last executing test programs: 20.188738793s ago: executing program 2 (id=1055): fanotify_init(0x0, 0x8000) socket$netlink(0x10, 0x3, 0x9) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa0080, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r0, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/102380, 0x18fec}], 0x1, 0x0, 0x2000042) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) recvfrom$inet6(r1, &(0x7f0000000300)=""/25, 0x19, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044020) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x0, 0x75f000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r2}, 0x38) r3 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x7) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) write$proc_mixer(r3, 0x0, 0xf7) dup3(0xffffffffffffffff, r3, 0x0) 19.153190754s ago: executing program 2 (id=1057): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000480)={0x0, 0xbd5, 0x2, {0x2, @raw_data="9639a45b883795906fae0f2bd2345dbedaa1b49ccbffb22c51188dd19fd4a75dcaf6f4c57b3b7ca76db82a65a488ca77044ea52bb490fa19281fc69db66891f7a527ff9073a26e944555cca3646bd2e8ee1250ae8dc9f92038f0e3685130b787dbfb3ee6ebd4d0b399089ed86365801f1f7fbaac73b3a2c66e189bdd159497daa02914fe55221a594423bf793d8fe047fee18f5eaddadd67abb4a62d12bb2aa38514eece505a79f57f80f4a5a6970d497c763d75e8c8c482781b18d9e213dc7ed3a553077f375add"}}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc04c560f, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200), 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0xfff0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000640000000f000000c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) capset(0x0, &(0x7f0000000040)) r6 = io_uring_setup(0x1de0, &(0x7f0000000440)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x1a, 0x20000038, r7) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) 18.392020972s ago: executing program 2 (id=1062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000780)="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", 0x310, 0x6d91fb6102d8d9cc, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x12, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x18ffa}], 0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) socket$packet(0x11, 0x0, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3801000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000480003006465666c61746500"/225], 0x138}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a000000a700010000000000000000000000ac1e000100"/56], 0x38}}, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 17.306183924s ago: executing program 2 (id=1065): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000005c40)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r5, 0x84, 0x1a, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000012c0), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r4, &(0x7f000000b800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(`qH\x00', 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pivot_root(0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x48}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 16.551097884s ago: executing program 1 (id=1069): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003000000000000190780400000000000000030390781200183f257f000001"], 0x0) r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) getpgrp(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socket(0x11, 0x80a, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r4, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4c, r8}) 15.949320233s ago: executing program 2 (id=1071): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_elf64(r1, 0x0, 0x978) close(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = fcntl$dupfd(r0, 0x0, r2) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000380)=0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000440)=0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in, @in6={0xa, 0x4e23, 0x7, @local, 0xfffffffe}, @in={0x2, 0x4e21, @private=0xa010101}], 0x3c) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000040)) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '\":/k!\xc0~\xdb\x01\xf1\x13\x17\xf8\x8a\x14\x13$2\x1fA\xf9\x8d%\xca\xfd\v\xc8'}], 0xa, "b7ef1c3e568656655c186e4e60a4215394a5e5b7d866178878c05fa87a33827f49f06be514c801ff3d10e24e53081d5b8e7790cd94560779d1952b90e4d3ffc9e829494aa707b13b6cab38f20af5dc90d6ab615fecbdb3e432a6cd672f28a81d7a6ffc21b0bb34b4dc92fc87513ef736366c"}, 0x99) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000640)=0x4e8) 15.605595019s ago: executing program 2 (id=1072): r0 = syz_io_uring_setup(0xce, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000040)=0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_io_uring_setup(0xfa, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3e7}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sched_setaffinity(0x0, 0xffffffffffffff0f, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x5b2b4293}], 0x1, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r2, 0x46f6, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x1, 0x10a5, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xde5, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) recvmsg$kcm(r7, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/40, 0x28}, 0x0) 14.797728634s ago: executing program 1 (id=1076): r0 = syz_io_uring_setup(0xce, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000040)=0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_io_uring_setup(0xfa, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3e7}, &(0x7f00000000c0), &(0x7f0000000080)) sched_setaffinity(0x0, 0xffffffffffffff0f, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x5b2b4293}], 0x1, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_uring_enter(r2, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='~', 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x1, 0x10a5, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xde5, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) recvmsg$kcm(r5, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/40, 0x28}, 0x0) 13.564888661s ago: executing program 1 (id=1081): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0xfffffffffffffcba) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r5, 0x0, 0x0}, 0x20) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="041817"], 0x1a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000180)={0x1, 0x9, 0x34, &(0x7f0000000100)=""/52}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x59}, "82451c3b9c63711371060fc1a12035c16dc6e695cfd0cfa192f81c1c01ed6e9fa1da9711d830a3772e5dadad7368aba6108060fdcf3f66f49cd81746a30fe7d90650f841a7c934b4c907485a5fd11c153aab02fedf13a83c00"}, 0x5d) syz_emit_vhci(0x0, 0xffffffffffffffc7) mprotect(&(0x7f0000174000/0x4000)=nil, 0x4000, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r2, &(0x7f0000002080)=0x3a, 0x23b) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 11.13198581s ago: executing program 4 (id=1086): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003000000000000190780400000000000000030390781200183f257f000001"], 0x0) r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) getpgrp(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socket(0x11, 0x80a, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r4, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4c, r8}) 8.659072012s ago: executing program 4 (id=1090): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x6a201, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0180, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r1, &(0x7f00000004c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) 7.725552s ago: executing program 3 (id=1093): fanotify_init(0x0, 0x8000) socket$netlink(0x10, 0x3, 0x9) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa0080, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r0, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/102380, 0x18fec}], 0x1, 0x0, 0x2000042) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) recvfrom$inet6(r1, &(0x7f0000000300)=""/25, 0x19, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x0, 0x75f000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r2}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) r3 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x7) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) write$proc_mixer(r3, 0x0, 0xf7) dup3(0xffffffffffffffff, r3, 0x0) 7.575048985s ago: executing program 1 (id=1094): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000002800070100000000ffdbdf25090000000c00018008000000", @ANYBLOB], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r3], 0x24}}, 0x0) unlink(0x0) rmdir(&(0x7f0000000340)='./file0\x00') openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/189, 0xbd}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x4ffe2, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000140)={'\x00', 0x81, 0x1000, 0x3, 0xffffffffffffffdf}) 7.200878212s ago: executing program 3 (id=1095): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x33, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x0, @random=0x3d, 0x0, @void, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x9, 0x0, &(0x7f0000000500)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x200880, 0x182) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 7.117539981s ago: executing program 0 (id=1096): r0 = syz_io_uring_setup(0xce, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000040)=0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0xfa, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3e7}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sched_setaffinity(0x0, 0xffffffffffffff0f, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x5b2b4293}], 0x1, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) write(r5, &(0x7f0000000200)='~', 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x1, 0x10a5, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xde5, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) recvmsg$kcm(r7, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/40, 0x28}, 0x0) 7.015466302s ago: executing program 4 (id=1097): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, 0x0, 0x54) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}], 0x28}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x88, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @broadcast, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3]}}]}]}]}, 0x88}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 5.946441294s ago: executing program 0 (id=1098): fanotify_init(0x0, 0x8000) socket$netlink(0x10, 0x3, 0x9) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa0080, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r0, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/102380, 0x18fec}], 0x1, 0x0, 0x2000042) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) recvfrom$inet6(r1, &(0x7f0000000300)=""/25, 0x19, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044020) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x0, 0x75f000}) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) r2 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x7) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) write$proc_mixer(r2, 0x0, 0xf7) dup3(0xffffffffffffffff, r2, 0x0) 5.633687853s ago: executing program 0 (id=1099): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYBLOB='3'], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x20, 0x6, 0x4, "59b8cc39"}, 0x0, 0x0, 0x0, 0x0}) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00') lseek(r3, 0xc1e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES64, @ANYBLOB="76915469504705b04878cb7e15a1e599eaa46e3caf9c5fbc085bcaf858caf8e2072f8f457ff943640f4fe72aa2a1edbdc95fa16c1f957a2bf95da25f0e1777e7b451c8a41b34345a468ac6341f0fc3ceb5a5327ec8f2721ba4cc69020a601347299d29e80a4406b65d657d762fb27ad2cd9ac777718fa3d5248c4262d022e6599bc4", @ANYRES16=0x0], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') write$FUSE_WRITE(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x18ffa}], 0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) 3.073770633s ago: executing program 1 (id=1100): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003000000000000190780400000000000000030390781200183f257f000001"], 0x0) r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) getpgrp(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socket(0x11, 0x80a, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, r4, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4c, r8}) 2.953503259s ago: executing program 3 (id=1101): r0 = syz_io_uring_setup(0xce, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000040)=0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_io_uring_setup(0xfa, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3e7}, &(0x7f00000000c0), &(0x7f0000000080)) sched_setaffinity(0x0, 0xffffffffffffff0f, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x5b2b4293}], 0x1, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_uring_enter(r2, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='~', 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x1, 0x10a5, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xde5, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) recvmsg$kcm(r5, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/40, 0x28}, 0x0) 2.869499193s ago: executing program 4 (id=1102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000039c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) sendmsg$inet(r1, &(0x7f0000002ac0)={&(0x7f0000002640)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16], 0x18}, 0x805) syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100250008004500004c000000000001907864010100ac1414aa0800907800060003"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x20, 0x6, 0x8, 0x9, 0x80dfc8060cfe9f9d, r5, 0x9b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x0, @value, @void, @void, @value}, 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 2.347607412s ago: executing program 0 (id=1103): fanotify_init(0x0, 0x8000) socket$netlink(0x10, 0x3, 0x9) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa0080, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r0, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/102380, 0x18fec}], 0x1, 0x0, 0x2000042) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) recvfrom$inet6(r1, &(0x7f0000000300)=""/25, 0x19, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044020) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r2}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) r3 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x7) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) write$proc_mixer(r3, 0x0, 0xf7) dup3(0xffffffffffffffff, r3, 0x0) 2.236974453s ago: executing program 1 (id=1104): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a2401000000020102132406000006000000000000000000000000000924030000000000000924050000f8431cfd09240300fe05"], 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x2, &(0x7f0000000080)=@assoc_value, &(0x7f0000000000)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, &(0x7f0000000140)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000240)={0x6, 0x18, [0x527d, 0x5, 0x9, 0x101], &(0x7f0000000200)=[0x0, 0x0, 0x0]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102398, 0x18ffe}, {0x0}], 0x2, 0x0, 0x0) socket(0x11, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0x2000011a) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x8a, &(0x7f0000000580), 0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 1.913375971s ago: executing program 3 (id=1105): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x4ef7e228, 0x95f, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x58, 0x1, 0x7}]}}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102399, 0x18fff}], 0x1, 0xfffffffd, 0x5) r1 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r1, 0x0, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r3) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x90) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.827864567s ago: executing program 4 (id=1106): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x2, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000500)={0xfffffffe, 0x0, "506134afd62d94fdbcaa4d21194bdc81e9b44c3f51d9e7e8"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000e00", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) clock_gettime(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_lru_insertion\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2}) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x1000000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000380)) 1.612045659s ago: executing program 0 (id=1107): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @loopback}}, 0xaa, 0x0, 0x43, 0x0, "9e62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', r1, 0x0, 0x200) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x16) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) r8 = getpid() sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000080016800400018008001300", @ANYRES32=r8, @ANYBLOB], 0x3a0}}, 0x0) 744.866316ms ago: executing program 3 (id=1108): fanotify_init(0x0, 0x8000) socket$netlink(0x10, 0x3, 0x9) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa0080, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r0, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/102380, 0x18fec}], 0x1, 0x0, 0x2000042) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) recvfrom$inet6(r1, &(0x7f0000000300)=""/25, 0x19, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044020) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) r3 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x7) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) write$proc_mixer(r3, 0x0, 0xf7) dup3(0xffffffffffffffff, r3, 0x0) 38.137079ms ago: executing program 4 (id=1109): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) read(r2, &(0x7f0000001e80)=""/96, 0x60) r3 = socket(0x840000000002, 0x80000, 0xfd) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x148, 0x1170, 0x1170, 0x148, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x322], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r5, 0xc99752fbd6bf8f05, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) unshare(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 34.417239ms ago: executing program 0 (id=1118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x33565348}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r4, 0x4b4a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r5 = creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r7, 0xf86}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r6, 0x5}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000240)={r9}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100000000000000000001000000000000000141000000180017000000000000000069623a6361696630000000007e27c20f25cfaa84f07b2d4beaf60e712cb2269dce7d41f2984b2f56cc182edc354038f64e5cd0fd7ad12b6767b0da80bc45434677c4f6c9308bbaa701fb466b7845ddc0266ce8ec54e03c95ef0139929799d4d3ce3af95654cb935791b09eb0a89526007b6abec7a814de84f23b3d19d26e6280b747bc445b2bfc849d17b284f8eb6b9aec975440fb2268b5a098f9c503b6e13e0f4fea50fce92e7d02ecb585689ec6fd1925f0e0cfa874b015553db51194cd21984e64e99b9f50d98717bc73aaa2f90dde938a9ea3ea15a8340bc5d92e342afd3d"], 0x34}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000d5000000000014000300626f6e645f736c6176655f300000000008000a"], 0x3c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x1e}, 0x1}) 0s ago: executing program 3 (id=1110): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x33, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x0, @random=0x3d, 0x0, @void, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x9, 0x0, &(0x7f0000000500)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x200880, 0x182) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) kernel console output (not intermixed with test programs): 5366][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 343.906677][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 343.928253][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 343.948958][ T9242] team0: Port device team_slave_0 added [ 343.967138][ T9242] team0: Port device team_slave_1 added [ 344.006801][ T11] IPVS: stop unused estimator thread 0... [ 344.042061][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 344.054965][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 344.163276][ T9170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.213438][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.226856][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.253413][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.270665][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 344.295251][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.302245][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.331911][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.364412][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 344.368379][ T5251] Bluetooth: hci3: command tx timeout [ 344.438045][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 344.460525][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 344.505672][ T9242] hsr_slave_0: entered promiscuous mode [ 344.512823][ T9242] hsr_slave_1: entered promiscuous mode [ 344.520216][ T9242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.530165][ T9242] Cannot create hsr debugfs directory [ 344.682555][ T9170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 344.734110][ T9170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 344.770697][ T9170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 344.783634][ T9170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 345.421364][ T9358] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 345.433969][ T5292] IPVS: starting estimator thread 0... [ 345.544062][ T9359] IPVS: using max 17 ests per chain, 40800 per kthread [ 345.680301][ T9133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.838776][ T9133] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.935342][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.942472][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.962878][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.970094][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.057342][ T9170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.180782][ T9170] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.305936][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.313138][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.380986][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.388317][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.531255][ T9133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.737959][ T9242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 346.788364][ T9242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 346.806983][ T9379] syz.1.784: attempt to access beyond end of device [ 346.806983][ T9379] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 346.878874][ T9242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 346.922097][ T9242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 346.961482][ T9133] veth0_vlan: entered promiscuous mode [ 347.048835][ T9170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.108361][ T9133] veth1_vlan: entered promiscuous mode [ 347.226051][ T5292] usb 4-1: USB disconnect, device number 22 [ 347.452212][ T9133] veth0_macvtap: entered promiscuous mode [ 347.539406][ T9133] veth1_macvtap: entered promiscuous mode [ 347.791271][ T9170] veth0_vlan: entered promiscuous mode [ 347.873630][ T5241] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 347.889033][ T5241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 347.899670][ T5241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 347.900632][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.926767][ T5241] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 347.942439][ T5241] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 347.949513][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.949540][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.972634][ T5241] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 348.005018][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.016720][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.027648][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.037932][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.049488][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.061970][ T9133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.106269][ T9170] veth1_vlan: entered promiscuous mode [ 348.119416][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.169252][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.180364][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.192983][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.203133][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.214968][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.226763][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.238918][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.253128][ T9133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.267867][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.329191][ T9133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.340432][ T9133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.360089][ T9133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.380454][ T9133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.480015][ T9242] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.523393][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.530703][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.631710][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.639041][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.804550][ T9170] veth0_macvtap: entered promiscuous mode [ 348.850969][ T9242] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.862396][ T9242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.929464][ T9170] veth1_macvtap: entered promiscuous mode [ 349.330656][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.384554][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.393315][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.405378][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.418021][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.428790][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.438810][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.449743][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.460113][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.470923][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.483353][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.496705][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.508695][ T9170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.619803][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.643124][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.656768][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.676900][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.707318][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.726809][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.738315][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.751475][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.759339][ T9430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.763669][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.791470][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.812503][ T9170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.856981][ T9398] chnl_net:caif_netlink_parms(): no params data found [ 349.892647][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.905158][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.925473][ T9170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.934807][ T9170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.944017][ T9170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.953098][ T9170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.988748][ T9242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.044767][ T5251] Bluetooth: hci7: command tx timeout [ 350.635335][ T9398] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.687380][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.801662][ T9398] bridge_slave_0: entered allmulticast mode [ 350.856993][ T9398] bridge_slave_0: entered promiscuous mode [ 350.909592][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.949942][ T9398] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.964077][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.004357][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.022322][ T9398] bridge_slave_1: entered allmulticast mode [ 351.042776][ T9398] bridge_slave_1: entered promiscuous mode [ 351.209764][ T9398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.342643][ T9398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.363527][ T9465] IPv6: addrconf: prefix option has invalid lifetime [ 351.370371][ T9465] IPv6: addrconf: prefix option has invalid lifetime [ 351.452954][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.478992][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.543521][ T9398] team0: Port device team_slave_0 added [ 351.597070][ T9398] team0: Port device team_slave_1 added [ 351.870665][ T9398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.885625][ T9398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.005480][ T9398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.041209][ T9242] veth0_vlan: entered promiscuous mode [ 352.099513][ T9398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.124626][ T5241] Bluetooth: hci7: command tx timeout [ 352.125365][ T9398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.215831][ T9398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.238242][ T9485] IPv6: addrconf: prefix option has invalid lifetime [ 352.244979][ T9485] IPv6: addrconf: prefix option has invalid lifetime [ 352.513074][ T9398] hsr_slave_0: entered promiscuous mode [ 352.557657][ T9398] hsr_slave_1: entered promiscuous mode [ 352.599081][ T9398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.627547][ T9398] Cannot create hsr debugfs directory [ 352.649712][ T9242] veth1_vlan: entered promiscuous mode [ 353.069626][ T9242] veth0_macvtap: entered promiscuous mode [ 353.137102][ T9242] veth1_macvtap: entered promiscuous mode [ 353.510827][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.547275][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.572950][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.591639][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.628820][ T9510] IPv6: addrconf: prefix option has invalid lifetime [ 353.630981][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.635563][ T9510] IPv6: addrconf: prefix option has invalid lifetime [ 353.666530][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.688543][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.699546][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.711130][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.722311][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.733431][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.745731][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.755602][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 353.784049][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.849703][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.870901][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.889694][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.901142][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.912630][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.934190][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 353.944022][ T9] usb 3-1: config 8 has an invalid interface number: 249 but max is 0 [ 353.952888][ T9] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 353.966259][ T9] usb 3-1: config 8 has no interface number 0 [ 353.972983][ T9] usb 3-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 353.991882][ T9] usb 3-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 354.006598][ T9] usb 3-1: config 8 interface 249 has no altsetting 0 [ 354.044459][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.056884][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.074753][ T9] usb 3-1: string descriptor 0 read error: -22 [ 354.082810][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 354.093010][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.109892][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.126094][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.141358][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.154134][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.166165][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.189703][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.204135][ T5241] Bluetooth: hci7: command 0x040f tx timeout [ 354.379358][ T9398] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.460434][ T9242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.543981][ T9242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.581376][ T9242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.590772][ T9242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.761416][ T9398] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.891354][ T9522] netlink: 'syz.0.803': attribute type 25 has an invalid length. [ 354.900774][ T9522] netlink: 'syz.0.803': attribute type 7 has an invalid length. [ 355.180810][ T9398] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.546669][ T9398] bond0: (slave netdevsim0): Releasing backup interface [ 355.561580][ T9] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 355.576616][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 355.593985][ T9] dib0700: firmware download failed at 7 with -71 [ 355.605049][ T9398] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.614323][ T9] usb 3-1: USB disconnect, device number 22 [ 355.775158][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.807437][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.953152][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.000911][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.019028][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 356.250192][ T9398] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.284152][ T5251] Bluetooth: hci7: command 0x040f tx timeout [ 356.330765][ T9398] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.401027][ T9398] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.505367][ T9398] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.927955][ T9398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.990130][ T9398] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.123450][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.130624][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.146441][ T3042] IPVS: starting estimator thread 0... [ 357.198944][ T9569] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 357.202178][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.213638][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.274234][ T9570] IPVS: using max 17 ests per chain, 40800 per kthread [ 357.391641][ T9398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.420997][ T9576] IPv6: addrconf: prefix option has invalid lifetime [ 357.427991][ T9576] IPv6: addrconf: prefix option has invalid lifetime [ 357.484015][ T9398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.539726][ T9398] veth0_vlan: entered promiscuous mode [ 357.562889][ T9398] veth1_vlan: entered promiscuous mode [ 357.765992][ T9398] veth0_macvtap: entered promiscuous mode [ 357.888685][ T9398] veth1_macvtap: entered promiscuous mode [ 358.097423][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.198770][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.255486][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.291631][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.307926][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.353462][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.364944][ T5251] Bluetooth: hci7: command 0x040f tx timeout [ 358.365573][ T5241] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 358.381920][ T5241] Bluetooth: hci5: Injecting HCI hardware error event [ 358.392357][ T5251] Bluetooth: hci5: hardware error 0x00 [ 358.458467][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.534950][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.556876][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.568912][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.579308][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.590398][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.600866][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.612116][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.630704][ T9398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.655311][ T9600] netlink: 'syz.0.814': attribute type 25 has an invalid length. [ 358.663276][ T9600] netlink: 'syz.0.814': attribute type 7 has an invalid length. [ 358.705994][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.716902][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.806548][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.818362][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.830210][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.841155][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.852320][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.863243][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.873543][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.886271][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.898048][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.909085][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.919986][ T9398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.932075][ T9398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.955287][ T9398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.029252][ T9398] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.077073][ T9398] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.106482][ T9398] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.118998][ T9398] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.170474][ T9612] input: syz0 as /devices/virtual/input/input19 [ 359.467827][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.511639][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.629821][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.641714][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.198729][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 360.354004][ T5242] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 360.676562][ T5242] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.694250][ T5251] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 360.773346][ T5242] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 360.832488][ T5242] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.865967][ T5242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.891880][ T9629] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 360.929193][ T5242] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.252169][ T9659] IPv6: addrconf: prefix option has invalid lifetime [ 361.259033][ T9659] IPv6: addrconf: prefix option has invalid lifetime [ 361.676660][ T5291] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 361.990171][ T9675] hub 9-0:1.0: USB hub found [ 362.017739][ T9675] hub 9-0:1.0: 8 ports detected [ 362.033995][ T5291] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 362.053841][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.068876][ T5291] usb 4-1: Product: syz [ 362.073093][ T5291] usb 4-1: Manufacturer: syz [ 362.088834][ T5291] usb 4-1: SerialNumber: syz [ 362.100720][ T5291] usb 4-1: config 0 descriptor?? [ 362.123036][ T5291] ch341 4-1:0.0: ch341-uart converter detected [ 362.166364][ T5301] usb 2-1: USB disconnect, device number 27 [ 362.620316][ T9664] __nla_validate_parse: 28 callbacks suppressed [ 362.620366][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 362.652390][ T9664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.826'. [ 362.664962][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 362.892849][ T9683] input: syz0 as /devices/virtual/input/input20 [ 363.560502][ T5291] ch341-uart ttyUSB0: failed to read break control: -71 [ 363.581153][ T5291] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 363.654234][ T5291] usb 4-1: USB disconnect, device number 23 [ 363.662380][ T5291] ch341 4-1:0.0: device disconnected [ 363.884333][ T5242] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 364.084230][ T5242] usb 5-1: Using ep0 maxpacket: 8 [ 364.095704][ T5242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.133875][ T5242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.164114][ T5242] usb 5-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 364.173403][ T5242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.214912][ T5242] usb 5-1: config 0 descriptor?? [ 364.518600][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 364.884711][ T5242] wacom 0003:056A:0333.000D: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.4-1/input0 [ 364.959880][ T9708] IPv6: addrconf: prefix option has invalid lifetime [ 364.966705][ T9708] IPv6: addrconf: prefix option has invalid lifetime [ 365.593105][ T9720] netlink: 'syz.3.842': attribute type 25 has an invalid length. [ 365.617460][ T9720] netlink: 'syz.3.842': attribute type 7 has an invalid length. [ 366.067105][ T9726] netlink: 'syz.2.843': attribute type 25 has an invalid length. [ 366.079699][ T9726] netlink: 'syz.2.843': attribute type 7 has an invalid length. [ 366.563981][ T5301] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 366.720681][ T5291] usb 5-1: USB disconnect, device number 31 [ 366.749663][ T5292] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 366.783923][ T5301] usb 2-1: Using ep0 maxpacket: 16 [ 366.849349][ T5301] usb 2-1: config 8 has an invalid interface number: 249 but max is 0 [ 366.864972][ T5301] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 366.878858][ T5301] usb 2-1: config 8 has no interface number 0 [ 366.886629][ T5301] usb 2-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 366.898884][ T5301] usb 2-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 366.912288][ T5301] usb 2-1: config 8 interface 249 has no altsetting 0 [ 366.926523][ T5301] usb 2-1: string descriptor 0 read error: -22 [ 366.943170][ T5301] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 366.958131][ T5301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.983467][ T5292] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 367.017451][ T5292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.041508][ T5292] usb 1-1: Product: syz [ 367.049091][ T5292] usb 1-1: Manufacturer: syz [ 367.054148][ T5292] usb 1-1: SerialNumber: syz [ 367.067356][ T9742] netlink: 160 bytes leftover after parsing attributes in process `syz.2.848'. [ 367.081589][ T5292] usb 1-1: config 0 descriptor?? [ 367.106286][ T5292] ch341 1-1:0.0: ch341-uart converter detected [ 367.580480][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 367.595578][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.846'. [ 367.623905][ T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 367.676666][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 367.859020][ T8] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 367.897418][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.947622][ T8] usb 3-1: Product: syz [ 367.967586][ T8] usb 3-1: Manufacturer: syz [ 368.013260][ T8] usb 3-1: SerialNumber: syz [ 368.110979][ T8] usb 3-1: config 0 descriptor?? [ 368.160561][ T8] comedi comedi0: Wrong number of endpoints [ 368.174449][ T8] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device. [ 368.335523][ T5292] ch341-uart ttyUSB0: failed to read break control: -71 [ 368.342715][ T5292] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 368.374220][ T5292] usb 1-1: USB disconnect, device number 25 [ 368.381488][ T5292] ch341 1-1:0.0: device disconnected [ 368.687362][ T9763] binder: BINDER_SET_CONTEXT_MGR already set [ 368.714098][ T9763] binder: 9762:9763 ioctl 40046207 0 returned -16 [ 368.810571][ T9763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.818528][ T9763] IPv6: NLM_F_CREATE should be set when creating new route [ 368.825873][ T9763] IPv6: NLM_F_CREATE should be set when creating new route [ 369.037104][ T5301] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 369.060571][ T5301] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 369.083649][ T5301] dib0700: firmware download failed at 7 with -71 [ 369.095477][ T5301] usb 2-1: USB disconnect, device number 28 [ 369.691824][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.725627][ T9776] input: syz0 as /devices/virtual/input/input24 [ 369.794070][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.814767][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.823943][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.831384][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.840024][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.847539][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.855429][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.862982][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.870472][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.878050][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.885555][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.895199][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 369.984776][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.034731][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.042191][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.067461][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.075025][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.083917][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.091359][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.100276][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.107736][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.115349][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.124403][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.131984][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.144411][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.151970][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.159518][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.167099][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.175576][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.183136][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.190723][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.221243][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.253841][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.272875][ T5291] usb 3-1: USB disconnect, device number 23 [ 370.357708][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.437323][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.473450][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.491391][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.507576][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.516610][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.527080][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.535086][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.543156][ T5292] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.553575][ T5292] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 370.739395][ T9794] netlink: 'syz.3.858': attribute type 25 has an invalid length. [ 370.786572][ T9794] netlink: 'syz.3.858': attribute type 7 has an invalid length. [ 371.247107][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 371.262751][ T9806] trusted_key: encrypted_key: insufficient parameters specified [ 371.727209][ T9818] netlink: 'syz.4.866': attribute type 25 has an invalid length. [ 371.745113][ T9818] netlink: 'syz.4.866': attribute type 7 has an invalid length. [ 371.792578][ T25] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 372.016514][ T25] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 372.028870][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.098174][ T25] usb 2-1: Product: syz [ 372.113838][ T25] usb 2-1: Manufacturer: syz [ 372.124362][ T25] usb 2-1: SerialNumber: syz [ 372.137482][ T25] usb 2-1: config 0 descriptor?? [ 372.149642][ T25] ch341 2-1:0.0: ch341-uart converter detected [ 372.592202][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 372.603548][ T9810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.863'. [ 372.616938][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 372.964277][ T9840] input: syz0 as /devices/virtual/input/input25 [ 373.001886][ T9836] syzkaller0: entered promiscuous mode [ 373.008159][ T9836] syzkaller0: entered allmulticast mode [ 373.016195][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 373.101166][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 373.111365][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 373.121704][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 373.132909][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 373.146640][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 373.157218][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 373.172461][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 373.187506][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 373.221271][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 373.328211][ T25] ch341-uart ttyUSB0: failed to read break control: -71 [ 373.336316][ T25] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 373.355333][ T25] usb 2-1: USB disconnect, device number 29 [ 373.365883][ T25] ch341 2-1:0.0: device disconnected [ 373.992422][ T9857] syz.2.875: attempt to access beyond end of device [ 373.992422][ T9857] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 375.524870][ T9] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 375.721000][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 375.737627][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.747774][ T9] usb 2-1: Product: syz [ 375.751988][ T9] usb 2-1: Manufacturer: syz [ 375.757694][ T9] usb 2-1: SerialNumber: syz [ 375.775628][ T9] usb 2-1: config 0 descriptor?? [ 376.051064][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 377.622864][ T9] usb 2-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 377.637032][ T9] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 377.648209][ T9] usb 2-1: media controller created [ 377.660319][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 377.716896][ T9] dvb_usb_rtl28xxu 2-1:0.0: unknown tuner MT2266 [ 377.862967][ T9] usb 2-1: USB disconnect, device number 30 [ 378.467093][ T9871] netlink: 'syz.3.878': attribute type 25 has an invalid length. [ 378.496241][ T9871] netlink: 'syz.3.878': attribute type 7 has an invalid length. [ 378.929091][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.935557][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.113915][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 379.326481][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 379.342542][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 379.355023][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 379.365938][ T25] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 379.376221][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.446042][ T25] usb 3-1: config 0 descriptor?? [ 380.144025][ T9889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.186081][ T9889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.218292][ T25] hid (null): invalid report_size 28520 [ 380.262642][ T25] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1 [ 380.290845][ T25] hid-generic 0003:0158:0100.000F: unexpected long global item [ 380.325325][ T25] hid-generic 0003:0158:0100.000F: probe with driver hid-generic failed with error -22 [ 380.478109][ T8] usb 3-1: USB disconnect, device number 24 [ 381.185561][ T9915] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 381.192152][ T9915] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 381.277263][ T9925] netlink: 'syz.4.894': attribute type 25 has an invalid length. [ 381.285293][ T9925] netlink: 'syz.4.894': attribute type 7 has an invalid length. [ 381.303935][ T9915] vhci_hcd vhci_hcd.0: Device attached [ 381.654012][ T5301] usb 10-1: SetAddress Request (2) to port 0 [ 381.668738][ T5301] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 381.822685][ T9931] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.830300][ T9931] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.867492][ T9919] vhci_hcd: connection reset by peer [ 381.890752][ T52] vhci_hcd: stop threads [ 381.901719][ T52] vhci_hcd: release socket [ 381.909464][ T52] vhci_hcd: disconnect device [ 382.308422][ T9944] fuse: Unknown parameter 'fºÔ0x0000000000000005' [ 382.313867][ T5291] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 382.619513][ T5291] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 382.651299][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.683864][ T5291] usb 3-1: config 0 descriptor?? [ 382.834045][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 383.037126][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 383.061975][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.137826][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.164358][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 383.186106][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 383.195983][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.210463][ T9] usb 1-1: config 0 descriptor?? [ 383.397299][ T5291] ath6kl: Failed to submit usb control message: -71 [ 383.417420][ T5291] ath6kl: unable to send the bmi data to the device: -71 [ 383.424662][ T5291] ath6kl: Unable to send get target info: -71 [ 383.442368][ T5291] ath6kl: Failed to init ath6kl core: -71 [ 383.453853][ T5291] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 383.469790][ T5291] usb 3-1: USB disconnect, device number 25 [ 383.709937][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 383.802435][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0010/input/input26 [ 383.894909][ T9] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 384.536059][ T8] usb 1-1: USB disconnect, device number 26 [ 384.630790][ T9978] syz.2.908: attempt to access beyond end of device [ 384.630790][ T9978] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 385.505183][ T9990] IPv6: addrconf: prefix option has invalid lifetime [ 385.511947][ T9990] IPv6: addrconf: prefix option has invalid lifetime [ 385.948211][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.954451][ T5242] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 386.195866][ T5242] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 386.216494][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.241020][ T5242] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 386.303011][ T5242] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 386.342004][ T5242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.380276][ T9992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 386.394871][ T5242] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.461838][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.752887][T10001] syz.2.919: attempt to access beyond end of device [ 386.752887][T10001] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 386.797155][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.803608][ T5301] usb 10-1: device descriptor read/8, error -110 [ 386.850373][T10003] input: syz0 as /devices/virtual/input/input27 [ 386.969868][ T8] usb 4-1: USB disconnect, device number 24 [ 387.251498][ T5301] usb usb10-port1: attempt power cycle [ 387.510634][ T11] bridge_slave_1: left allmulticast mode [ 387.527616][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.541077][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.549712][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.558174][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.564412][ T11] bridge_slave_1: left promiscuous mode [ 387.566206][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 387.570954][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.578284][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.830998][ T11] bridge_slave_0: left allmulticast mode [ 387.855362][ T11] bridge_slave_0: left promiscuous mode [ 387.904063][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.967211][ T5301] usb usb10-port1: unable to enumerate USB device [ 388.412564][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.443988][ T5242] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 388.451694][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.491457][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.516301][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.540320][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.602706][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.656014][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.729273][ T5242] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 388.750508][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.795366][ T5242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.805886][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.830354][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.845389][ T5242] usb 2-1: Product: syz [ 388.849611][ T5242] usb 2-1: Manufacturer: syz [ 388.856153][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.864925][ T5242] usb 2-1: SerialNumber: syz [ 388.870949][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.885244][ T5242] usb 2-1: config 0 descriptor?? [ 388.901181][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.922771][ T5242] comedi comedi0: Wrong number of endpoints [ 388.929184][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.940415][ T5242] dt9812 2-1:0.0: driver 'dt9812' failed to auto-configure device. [ 388.949691][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.960027][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.975875][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.983428][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 388.993168][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.004912][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.012363][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.021342][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.041680][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.051567][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.087852][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.108249][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.116191][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.126595][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.150336][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.158927][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.186828][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.197119][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.204931][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.212465][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.236047][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.248584][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.256528][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.295071][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.310222][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.330146][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.338203][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.349763][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.357778][ T8] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 389.374148][ T8] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 389.465042][T10046] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 389.667713][T10050] __nla_validate_parse: 9 callbacks suppressed [ 389.667733][T10050] netlink: 44 bytes leftover after parsing attributes in process `syz.0.925'. [ 389.727117][ T5241] Bluetooth: hci3: command tx timeout [ 390.328048][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.356243][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.395561][ T11] bond0 (unregistering): Released all slaves [ 390.418446][T10012] netlink: 160 bytes leftover after parsing attributes in process `syz.1.920'. [ 390.935048][T10063] IPv6: addrconf: prefix option has invalid lifetime [ 390.941827][T10063] IPv6: addrconf: prefix option has invalid lifetime [ 391.081482][T10067] netlink: 'syz.2.929': attribute type 25 has an invalid length. [ 391.138307][T10067] netlink: 'syz.2.929': attribute type 7 has an invalid length. [ 391.769897][ T5292] usb 2-1: USB disconnect, device number 31 [ 391.805615][ T5241] Bluetooth: hci3: command tx timeout [ 391.826705][ T11] hsr_slave_0: left promiscuous mode [ 391.888087][ T11] hsr_slave_1: left promiscuous mode [ 391.957333][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.966947][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.967747][T10086] syz.0.931: attempt to access beyond end of device [ 391.967747][T10086] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 392.045525][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.066315][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.223910][ T5242] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 392.299236][ T11] veth1_macvtap: left promiscuous mode [ 392.354935][ T11] veth0_macvtap: left promiscuous mode [ 392.382550][ T11] veth1_vlan: left promiscuous mode [ 392.418442][ T11] veth0_vlan: left promiscuous mode [ 392.424062][ T5242] usb 4-1: Using ep0 maxpacket: 16 [ 392.448986][ T5242] usb 4-1: config 8 has an invalid interface number: 249 but max is 0 [ 392.476756][ T5242] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 392.496617][ T5242] usb 4-1: config 8 has no interface number 0 [ 392.509381][ T5242] usb 4-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 392.524725][ T5242] usb 4-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 392.539806][ T5242] usb 4-1: config 8 interface 249 has no altsetting 0 [ 392.553164][ T5242] usb 4-1: string descriptor 0 read error: -22 [ 392.561393][ T5242] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 392.570875][ T5242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.051954][T10109] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 393.227463][T10111] netlink: 44 bytes leftover after parsing attributes in process `syz.2.937'. [ 393.895412][ T5241] Bluetooth: hci3: command tx timeout [ 393.938892][T10118] IPv6: addrconf: prefix option has invalid lifetime [ 393.945724][T10118] IPv6: addrconf: prefix option has invalid lifetime [ 394.228876][ T5242] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 394.301788][ T5242] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 394.356179][ T5242] dib0700: firmware download failed at 7 with -71 [ 394.440673][ T5242] usb 4-1: USB disconnect, device number 25 [ 394.788531][T10125] syz.0.942: attempt to access beyond end of device [ 394.788531][T10125] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 395.964042][ T5241] Bluetooth: hci3: command tx timeout [ 395.999612][ T11] team0 (unregistering): Port device team_slave_1 removed [ 396.063134][T10143] syz.0.946: attempt to access beyond end of device [ 396.063134][T10143] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 396.201466][ T11] team0 (unregistering): Port device team_slave_0 removed [ 397.090509][T10013] chnl_net:caif_netlink_parms(): no params data found [ 397.158165][T10133] netlink: 'syz.3.943': attribute type 25 has an invalid length. [ 397.166902][T10133] netlink: 'syz.3.943': attribute type 7 has an invalid length. [ 397.646262][T10161] input: syz0 as /devices/virtual/input/input28 [ 397.727254][T10013] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.796056][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.803442][T10013] bridge_slave_0: entered allmulticast mode [ 397.940814][T10013] bridge_slave_0: entered promiscuous mode [ 398.014978][T10013] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.047024][T10013] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.085845][T10013] bridge_slave_1: entered allmulticast mode [ 398.133388][ T5251] Bluetooth: hci7: unexpected event for opcode 0x0407 [ 398.147965][T10013] bridge_slave_1: entered promiscuous mode [ 398.429892][ T11] IPVS: stop unused estimator thread 0... [ 398.490148][T10013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.576111][T10013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.676157][T10181] netlink: 'syz.2.954': attribute type 25 has an invalid length. [ 398.686886][T10181] netlink: 'syz.2.954': attribute type 7 has an invalid length. [ 398.741720][T10187] syz.1.953: attempt to access beyond end of device [ 398.741720][T10187] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 398.855153][T10013] team0: Port device team_slave_0 added [ 398.930316][T10013] team0: Port device team_slave_1 added [ 399.020302][T10013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.029178][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.136914][T10013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.192883][T10013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.210125][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.306604][T10013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.406363][ T5251] Bluetooth: hci3: command 0x0405 tx timeout [ 399.901369][T10013] hsr_slave_0: entered promiscuous mode [ 399.954336][T10013] hsr_slave_1: entered promiscuous mode [ 399.980862][T10013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.992682][T10206] syz.1.956: attempt to access beyond end of device [ 399.992682][T10206] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 400.036407][T10013] Cannot create hsr debugfs directory [ 400.709417][T10222] netlink: 'syz.2.961': attribute type 25 has an invalid length. [ 400.736593][T10222] netlink: 'syz.2.961': attribute type 7 has an invalid length. [ 400.889326][T10230] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 402.178929][T10257] netlink: 'syz.0.966': attribute type 25 has an invalid length. [ 402.204163][T10196] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 402.215540][T10257] netlink: 'syz.0.966': attribute type 7 has an invalid length. [ 402.223655][T10196] Bluetooth: hci7: Injecting HCI hardware error event [ 402.232820][ T4625] Bluetooth: hci7: hardware error 0x00 [ 402.284507][T10013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 402.313566][T10013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 402.340452][T10013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 402.423557][T10013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 403.200497][T10013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.249930][T10013] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.377325][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.384626][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.458312][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.465531][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.925155][T10287] syz.3.971: attempt to access beyond end of device [ 403.925155][T10287] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 404.027145][T10013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.284269][ T4625] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 404.518198][T10013] veth0_vlan: entered promiscuous mode [ 404.737477][T10013] veth1_vlan: entered promiscuous mode [ 404.852584][T10306] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 404.889334][T10013] veth0_macvtap: entered promiscuous mode [ 404.973188][T10315] netlink: 'syz.0.973': attribute type 25 has an invalid length. [ 405.010035][T10315] netlink: 'syz.0.973': attribute type 7 has an invalid length. [ 405.098734][T10013] veth1_macvtap: entered promiscuous mode [ 405.153471][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.173438][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.204298][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.215000][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.227090][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.238209][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.248363][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.260128][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.270358][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.282223][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.293180][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.305703][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.315637][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.328459][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.343101][T10013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.381779][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.429127][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.442701][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.459682][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.470864][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.559994][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.657556][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.672563][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.683632][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.700387][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.720887][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.742521][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.836059][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.879741][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.897635][T10013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.966029][T10013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.981345][T10013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.998580][T10013] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.017673][T10013] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.264842][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.293438][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.348650][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.360456][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.520738][T10333] netlink: 'syz.1.979': attribute type 25 has an invalid length. [ 406.562056][T10333] netlink: 'syz.1.979': attribute type 7 has an invalid length. [ 406.604526][ T4625] Bluetooth: hci4: command 0x0406 tx timeout [ 408.169001][T10373] syz.1.983: attempt to access beyond end of device [ 408.169001][T10373] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 408.257228][T10378] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 408.826581][T10392] netlink: 'syz.0.987': attribute type 25 has an invalid length. [ 408.867818][T10392] netlink: 'syz.0.987': attribute type 7 has an invalid length. [ 409.882812][T10411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.989'. [ 411.116784][T10453] netlink: 'syz.0.997': attribute type 25 has an invalid length. [ 411.181789][T10453] netlink: 'syz.0.997': attribute type 7 has an invalid length. [ 411.674669][T10462] syz.2.999: attempt to access beyond end of device [ 411.674669][T10462] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 411.676155][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.151774][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.357921][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.465139][T10477] binder: 10474:10477 ioctl c00c620f 0 returned -14 [ 412.644613][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.773114][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 413.250797][ T4625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.260144][ T4625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.268255][ T4625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.279183][ T4625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.287155][ T4625] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 413.294767][ T4625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.401603][ T12] bridge_slave_1: left allmulticast mode [ 413.410149][ T12] bridge_slave_1: left promiscuous mode [ 413.418304][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.491632][ T12] bridge_slave_0: left allmulticast mode [ 413.543852][ T12] bridge_slave_0: left promiscuous mode [ 413.617518][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.987935][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.019784][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.053160][ T12] bond0 (unregistering): Released all slaves [ 415.144509][T10516] netlink: 'syz.3.1012': attribute type 25 has an invalid length. [ 415.223810][T10516] netlink: 'syz.3.1012': attribute type 7 has an invalid length. [ 415.325384][T10196] Bluetooth: hci3: command tx timeout [ 416.343817][ T12] hsr_slave_0: left promiscuous mode [ 416.411783][ T12] hsr_slave_1: left promiscuous mode [ 416.499959][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.563873][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.632287][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.703519][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.799129][ T12] veth1_macvtap: left promiscuous mode [ 416.815260][ T12] veth0_macvtap: left promiscuous mode [ 416.831504][ T12] veth1_vlan: left promiscuous mode [ 416.845979][ T12] veth0_vlan: left promiscuous mode [ 416.925334][ T4625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 416.937750][ T4625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 416.947328][ T4625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 416.957106][ T4625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 416.966037][ T4625] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 416.973451][ T4625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.991657][ T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 417.275770][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 417.333847][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 417.392801][ T8] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 417.405015][ T4625] Bluetooth: hci3: command tx timeout [ 417.424856][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.433488][ T8] usb 1-1: Product: syz [ 417.444007][ T8] usb 1-1: Manufacturer: syz [ 417.467265][ T8] usb 1-1: SerialNumber: syz [ 417.477446][ T8] usb 1-1: config 0 descriptor?? [ 418.435490][ T12] team0 (unregistering): Port device team_slave_1 removed [ 418.538572][ T12] team0 (unregistering): Port device team_slave_0 removed [ 419.046765][T10580] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 419.083955][ T4625] Bluetooth: hci5: command tx timeout [ 419.491125][ T4625] Bluetooth: hci3: command tx timeout [ 419.844752][ T5292] usb 1-1: USB disconnect, device number 27 [ 419.883422][T10499] chnl_net:caif_netlink_parms(): no params data found [ 420.605071][T10499] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.663956][T10499] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.671280][T10499] bridge_slave_0: entered allmulticast mode [ 420.735628][T10499] bridge_slave_0: entered promiscuous mode [ 420.768943][T10499] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.776588][T10499] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.787156][T10499] bridge_slave_1: entered allmulticast mode [ 420.794881][T10499] bridge_slave_1: entered promiscuous mode [ 420.908849][T10499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.937393][T10499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.102179][T10499] team0: Port device team_slave_0 added [ 421.116986][T10499] team0: Port device team_slave_1 added [ 421.165476][ T4625] Bluetooth: hci5: command tx timeout [ 421.564171][ T4625] Bluetooth: hci3: command tx timeout [ 421.612601][T10499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.706069][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.818341][T10499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.868720][T10196] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 421.880128][T10196] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 421.890123][T10196] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 421.924670][T10499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.926319][T10196] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 421.940070][T10196] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 421.951063][T10196] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 421.967311][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.016480][T10499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.152466][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.307179][T10563] chnl_net:caif_netlink_parms(): no params data found [ 422.448476][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.825476][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.949094][T10499] hsr_slave_0: entered promiscuous mode [ 423.054261][T10499] hsr_slave_1: entered promiscuous mode [ 423.104334][T10499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.111984][T10499] Cannot create hsr debugfs directory [ 423.243965][T10196] Bluetooth: hci5: command tx timeout [ 423.275218][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.700978][T10563] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.709088][T10563] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.717263][T10563] bridge_slave_0: entered allmulticast mode [ 423.726073][T10563] bridge_slave_0: entered promiscuous mode [ 423.814636][T10563] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.835690][T10563] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.860699][T10563] bridge_slave_1: entered allmulticast mode [ 423.875577][T10563] bridge_slave_1: entered promiscuous mode [ 424.044949][T10196] Bluetooth: hci6: command tx timeout [ 424.106318][T10563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.180131][T10563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.575221][ T4625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 424.587382][ T4625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 424.597828][ T4625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 424.607346][ T4625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 424.617061][ T4625] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 424.631674][ T4625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 424.811432][T10563] team0: Port device team_slave_0 added [ 424.943487][T10563] team0: Port device team_slave_1 added [ 425.111535][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.324309][ T4625] Bluetooth: hci5: command tx timeout [ 425.365776][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.559071][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.770163][T10563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.796799][T10563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.833882][T10563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.849556][T10674] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 425.851280][T10563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.866115][T10563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.893134][T10563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.018051][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.125799][ T4625] Bluetooth: hci6: command tx timeout [ 426.353394][T10622] chnl_net:caif_netlink_parms(): no params data found [ 426.684991][T10196] Bluetooth: hci0: command tx timeout [ 426.758196][T10563] hsr_slave_0: entered promiscuous mode [ 426.782748][T10563] hsr_slave_1: entered promiscuous mode [ 426.812678][T10563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.827688][T10563] Cannot create hsr debugfs directory [ 427.794592][T10622] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.809086][T10622] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.827784][T10622] bridge_slave_0: entered allmulticast mode [ 427.840433][T10622] bridge_slave_0: entered promiscuous mode [ 427.975280][ T5290] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 428.029443][T10622] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.037660][T10622] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.045612][T10622] bridge_slave_1: entered allmulticast mode [ 428.056751][T10622] bridge_slave_1: entered promiscuous mode [ 428.088593][ T12] bridge_slave_1: left allmulticast mode [ 428.094528][ T12] bridge_slave_1: left promiscuous mode [ 428.100373][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.115145][ T12] bridge_slave_0: left allmulticast mode [ 428.120858][ T12] bridge_slave_0: left promiscuous mode [ 428.127344][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.142824][ T12] bridge_slave_1: left allmulticast mode [ 428.149093][ T12] bridge_slave_1: left promiscuous mode [ 428.156504][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.171154][ T12] bridge_slave_0: left allmulticast mode [ 428.182943][ T12] bridge_slave_0: left promiscuous mode [ 428.195787][ T5290] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 428.205033][T10196] Bluetooth: hci6: command tx timeout [ 428.205373][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.211378][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.250003][ T5290] usb 4-1: config 0 descriptor?? [ 428.282533][ T5290] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 428.729935][ T5290] gspca_stv06xx: I2C: Read error writing address: -71 [ 428.744966][ T5290] usb 4-1: USB disconnect, device number 26 [ 428.763921][T10196] Bluetooth: hci0: command 0x041b tx timeout [ 429.541929][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.567426][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.580254][ T12] bond0 (unregistering): Released all slaves [ 429.772037][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.786346][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.805211][ T12] bond0 (unregistering): Released all slaves [ 429.959572][T10667] chnl_net:caif_netlink_parms(): no params data found [ 430.087410][T10622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.155681][T10499] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 430.171121][T10499] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 430.285214][T10196] Bluetooth: hci6: command tx timeout [ 430.293357][T10622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.340777][T10499] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 430.378296][T10499] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 430.712693][T10622] team0: Port device team_slave_0 added [ 430.836583][T10622] team0: Port device team_slave_1 added [ 430.844409][T10196] Bluetooth: hci0: command 0x041b tx timeout [ 431.224620][T10667] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.254099][T10667] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.261440][T10667] bridge_slave_0: entered allmulticast mode [ 431.272015][T10667] bridge_slave_0: entered promiscuous mode [ 431.363549][T10622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.387422][T10622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.437417][T10622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.505843][T10667] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.513052][T10667] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.521453][T10667] bridge_slave_1: entered allmulticast mode [ 431.530008][T10667] bridge_slave_1: entered promiscuous mode [ 431.663034][ T4625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 431.685481][ T4625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 431.694740][ T4625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 431.704682][ T4625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 431.713597][T10622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.725714][ T4625] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 431.728374][T10622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.759836][ T4625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 431.760318][T10622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.951984][ T12] hsr_slave_0: left promiscuous mode [ 431.979311][ T12] hsr_slave_1: left promiscuous mode [ 431.988832][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.998556][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.020736][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.031433][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.056412][ T12] hsr_slave_0: left promiscuous mode [ 432.062941][ T12] hsr_slave_1: left promiscuous mode [ 432.084713][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.092570][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.101393][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.113480][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.163600][ T12] veth1_macvtap: left promiscuous mode [ 432.169639][ T12] veth0_macvtap: left promiscuous mode [ 432.175450][ T12] veth1_vlan: left promiscuous mode [ 432.180836][ T12] veth0_vlan: left promiscuous mode [ 432.188645][ T12] veth1_macvtap: left promiscuous mode [ 432.194699][ T12] veth0_macvtap: left promiscuous mode [ 432.200688][ T12] veth1_vlan: left promiscuous mode [ 432.206794][ T12] veth0_vlan: left promiscuous mode [ 432.935891][ T4625] Bluetooth: hci0: command 0x041b tx timeout [ 433.399684][ T12] team0 (unregistering): Port device team_slave_1 removed [ 433.498203][ T12] team0 (unregistering): Port device team_slave_0 removed [ 433.894739][ T4625] Bluetooth: hci7: command tx timeout [ 434.920200][ T12] team0 (unregistering): Port device team_slave_1 removed [ 435.013845][ T4625] Bluetooth: hci0: command 0x041b tx timeout [ 435.091049][ T12] team0 (unregistering): Port device team_slave_0 removed [ 435.866404][T10667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.891521][T10667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.967667][ T4625] Bluetooth: hci7: command tx timeout [ 436.116879][T10622] hsr_slave_0: entered promiscuous mode [ 436.137382][T10622] hsr_slave_1: entered promiscuous mode [ 436.147788][T10622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.158709][T10622] Cannot create hsr debugfs directory [ 436.207197][T10667] team0: Port device team_slave_0 added [ 436.217876][T10667] team0: Port device team_slave_1 added [ 436.290595][T10667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.298266][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.325877][T10667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.463516][T10667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.498907][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.528440][T10667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.955094][T10563] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 436.997417][T10563] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.150548][T10667] hsr_slave_0: entered promiscuous mode [ 437.191030][T10667] hsr_slave_1: entered promiscuous mode [ 437.218820][T10667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.253850][T10667] Cannot create hsr debugfs directory [ 437.296393][T10563] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.311077][T10563] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.415958][T10499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.782589][T10714] chnl_net:caif_netlink_parms(): no params data found [ 437.866551][T10499] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.939829][ T12] IPVS: stop unused estimator thread 0... [ 438.044611][ T4625] Bluetooth: hci7: command tx timeout [ 438.128305][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.135462][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.156898][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.164057][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.406612][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.466527][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.493648][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.516458][T10714] bridge_slave_0: entered allmulticast mode [ 438.525889][T10714] bridge_slave_0: entered promiscuous mode [ 438.549953][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.561540][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.580039][T10714] bridge_slave_1: entered allmulticast mode [ 438.589862][T10714] bridge_slave_1: entered promiscuous mode [ 438.657863][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.719488][T10714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.799653][T10714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.855484][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.961494][T10714] team0: Port device team_slave_0 added [ 439.018657][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.092649][T10714] team0: Port device team_slave_1 added [ 439.252987][T10714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.269781][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.296543][T10714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.310063][T10714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.318975][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.347976][T10714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.427073][T10667] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.450300][T10622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 439.470552][T10622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 439.586540][T10714] hsr_slave_0: entered promiscuous mode [ 439.598482][T10714] hsr_slave_1: entered promiscuous mode [ 439.605682][T10714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.613296][T10714] Cannot create hsr debugfs directory [ 439.708217][T10667] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.734786][T10622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 439.756514][T10622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 439.839733][T10563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.940301][T10667] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.082675][T10667] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.124417][ T4625] Bluetooth: hci7: command tx timeout [ 440.184761][T10563] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.219523][T10499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.295959][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.303123][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.375600][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.381965][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.502375][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.509698][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.533098][ T12] bridge_slave_1: left allmulticast mode [ 440.550873][ T12] bridge_slave_1: left promiscuous mode [ 440.567678][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.616714][ T12] bridge_slave_0: left allmulticast mode [ 440.622422][ T12] bridge_slave_0: left promiscuous mode [ 440.642051][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.686726][ T12] bridge_slave_1: left allmulticast mode [ 440.692436][ T12] bridge_slave_1: left promiscuous mode [ 440.725738][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.751927][ T12] bridge_slave_0: left allmulticast mode [ 440.783995][ T12] bridge_slave_0: left promiscuous mode [ 440.789838][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.418172][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.436391][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.459840][ T12] bond0 (unregistering): Released all slaves [ 442.653983][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.668715][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.682792][ T12] bond0 (unregistering): Released all slaves [ 443.013507][T10667] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 443.142726][T10563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 443.155979][T10563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 443.270770][T10667] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 443.332706][T10667] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 443.526467][T10667] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 443.571373][T10499] veth0_vlan: entered promiscuous mode [ 443.845481][T10499] veth1_vlan: entered promiscuous mode [ 443.933195][T10563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.132521][T10622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.265621][ T12] hsr_slave_0: left promiscuous mode [ 444.275055][ T12] hsr_slave_1: left promiscuous mode [ 444.281882][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.291936][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.302405][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.311911][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.339894][ T12] hsr_slave_0: left promiscuous mode [ 444.346566][ T12] hsr_slave_1: left promiscuous mode [ 444.352726][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.361595][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.371048][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.378607][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.460143][ T12] veth1_macvtap: left promiscuous mode [ 444.473490][ T12] veth0_macvtap: left promiscuous mode [ 444.487231][ T12] veth1_vlan: left promiscuous mode [ 444.495913][ T12] veth0_vlan: left promiscuous mode [ 444.510945][ T12] veth1_macvtap: left promiscuous mode [ 444.517185][ T12] veth0_macvtap: left promiscuous mode [ 444.522899][ T12] veth1_vlan: left promiscuous mode [ 444.529267][ T12] veth0_vlan: left promiscuous mode [ 445.631878][ T12] team0 (unregistering): Port device team_slave_1 removed [ 445.726541][ T12] team0 (unregistering): Port device team_slave_0 removed [ 447.136230][ T12] team0 (unregistering): Port device team_slave_1 removed [ 447.216905][ T12] team0 (unregistering): Port device team_slave_0 removed [ 448.014443][T10499] veth0_macvtap: entered promiscuous mode [ 448.028863][T10499] veth1_macvtap: entered promiscuous mode [ 448.111271][T10622] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.158489][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.170868][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.181438][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.192644][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.203018][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.229346][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.242322][T10499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.334135][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.345125][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.356170][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.370524][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.382091][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.393798][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.411761][T10499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.479923][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.487269][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.513625][T10499] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.534225][T10499] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.560937][T10499] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.583822][T10499] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.622868][T10563] veth0_vlan: entered promiscuous mode [ 448.708467][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.715689][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.773639][T10714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 448.795679][T10714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 448.808071][T10714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 448.868567][T10622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 448.895881][T10622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.919595][T10714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 448.980304][T10563] veth1_vlan: entered promiscuous mode [ 449.236351][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.253342][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.328125][T10667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.407849][T10622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.435013][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.469942][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.560680][T10667] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.582695][T10563] veth0_macvtap: entered promiscuous mode [ 449.631200][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.638409][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.679340][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.686578][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.702481][T10563] veth1_macvtap: entered promiscuous mode [ 449.873380][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.897903][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.909543][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.922069][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.932606][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.950400][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.979649][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.991861][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.028591][T10563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.055197][T10714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.116764][T10622] veth0_vlan: entered promiscuous mode [ 450.123315][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.163879][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.183271][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.196458][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.208056][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.219431][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.230924][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.242322][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.258962][T10563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.385859][T10563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.425743][T10563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.481694][T10563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.504782][T10563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.522018][T10622] veth1_vlan: entered promiscuous mode [ 450.759653][T10714] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.867738][T10811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1042'. [ 450.881541][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.888795][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.997876][T10622] veth0_macvtap: entered promiscuous mode [ 451.107085][T10667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.158417][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.165677][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.256992][T10622] veth1_macvtap: entered promiscuous mode [ 451.277245][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.349295][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.437260][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 451.453309][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.504992][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.554822][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.572543][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.582984][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.628593][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.669160][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.688832][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.701978][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.714434][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.728026][T10622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.742536][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.757741][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.770676][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.781835][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.792413][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.803216][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.816750][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.827773][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.838235][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.866222][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 451.890007][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.919171][T10622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.010551][T10622] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.025247][T10622] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.055936][T10622] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.065704][T10622] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.127278][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.146066][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.377917][T10667] veth0_vlan: entered promiscuous mode [ 452.508966][T10714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.548210][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.636171][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.736157][T10667] veth1_vlan: entered promiscuous mode [ 452.756933][ T29] audit: type=1326 audit(1726424752.149:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10824 comm="syz.4.1045" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x0 [ 452.827206][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.853213][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.960959][T10714] veth0_vlan: entered promiscuous mode [ 453.075466][T10667] veth0_macvtap: entered promiscuous mode [ 453.125982][T10714] veth1_vlan: entered promiscuous mode [ 453.134927][T10667] veth1_macvtap: entered promiscuous mode [ 453.230544][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.263832][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.297688][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.331272][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.342801][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.359538][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.369730][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.380331][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.402445][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.423852][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.451995][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.478561][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.498944][T10667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.628309][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.645235][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.662041][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.672954][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.683149][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.696357][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.706274][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.716832][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.727210][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.737850][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.758466][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.771764][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.810876][T10667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.876730][T10667] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.912211][T10667] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.945391][T10667] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.955333][T10667] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.007496][T10714] veth0_macvtap: entered promiscuous mode [ 454.091525][T10714] veth1_macvtap: entered promiscuous mode [ 454.144233][ T25] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 454.160916][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.193361][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.210135][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.232739][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.232763][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.232784][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.232802][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.232819][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.232837][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.232853][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.232872][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.232888][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.232903][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.232920][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.238790][T10714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.258320][T10844] netlink: 'syz.2.1049': attribute type 10 has an invalid length. [ 454.258405][T10844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.274718][T10844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.287838][T10844] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 454.468227][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.503880][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 454.525662][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 454.536475][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.543833][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 454.565648][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 454.578796][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 454.595988][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 454.612010][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.627380][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.637883][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 454.645769][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 454.657990][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.669922][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.680650][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 454.693860][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.706076][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 454.717818][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.728510][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 454.747827][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.776171][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 454.786118][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 454.793827][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.797901][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 454.825973][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 454.838178][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 454.866862][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.889473][ T25] usb 5-1: string descriptor 0 read error: -22 [ 454.896584][ T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 454.905728][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.936621][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.951752][ T25] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 454.985414][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.996540][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.014620][T10714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.257156][T10714] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.285283][T10714] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.321757][T10714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.363869][T10714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.464947][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.472848][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.833094][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.886270][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.950417][T10844] syz.2.1049 (10844): drop_caches: 1 [ 455.954761][ T3042] usb 5-1: USB disconnect, device number 32 [ 456.144420][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.182927][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.351306][T10864] syz.0.1034: attempt to access beyond end of device [ 456.351306][T10864] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 456.478845][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.487403][T10862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1051'. [ 456.508469][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.216311][T10871] syz.4.1052: attempt to access beyond end of device [ 457.216311][T10871] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 457.512434][T10879] syz.2.1055: attempt to access beyond end of device [ 457.512434][T10879] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 459.020414][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 459.310963][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 459.632824][T10915] syz.4.1064: attempt to access beyond end of device [ 459.632824][T10915] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 459.722247][T10918] vivid-001: ================= START STATUS ================= [ 459.734593][T10918] vivid-001: Radio HW Seek Mode: Bounded [ 459.770995][T10918] vivid-001: Radio Programmable HW Seek: false [ 459.792013][T10918] vivid-001: RDS Rx I/O Mode: Block I/O [ 459.810619][T10918] vivid-001: Generate RBDS Instead of RDS: false [ 459.819964][T10918] vivid-001: RDS Reception: true [ 459.835454][T10918] vivid-001: RDS Program Type: 0 inactive [ 459.843354][T10918] vivid-001: RDS PS Name: inactive [ 459.851409][T10918] vivid-001: RDS Radio Text: inactive [ 459.863049][T10918] vivid-001: RDS Traffic Announcement: false inactive [ 459.877489][T10918] vivid-001: RDS Traffic Program: false inactive [ 459.889947][T10918] vivid-001: RDS Music: false inactive [ 459.905452][T10918] vivid-001: ================== END STATUS ================== [ 461.998501][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.573243][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.611351][ T29] audit: type=1326 audit(1726424761.989:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10954 comm="syz.0.1075" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x0 [ 462.737128][T10963] syz.3.1077: attempt to access beyond end of device [ 462.737128][T10963] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 462.788641][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.878436][ T5290] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 462.943918][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.113756][ T5290] usb 5-1: Using ep0 maxpacket: 8 [ 463.139681][ T5290] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 463.167020][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.294704][ T5290] usb 5-1: config 0 descriptor?? [ 463.334785][ T52] bridge_slave_1: left allmulticast mode [ 463.377740][ T52] bridge_slave_1: left promiscuous mode [ 463.402234][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.514968][ T52] bridge_slave_0: left allmulticast mode [ 463.520680][ T52] bridge_slave_0: left promiscuous mode [ 463.574569][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.821670][T10196] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 463.842314][T10196] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 463.852423][T10196] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 463.915429][T10196] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 463.934209][T10196] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 463.941810][T10196] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 463.951152][ T5290] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 463.985112][ T5290] asix 5-1:0.0: probe with driver asix failed with error -71 [ 464.001601][ T5290] usb 5-1: USB disconnect, device number 33 [ 466.045773][ T4625] Bluetooth: hci6: command tx timeout [ 466.418784][ T46] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 466.613806][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 466.631614][ T46] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 466.649423][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.714523][ T46] usb 1-1: Product: syz [ 466.718730][ T46] usb 1-1: Manufacturer: syz [ 466.750843][ T46] usb 1-1: SerialNumber: syz [ 466.792005][ T46] usb 1-1: config 0 descriptor?? [ 467.687322][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.750022][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.806068][ T52] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 467.870458][ T52] bond0 (unregistering): Released all slaves [ 468.075943][T10990] netlink: 'syz.1.1081': attribute type 10 has an invalid length. [ 468.124311][T10196] Bluetooth: hci6: command tx timeout [ 468.187878][T10990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.271390][T10990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.384689][T11028] syz.0.1088: attempt to access beyond end of device [ 468.384689][T11028] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 468.441751][T10990] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 468.749927][ T46] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 468.817105][ T46] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 469.069102][T11040] IPv6: addrconf: prefix option has invalid lifetime [ 469.075913][T11040] IPv6: addrconf: prefix option has invalid lifetime [ 469.345310][ T46] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 469.367090][ T46] usb 1-1: USB disconnect, device number 28 [ 469.719409][T10997] syz.1.1081 (10997): drop_caches: 1 [ 469.916235][T11050] syz.3.1093: attempt to access beyond end of device [ 469.916235][T11050] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 470.049122][ T52] hsr_slave_0: left promiscuous mode [ 470.117939][ T52] hsr_slave_1: left promiscuous mode [ 470.145836][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.153264][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.204043][T10196] Bluetooth: hci6: command tx timeout [ 470.431264][ T52] veth1_macvtap: left promiscuous mode [ 470.441192][ T52] veth0_macvtap: left promiscuous mode [ 470.462902][ T52] veth1_vlan: left promiscuous mode [ 470.477876][ T52] veth0_vlan: left promiscuous mode [ 471.594347][T11081] syz.0.1098: attempt to access beyond end of device [ 471.594347][T11081] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 472.115704][ T3042] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 472.283875][T10196] Bluetooth: hci6: command tx timeout [ 472.345585][ T3042] usb 1-1: Using ep0 maxpacket: 32 [ 472.374969][ T3042] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.411117][ T3042] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.422389][ T3042] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 472.432581][ T3042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.450754][ T3042] usb 1-1: config 0 descriptor?? [ 472.459442][ T3042] hub 1-1:0.0: USB hub found [ 472.682329][ T3042] hub 1-1:0.0: 2 ports detected [ 472.989866][ T52] team0 (unregistering): Port device team_slave_1 removed [ 473.071436][ T52] team0 (unregistering): Port device team_slave_0 removed [ 473.894778][T11086] trusted_key: encrypted_key: key user:syz not found [ 474.218734][ T46] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 474.291049][T10854] usb 1-1: USB disconnect, device number 29 [ 474.842254][T10983] chnl_net:caif_netlink_parms(): no params data found [ 475.448922][T11117] syz.0.1103: attempt to access beyond end of device [ 475.448922][T11117] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 475.856026][T10983] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.907647][T10983] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.932367][T10983] bridge_slave_0: entered allmulticast mode [ 475.957956][T10983] bridge_slave_0: entered promiscuous mode [ 475.970791][T10983] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.988370][T10983] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.024190][ T46] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 476.046559][T10983] bridge_slave_1: entered allmulticast mode [ 476.094363][T10983] bridge_slave_1: entered promiscuous mode [ 476.213789][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 476.245257][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.266204][ T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.306878][ T46] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 476.321754][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.337417][ T46] usb 2-1: Product: syz [ 476.346428][ T46] usb 2-1: Manufacturer: syz [ 476.356222][ T46] usb 2-1: SerialNumber: syz [ 476.392903][T10983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.442698][T10983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.836364][T10983] team0: Port device team_slave_0 added [ 476.857596][T10983] team0: Port device team_slave_1 added [ 476.995126][T11146] syz.3.1108: attempt to access beyond end of device [ 476.995126][T11146] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 477.046057][T10983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.079156][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.105212][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.252755][T10983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.278116][T10983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.329471][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.355458][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.406342][T10983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.485403][ T30] INFO: task syz.2.726:9011 blocked for more than 143 seconds. [ 477.500337][ T30] Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 477.517377][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 477.526273][T11156] vivid-004: ================= START STATUS ================= SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 477.526337][T11156] vivid-004: Radio HW Seek Mode: Bounded [ 477.541235][T11156] vivid-004: Radio Programmable HW Seek: false [ 477.548040][T11156] vivid-004: RDS Rx I/O Mode: Block I/O [ 477.554090][T11156] vivid-004: Generate RBDS Instead of RDS: false [ 477.562637][T11156] vivid-004: RDS Reception: true [ 477.648397][T11156] vivid-004: RDS Program Type: 0 inactive [ 477.652604][ T30] task:syz.2.726 state:D [ 477.658709][T11156] vivid-004: RDS PS Name: inactive [ 477.696241][T11156] vivid-004: RDS Radio Text: inactive [ 477.719363][T11156] vivid-004: RDS Traffic Announcement: false inactive [ 477.736262][ T30] stack:25776 pid:9011 tgid:9010 ppid:8506 flags:0x20004006 [ 477.756122][T11156] vivid-004: RDS Traffic Program: false inactive [ 477.762820][T11156] vivid-004: RDS Music: false inactive [ 477.769689][T11156] vivid-004: ================== END STATUS ================== [ 477.853848][ T30] Call Trace: [ 477.877780][ T30] [ 477.912533][ T30] __schedule+0x1800/0x4a60 [ 477.967708][ T30] ? __pfx___schedule+0x10/0x10 [ 478.012937][ T30] ? __pfx_lock_release+0x10/0x10 [ 478.012976][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 478.013014][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 478.013043][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 478.013081][ T30] ? schedule+0x90/0x320 [ 478.013102][ T30] schedule+0x14b/0x320 [ 478.013119][ T30] ? down_read+0x6a5/0xa40 [ 478.013142][ T30] schedule_preempt_disabled+0x13/0x30 [ 478.013169][ T30] down_read+0x705/0xa40 [ 478.013215][ T30] ? __lock_acquire+0x137a/0x2040 [ 478.013249][ T30] ? __pfx_down_read+0x10/0x10 [ 478.013276][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 478.013323][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 478.013356][ T30] ? __pfx___up_read+0x10/0x10 [ 478.013407][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 478.013450][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 478.013500][ T30] ? count_memcg_event_mm+0x90/0x420 [ 478.013538][ T30] ? __filemap_get_folio+0x984/0xc10 [ 478.013568][ T30] filemap_fault+0x828/0x1760 [ 478.013602][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 478.013649][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 478.013826][ T30] ? pte_alloc_one+0x443/0x5d0 [ 478.013864][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 478.013898][ T30] ? __pfx_validate_chain+0x10/0x10 [ 478.013969][ T30] __do_fault+0x135/0x460 [ 478.013999][ T30] handle_pte_fault+0x1176/0x6fc0 [ 478.014037][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 478.014074][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 478.014110][ T30] ? mark_lock+0x9a/0x350 [ 478.014148][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 478.014173][ T30] ? __lock_acquire+0x137a/0x2040 [ 478.014237][ T30] ? __thp_vma_allowable_orders+0x951/0xa20 [ 478.014281][ T30] ? __pfx_lock_release+0x10/0x10 [ 478.014323][ T30] handle_mm_fault+0x1109/0x1bc0 [ 478.014390][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 478.014442][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 478.014492][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 478.014529][ T30] exc_page_fault+0x2b9/0x8c0 [ 478.014587][ T30] asm_exc_page_fault+0x26/0x30 [ 478.014626][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 478.014658][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 478.014680][ T30] RSP: 0000:ffffc900046ffab0 EFLAGS: 00050246 [ 478.014704][ T30] RAX: ffffffff84b29901 RBX: 0000000020007ec7 RCX: 0000000000000040 [ 478.014722][ T30] RDX: 0000000000000000 RSI: ffffc900046ffb40 RDI: 0000000020007e87 [ 478.014740][ T30] RBP: ffffc900046ffbf0 R08: ffffc900046ffb7f R09: 1ffff920008dff6f [ 478.014759][ T30] R10: dffffc0000000000 R11: fffff520008dff70 R12: 0000000000000040 [ 478.014776][ T30] R13: 0000000000006407 R14: 0000000020007e87 R15: ffffc900046ffb40 [ 478.014803][ T30] ? _copy_from_user+0xb1/0xe0 [ 478.014841][ T30] _copy_to_user+0x86/0xb0 [ 478.014872][ T30] rng_dev_read+0x3be/0x6d0 [ 478.014914][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 478.014946][ T30] ? __pfx_bpf_lsm_file_permission+0x10/0x10 [ 478.014993][ T30] ? rw_verify_area+0x52a/0x6b0 [ 478.015023][ T30] vfs_readv+0x6c2/0xa90 [ 478.015067][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 478.015101][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 478.015148][ T30] ? __fget_files+0x29/0x470 [ 478.015198][ T30] __ia32_compat_sys_preadv+0x1db/0x2e0 [ 478.015232][ T30] ? __pfx___ia32_compat_sys_preadv+0x10/0x10 [ 478.015267][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 478.015292][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 478.015318][ T30] __do_fast_syscall_32+0xb4/0x110 [ 478.015344][ T30] ? exc_page_fault+0x590/0x8c0 [ 478.015385][ T30] do_fast_syscall_32+0x34/0x80 [ 478.015411][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.015444][ T30] RIP: 0023:0xf7ff6579 [ 478.015481][ T30] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 478.015507][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020001880 [ 478.015524][ T30] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.015540][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.015555][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 478.015570][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.015603][ T30] [ 478.015659][ T30] [ 478.015659][ T30] Showing all locks held in the system: [ 478.015673][ T30] 2 locks held by kworker/u8:0/11: [ 478.015689][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 478.015771][ T30] #1: ffffc90000107d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 478.015843][ T30] 4 locks held by kworker/1:0/25: [ 478.015858][ T30] 1 lock held by khungtaskd/30: [ 478.015871][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 478.015946][ T30] 6 locks held by kworker/1:1/46: [ 478.015960][ T30] #0: ffff88801e6a2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 478.016039][ T30] #1: ffffc90000b67d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 478.016103][ T30] #2: ffff888028afc190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 478.016165][ T30] #3: ffff888030eb0190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 478.016240][ T30] #4: ffff888076180160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 478.016299][ T30] #5: ffffffff8fc1c408 (register_mutex#6){+.+.}-{3:3}, at: usb_audio_probe+0x417/0x2100 [ 478.016389][ T30] 3 locks held by kworker/u8:3/52: [ 478.016403][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 478.016479][ T30] #1: ffffc90000bc7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 478.016583][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 478.016679][ T30] 2 locks held by getty/4994: [ 478.016694][ T30] #0: ffff8880303a70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 478.016765][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 478.016836][ T30] 1 lock held by syz.1.625/8505: [ 478.016851][ T30] 1 lock held by syz.2.726/9011: [ 478.016865][ T30] #0: ffff88802309f0c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 478.016946][ T30] 1 lock held by syz.3.769/9257: [ 478.016960][ T30] #0: ffff88802309f0c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530 [ 478.017036][ T30] 2 locks held by syz-executor/10499: [ 478.017052][ T30] 2 locks held by syz-executor/10563: [ 478.017068][ T30] 1 lock held by syz-executor/10667: [ 478.017083][ T30] 2 locks held by syz-executor/10714: [ 478.017098][ T30] 4 locks held by udevd/10819: [ 478.017112][ T30] #0: ffff8880302a9790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 478.017187][ T30] #1: ffff888030cdb088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 478.017264][ T30] #2: ffff88807e635e18 (kn->active#22){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 478.017340][ T30] #3: ffff888030eb0190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 478.017408][ T30] 2 locks held by syz-executor/10983: [ 478.017422][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 478.017504][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 478.017622][ T30] 2 locks held by syz.1.1104/11143: [ 478.017639][ T30] 1 lock held by syz.4.1109/11153: [ 478.017653][ T30] 1 lock held by syz.0.1118/11158: [ 478.017667][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: packet_mc_add+0x28/0x950 [ 478.024821][ T30] 3 locks held by syz.0.1118/11163: [ 478.024837][ T30] 2 locks held by syz.3.1110/11159: [ 478.024846][ T30] #0: ffffffff8fcf1a70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 478.024900][ T30] #1: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 478.024971][ T30] 2 locks held by syz.3.1110/11164: [ 478.024985][ T30] 1 lock held by modprobe/11165: [ 478.024995][ T30] 1 lock held by rm/11166: [ 478.025006][ T30] [ 478.025011][ T30] ============================================= [ 478.025011][ T30] [ 478.025019][ T30] NMI backtrace for cpu 0 [ 478.025043][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 478.025072][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 478.025087][ T30] Call Trace: [ 478.025096][ T30] [ 478.025106][ T30] dump_stack_lvl+0x241/0x360 [ 478.025134][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.025152][ T30] ? __pfx__printk+0x10/0x10 [ 478.025165][ T30] ? vprintk_emit+0x667/0x7c0 [ 478.025185][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 478.025217][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 478.025252][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 478.025278][ T30] ? _printk+0xd5/0x120 [ 478.025294][ T30] ? __pfx__printk+0x10/0x10 [ 478.025309][ T30] ? __wake_up_klogd+0xcc/0x110 [ 478.025327][ T30] ? __pfx__printk+0x10/0x10 [ 478.025348][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 478.025377][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 478.025406][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 478.025436][ T30] watchdog+0xff4/0x1040 [ 478.025466][ T30] ? watchdog+0x1ea/0x1040 [ 478.025498][ T30] ? __pfx_watchdog+0x10/0x10 [ 478.025530][ T30] kthread+0x2f0/0x390 [ 478.025550][ T30] ? __pfx_watchdog+0x10/0x10 [ 478.025579][ T30] ? __pfx_kthread+0x10/0x10 [ 478.025594][ T30] ret_from_fork+0x4b/0x80 [ 478.025616][ T30] ? __pfx_kthread+0x10/0x10 [ 478.025631][ T30] ret_from_fork_asm+0x1a/0x30 [ 478.025679][ T30] [ 478.025688][ T30] Sending NMI from CPU 0 to CPUs 1: [ 478.025722][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 478.026716][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 478.026730][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 478.026752][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 478.026762][ T30] Call Trace: [ 478.026769][ T30] [ 478.026775][ T30] dump_stack_lvl+0x241/0x360 [ 478.026795][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.026820][ T30] ? __pfx__printk+0x10/0x10 [ 478.026840][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 478.026879][ T30] ? vscnprintf+0x5d/0x90 [ 478.026907][ T30] panic+0x349/0x860 [ 478.026924][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 478.026946][ T30] ? __pfx_panic+0x10/0x10 [ 478.026964][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 478.026991][ T30] ? __irq_work_queue_local+0x137/0x410 [ 478.027024][ T30] ? irq_work_queue+0xca/0x150 [ 478.027051][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 478.027073][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 478.027093][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 478.027119][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 478.027154][ T30] watchdog+0x1033/0x1040 [ 478.027186][ T30] ? watchdog+0x1ea/0x1040 [ 478.027217][ T30] ? __pfx_watchdog+0x10/0x10 [ 478.027239][ T30] kthread+0x2f0/0x390 [ 478.027256][ T30] ? __pfx_watchdog+0x10/0x10 [ 478.027287][ T30] ? __pfx_kthread+0x10/0x10 [ 478.027309][ T30] ret_from_fork+0x4b/0x80 [ 478.027338][ T30] ? __pfx_kthread+0x10/0x10 [ 478.027356][ T30] ret_from_fork_asm+0x1a/0x30 [ 478.027389][ T30] [ 478.027711][ T30] Kernel Offset: disabled