973667][ T5148] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.136709][ T3596] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 260.247797][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 260.386755][ T3596] usb 4-1: Using ep0 maxpacket: 8 [ 260.483988][ T6918] loop2: detected capacity change from 0 to 256 [ 260.507308][ T6919] netlink: 32 bytes leftover after parsing attributes in process `syz.1.893'. [ 260.595178][ C0] Unknown status report in ack skb [ 260.666863][ T3596] usb 4-1: New USB device found, idVendor=05c6, idProduct=9225, bcdDevice=1c.b6 [ 260.699060][ T3596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.713239][ T6904] loop4: detected capacity change from 0 to 32768 [ 260.721428][ T3596] usb 4-1: Product: syz [ 260.721451][ T3596] usb 4-1: Manufacturer: syz [ 260.721464][ T3596] usb 4-1: SerialNumber: syz [ 260.730882][ T3596] usb 4-1: config 0 descriptor?? [ 260.797585][ T3596] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 260.841406][ T27] audit: type=1800 audit(2000000179.220:18): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.887" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 261.008370][ T3595] usb 4-1: USB disconnect, device number 11 [ 262.006686][ T22] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 262.023977][ T6934] loop2: detected capacity change from 0 to 4096 [ 262.087843][ T6934] ntfs: (device loop2): parse_options(): Invalid fmask option argument: 0000000000000000010000 [ 262.233596][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 262.296443][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 262.330861][ T6945] loop2: detected capacity change from 0 to 736 [ 262.370033][ T6948] loop4: detected capacity change from 0 to 256 [ 262.419135][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 262.433501][ T22] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 262.511729][ T6945] Symlink component flag not implemented [ 262.526893][ T6945] Symlink component flag not implemented (121) [ 262.646661][ T22] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=14.01 [ 262.674137][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.679061][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 262.706527][ T22] usb 2-1: Product: syz [ 262.710729][ T22] usb 2-1: Manufacturer: syz [ 262.715327][ T22] usb 2-1: SerialNumber: syz [ 262.718729][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 262.744169][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 262.768976][ T22] usb 2-1: config 0 descriptor?? [ 262.772052][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 262.801305][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 262.817560][ T22] usbserial_generic 2-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 262.824342][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 262.846500][ T22] usbserial_generic 2-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 262.865143][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 262.881238][ T22] usbserial_generic 2-1:0.0: generic converter detected [ 262.890833][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 262.903217][ T22] usb 2-1: generic converter now attached to ttyUSB0 [ 262.918964][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 262.938868][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 262.966477][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 262.984234][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.001928][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.014078][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.030515][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.045920][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.061256][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.079582][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.094969][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.123056][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.136187][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.151548][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.169188][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.184498][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.199853][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.215139][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.231622][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.253991][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.274532][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.291102][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.306499][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.321789][ T3552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 263.340779][ T3552] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 263.382468][ T3596] usb 2-1: USB disconnect, device number 12 [ 263.400565][ T3596] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 263.426238][ T3596] usbserial_generic 2-1:0.0: device disconnected [ 263.524317][ T6954] loop2: detected capacity change from 0 to 32768 [ 263.579371][ T27] audit: type=1800 audit(2000000181.960:19): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.907" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 263.626435][ T3552] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 264.012333][ T3552] usb 1-1: config 0 has no interfaces? [ 264.018317][ T3552] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 264.771399][ T3552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.788889][ T3552] usb 1-1: config 0 descriptor?? [ 265.312025][ T6983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.918'. [ 265.340786][ T27] audit: type=1326 audit(2000000183.720:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6950 comm="syz.0.905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a27f75b59 code=0x0 [ 265.502121][ T3552] usb 1-1: USB disconnect, device number 10 [ 265.862147][ T6979] loop3: detected capacity change from 0 to 2048 [ 265.933974][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 265.967832][ T6979] loop3: p1 < > p3 p4 < > [ 265.993664][ T6979] loop3: p3 start 4259840 is beyond EOD, truncated [ 266.101501][ T6996] dccp_invalid_packet: P.Data Offset(224) too large [ 266.202960][ T3003] loop3: p1 < > p3 p4 < > [ 266.222640][ T3003] loop3: p3 start 4259840 is beyond EOD, truncated [ 268.165974][ T7000] loop2: detected capacity change from 0 to 32768 [ 268.359961][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 268.676048][ T7033] loop4: detected capacity change from 0 to 16 [ 268.740770][ T7033] erofs: (device loop4): mounted with root inode @ nid 36. [ 275.115598][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.146761][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.157443][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.178141][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.199875][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.246498][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.254890][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.306530][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.334411][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.356595][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.364028][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.412145][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.440183][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.447746][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.456050][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.463607][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.483934][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.491449][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.506528][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.524168][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.539411][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.565396][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.593204][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.609327][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.636510][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.654157][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.674378][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.692862][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.713082][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.733299][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.756518][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.785077][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 275.816549][ T22] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 275.857772][ T3559] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.914113][ T3559] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.925523][ T3559] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.935093][ T3559] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.942671][ T3559] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.954988][ T3559] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.076449][ T3595] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 276.476521][ T3595] usb 1-1: config 0 has no interfaces? [ 276.492932][ T3595] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 276.503031][ T3595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.524461][ T3595] usb 1-1: config 0 descriptor?? [ 276.539362][ T3682] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.722338][ T3682] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.857505][ T3682] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.907361][ T7111] chnl_net:caif_netlink_parms(): no params data found [ 276.982398][ T3682] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.016011][ T27] audit: type=1326 audit(2000000195.390:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.0.965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a27f75b59 code=0x0 [ 277.160462][ T3593] usb 1-1: USB disconnect, device number 11 [ 277.203737][ T7111] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.243503][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.262115][ T7111] device bridge_slave_0 entered promiscuous mode [ 277.286094][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.299586][ T7111] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.314534][ T7111] device bridge_slave_1 entered promiscuous mode [ 277.454624][ T7111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.498268][ T7111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.624808][ T7111] team0: Port device team_slave_0 added [ 277.647419][ T7111] team0: Port device team_slave_1 added [ 277.718911][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.736079][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.792918][ T7111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.847896][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.854971][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.911386][ T7111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.987446][ T3559] Bluetooth: hci7: command tx timeout [ 278.041043][ T7111] device hsr_slave_0 entered promiscuous mode [ 278.057932][ T7111] device hsr_slave_1 entered promiscuous mode [ 278.088770][ T7111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.102444][ T7111] Cannot create hsr debugfs directory [ 278.796624][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.974'. [ 278.807433][ T3564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.826718][ T3564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.839035][ T3564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.847629][ T3564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.855120][ T3564] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.864772][ T3564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.276445][ T3598] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 279.531091][ T3682] device hsr_slave_0 left promiscuous mode [ 279.542417][ T3682] device hsr_slave_1 left promiscuous mode [ 279.580369][ T3682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.626458][ T3682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.656627][ T3598] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.676385][ T3598] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.696146][ T3682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.696459][ T3598] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.725169][ T3682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.743198][ T3598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.752117][ T3682] device bridge_slave_1 left promiscuous mode [ 279.784362][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.793244][ T3682] device bridge_slave_0 left promiscuous mode [ 279.799947][ T7151] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 279.816905][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.898868][ T3682] device veth1_macvtap left promiscuous mode [ 279.904942][ T3682] device veth0_macvtap left promiscuous mode [ 279.954668][ T3682] device veth1_vlan left promiscuous mode [ 279.979830][ T3682] device veth0_vlan left promiscuous mode [ 280.066522][ T3564] Bluetooth: hci7: command tx timeout [ 280.201966][ T3593] usb 5-1: USB disconnect, device number 10 [ 280.792129][ T3559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.801755][ T3559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.812975][ T3559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.824290][ T3559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.834398][ T3559] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.843845][ T3559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.946690][ T3559] Bluetooth: hci0: command tx timeout [ 281.399161][ T3682] team0 (unregistering): Port device team_slave_1 removed [ 281.453521][ T3682] team0 (unregistering): Port device team_slave_0 removed [ 281.753397][ T3682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.146629][ T3559] Bluetooth: hci7: command tx timeout [ 282.253196][ T3682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.946873][ T3564] Bluetooth: hci4: command tx timeout [ 283.026659][ T3564] Bluetooth: hci0: command tx timeout [ 283.193417][ T7190] netlink: 'syz.4.988': attribute type 29 has an invalid length. [ 283.599310][ T3682] bond0 (unregistering): Released all slaves [ 283.805851][ T7188] netlink: 'syz.4.988': attribute type 9 has an invalid length. [ 283.832375][ T7190] netlink: 'syz.4.988': attribute type 29 has an invalid length. [ 283.892936][ T7191] netlink: 'syz.4.988': attribute type 29 has an invalid length. [ 283.950370][ T6292] syz-executor (6292) used greatest stack depth: 19240 bytes left [ 284.200678][ T7142] chnl_net:caif_netlink_parms(): no params data found [ 284.226871][ T3559] Bluetooth: hci7: command tx timeout [ 284.460246][ T7111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 284.675401][ T7111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 285.027299][ T3564] Bluetooth: hci4: command tx timeout [ 285.108366][ T3559] Bluetooth: hci0: command tx timeout [ 285.159672][ T7111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 285.567489][ T7111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 285.621111][ T7142] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.636637][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.644982][ T7142] device bridge_slave_0 entered promiscuous mode [ 285.702207][ T7142] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.722025][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.754722][ T7142] device bridge_slave_1 entered promiscuous mode [ 285.910998][ T7173] chnl_net:caif_netlink_parms(): no params data found [ 285.933420][ T7142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.980896][ T7111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.994139][ T7142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.050028][ T7111] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.065037][ T7213] dccp_invalid_packet: P.Data Offset(224) too large [ 286.183413][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.193656][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.280529][ T7142] team0: Port device team_slave_0 added [ 286.309650][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.324094][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.342704][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.349856][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.385966][ T7142] team0: Port device team_slave_1 added [ 286.498217][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.522771][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.559208][ T1158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.599444][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.606604][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.747896][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.755092][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.783892][ T7173] device bridge_slave_0 entered promiscuous mode [ 286.818420][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.837176][ T7142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.844141][ T7142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.936409][ T7142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.977272][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.984368][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.017654][ T7173] device bridge_slave_1 entered promiscuous mode [ 287.025072][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.051223][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.098107][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.106795][ T3559] Bluetooth: hci4: command tx timeout [ 287.146865][ T7142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.153844][ T7142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.185616][ T7244] netlink: 'syz.4.998': attribute type 29 has an invalid length. [ 287.193686][ T3559] Bluetooth: hci0: command tx timeout [ 287.240263][ T7142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.266899][ T7242] netlink: 'syz.4.998': attribute type 9 has an invalid length. [ 287.301843][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.326717][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.356466][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.365135][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.397300][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.405753][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.457164][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.467672][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.475397][ T7244] netlink: 'syz.4.998': attribute type 29 has an invalid length. [ 287.541191][ T7173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.583050][ T7173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.652121][ T7245] netlink: 'syz.4.998': attribute type 29 has an invalid length. [ 287.761585][ T7142] device hsr_slave_0 entered promiscuous mode [ 287.788944][ T7142] device hsr_slave_1 entered promiscuous mode [ 287.814596][ T7242] netlink: 'syz.4.998': attribute type 29 has an invalid length. [ 287.888037][ T7173] team0: Port device team_slave_0 added [ 287.972602][ T7173] team0: Port device team_slave_1 added [ 288.067013][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 288.085807][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1001'. [ 288.126623][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1001'. [ 288.136475][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 288.165651][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1001'. [ 288.174782][ T3596] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 288.202702][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1001'. [ 288.233050][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 288.253263][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1001'. [ 288.283956][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1001'. [ 288.305600][ T7257] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 288.377229][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.384740][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.412936][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.423098][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.449320][ T3596] usb 1-1: Using ep0 maxpacket: 8 [ 288.506605][ T7173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.545876][ T7111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.566631][ T3596] usb 1-1: config 0 has no interfaces? [ 288.572148][ T3596] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 288.597974][ T3596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.607568][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.614521][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.652709][ T3596] usb 1-1: config 0 descriptor?? [ 288.706906][ T7173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.736507][ T3595] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 288.797319][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.817105][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.939421][ T7173] device hsr_slave_0 entered promiscuous mode [ 288.967203][ T7173] device hsr_slave_1 entered promiscuous mode [ 288.983636][ T7173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.996550][ T7173] Cannot create hsr debugfs directory [ 289.151075][ T7142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.166713][ T3595] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.196786][ T3559] Bluetooth: hci4: command tx timeout [ 289.212686][ T3595] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 289.305615][ T7142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.326560][ T3595] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 289.335637][ T3595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 289.356459][ T3595] usb 5-1: SerialNumber: syz [ 289.363601][ T3595] usb 5-1: config 0 descriptor?? [ 289.365043][ T7111] device veth0_vlan entered promiscuous mode [ 289.398814][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.416730][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.417364][ T3595] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 289.478883][ T7142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.536056][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.545243][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.614373][ T7142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.631621][ T22] usb 5-1: USB disconnect, device number 11 [ 289.721376][ T3682] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.765423][ T7111] device veth1_vlan entered promiscuous mode [ 289.880631][ T3682] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.907005][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 289.935603][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 289.974899][ T7111] device veth0_macvtap entered promiscuous mode [ 290.018644][ T3682] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.050446][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.062559][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.110365][ T3682] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.135606][ T7111] device veth1_macvtap entered promiscuous mode [ 290.172535][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.194662][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.248031][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.280613][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.306448][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.337623][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.356527][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.386981][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.406778][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.436637][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.466474][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.486419][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.506572][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.536488][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.568114][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.581985][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.608015][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.629571][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.646425][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.676535][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.696469][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.726389][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.738611][ T3595] usb 1-1: USB disconnect, device number 12 [ 290.754728][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.795472][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.819815][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.848608][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.876478][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.903123][ T7111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.936507][ T7111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.964669][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.002734][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.017117][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.045220][ T7111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.068694][ T7111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.090848][ T7111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.114764][ T7262] loop4: detected capacity change from 0 to 32768 [ 291.121463][ T7111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.145918][ T7142] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 291.180268][ T7262] XFS (loop4): Mounting V5 Filesystem [ 291.199018][ T7142] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 291.228549][ T7142] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 291.271150][ T7142] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.359367][ T7262] XFS (loop4): Ending clean mount [ 291.456043][ T7262] XFS (loop4): Quotacheck needed: Please wait. [ 291.578109][ T7262] XFS (loop4): Quotacheck: Done. [ 291.610602][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.631570][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.797256][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.821146][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.847967][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.992325][ T6262] XFS (loop4): Unmounting Filesystem [ 292.226662][ T7142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.236917][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 292.430735][ T7142] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.523667][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.540283][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.704204][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.737235][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.751356][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.758537][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.796817][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.825401][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.865058][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.872218][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.031942][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.047177][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.073052][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.250748][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.288168][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.305476][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.326933][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.335511][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.354622][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.376660][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.386455][ T1158] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 293.397236][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.517196][ T7142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.557040][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.796509][ T1158] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.816456][ T1158] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 293.821526][ T7173] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.936600][ T1158] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 293.945681][ T1158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 293.996423][ T1158] usb 2-1: SerialNumber: syz [ 294.009869][ T7173] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.015993][ T1158] usb 2-1: config 0 descriptor?? [ 294.044815][ T7173] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.058072][ T1158] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 294.177427][ T7173] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 294.385329][ T1158] usb 2-1: USB disconnect, device number 13 [ 294.642331][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.658209][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.690367][ T7142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.736563][ T7173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.948735][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.957080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.978668][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.001301][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.050638][ T7173] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.113685][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 295.166444][ T7322] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1012'. [ 295.186397][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1012'. [ 295.263514][ T7142] device veth0_vlan entered promiscuous mode [ 295.271527][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.290778][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.315388][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.322555][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.347362][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.356890][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.386543][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.393657][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.444717][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.477351][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.490859][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.547346][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.555422][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.577875][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.607522][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.618700][ T7142] device veth1_vlan entered promiscuous mode [ 295.793952][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.821630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.855686][ T7173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.902849][ T7173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.956805][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.964814][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.974666][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.984392][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.008849][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.028093][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.046845][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.120399][ T3682] device hsr_slave_0 left promiscuous mode [ 296.137184][ T3682] device hsr_slave_1 left promiscuous mode [ 296.170671][ T3682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.201318][ T3682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.250433][ T3682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.272213][ T3682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.298433][ T3682] device bridge_slave_1 left promiscuous mode [ 296.304678][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.327432][ T27] audit: type=1326 audit(2000000214.710:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.0.1017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a27f75b59 code=0x0 [ 296.405115][ T3682] device bridge_slave_0 left promiscuous mode [ 296.444544][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.510474][ T3682] device hsr_slave_0 left promiscuous mode [ 296.547646][ T3682] device hsr_slave_1 left promiscuous mode [ 296.565355][ T3682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.586461][ T3682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.594358][ T3682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.606546][ T3682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.642296][ T3682] device bridge_slave_1 left promiscuous mode [ 296.660234][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.685075][ T3682] device bridge_slave_0 left promiscuous mode [ 296.705141][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.899575][ T3682] device veth1_macvtap left promiscuous mode [ 296.930548][ T3682] device veth0_macvtap left promiscuous mode [ 296.940206][ T3682] device veth1_vlan left promiscuous mode [ 296.955042][ T3682] device veth0_vlan left promiscuous mode [ 296.985130][ T3682] device veth1_macvtap left promiscuous mode [ 296.993555][ T3682] device veth0_macvtap left promiscuous mode [ 297.009304][ T3682] device veth1_vlan left promiscuous mode [ 297.039050][ T3682] device veth0_vlan left promiscuous mode [ 297.596511][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 297.648781][ T7356] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1023'. [ 297.665421][ T3682] bond1 (unregistering): Released all slaves [ 297.683861][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1023'. [ 298.101186][ T7360] Bluetooth: MGMT ver 1.22 [ 298.954632][ T3682] team0 (unregistering): Port device team_slave_1 removed [ 299.054172][ T3682] team0 (unregistering): Port device team_slave_0 removed [ 299.175351][ T3682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.306416][ T3682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.146517][ T3564] Bluetooth: hci0: command 0x0401 tx timeout [ 300.152573][ T3559] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 300.799927][ T3682] bond0 (unregistering): Released all slaves [ 302.020072][ T3682] team0 (unregistering): Port device team_slave_1 removed [ 302.105987][ T3682] team0 (unregistering): Port device team_slave_0 removed [ 302.207484][ T3682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.297578][ T3682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.354427][ T3682] bond0 (unregistering): Released all slaves [ 303.495438][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.507903][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.547217][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.578846][ T7142] device veth0_macvtap entered promiscuous mode [ 303.658812][ T7142] device veth1_macvtap entered promiscuous mode [ 303.726205][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.746589][ T3559] Bluetooth: hci1: command 0x0406 tx timeout [ 303.778149][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.789446][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 303.799733][ T7384] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1032'. [ 303.809439][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1032'. [ 303.845385][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.860847][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.887764][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.906366][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.926543][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.947469][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.966150][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.986598][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.017214][ T7142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.044764][ T7386] device vlan1 entered promiscuous mode [ 304.058620][ T7386] device bond0 entered promiscuous mode [ 304.075431][ T7386] device bond_slave_0 entered promiscuous mode [ 304.092084][ T7386] device bond_slave_1 entered promiscuous mode [ 304.117786][ T7386] device bond0 left promiscuous mode [ 304.123188][ T7386] device bond_slave_0 left promiscuous mode [ 304.148407][ T7386] device bond_slave_1 left promiscuous mode [ 304.209700][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.233983][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.257556][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.287208][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.326505][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.348422][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.416566][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.436089][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.476675][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.496540][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.522254][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.557042][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.586399][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.608704][ T7142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.678636][ T7173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.686131][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.715439][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.734785][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.760432][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.788858][ T7142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.806391][ T7142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.815119][ T7142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.854154][ T7142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.968489][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 304.987077][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.066993][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.075428][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.118258][ T7173] device veth0_vlan entered promiscuous mode [ 305.131493][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 305.158033][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.175597][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.204500][ T7173] device veth1_vlan entered promiscuous mode [ 305.256228][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 305.257028][ T7409] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1043'. [ 305.287320][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 305.322352][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.336798][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1043'. [ 305.344297][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.360462][ T7173] device veth0_macvtap entered promiscuous mode [ 305.390989][ T7173] device veth1_macvtap entered promiscuous mode [ 305.496694][ T3735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.546092][ T3735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.556863][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.582062][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.602426][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.625260][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.690459][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.708550][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.771942][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.807791][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.857477][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.882811][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.909622][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.937837][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.988683][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.033997][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.054761][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.136606][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.201725][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.230133][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.278752][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.303235][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.330276][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.344183][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.356019][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.376996][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.422653][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.451531][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.470398][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.484633][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.510499][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.569502][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.616617][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.652440][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.664385][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.681348][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.694455][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.721835][ T7173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.753152][ T7173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.804649][ T7173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.859119][ T7173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.910254][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.928467][ T7427] device vlan1 entered promiscuous mode [ 306.964723][ T7427] device bond0 entered promiscuous mode [ 306.991165][ T7427] device bond_slave_0 entered promiscuous mode [ 307.019635][ T7427] device bond_slave_1 entered promiscuous mode [ 307.058902][ T7427] device bond0 left promiscuous mode [ 307.068118][ T7427] device bond_slave_0 left promiscuous mode [ 307.091202][ T7427] device bond_slave_1 left promiscuous mode [ 307.371721][ T3735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.398459][ T3735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.441733][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.484141][ T4481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.496412][ T4481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.550916][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.196037][ T7452] ieee802154 phy0 wpan0: encryption failed: -22 [ 308.446617][ T3637] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 308.740818][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1062'. [ 308.846744][ T3637] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.876910][ T3637] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.950848][ T3637] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.997703][ T3637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.065201][ T3637] usb 2-1: config 0 descriptor?? [ 309.228380][ T7477] loop4: detected capacity change from 0 to 16 [ 309.298706][ T7477] erofs: (device loop4): mounted with root inode @ nid 36. [ 309.338413][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1071'. [ 309.367842][ T7481] IPv6: NLM_F_REPLACE set, but no existing node found! [ 309.380625][ T7481] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 309.432694][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 309.459666][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1071'. [ 309.583334][ T3637] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 309.610332][ T3637] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 309.680883][ T3637] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 309.866403][ T3596] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 310.018783][ T3637] usb 2-1: USB disconnect, device number 14 [ 310.396738][ T3596] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 310.427353][ T3596] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.435389][ T3596] usb 5-1: Product: syz [ 310.445050][ T7487] loop3: detected capacity change from 0 to 1024 [ 310.489252][ T3596] usb 5-1: Manufacturer: syz [ 310.534919][ T3596] usb 5-1: SerialNumber: syz [ 310.598263][ T3596] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 310.842134][ T7488] loop2: detected capacity change from 0 to 2048 [ 310.967572][ T7488] loop2: p1 < > p3 p4 < > [ 311.013892][ T7488] loop2: p3 start 4259840 is beyond EOD, truncated [ 311.166043][ T7488] dccp_invalid_packet: P.Data Offset(224) too large [ 311.796703][ T3596] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 312.174469][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 312.241050][ T22] usb 5-1: USB disconnect, device number 12 [ 312.464583][ T7508] device vlan2 entered promiscuous mode [ 312.513042][ T7508] device bond0 entered promiscuous mode [ 312.897363][ T7510] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1080'. [ 312.906842][ T7510] netlink: zone id is out of range [ 312.928178][ T7508] device bond_slave_0 entered promiscuous mode [ 312.957278][ T7508] device bond_slave_1 entered promiscuous mode [ 312.990042][ T7508] device bond0 left promiscuous mode [ 313.012228][ T7508] device bond_slave_0 left promiscuous mode [ 313.038601][ T7508] device bond_slave_1 left promiscuous mode [ 313.106874][ T3596] usb 5-1: Service connection timeout for: 256 [ 313.126674][ T3596] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 313.173645][ T3596] ath9k_htc: Failed to initialize the device [ 313.282565][ T22] usb 5-1: ath9k_htc: USB layer deinitialized [ 314.396516][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 314.429566][ T7530] loop3: detected capacity change from 0 to 1024 [ 314.539622][ T7530] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 314.574112][ T7530] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 314.738778][ T7142] EXT4-fs (loop3): unmounting filesystem. [ 314.746446][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 315.115384][ T7] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 315.134786][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.173823][ T7] usb 2-1: config 0 descriptor?? [ 315.313792][ T7525] loop2: detected capacity change from 0 to 32768 [ 315.345379][ T7518] loop4: detected capacity change from 0 to 32768 [ 315.468443][ T7518] XFS (loop4): Mounting V5 Filesystem [ 315.575341][ T7518] XFS (loop4): Ending clean mount [ 315.758386][ T7] [drm] vendor descriptor length:b9 data:20 30 c4 a4 1b 38 94 62 92 09 29 [ 315.793776][ T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 315.827472][ T6262] XFS (loop4): Unmounting Filesystem [ 315.836569][ T7] [drm:udl_init] *ERROR* Selecting channel failed [ 315.938657][ T7] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 315.952679][ T7560] Illegal XDP return value 4291395584 on prog (id 185) dev N/A, expect packet loss! [ 315.976374][ T7] [drm] Initialized udl on minor 2 [ 316.035410][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 316.124846][ T7] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 316.135727][ T7563] kAFS: unable to lookup cell 'sy„1' [ 316.154880][ T7] usb 2-1: USB disconnect, device number 15 [ 316.162575][ T7564] device vlan2 entered promiscuous mode [ 316.218025][ T7564] device bond0 entered promiscuous mode [ 316.224069][ T7564] device bond_slave_0 entered promiscuous mode [ 316.293203][ T7564] device bond_slave_1 entered promiscuous mode [ 316.353142][ T7564] device bond0 left promiscuous mode [ 316.366783][ T7564] device bond_slave_0 left promiscuous mode [ 316.468089][ T7564] device bond_slave_1 left promiscuous mode [ 317.047453][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.055055][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.551589][ T7576] loop2: detected capacity change from 0 to 2048 [ 317.636842][ T7576] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.696508][ T3552] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 317.719211][ T27] audit: type=1800 audit(2000000236.100:23): pid=7576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1103" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 318.256718][ T3552] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.274543][ T3552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.307804][ T3552] usb 5-1: Product: syz [ 318.322238][ T3552] usb 5-1: Manufacturer: syz [ 318.336986][ T3552] usb 5-1: SerialNumber: syz [ 318.397439][ T3552] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 318.570474][ T7602] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1109'. [ 318.579999][ T7602] netlink: zone id is out of range [ 319.026647][ T3552] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 319.273190][ T7614] binder: 7607:7614 ioctl c00c6211 0 returned -14 [ 320.211885][ T7617] loop3: detected capacity change from 0 to 8 [ 320.223266][ T153] usb 5-1: USB disconnect, device number 13 [ 320.287417][ T7617] squashfs: Unknown parameter 'euid' [ 320.941125][ T7628] loop3: detected capacity change from 0 to 2048 [ 320.998125][ T7628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.058261][ T27] audit: type=1800 audit(2000000239.430:24): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1120" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 321.106709][ T3552] usb 5-1: Service connection timeout for: 256 [ 321.112903][ T3552] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 321.177049][ T3552] ath9k_htc: Failed to initialize the device [ 321.183377][ T153] usb 5-1: ath9k_htc: USB layer deinitialized [ 321.345649][ T7642] loop2: detected capacity change from 0 to 1024 [ 323.122847][ T7658] loop2: detected capacity change from 0 to 8 [ 323.137032][ T7658] squashfs: Unknown parameter 'euid' [ 323.333274][ T7665] binder: 7655:7665 ioctl c00c6211 0 returned -14 [ 324.306428][ T3553] Bluetooth: hci2: command 0x0406 tx timeout [ 324.496933][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'. [ 324.526415][ T3552] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 325.686717][ T3552] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 325.710367][ T3552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.736405][ T3552] usb 3-1: Product: syz [ 325.766169][ T3552] usb 3-1: Manufacturer: syz [ 325.776414][ T3552] usb 3-1: SerialNumber: syz [ 325.817340][ T3552] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 326.153384][ T7707] binder: 7700:7707 ioctl c00c6211 0 returned -14 [ 327.091730][ T3552] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 327.216264][ T153] usb 3-1: USB disconnect, device number 9 [ 327.313037][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'. [ 327.326404][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 327.395751][ T7727] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.146422][ T3552] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 328.176060][ T3552] ath9k_htc: Failed to initialize the device [ 328.187157][ T153] usb 3-1: ath9k_htc: USB layer deinitialized [ 328.389426][ T3559] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 328.398168][ T3559] Bluetooth: hci6: Injecting HCI hardware error event [ 328.407359][ T3559] Bluetooth: hci6: hardware error 0x00 [ 328.466489][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.481221][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 328.490534][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.282383][ T7] usb 4-1: config 0 descriptor?? [ 329.437560][ T7749] input: syz1 as /devices/virtual/input/input10 [ 329.571094][ T7] usb 4-1: string descriptor 0 read error: -71 [ 329.591861][ T7] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 329.609370][ T7] usb 4-1: No valid video chain found. [ 329.664550][ T7] usb 4-1: USB disconnect, device number 12 [ 329.708013][ T3596] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 330.165224][ T52] block nbd0: Attempted send on invalid socket [ 330.172101][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 330.477246][ T3559] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 331.297974][ T3559] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 331.307120][ T3559] Bluetooth: hci3: Injecting HCI hardware error event [ 331.316964][ T3553] Bluetooth: hci3: hardware error 0x00 [ 331.540049][ T3596] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 331.606586][ T3596] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.634092][ T3596] usb 5-1: Product: syz [ 331.656384][ T3596] usb 5-1: Manufacturer: syz [ 331.681452][ T3596] usb 5-1: SerialNumber: syz [ 331.757870][ T3596] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 332.560770][ T7] usb 5-1: USB disconnect, device number 14 [ 332.566796][ T3596] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 332.616795][ T7] usb 5-1: ath9k_htc: USB layer deinitialized [ 332.706264][ T7798] loop3: detected capacity change from 0 to 1024 [ 332.888071][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 332.905636][ T7798] hfsplus: xattr searching failed [ 332.968814][ T27] audit: type=1800 audit(2000000251.350:25): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1172" name="file0" dev="loop3" ino=4 res=0 errno=0 [ 332.996438][ T7808] hfsplus: xattr search failed [ 333.134735][ T7792] hfsplus: bad catalog file entry [ 333.396573][ T26] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 333.506527][ T3553] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 333.762938][ T7818] loop3: detected capacity change from 0 to 2048 [ 333.776689][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.802443][ T26] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 333.861590][ T7818] loop3: p1 < > p3 p4 < > [ 333.886831][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.906864][ T7826] dccp_invalid_packet: P.Data Offset(224) too large [ 333.941704][ T26] usb 1-1: config 0 descriptor?? [ 333.988617][ T7818] loop3: p3 start 4259840 is beyond EOD, truncated [ 334.229643][ T26] usb 1-1: string descriptor 0 read error: -71 [ 334.237322][ T3598] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 334.247337][ T26] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 334.254214][ T26] usb 1-1: No valid video chain found. [ 334.345927][ T26] usb 1-1: USB disconnect, device number 13 [ 334.706794][ T3553] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 334.715624][ T3553] Bluetooth: hci4: Injecting HCI hardware error event [ 334.726544][ T3559] Bluetooth: hci4: hardware error 0x00 [ 334.767134][ T3598] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 334.796456][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.804655][ T3598] usb 3-1: Product: syz [ 334.829324][ T3598] usb 3-1: Manufacturer: syz [ 334.833938][ T3598] usb 3-1: SerialNumber: syz [ 334.897276][ T3598] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 335.926532][ T3598] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 336.341181][ T7847] loop4: detected capacity change from 0 to 64 [ 336.383178][ T3596] usb 3-1: USB disconnect, device number 10 [ 336.390925][ T7847] hfs: session requires an argument [ 336.416443][ T7847] hfs: unable to parse mount options [ 336.788487][ T3559] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 337.066426][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 337.186594][ T3598] usb 3-1: Service connection timeout for: 256 [ 337.192756][ T3598] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 337.243087][ T3598] ath9k_htc: Failed to initialize the device [ 337.266536][ T3596] usb 3-1: ath9k_htc: USB layer deinitialized [ 337.436574][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.456204][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 337.486729][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.537399][ T7] usb 5-1: config 0 descriptor?? [ 337.831596][ T7] usb 5-1: string descriptor 0 read error: -71 [ 337.849977][ T7] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 337.876557][ T7] usb 5-1: No valid video chain found. [ 337.915877][ T7] usb 5-1: USB disconnect, device number 15 [ 338.246564][ T27] audit: type=1326 audit(2000000256.620:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.3.1207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f604cd75b59 code=0x0 [ 338.303246][ T7892] loop2: detected capacity change from 0 to 128 [ 339.078664][ T7897] loop4: detected capacity change from 0 to 40427 [ 339.104561][ T7740] Bluetooth: hci5: Frame reassembly failed (-84) [ 339.137666][ T7897] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 339.159219][ T7897] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 339.265775][ T7897] F2FS-fs (loop4): Found nat_bits in checkpoint [ 339.420679][ T7897] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 339.453404][ T7897] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 339.666562][ T3595] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 339.683546][ T6262] syz-executor: attempt to access beyond end of device [ 339.683546][ T6262] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 340.036540][ T3595] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 340.081009][ T3595] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.111814][ T3595] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 340.316749][ T3595] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 340.346199][ T3595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.377392][ T3595] usb 4-1: Product: syz [ 340.383077][ T3595] usb 4-1: Manufacturer: syz [ 340.388170][ T3595] usb 4-1: SerialNumber: syz [ 340.407465][ T3595] usb 4-1: config 0 descriptor?? [ 340.457390][ T3595] usb-storage 4-1:0.0: USB Mass Storage device detected [ 340.497496][ T3595] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 340.678367][ T3595] usb 4-1: USB disconnect, device number 13 [ 340.736429][ T3596] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 340.847611][ T7929] loop4: detected capacity change from 0 to 128 [ 341.106454][ T3559] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 341.109050][ T3553] Bluetooth: hci5: command 0x1003 tx timeout [ 341.122020][ T3596] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.152681][ T3596] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 341.161876][ T3596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.180781][ T3596] usb 3-1: config 0 descriptor?? [ 341.476429][ T3596] usb 3-1: string descriptor 0 read error: -71 [ 341.493450][ T3596] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 341.518207][ T3596] usb 3-1: No valid video chain found. [ 341.539407][ T3596] usb 3-1: USB disconnect, device number 11 [ 344.516474][ T22] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 344.796483][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 345.146620][ T22] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 345.172030][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.217075][ T22] usb 2-1: Product: syz [ 345.231861][ T7972] loop3: detected capacity change from 0 to 32768 [ 345.256020][ T7972] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1237 (7972) [ 345.271558][ T22] usb 2-1: Manufacturer: syz [ 345.303094][ T22] usb 2-1: SerialNumber: syz [ 345.332296][ T22] usb 2-1: config 0 descriptor?? [ 345.388239][ T22] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 345.426592][ T22] imon 2-1:0.0: unable to initialize intf0, err -19 [ 345.433212][ T22] imon:imon_probe: failed to initialize context! [ 345.474851][ T22] imon 2-1:0.0: unable to register, err -19 [ 345.533131][ T7972] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 345.603813][ T7972] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 345.622993][ T7972] BTRFS info (device loop3): using free space tree [ 346.101082][ T7972] BTRFS info (device loop3): enabling ssd optimizations [ 346.221759][ T3596] usb 2-1: USB disconnect, device number 16 [ 346.294822][ T7983] loop2: detected capacity change from 0 to 40427 [ 346.356871][ T7983] F2FS-fs (loop2): invalid crc value [ 346.383686][ T7983] F2FS-fs (loop2): Found nat_bits in checkpoint [ 346.386489][ T27] audit: type=1800 audit(2000000264.760:27): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1237" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 346.576493][ T7983] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 346.620482][ T27] audit: type=1800 audit(2000000265.000:28): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1243" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 346.679180][ T7142] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 346.705764][ T27] audit: type=1800 audit(2000000265.080:29): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1243" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 346.870967][ T7173] syz-executor: attempt to access beyond end of device [ 346.870967][ T7173] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 348.663093][ T8040] loop4: detected capacity change from 0 to 512 [ 348.788599][ T8040] EXT4-fs (loop4): 1 orphan inode deleted [ 348.822866][ T8040] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 348.864011][ T8040] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038 (0x7fffffff) [ 349.310698][ T8057] EXT4-fs (loop4): resizing filesystem from 64 to 1 blocks [ 349.318601][ T8057] EXT4-fs warning (device loop4): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 349.394534][ T27] audit: type=1804 audit(2000000267.760:30): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1254" name="/newroot/146/file1/bus" dev="loop4" ino=16 res=1 errno=0 [ 349.799503][ T8056] 9pnet_fd: Insufficient options for proto=fd [ 349.849818][ T27] audit: type=1804 audit(2000000267.890:31): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1254" name="/newroot/146/file1/bus" dev="loop4" ino=16 res=1 errno=0 [ 349.889467][ T6262] EXT4-fs (loop4): unmounting filesystem. [ 349.977746][ T27] audit: type=1804 audit(2000000267.910:32): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1254" name="/newroot/146/file1/bus" dev="loop4" ino=16 res=1 errno=0 [ 350.073578][ T27] audit: type=1326 audit(2000000268.440:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8067 comm="syz.2.1261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eca775b59 code=0x0 [ 351.001314][ T8101] loop2: detected capacity change from 0 to 256 [ 352.205458][ T8124] syz.3.1282 sent an empty control message without MSG_MORE. [ 352.455344][ T27] audit: type=1326 audit(2000000270.830:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.0.1285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a27f75b59 code=0x0 [ 353.744422][ T3553] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.755885][ T3553] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.764179][ T3553] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.783731][ T3553] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.793127][ T3553] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 353.802105][ T3553] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.914039][ T8128] loop2: detected capacity change from 0 to 32768 [ 353.932459][ T8128] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1283 (8128) [ 354.008831][ T8128] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 354.041801][ T8128] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 354.060183][ T8128] BTRFS info (device loop2): using free space tree [ 354.345662][ T8128] BTRFS info (device loop2): enabling ssd optimizations [ 354.535210][ T8143] chnl_net:caif_netlink_parms(): no params data found [ 354.679185][ T7740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.909484][ T7740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.131261][ T7173] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 355.916552][ T3559] Bluetooth: hci5: command tx timeout [ 356.192532][ T7740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.267753][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.274871][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.320277][ T8143] device bridge_slave_0 entered promiscuous mode [ 356.415384][ T7740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.455366][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.471704][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.495604][ T8143] device bridge_slave_1 entered promiscuous mode [ 356.655649][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.718794][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.814751][ T8143] team0: Port device team_slave_0 added [ 357.877896][ T8143] team0: Port device team_slave_1 added [ 357.998561][ T3559] Bluetooth: hci5: command tx timeout [ 358.117973][ T8220] loop3: detected capacity change from 0 to 512 [ 358.141778][ T8220] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.196360][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.209015][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.225789][ T8220] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1303: inline data xattr refers to an external xattr inode [ 358.226509][ T3596] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 358.298394][ T8220] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1303: couldn't read orphan inode 12 (err -117) [ 358.311185][ T8220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 358.330351][ T8143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.428757][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.435767][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.474969][ T27] audit: type=1800 audit(2000000276.850:35): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1303" name="file0" dev="loop3" ino=21 res=0 errno=0 [ 358.524188][ T8143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.581804][ T7142] EXT4-fs (loop3): unmounting filesystem. [ 358.636508][ T3596] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 358.645587][ T3596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.690645][ T3596] usb 5-1: config 0 descriptor?? [ 358.891824][ T8143] device hsr_slave_0 entered promiscuous mode [ 358.913542][ T8143] device hsr_slave_1 entered promiscuous mode [ 358.932204][ T8143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.957943][ T8143] Cannot create hsr debugfs directory [ 359.106982][ T8241] loop7: detected capacity change from 0 to 16384 [ 359.357012][ T8241] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 359.620937][ T8233] loop2: detected capacity change from 0 to 32768 [ 359.664333][ T8233] XFS: ikeep mount option is deprecated. [ 359.702100][ T8233] XFS: ikeep mount option is deprecated. [ 359.721208][ T8250] loop3: detected capacity change from 0 to 2048 [ 359.816491][ T3596] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 359.828756][ T8250] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 359.836448][ T3596] asix: probe of 5-1:0.0 failed with error -71 [ 359.846028][ T3596] usb 5-1: USB disconnect, device number 16 [ 359.858473][ T8250] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038 (0x7fffffff) [ 359.883967][ T8233] XFS (loop2): Mounting V5 Filesystem [ 360.055726][ T8233] XFS (loop2): Ending clean mount [ 360.081395][ T3559] Bluetooth: hci5: command tx timeout [ 360.103834][ T8233] XFS (loop2): Quotacheck needed: Please wait. [ 360.126162][ T7142] EXT4-fs (loop3): unmounting filesystem. [ 360.191883][ T8233] XFS (loop2): Quotacheck: Done. [ 360.346030][ T7740] device hsr_slave_0 left promiscuous mode [ 360.474193][ T7740] device hsr_slave_1 left promiscuous mode [ 360.489783][ T7173] XFS (loop2): Unmounting Filesystem [ 360.606661][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.614128][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.689992][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.722886][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.776396][ T7740] device bridge_slave_1 left promiscuous mode [ 360.796900][ T8279] loop4: detected capacity change from 0 to 256 [ 360.804587][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.834363][ T7740] device bridge_slave_0 left promiscuous mode [ 360.846835][ T8279] exfat: Deprecated parameter 'namecase' [ 360.852512][ T8279] exfat: Deprecated parameter 'utf8' [ 360.916506][ T8279] exfat: Deprecated parameter 'namecase' [ 360.922244][ T8279] exfat: Deprecated parameter 'utf8' [ 360.936565][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.989694][ T8279] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 361.428080][ T7740] device veth1_macvtap left promiscuous mode [ 361.726788][ T7740] device veth0_macvtap left promiscuous mode [ 361.749942][ T7740] device veth1_vlan left promiscuous mode [ 361.755788][ T7740] device veth0_vlan left promiscuous mode [ 362.199286][ T3559] Bluetooth: hci5: command tx timeout [ 363.259107][ T8299] ebt_limit: overflow, try lower: 0/0 [ 364.323736][ T8292] loop4: detected capacity change from 0 to 32768 [ 364.357810][ T8292] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1318 (8292) [ 364.468462][ T8292] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 364.486405][ T8292] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 364.523075][ T8292] BTRFS info (device loop4): using free space tree [ 364.642966][ T8319] Invalid ELF header magic: != ELF [ 364.807196][ T8292] BTRFS info (device loop4): enabling ssd optimizations [ 364.833185][ T8330] loop2: detected capacity change from 0 to 256 [ 365.038154][ T8330] loop2: detected capacity change from 256 to 11 [ 365.072888][ T8331] syz.2.1325: attempt to access beyond end of device [ 365.072888][ T8331] loop2: rw=2051, sector=208, nr_sectors = 32 limit=11 [ 365.113199][ T6262] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 365.147956][ T8331] FAT-fs (loop2): unable to read inode block for updating (i_pos 202) [ 365.215395][ T7740] team0 (unregistering): Port device team_slave_1 removed [ 365.323758][ T7173] FAT-fs (loop2): Directory bread(block 3) failed [ 365.576968][ T7740] team0 (unregistering): Port device team_slave_0 removed [ 365.718301][ T7740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.875947][ T7740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.208663][ T7740] bond0 (unregistering): Released all slaves [ 367.551393][ T8356] netlink: 'syz.0.1335': attribute type 4 has an invalid length. [ 368.103097][ T8370] loop3: detected capacity change from 0 to 2048 [ 368.224857][ T8143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 368.244334][ T8370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 368.353521][ T8143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 368.398402][ T3680] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 368.443840][ T8143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 368.486766][ T3680] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 368.519298][ T8143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 368.556476][ T3680] EXT4-fs (loop3): This should not happen!! Data will be lost [ 368.556476][ T3680] [ 368.566181][ T3680] EXT4-fs (loop3): Total free blocks count 0 [ 368.647786][ T3680] EXT4-fs (loop3): Free/Dirty block details [ 368.653732][ T3680] EXT4-fs (loop3): free_blocks=2415919104 [ 368.692299][ T3680] EXT4-fs (loop3): dirty_blocks=48 [ 368.726500][ T3680] EXT4-fs (loop3): Block reservation details [ 368.732559][ T3680] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 368.804501][ T8370] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 368.826482][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.847784][ T3559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.868708][ T3559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.887187][ T3559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.905156][ T3559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.913887][ T3559] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 368.926597][ T3559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.087394][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.102445][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.179520][ T8143] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.263060][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.292489][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.318830][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.325973][ T8186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.394542][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 369.423970][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 369.451694][ T8186] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.458899][ T8186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.520403][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 369.655588][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 369.683096][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 369.745352][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.753582][ T8187] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 369.778182][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 369.813897][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 369.845690][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.910056][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 369.927148][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.956190][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.007283][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.036624][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.058185][ T8143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 370.147102][ T8187] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 370.187613][ T8187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.298604][ T8187] usb 5-1: config 0 descriptor?? [ 370.474684][ T8391] chnl_net:caif_netlink_parms(): no params data found [ 370.661238][ T8417] loop3: detected capacity change from 0 to 32768 [ 370.708224][ T8417] Dev loop3 Sun disklabel: Csum bad, label corrupted [ 370.745741][ T8417] loop3: unable to read partition table [ 370.775570][ T8417] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 370.806463][ T8187] [drm:udl_init] *ERROR* Selecting channel failed [ 370.819151][ T3003] Dev loop3 Sun disklabel: Csum bad, label corrupted [ 370.849349][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.860460][ T8187] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 370.868435][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.873193][ T3003] loop3: unable to read partition table [ 370.911570][ T8391] device bridge_slave_0 entered promiscuous mode [ 370.918395][ T8187] [drm] Initialized udl on minor 2 [ 370.936460][ T8187] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 370.956556][ T3553] Bluetooth: hci4: command tx timeout [ 370.972634][ T8187] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 370.991280][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.992326][ T8187] usb 5-1: USB disconnect, device number 17 [ 371.026824][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.064999][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.079314][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.127545][ T8391] device bridge_slave_1 entered promiscuous mode [ 371.170771][ T8143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.250162][ T8391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.297587][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 371.317661][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.347196][ T8391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.442285][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.464930][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.507263][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.515033][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.605880][ T8457] netlink: 'syz.4.1362': attribute type 4 has an invalid length. [ 371.618018][ T8143] device veth0_vlan entered promiscuous mode [ 371.630027][ T8391] team0: Port device team_slave_0 added [ 371.657507][ T8143] device veth1_vlan entered promiscuous mode [ 371.710554][ T8391] team0: Port device team_slave_1 added [ 371.826221][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.867139][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 371.928773][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.948545][ T3553] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 371.975016][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.017836][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.025205][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.106449][ T8391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.142724][ T8143] device veth0_macvtap entered promiscuous mode [ 372.163003][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.176345][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.256418][ T8391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.286686][ T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 372.295714][ T8143] device veth1_macvtap entered promiscuous mode [ 372.413293][ T8143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.434496][ T8143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.465011][ T8143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.491493][ T8143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.505005][ T8143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.523249][ T8143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.543515][ T8143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.555584][ T8143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.578231][ T8143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.597994][ T8143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.614855][ T8143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.635024][ T8143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.656078][ T8143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.668361][ T8391] device hsr_slave_0 entered promiscuous mode [ 372.669111][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.699997][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.706687][ T8391] device hsr_slave_1 entered promiscuous mode [ 372.725468][ T14] usb 4-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 372.735867][ T8391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.745573][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.753774][ T8391] Cannot create hsr debugfs directory [ 372.797455][ T14] usb 4-1: config 0 descriptor?? [ 372.839319][ T14] usbhid 4-1:0.0: can't add hid device: -22 [ 372.845373][ T14] usbhid: probe of 4-1:0.0 failed with error -22 [ 372.900582][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 372.917126][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.936284][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.958042][ T8143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.976616][ T8143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.997462][ T8143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.018935][ T8143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.029058][ T3553] Bluetooth: hci4: command tx timeout [ 373.066452][ T8143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.076974][ T8143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.086904][ T8143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.097394][ T8143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.107809][ T8143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.118289][ T8143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.128196][ T8143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.139449][ T8143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.153164][ T8143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.106420][ T3553] Bluetooth: hci4: command tx timeout [ 377.186568][ T3553] Bluetooth: hci4: command tx timeout [ 378.470696][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.477060][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.117938][ T28] INFO: task kworker/u4:10:3683 blocked for more than 143 seconds. [ 379.125866][ T28] Not tainted 6.1.100-syzkaller #0 [ 379.150683][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 379.178119][ T28] task:kworker/u4:10 state:D stack:21688 pid:3683 ppid:2 flags:0x00004000 [ 379.222703][ T28] Workqueue: writeback wb_workfn (flush-7:1) [ 379.279178][ T28] Call Trace: [ 379.282518][ T28] [ 379.285470][ T28] __schedule+0x143f/0x4570 [ 379.324716][ T28] ? __sched_text_start+0x8/0x8 [ 379.329675][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 379.335144][ T28] ? blk_check_plugged+0x250/0x250 [ 379.372482][ T28] ? wq_worker_sleeping+0x5f/0x270 [ 379.380003][ T28] schedule+0xbf/0x180 [ 379.384091][ T28] schedule_preempt_disabled+0xf/0x20 [ 379.391605][ T28] __mutex_lock+0x6b9/0xd80 [ 379.396151][ T28] ? __mutex_lock+0x53c/0xd80 [ 379.400983][ T28] ? exfat_write_inode+0x65/0x110 [ 379.406045][ T28] ? mutex_lock_nested+0x10/0x10 [ 379.411098][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 379.416347][ T28] exfat_write_inode+0x65/0x110 [ 379.421232][ T28] __writeback_single_inode+0x67d/0x11e0 [ 379.433204][ T28] writeback_sb_inodes+0xc2b/0x1b20 [ 379.441893][ T28] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 379.453292][ T28] ? queue_io+0x630/0x630 [ 379.462132][ T28] ? __writeback_inodes_wb+0x400/0x400 [ 379.472964][ T28] __writeback_inodes_wb+0x114/0x400 [ 379.481559][ T28] wb_writeback+0x4b1/0xe10 [ 379.486095][ T28] ? percpu_ref_tryget+0x260/0x260 [ 379.494149][ T28] ? _find_next_bit+0x11b/0x120 [ 379.499326][ T28] wb_workfn+0xc9e/0x1020 [ 379.503721][ T28] ? inode_wait_for_writeback+0x280/0x280 [ 379.509583][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 379.515579][ T28] ? print_irqtrace_events+0x210/0x210 [ 379.536349][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 379.542298][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 379.556396][ T28] ? process_one_work+0x7a9/0x11d0 [ 379.561538][ T28] process_one_work+0x8a9/0x11d0 [ 379.576374][ T28] ? worker_detach_from_pool+0x260/0x260 [ 379.582132][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 379.606401][ T28] ? kthread_data+0x4e/0xc0 [ 379.611066][ T28] ? wq_worker_running+0x97/0x190 [ 379.616110][ T28] worker_thread+0xa47/0x1200 [ 379.636411][ T28] kthread+0x28d/0x320 [ 379.646363][ T28] ? worker_clr_flags+0x190/0x190 [ 379.651433][ T28] ? kthread_blkcg+0xd0/0xd0 [ 379.656034][ T28] ret_from_fork+0x1f/0x30 [ 379.676401][ T28] [ 379.686518][ T28] [ 379.686518][ T28] Showing all locks held in the system: [ 379.694268][ T28] 1 lock held by rcu_tasks_kthre/12: [ 379.711878][ T28] #0: ffffffff8d12af10 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 379.736401][ T28] 1 lock held by rcu_tasks_trace/13: [ 379.741714][ T28] #0: ffffffff8d12b710 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 379.777697][ T28] 1 lock held by khungtaskd/28: [ 379.782692][ T28] #0: ffffffff8d12ad40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 379.807002][ T28] 2 locks held by kworker/0:2/153: [ 379.812149][ T28] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 379.836385][ T28] #1: ffffc90002d3fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 379.856430][ T28] 2 locks held by getty/3302: [ 379.861131][ T28] #0: ffff88814c9a8098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 379.887587][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 379.917016][ T28] 4 locks held by kworker/u4:10/3683: [ 379.922420][ T28] #0: ffff88801526f938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 379.946362][ T28] #1: ffffc90004837d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 379.966333][ T28] #2: ffff888060e440e0 (&type->s_umount_key#66){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 379.976288][ T28] #3: ffff888060e460e0 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_write_inode+0x65/0x110 [ 380.003649][ T28] 4 locks held by kworker/u4:15/4782: [ 380.009638][ T28] #0: ffff88801526f938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.020356][ T28] #1: ffffc9000394fd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.033125][ T28] #2: ffff888063a220e0 (&type->s_umount_key#66){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 380.044215][ T28] #3: ffff888063a200e0 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_write_inode+0x65/0x110 [ 380.062632][ T28] 3 locks held by syz-executor/5732: [ 380.070175][ T28] 3 locks held by syz-executor/6024: [ 380.075565][ T28] 4 locks held by kworker/u4:20/7740: [ 380.090073][ T28] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.104787][ T28] #1: ffffc900036e7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.126704][ T28] #2: ffffffff8e28dad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 380.136169][ T28] #3: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: fib6_rules_net_exit_batch+0x1c/0xc0 [ 380.156015][ T28] 3 locks held by kworker/0:9/8016: [ 380.161303][ T28] #0: ffff888027dc7d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.181145][ T28] #1: ffffc900058dfd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.202349][ T28] #2: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 380.215474][ T28] 1 lock held by syz-executor/8143: [ 380.233642][ T28] #0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 380.251902][ T28] 3 locks held by kworker/1:11/8184: [ 380.260236][ T28] #0: ffff888027dc7d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.280145][ T28] #1: ffffc9000a997d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.301289][ T28] #2: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 380.322069][ T28] 3 locks held by kworker/1:15/8188: [ 380.327511][ T28] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.347966][ T28] #1: ffffc9000a9d7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 380.365104][ T28] #2: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 380.383615][ T28] 1 lock held by syz-executor/8391: [ 380.403951][ T28] #0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 380.427617][ T28] 1 lock held by syz.3.1363/8485: [ 380.432776][ T28] #0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 380.452327][ T28] 2 locks held by syz.0.1367/8474: [ 380.460835][ T28] #0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 380.488062][ T28] #1: ffffffff8d130338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 380.499364][ T28] 2 locks held by syz.4.1369/8481: [ 380.504486][ T28] #0: ffff8880730aa010 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 380.514752][ T28] #1: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b4/0x880 [ 380.544990][ T28] [ 380.550935][ T28] ============================================= [ 380.550935][ T28] [ 380.569481][ T28] NMI backtrace for cpu 0 [ 380.573843][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.100-syzkaller #0 [ 380.581738][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 380.591795][ T28] Call Trace: [ 380.595072][ T28] [ 380.598007][ T28] dump_stack_lvl+0x1e3/0x2cb [ 380.602697][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 380.608075][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 380.613542][ T28] ? panic+0x764/0x764 [ 380.617611][ T28] ? vprintk_emit+0x622/0x740 [ 380.622307][ T28] ? printk_sprint+0x490/0x490 [ 380.627097][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 380.632230][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 380.637184][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 380.643341][ T28] ? _printk+0xd1/0x111 [ 380.647503][ T28] ? panic+0x764/0x764 [ 380.651579][ T28] ? __wake_up_klogd+0xcc/0x100 [ 380.656432][ T28] ? panic+0x764/0x764 [ 380.660509][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 380.666585][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 380.672659][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 380.678653][ T28] watchdog+0xf88/0xfd0 [ 380.682824][ T28] ? watchdog+0x1f8/0xfd0 [ 380.687164][ T28] kthread+0x28d/0x320 [ 380.691235][ T28] ? hungtask_pm_notify+0x50/0x50 [ 380.696262][ T28] ? kthread_blkcg+0xd0/0xd0 [ 380.700854][ T28] ret_from_fork+0x1f/0x30 [ 380.705286][ T28] [ 380.709203][ T28] Sending NMI from CPU 0 to CPUs 1: [ 380.714422][ C1] NMI backtrace for cpu 1 [ 380.714431][ C1] CPU: 1 PID: 5732 Comm: syz-executor Not tainted 6.1.100-syzkaller #0 [ 380.714447][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 380.714455][ C1] RIP: 0010:mark_lock+0x9a/0x340 [ 380.714481][ C1] Code: 28 84 c0 0f 85 29 02 00 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 20 c2 49 90 be 08 00 00 00 e8 a6 48 77 00 <48> 0f a3 1d 1e e7 de 0e 73 11 48 8d 04 5b 48 c1 e0 06 48 8d 98 20 [ 380.714492][ C1] RSP: 0018:ffffc9000ad5f498 EFLAGS: 00000056 [ 380.714506][ C1] RAX: 0000000000000001 RBX: 000000000000051e RCX: ffffffff816adafa [ 380.714516][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9049c2c0 [ 380.714526][ C1] RBP: 0000000000000006 R08: dffffc0000000000 R09: fffffbfff2093859 [ 380.714536][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880270328c0 [ 380.714546][ C1] R13: dffffc0000000000 R14: 0000000000000040 R15: ffff8880270328a0 [ 380.714557][ C1] FS: 0000555555ef2500(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 380.714569][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.714579][ C1] CR2: 000056002d244030 CR3: 000000007fa7f000 CR4: 00000000003506e0 [ 380.714592][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 380.714600][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 380.714609][ C1] Call Trace: [ 380.714614][ C1] [ 380.714620][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 380.714642][ C1] ? read_lock_is_recursive+0x10/0x10 [ 380.714664][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 380.714694][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 380.714716][ C1] ? nmi_handle+0x12e/0x440 [ 380.714737][ C1] ? nmi_handle+0x25/0x440 [ 380.714757][ C1] ? mark_lock+0x9a/0x340 [ 380.714776][ C1] ? default_do_nmi+0x62/0x150 [ 380.714791][ C1] ? exc_nmi+0xa8/0x100 [ 380.714804][ C1] ? end_repeat_nmi+0x16/0x31 [ 380.714828][ C1] ? mark_lock+0x9a/0x340 [ 380.714848][ C1] ? mark_lock+0x9a/0x340 [ 380.714867][ C1] ? mark_lock+0x9a/0x340 [ 380.714888][ C1] ? mark_lock+0x9a/0x340 [ 380.714907][ C1] [ 380.714911][ C1] [ 380.714918][ C1] lockdep_hardirqs_on_prepare+0x3a0/0x7a0 [ 380.714940][ C1] ? print_irqtrace_events+0x210/0x210 [ 380.714961][ C1] ? __find_get_block+0x189/0x1120 [ 380.714976][ C1] trace_hardirqs_on+0x34/0x40 [ 380.714996][ C1] __find_get_block+0x2b5/0x1120 [ 380.715012][ C1] ? write_boundary_block+0xb0/0xb0 [ 380.715025][ C1] ? __getblk_gfp+0x50/0xa20 [ 380.715040][ C1] ? exfat_get_dentry_set+0x1320/0x1320 [ 380.715061][ C1] ? exfat_ent_get+0x1f3/0x400 [ 380.715081][ C1] ? exfat_iterate+0xaef/0x3280 [ 380.715120][ C1] __getblk_gfp+0x2d/0xa20 [ 380.715133][ C1] ? exfat_get_dentry+0x680/0x8f0 [ 380.715157][ C1] __bread_gfp+0x2a/0x370 [ 380.715172][ C1] exfat_ent_get+0x149/0x400 [ 380.715194][ C1] exfat_iterate+0xccc/0x3280 [ 380.715227][ C1] ? exfat_check_dir_empty+0x520/0x520 [ 380.715275][ C1] ? read_lock_is_recursive+0x10/0x10 [ 380.715297][ C1] ? rwsem_write_trylock+0x166/0x210 [ 380.715322][ C1] ? iterate_dir+0x131/0x560 [ 380.715336][ C1] iterate_dir+0x224/0x560 [ 380.715352][ C1] __se_sys_getdents64+0x209/0x4f0 [ 380.715368][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 380.715389][ C1] ? __x64_sys_getdents64+0x80/0x80 [ 380.715403][ C1] ? filldir+0x6f0/0x6f0 [ 380.715418][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 380.715434][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 380.715450][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 380.715468][ C1] do_syscall_64+0x3b/0xb0 [ 380.715488][ C1] ? clear_bhb_loop+0x45/0xa0 [ 380.715507][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.715527][ C1] RIP: 0033:0x7f828a1a7bf3 [ 380.715548][ C1] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 f2 44 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 380.715560][ C1] RSP: 002b:00007ffe5e271c78 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 380.715575][ C1] RAX: ffffffffffffffda RBX: 0000555555f0d600 RCX: 00007f828a1a7bf3 [ 380.715585][ C1] RDX: 0000000000008000 RSI: 0000555555f0d600 RDI: 0000000000000005 [ 380.715595][ C1] RBP: 0000555555f0d5d4 R08: 0000000000000000 R09: 0000000000000000 [ 380.715604][ C1] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 380.715614][ C1] R13: 0000000000000010 R14: 0000555555f0d5d0 R15: 000000000003645b [ 380.715630][ C1] [ 381.191155][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 381.198054][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.100-syzkaller #0 [ 381.205946][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 381.215995][ T28] Call Trace: [ 381.219272][ T28] [ 381.222200][ T28] dump_stack_lvl+0x1e3/0x2cb [ 381.226895][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 381.232358][ T28] ? panic+0x764/0x764 [ 381.236434][ T28] ? llist_add_batch+0x160/0x1d0 [ 381.241384][ T28] ? vscnprintf+0x59/0x80 [ 381.245717][ T28] panic+0x318/0x764 [ 381.249614][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 381.255774][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 381.261166][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 381.267345][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 381.273540][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 381.279706][ T28] watchdog+0xfc7/0xfd0 [ 381.283871][ T28] ? watchdog+0x1f8/0xfd0 [ 381.288244][ T28] kthread+0x28d/0x320 [ 381.292313][ T28] ? hungtask_pm_notify+0x50/0x50 [ 381.297339][ T28] ? kthread_blkcg+0xd0/0xd0 [ 381.301929][ T28] ret_from_fork+0x1f/0x30 [ 381.306356][ T28] [ 381.309623][ T28] Kernel Offset: disabled [ 381.313936][ T28] Rebooting in 86400 seconds..