last executing test programs: 3.637333555s ago: executing program 2 (id=597): syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902900003010000000904000000010100000a240100000002010211240600000500000000000000000000000b2407000000002e387cf009040100000102000009040101010102000009050109000000008007250100000000090402000001020000090402010101020000072401000003000e2402030e000000f5138d22419e0905820940"], 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.776428462s ago: executing program 4 (id=601): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) 2.29334408s ago: executing program 4 (id=604): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) 2.160091273s ago: executing program 4 (id=606): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x32c000, 0x1000, 0x4}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 1.361652304s ago: executing program 2 (id=613): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x10, 0x6, @remote}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000007c0)=ANY=[], 0x0) 1.216419148s ago: executing program 0 (id=618): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) 1.215425508s ago: executing program 4 (id=619): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000004d80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d40)={&(0x7f0000003bc0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 1.092258021s ago: executing program 0 (id=621): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000200)="c082b44eb524", 0x6}, {&(0x7f0000000240)="a43b2eaab400000000000000", 0xc}], 0x2) 1.042194586s ago: executing program 4 (id=623): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) 974.431333ms ago: executing program 0 (id=625): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000001a80)={0x0, [{0x3, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x5, 0x0, 0xfffffffb, 0x0}, {0x1, 0x0, 0x7fff, 0x0}, {0x2, 0x0, 0x7fff, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x80, 0x0}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 787.285021ms ago: executing program 1 (id=629): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 724.476638ms ago: executing program 0 (id=630): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) 676.460223ms ago: executing program 3 (id=632): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 656.312865ms ago: executing program 1 (id=633): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 588.411182ms ago: executing program 3 (id=634): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000004d80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d40)={&(0x7f0000003bc0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 500.41635ms ago: executing program 1 (id=635): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) 486.580542ms ago: executing program 3 (id=636): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 436.361547ms ago: executing program 1 (id=637): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000080)='./file0\x00', 0x424) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 368.811514ms ago: executing program 2 (id=638): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r6, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa}]]}, 0x30}}, 0x4) 367.836034ms ago: executing program 3 (id=639): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) 310.43215ms ago: executing program 2 (id=640): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) 225.607738ms ago: executing program 3 (id=641): socket$inet6(0xa, 0x2, 0x3a) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) close(0x4) 224.698498ms ago: executing program 1 (id=642): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x3, {0x2, @pix={0x207, 0x20007f, 0x71070474, 0x3, 0x20829, 0x3, 0x6, 0xfeedcafe, 0x1, 0x3, 0x0, 0x1}}, 0x1}) 194.547181ms ago: executing program 2 (id=643): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 124.688568ms ago: executing program 1 (id=644): socket$caif_stream(0x25, 0x1, 0x0) syz_read_part_table(0x4078, &(0x7f0000004080)="$eJzs079KwlEUB/CjQ0EtFj3A3SKQ+vknySkqGhrMwamxwkIQg7RwaelteqQeoOcwMIP4lYMFBfH5TOfe7z2Xs5zVl6eDiCjs3A1648gpRsRkWu0XIwoRUZ8lhfzT4XWvf37R7b91FfMxCyvNuX94nBVLi/+5uRZxmiJiZfS8cfST6fgnlrfOPh4nU5/3+3tODlupfdxKWaNR7VSq6V0t1bKvO7Ism5P8tvVS52qc7ru3w97NIO1u18qpfTlKlb1yqjSb9b8eDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGUHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WSXRuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAAAAP//CaUg2w==") unshare(0x2a020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 124.164068ms ago: executing program 3 (id=645): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='@\x00', 0x0) 59.875434ms ago: executing program 0 (id=646): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 53.708675ms ago: executing program 2 (id=647): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) 4.08293ms ago: executing program 4 (id=648): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000004d80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d40)={&(0x7f0000003bc0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 0s ago: executing program 0 (id=649): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x25, [{{0x9, 0x2, 0x48}}]}}, 0xffffffffff600000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x400c0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.241' (ED25519) to the list of known hosts. [ 59.795617][ T4173] cgroup: Unknown subsys name 'net' [ 59.939643][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.377005][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.077330][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 66.156984][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 66.177435][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 66.202578][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 66.259544][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.267563][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.276145][ T4193] device bridge_slave_0 entered promiscuous mode [ 66.304244][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.313973][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.321037][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.329424][ T4193] device bridge_slave_1 entered promiscuous mode [ 66.405955][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.418458][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.457894][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.465495][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.473736][ T4192] device bridge_slave_0 entered promiscuous mode [ 66.505746][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.513414][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.521248][ T4192] device bridge_slave_1 entered promiscuous mode [ 66.528466][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.535851][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.543746][ T4184] device bridge_slave_0 entered promiscuous mode [ 66.551146][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.558421][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.566227][ T4185] device bridge_slave_0 entered promiscuous mode [ 66.585415][ T4193] team0: Port device team_slave_0 added [ 66.598906][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.606250][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.614674][ T4184] device bridge_slave_1 entered promiscuous mode [ 66.621757][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.628984][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.637204][ T4185] device bridge_slave_1 entered promiscuous mode [ 66.652292][ T4193] team0: Port device team_slave_1 added [ 66.686765][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.693918][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.701786][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.718766][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.742824][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.750046][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.758398][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.766341][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.773477][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.799398][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.812445][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.823737][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.841333][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.860116][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.867201][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.893769][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.906544][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.925710][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.955252][ T4192] team0: Port device team_slave_0 added [ 66.970221][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.995634][ T4192] team0: Port device team_slave_1 added [ 67.011671][ T4185] team0: Port device team_slave_0 added [ 67.019304][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.038328][ T4184] team0: Port device team_slave_0 added [ 67.060257][ T4185] team0: Port device team_slave_1 added [ 67.074874][ T4184] team0: Port device team_slave_1 added [ 67.083775][ T4188] team0: Port device team_slave_0 added [ 67.119986][ T4188] team0: Port device team_slave_1 added [ 67.126282][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.133841][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.160005][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.174882][ T4193] device hsr_slave_0 entered promiscuous mode [ 67.181657][ T4193] device hsr_slave_1 entered promiscuous mode [ 67.210248][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.217435][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.243701][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.259192][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.266611][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.292724][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.304572][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.311534][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.337597][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.365130][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.372103][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.398312][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.410329][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.417597][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.443593][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.455372][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.462333][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.488869][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.519483][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.526569][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.552773][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.582391][ T4192] device hsr_slave_0 entered promiscuous mode [ 67.589851][ T4192] device hsr_slave_1 entered promiscuous mode [ 67.596647][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.604769][ T4192] Cannot create hsr debugfs directory [ 67.675991][ T4184] device hsr_slave_0 entered promiscuous mode [ 67.682673][ T4184] device hsr_slave_1 entered promiscuous mode [ 67.689763][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.697385][ T4184] Cannot create hsr debugfs directory [ 67.720091][ T4185] device hsr_slave_0 entered promiscuous mode [ 67.727172][ T4185] device hsr_slave_1 entered promiscuous mode [ 67.734209][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.741799][ T4185] Cannot create hsr debugfs directory [ 67.767248][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.773953][ T4175] Bluetooth: hci3: command 0x0409 tx timeout [ 67.774063][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 67.781549][ T4175] Bluetooth: hci1: command 0x0409 tx timeout [ 67.792453][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 67.792477][ T4175] Bluetooth: hci4: command 0x0409 tx timeout [ 67.807387][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.814269][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.821833][ T4188] Cannot create hsr debugfs directory [ 68.105631][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.120015][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.144457][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.159877][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.170644][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.181364][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.213492][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.238079][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.253818][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.276970][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.295380][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.305916][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.420321][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.452136][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.481038][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.490930][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.509999][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.529812][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.545625][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.572626][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.584805][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.605628][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.618439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.629305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.642784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.651150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.662341][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.679514][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.702041][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.718519][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.727994][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.738335][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.745719][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.755249][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.765160][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.778137][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.785248][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.796914][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.806365][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.820863][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.829378][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.847994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.857269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.866598][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.873964][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.883706][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.913954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.922748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.931934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.940994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.949995][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.957191][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.966086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.975827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.007040][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.015861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.025374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.035397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.044910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.054530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.063618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.071958][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.079061][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.088885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.096921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.125947][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.141773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.152268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.161347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.171281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.180307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.188308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.196555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.205498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.214195][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.221258][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.229143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.238566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.247688][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.254819][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.264332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.272498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.306881][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.316898][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.326264][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.345637][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.357404][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.375979][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.384933][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.393817][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.402456][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.411014][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.418126][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.427460][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.435807][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.445169][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.455660][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.464486][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.472694][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.481522][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.491194][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.500326][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.509440][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.518643][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.527504][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.537315][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.549209][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.564076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.573438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.606456][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.625410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.640962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.652764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.662510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.684510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.694016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.701996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.716786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.729094][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.752632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.762143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.798999][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.834679][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.853292][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 69.861559][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 69.863860][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 69.880795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.891029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.900568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.905001][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 69.909927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.921524][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 69.923738][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.936053][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.950857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.977809][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.992128][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.014734][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.021844][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.030009][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.038394][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.054303][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.095014][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.118898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.127369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.136363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.146837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.162143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.171296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.182328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.191193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.200275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.210029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.228448][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.242095][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.251305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.275274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.284620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.292139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.304199][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.325135][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.368488][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.376316][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.434430][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.446395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.468257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.511978][ T4192] device veth0_vlan entered promiscuous mode [ 70.522326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.532190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.542302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.551328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.561135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.570366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.581313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.597506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.606141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.614445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.635901][ T4188] device veth0_vlan entered promiscuous mode [ 70.648839][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.659582][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.668819][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.677966][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.701899][ T4185] device veth0_vlan entered promiscuous mode [ 70.714252][ T4192] device veth1_vlan entered promiscuous mode [ 70.724432][ T4185] device veth1_vlan entered promiscuous mode [ 70.731374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.740232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.749526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.758494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.766689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.775238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.786150][ T4193] device veth0_vlan entered promiscuous mode [ 70.796356][ T4188] device veth1_vlan entered promiscuous mode [ 70.821503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.830445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.838918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.847491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.855824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.866763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.874916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.884608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.892143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.912996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.921567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.940538][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.950572][ T4192] device veth0_macvtap entered promiscuous mode [ 70.966298][ T4193] device veth1_vlan entered promiscuous mode [ 70.992438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.002439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.010725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.021238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.029876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.039557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.052656][ T4192] device veth1_macvtap entered promiscuous mode [ 71.066026][ T4185] device veth0_macvtap entered promiscuous mode [ 71.075954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.084614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.092663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.101509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.122553][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.131069][ T4188] device veth0_macvtap entered promiscuous mode [ 71.141358][ T4185] device veth1_macvtap entered promiscuous mode [ 71.159695][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.168154][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.176984][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.186738][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.200702][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.222115][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.230858][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.239920][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.250528][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.261968][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.271013][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.280035][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.289053][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.301429][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.301574][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.373967][ T4188] device veth1_macvtap entered promiscuous mode [ 71.387895][ T4193] device veth0_macvtap entered promiscuous mode [ 71.400500][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.409950][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.418918][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.427685][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.436312][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.444870][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.452589][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.467928][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.481328][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.492831][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.505334][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.515843][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.528486][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.544730][ T4184] device veth0_vlan entered promiscuous mode [ 71.566278][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.575181][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.585053][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.593865][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.607207][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.619383][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.629331][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.640002][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.652032][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.661492][ T4193] device veth1_macvtap entered promiscuous mode [ 71.688226][ T4184] device veth1_vlan entered promiscuous mode [ 71.693167][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.695932][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.702428][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.724294][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.736772][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.746206][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.755281][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.764038][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.773837][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.782554][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.791686][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.821518][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.833644][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.843525][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.854504][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.866355][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.879578][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.889127][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.898209][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.907268][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.929811][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.937903][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 71.940890][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.945435][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 71.952517][ T4298] Bluetooth: hci3: command 0x040f tx timeout [ 71.958999][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 71.970791][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 71.972327][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.990565][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.001492][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.011806][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.026029][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.035904][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.046551][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.058067][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.080779][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.090467][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.094664][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.110771][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.119940][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.131958][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.142579][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.155507][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.166057][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.177337][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.187844][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.199729][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.212729][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.223361][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.232068][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.240949][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.255005][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.263962][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.280522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.289582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.319999][ T4184] device veth0_macvtap entered promiscuous mode [ 72.456846][ T4184] device veth1_macvtap entered promiscuous mode [ 72.491177][ T1289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.507254][ T1289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.538562][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.550149][ T1289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.562834][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.579855][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.582063][ T1289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.590337][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.590364][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.590378][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.590387][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.590399][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.592201][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.661048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.689091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.697935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.706808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.715504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.725039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.751406][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.751506][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.776676][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.784236][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.798409][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.811694][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.833639][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.851854][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.872896][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.888988][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.900842][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.946706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.959939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.970151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.987552][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.998755][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.011091][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.020109][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.034701][ T1289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.057505][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.075942][ T1289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.079212][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.117322][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.133872][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.234106][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.284594][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.302068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.357506][ T418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.390043][ T418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.418699][ T4315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'. [ 73.436702][ T4315] device ip_vti0 entered promiscuous mode [ 73.475406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.562745][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.597267][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.629727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.764279][ T4330] capability: warning: `syz.1.14' uses 32-bit capabilities (legacy support in use) [ 73.813010][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.897960][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 73.939608][ T4337] loop1: detected capacity change from 0 to 1024 [ 73.998691][ T4337] hfsplus: gid requires an argument [ 74.013963][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 74.021657][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 74.023383][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 74.034035][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 74.037073][ T4337] hfsplus: unable to parse mount options [ 74.046269][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 74.143804][ T23] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 74.181415][ T4344] loop1: detected capacity change from 0 to 512 [ 74.207835][ T4344] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 74.223535][ T4344] EXT4-fs (loop1): inline encryption not supported [ 74.236766][ T4344] EXT4-fs (loop1): Test dummy encryption mode enabled [ 74.243867][ T4344] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 74.251154][ T4344] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.280412][ T4344] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.309815][ T4344] EXT4-fs (loop1): 1 truncate cleaned up [ 74.321001][ T4344] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 74.481912][ T4346] loop3: detected capacity change from 0 to 40427 [ 74.533142][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.542593][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.553916][ T4346] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 74.568245][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 74.606605][ T4344] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 74.663221][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.696128][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.732940][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 74.814271][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.860285][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.912959][ T4367] netlink: 'syz.1.23': attribute type 1 has an invalid length. [ 74.920683][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 74.920868][ T4367] netlink: 'syz.1.23': attribute type 2 has an invalid length. [ 74.953560][ T4367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 75.028925][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.054962][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.091537][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.217444][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.236613][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.248094][ T4381] xt_bpf: check failed: parse error [ 75.306883][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.444434][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.482088][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.531921][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.541719][ T4395] 9pnet: Insufficient options for proto=fd [ 75.542752][ T4397] netlink: 14 bytes leftover after parsing attributes in process `syz.4.39'. [ 75.623152][ T4397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.642947][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.651872][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.689664][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.719107][ T4397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.732963][ T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 75.755036][ T4397] bond0 (unregistering): Released all slaves [ 75.809743][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.838769][ T23] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.850287][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.867315][ T4410] loop2: detected capacity change from 0 to 128 [ 75.875075][ T4411] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.899192][ T4410] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.923055][ T4410] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.997485][ T4414] loop4: detected capacity change from 0 to 1024 [ 76.063115][ T23] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 76.072497][ T23] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 76.103757][ T7] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 76.110161][ T23] usb 1-1: Product: syz [ 76.127003][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.144780][ T23] usb 1-1: Manufacturer: syz [ 76.150689][ T23] usb 1-1: SerialNumber: syz [ 76.167358][ T7] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 76.179059][ T23] usb 1-1: config 0 descriptor?? [ 76.202476][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.297960][ T23] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 76.306994][ T7] usb 2-1: config 0 descriptor?? [ 76.343406][ T4389] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 76.410577][ T4428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 76.430643][ T4428] device bridge_slave_1 left promiscuous mode [ 76.492377][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.543383][ T4428] device bridge_slave_0 left promiscuous mode [ 76.555660][ T4232] usb 1-1: USB disconnect, device number 2 [ 76.571627][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.624128][ T4232] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 76.801462][ T7] thrustmaster 0003:044F:B654.0001: hidraw0: USB HID vff.f8 Device [HID 044f:b654] on usb-dummy_hcd.1-1/input0 [ 76.827408][ T7] thrustmaster 0003:044F:B654.0001: no inputs found [ 76.996694][ T7] usb 2-1: USB disconnect, device number 2 [ 77.012138][ T4449] loop3: detected capacity change from 0 to 4096 [ 77.028614][ T4448] fido_id[4448]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:044F:B654.0001/report_descriptor': No such device [ 77.126127][ T4457] loop4: detected capacity change from 0 to 64 [ 77.134343][ T4449] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 77.149055][ T4457] hfs: unable to parse mount options [ 77.228678][ T4449] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 77.614784][ T4464] process 'syz.1.69' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 77.644256][ T9] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 77.656486][ T4184] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 77.674827][ T4184] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 77.683731][ T4184] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 77.715524][ T1289] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 77.728747][ T4232] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.730839][ T4184] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 77.891940][ T4471] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.103195][ T4232] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 78.121322][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.164095][ T4232] usb 1-1: config 0 descriptor?? [ 78.288329][ T4486] loop2: detected capacity change from 0 to 1024 [ 78.371880][ T4488] loop1: detected capacity change from 0 to 2048 [ 78.382621][ T4486] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 78.426810][ T4492] misc userio: Invalid payload size [ 78.443154][ T4232] [drm] vendor descriptor length:6 data:06 5f 01 80 00 00 00 00 00 00 00 [ 78.455295][ T4232] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 78.487694][ T4494] loop4: detected capacity change from 0 to 64 [ 78.489180][ T4488] EXT4-fs (loop1): Ignoring removed bh option [ 78.509679][ T4488] EXT4-fs (loop1): blocks per group (327424) and clusters per group (16384) inconsistent [ 78.524546][ T4486] EXT4-fs (loop2): Ignoring removed orlov option [ 78.525939][ T4494] hfs: unable to parse mount options [ 78.539521][ T4486] EXT4-fs (loop2): can't enable nombcache during remount [ 78.858751][ T4232] [drm:udl_init] *ERROR* Selecting channel failed [ 78.875757][ T4232] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 78.883330][ T4232] [drm] Initialized udl on minor 2 [ 78.918384][ T4232] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 78.947978][ T4232] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 78.994431][ T4232] usb 1-1: USB disconnect, device number 3 [ 79.022762][ T4253] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 79.044530][ T4253] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 79.083330][ T4253] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 79.473051][ T4253] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 79.567199][ T4518] loop1: detected capacity change from 0 to 16 [ 79.606856][ T4518] erofs: (device loop1): mounted with root inode @ nid 36. [ 79.665975][ T4518] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 79.709662][ T4203] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 79.770084][ T4518] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 79.826358][ T4518] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 79.883108][ T4518] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 79.892115][ T4518] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 79.903020][ T4253] usb 3-1: unable to get BOS descriptor or descriptor too short [ 79.943102][ T4253] usb 3-1: not running at top speed; connect to a high speed hub [ 79.965560][ T4253] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 80.046368][ T4518] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 80.083039][ T4253] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.101566][ T4253] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.112478][ T4518] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 80.153453][ T4518] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 80.171624][ T4518] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 80.205141][ T4253] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.220328][ T4253] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.233391][ T26] audit: type=1800 audit(1763263460.071:2): pid=4518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.91" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 80.303646][ T4253] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.337064][ T4253] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.433110][ T4253] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.460251][ T4253] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.563146][ T4253] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.587447][ T4253] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.697198][ T4253] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.200645][ T4548] loop1: detected capacity change from 0 to 32768 [ 81.278691][ T4548] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.104 (4548) [ 81.538617][ T21] cfg80211: failed to load regulatory.db [ 81.682861][ C0] sched: RT throttling activated [ 81.683633][ T4253] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.973465][ T4548] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 81.983881][ T4548] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 81.993561][ T4548] BTRFS info (device loop1): use zstd compression, level 3 [ 82.000803][ T4548] BTRFS info (device loop1): using free space tree [ 82.007386][ T4548] BTRFS info (device loop1): has skinny extents [ 82.009112][ T4253] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.078183][ T4253] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.174130][ T4253] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.185183][ T4253] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.243040][ T4253] usb 3-1: string descriptor 0 read error: -71 [ 82.249768][ T4253] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.261632][ T4253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.313079][ T4253] usb 3-1: can't set config #1, error -71 [ 82.324218][ T4253] usb 3-1: USB disconnect, device number 2 [ 82.467128][ T4548] BTRFS info (device loop1): enabling ssd optimizations [ 82.731484][ T4607] loop2: detected capacity change from 0 to 8 [ 82.853190][ T4607] SQUASHFS error: zlib decompression failed, data probably corrupt [ 82.893379][ T4607] SQUASHFS error: Failed to read block 0x9b: -5 [ 82.910904][ T4607] SQUASHFS error: Unable to read metadata cache entry [99] [ 82.933410][ T4607] SQUASHFS error: Unable to read inode 0x127 [ 82.961052][ T26] audit: type=1800 audit(1763263462.781:3): pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.104" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 83.291894][ T4616] syz.2.125 uses obsolete (PF_INET,SOCK_PACKET) [ 84.003061][ T4624] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.011202][ T4643] loop1: detected capacity change from 0 to 64 [ 84.198426][ T4647] loop4: detected capacity change from 0 to 512 [ 84.266437][ T4647] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 84.303365][ T4647] EXT4-fs (loop4): inline encryption not supported [ 84.340777][ T4645] loop3: detected capacity change from 0 to 32768 [ 84.349397][ T4647] EXT4-fs (loop4): Test dummy encryption mode enabled [ 84.356608][ T4647] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 84.364431][ T4647] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.395208][ T4647] EXT4-fs (loop4): 1 truncate cleaned up [ 84.409385][ T4647] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 84.444352][ T4645] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.135 (4645) [ 84.474378][ T4645] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 84.484134][ T4645] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 84.493657][ T4645] BTRFS info (device loop3): use zstd compression, level 3 [ 84.500949][ T4645] BTRFS info (device loop3): using free space tree [ 84.509638][ T4645] BTRFS info (device loop3): has skinny extents [ 84.518334][ T4624] usb 1-1: config index 0 descriptor too short (expected 28486, got 100) [ 84.526907][ T4624] usb 1-1: config 15 has too many interfaces: 240, using maximum allowed: 32 [ 84.536413][ T4624] usb 1-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 84.547249][ T4624] usb 1-1: config 15 has 0 interfaces, different from the descriptor's value: 240 [ 84.713411][ T4624] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.727227][ T4624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.781602][ T4624] usb 1-1: Product: syz [ 84.796065][ T4624] usb 1-1: Manufacturer: syz [ 84.801230][ T4624] usb 1-1: SerialNumber: syz [ 84.871848][ T4645] BTRFS info (device loop3): enabling ssd optimizations [ 85.087178][ T4624] usb 1-1: USB disconnect, device number 4 [ 85.434462][ T4710] loop4: detected capacity change from 0 to 512 [ 85.500976][ T4710] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 85.521965][ T4710] EXT4-fs (loop4): inline encryption not supported [ 85.534208][ T4710] EXT4-fs (loop4): Test dummy encryption mode enabled [ 85.541034][ T4710] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 85.548591][ T4710] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.606627][ T4710] EXT4-fs (loop4): 1 truncate cleaned up [ 85.643044][ T4710] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 85.942770][ T4727] loop0: detected capacity change from 0 to 32768 [ 86.016686][ T4739] loop2: detected capacity change from 0 to 2048 [ 86.025308][ T4727] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.157 (4727) [ 86.070959][ T4727] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 86.080012][ T4727] BTRFS info (device loop0): enabling auto defrag [ 86.086536][ T4727] BTRFS info (device loop0): turning on sync discard [ 86.093422][ T4727] BTRFS info (device loop0): force clearing of disk cache [ 86.100592][ T4727] BTRFS info (device loop0): using default commit interval 30s [ 86.108240][ T4727] BTRFS info (device loop0): max_inline at 0 [ 86.114343][ T4727] BTRFS info (device loop0): disabling free space tree [ 86.121215][ T4727] BTRFS info (device loop0): has skinny extents [ 86.170154][ T4739] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 86.208438][ T4739] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 86.252992][ T4739] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 86.293567][ T4739] UDF-fs: Scanning with blocksize 512 failed [ 86.335847][ T4739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.508682][ T4727] BTRFS info (device loop0): enabling ssd optimizations [ 86.516908][ T4727] BTRFS info (device loop0): clearing free space tree [ 86.524346][ T4727] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.534376][ T4727] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.906681][ T4782] loop2: detected capacity change from 0 to 2048 [ 87.010924][ T4787] loop4: detected capacity change from 0 to 64 [ 87.047010][ T4787] hfs: unable to parse mount options [ 88.114606][ T4787] loop4: detected capacity change from 0 to 32768 [ 88.138302][ T4787] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.175 (4787) [ 88.202139][ T4787] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 88.272960][ T4787] BTRFS info (device loop4): using free space tree [ 88.279561][ T4787] BTRFS info (device loop4): has skinny extents [ 89.363148][ T4722] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.583638][ T4787] BTRFS info (device loop4): enabling ssd optimizations [ 89.653252][ T4722] usb 3-1: Using ep0 maxpacket: 32 [ 89.793139][ T4722] usb 3-1: config 0 has no interfaces? [ 89.963215][ T4722] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 89.979165][ T4722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.997813][ T4722] usb 3-1: Product: syz [ 90.012219][ T4722] usb 3-1: Manufacturer: syz [ 90.023093][ T4722] usb 3-1: SerialNumber: syz [ 90.046479][ T4722] usb 3-1: config 0 descriptor?? [ 90.339410][ T4713] usb 3-1: USB disconnect, device number 3 [ 91.775797][ T4893] netlink: 'syz.4.212': attribute type 16 has an invalid length. [ 91.794893][ T4893] netlink: 'syz.4.212': attribute type 17 has an invalid length. [ 91.850793][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.880160][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.909031][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.947999][ T4893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.937736][ T4916] loop4: detected capacity change from 0 to 65536 [ 93.973482][ T4916] ======================================================= [ 93.973482][ T4916] WARNING: The mand mount option has been deprecated and [ 93.973482][ T4916] and is ignored by this kernel. Remove the mand [ 93.973482][ T4916] option from the mount to silence this warning. [ 93.973482][ T4916] ======================================================= [ 94.008435][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.175324][ T4916] XFS (loop4): Mounting V5 Filesystem [ 94.465055][ T4916] XFS (loop4): Ending clean mount [ 94.479005][ T4916] XFS (loop4): Quotacheck needed: Please wait. [ 94.570807][ T4916] XFS (loop4): Quotacheck: Done. [ 94.668634][ T4193] XFS (loop4): Unmounting Filesystem [ 95.748035][ T4946] loop4: detected capacity change from 0 to 512 [ 95.820182][ T4946] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 95.849534][ T4946] EXT4-fs (loop4): inline encryption not supported [ 95.883167][ T4946] EXT4-fs (loop4): Test dummy encryption mode enabled [ 95.890018][ T4946] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 95.929283][ T4946] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.994210][ T4946] EXT4-fs (loop4): 1 truncate cleaned up [ 95.999937][ T4946] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 96.662453][ T4967] lo speed is unknown, defaulting to 1000 [ 96.706555][ T4967] lo speed is unknown, defaulting to 1000 [ 96.769497][ T4967] lo speed is unknown, defaulting to 1000 [ 96.851163][ T4967] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.927334][ T4967] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 97.067884][ T4967] lo speed is unknown, defaulting to 1000 [ 97.106211][ T4967] lo speed is unknown, defaulting to 1000 [ 97.146148][ T4967] lo speed is unknown, defaulting to 1000 [ 97.163815][ T4967] lo speed is unknown, defaulting to 1000 [ 97.176192][ T4967] lo speed is unknown, defaulting to 1000 [ 98.629788][ T4993] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 100.369018][ T5038] loop3: detected capacity change from 0 to 512 [ 100.452146][ T5038] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 100.479965][ T5038] EXT4-fs (loop3): inline encryption not supported [ 100.510415][ T5038] EXT4-fs (loop3): Test dummy encryption mode enabled [ 100.526260][ T5042] loop0: detected capacity change from 0 to 1024 [ 100.543117][ T5038] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 100.589169][ T5038] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.675188][ T5038] EXT4-fs (loop3): 1 truncate cleaned up [ 100.681629][ T5038] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 101.711302][ T5081] loop3: detected capacity change from 0 to 1024 [ 101.840859][ T5081] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.180668][ T5081] syz.3.290 (5081) used greatest stack depth: 19216 bytes left [ 103.923097][ T4298] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.304729][ T4298] usb 4-1: config 0 has no interfaces? [ 104.373433][ T5140] loop2: detected capacity change from 0 to 512 [ 104.447082][ T5140] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 104.481228][ T5140] EXT4-fs (loop2): inline encryption not supported [ 104.488635][ T4298] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.512871][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.513714][ T5140] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.547127][ T5140] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 104.562968][ T4298] usb 4-1: Product: syz [ 104.576116][ T4298] usb 4-1: Manufacturer: syz [ 104.588324][ T4298] usb 4-1: SerialNumber: syz [ 104.588503][ T5140] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.606414][ T4298] usb 4-1: config 0 descriptor?? [ 104.670628][ T5140] EXT4-fs (loop2): 1 truncate cleaned up [ 104.713272][ T5140] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 104.862789][ T4298] usb 4-1: USB disconnect, device number 2 [ 108.451253][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 108.521580][ T5179] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.528929][ T5179] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.026450][ T5183] loop1: detected capacity change from 0 to 32768 [ 109.086631][ T5183] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.330 (5183) [ 109.124437][ T5183] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 109.133952][ T5183] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.143560][ T5183] BTRFS info (device loop1): use zstd compression, level 3 [ 109.150796][ T5183] BTRFS info (device loop1): using free space tree [ 109.157378][ T5183] BTRFS info (device loop1): has skinny extents [ 109.453574][ T5183] BTRFS info (device loop1): enabling ssd optimizations [ 109.894240][ T5237] loop3: detected capacity change from 0 to 64 [ 110.024655][ T5237] hfs: unable to parse mount options [ 110.213642][ T5240] loop2: detected capacity change from 0 to 32768 [ 110.469000][ T5240] XFS (loop2): Mounting V5 Filesystem [ 110.565464][ T5237] loop3: detected capacity change from 0 to 32768 [ 110.576593][ T5264] loop1: detected capacity change from 0 to 764 [ 110.597876][ T5264] Symlink component flag not implemented [ 110.605759][ T5237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.339 (5237) [ 110.623612][ T5264] Symlink component flag not implemented [ 110.629662][ T5264] Symlink component flag not implemented (129) [ 110.642752][ T5240] XFS (loop2): Ending clean mount [ 110.650114][ T5264] Symlink component flag not implemented (6) [ 110.660738][ T5240] XFS (loop2): Quotacheck needed: Please wait. [ 110.705786][ T5237] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 110.714581][ T5237] BTRFS info (device loop3): using free space tree [ 110.721845][ T5237] BTRFS info (device loop3): has skinny extents [ 110.910387][ T5240] XFS (loop2): Quotacheck: Done. [ 111.117288][ T5237] BTRFS info (device loop3): enabling ssd optimizations [ 111.253352][ T4188] XFS (loop2): Unmounting Filesystem [ 111.473055][ T4187] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop3 scanned by udevd (4187) [ 111.922911][ T5241] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.283712][ T5241] usb 2-1: config 0 has no interfaces? [ 112.348573][ T5323] loop2: detected capacity change from 0 to 64 [ 112.413086][ T5323] hfs: unable to parse mount options [ 112.443442][ T5241] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.452532][ T5241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.687190][ T5323] loop2: detected capacity change from 0 to 32768 [ 112.694070][ T5241] usb 2-1: Product: syz [ 112.698265][ T5241] usb 2-1: Manufacturer: syz [ 112.703312][ T5241] usb 2-1: SerialNumber: syz [ 112.720548][ T5241] usb 2-1: config 0 descriptor?? [ 112.986227][ T4298] usb 2-1: USB disconnect, device number 3 [ 113.824288][ T5338] loop4: detected capacity change from 0 to 32768 [ 113.923032][ T5338] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.381 (5338) [ 113.947381][ T5338] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 113.956913][ T5338] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 113.966409][ T5338] BTRFS info (device loop4): use zstd compression, level 3 [ 113.973701][ T5338] BTRFS info (device loop4): using free space tree [ 113.980254][ T5338] BTRFS info (device loop4): has skinny extents [ 114.134184][ T5358] loop3: detected capacity change from 0 to 64 [ 114.213661][ T5358] hfs: unable to parse mount options [ 114.491058][ T5358] loop3: detected capacity change from 0 to 32768 [ 114.504259][ T5338] BTRFS info (device loop4): enabling ssd optimizations [ 114.520143][ T5358] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 114.528897][ T5358] BTRFS info (device loop3): using free space tree [ 114.535480][ T5358] BTRFS info (device loop3): has skinny extents [ 114.725052][ T5358] BTRFS info (device loop3): enabling ssd optimizations [ 115.596822][ T4194] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop3 scanned by udevd (4194) [ 115.763687][ T5430] loop4: detected capacity change from 0 to 512 [ 115.834669][ T5430] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 115.854897][ T5430] EXT4-fs (loop4): inline encryption not supported [ 115.903036][ T5430] EXT4-fs (loop4): Test dummy encryption mode enabled [ 115.933151][ T5430] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 115.982960][ T5430] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.065686][ T5430] EXT4-fs (loop4): 1 truncate cleaned up [ 116.081760][ T5430] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 116.302415][ T5445] loop2: detected capacity change from 0 to 256 [ 116.594130][ T5447] loop4: detected capacity change from 0 to 32768 [ 116.605173][ T5445] exfat: Unknown parameter 'sys_tz' [ 118.875183][ T5476] loop4: detected capacity change from 0 to 16 [ 118.965153][ T5476] erofs: (device loop4): mounted with root inode @ nid 36. [ 118.986012][ T5474] loop2: detected capacity change from 0 to 32768 [ 119.054154][ T5476] overlayfs: missing 'lowerdir' [ 119.616924][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 119.662960][ T5482] device bridge_slave_1 left promiscuous mode [ 119.669374][ T5482] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.709451][ T5482] device bridge_slave_0 left promiscuous mode [ 119.728249][ T5482] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.097102][ T5488] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 120.293955][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 120.442571][ T5504] fuse: Bad value for 'fd' [ 120.757533][ T5510] loop3: detected capacity change from 0 to 32768 [ 120.861251][ T5510] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 120.870057][ T5510] BTRFS info (device loop3): using free space tree [ 120.876753][ T5510] BTRFS info (device loop3): has skinny extents [ 121.055846][ T5510] BTRFS info (device loop3): enabling ssd optimizations [ 122.565984][ T5562] Zero length message leads to an empty skb [ 122.986148][ T5575] overlayfs: failed to resolve './file1': -2 [ 123.612957][ T5244] Bluetooth: hci4: command 0x0405 tx timeout [ 123.808527][ T5600] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 123.928610][ T5600] CIFS mount error: No usable UNC path provided in device string! [ 123.928610][ T5600] [ 123.953628][ T5600] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 124.213008][ T5244] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.580871][ T5244] usb 5-1: config 0 has no interfaces? [ 124.743015][ T5244] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.768437][ T5244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.788301][ T5244] usb 5-1: Product: syz [ 124.792516][ T5244] usb 5-1: Manufacturer: syz [ 124.800113][ T5244] usb 5-1: SerialNumber: syz [ 124.821973][ T5244] usb 5-1: config 0 descriptor?? [ 125.086274][ T5244] usb 5-1: USB disconnect, device number 2 [ 127.173116][ T1337] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.196537][ T5665] loop1: detected capacity change from 0 to 512 [ 127.254571][ T5665] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.327894][ T5665] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.496: inode has both inline data and extents flags [ 127.361718][ T5665] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.496: couldn't read orphan inode 15 (err -117) [ 127.387774][ T5665] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,nojournal_checksum,norecovery,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 127.588758][ T1337] usb 5-1: config 0 has no interfaces? [ 127.803130][ T1337] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.817557][ T1337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.825740][ T4266] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.842901][ T1337] usb 5-1: Product: syz [ 127.853199][ T1337] usb 5-1: Manufacturer: syz [ 127.868253][ T1337] usb 5-1: SerialNumber: syz [ 127.875363][ T1337] usb 5-1: config 0 descriptor?? [ 128.136877][ T1337] usb 5-1: USB disconnect, device number 3 [ 128.263492][ T4266] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 128.277575][ T4266] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 183 [ 128.304539][ T4266] usb 2-1: config 0 has no interface number 1 [ 128.310819][ T4266] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 128.324665][ T4266] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 128.523132][ T4266] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 128.542430][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.551378][ T4266] usb 2-1: Product: syz [ 128.567194][ T4266] usb 2-1: Manufacturer: syz [ 128.571834][ T4266] usb 2-1: SerialNumber: syz [ 128.612098][ T4266] usb 2-1: config 0 descriptor?? [ 128.664787][ T4266] usb-storage 2-1:0.127: USB Mass Storage device detected [ 128.733830][ T4266] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 128.850575][ T4266] usb-storage 2-1:0.0: USB Mass Storage device detected [ 128.880025][ T4266] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 128.964344][ T4266] usb 2-1: USB disconnect, device number 4 [ 131.956449][ T5753] loop2: detected capacity change from 0 to 256 [ 132.106396][ T5753] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 132.171577][ T5753] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 132.735708][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742034][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.852314][ T5777] loop4: detected capacity change from 0 to 512 [ 132.917659][ T5777] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 132.958071][ T5777] EXT4-fs (loop4): inline encryption not supported [ 132.975061][ T5777] EXT4-fs (loop4): Test dummy encryption mode enabled [ 132.992146][ T5777] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 133.010959][ T5777] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.049782][ T5777] EXT4-fs (loop4): 1 truncate cleaned up [ 133.062908][ T5777] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 138.979458][ T5896] loop4: detected capacity change from 0 to 32768 [ 139.143666][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.163434][ T5896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.599 (5896) [ 139.180784][ T5896] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 139.190409][ T5896] BTRFS info (device loop4): using free space tree [ 139.197074][ T5896] BTRFS info (device loop4): has skinny extents [ 139.388919][ T5896] BTRFS info (device loop4): enabling ssd optimizations [ 139.433014][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 139.573067][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.593834][ T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 139.633022][ T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.657703][ T23] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.679315][ T23] usb 3-1: config 1 interface 1 has no altsetting 0 [ 139.873098][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.900591][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.948675][ T23] usb 3-1: Product: syz [ 139.968886][ T23] usb 3-1: Manufacturer: syz [ 139.984070][ T23] usb 3-1: SerialNumber: syz [ 140.363313][ T23] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 140.371728][ T23] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 140.548167][ T23] usb 3-1: USB disconnect, device number 4 [ 140.811200][ T5937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.610'. [ 141.503653][ T5970] syz.0.625 (5970) used greatest stack depth: 17056 bytes left [ 142.326712][ T4203] Bluetooth: hci0: Unknown advertising packet type: 0x6672 [ 142.326793][ T4203] Bluetooth: hci0: Unknown advertising packet type: 0x100 [ 142.335021][ T4203] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 142.342628][ T4203] ================================================================== [ 142.358068][ T4203] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80 [ 142.365921][ T4203] Read of size 1 at addr ffff888075fe1c04 by task kworker/u5:7/4203 [ 142.373910][ T4203] [ 142.376263][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 142.383825][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.393900][ T4203] Workqueue: hci0 hci_rx_work [ 142.398617][ T4203] Call Trace: [ 142.401909][ T4203] [ 142.404857][ T4203] dump_stack_lvl+0x168/0x230 [ 142.409564][ T4203] ? show_regs_print_info+0x20/0x20 [ 142.414787][ T4203] ? load_image+0x3b0/0x3b0 [ 142.419319][ T4203] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 142.424721][ T4203] print_address_description+0x60/0x2d0 [ 142.430292][ T4203] ? hci_le_meta_evt+0x12db/0x3b80 [ 142.435423][ T4203] kasan_report+0xdf/0x130 [ 142.439864][ T4203] ? hci_le_meta_evt+0x12db/0x3b80 [ 142.445000][ T4203] hci_le_meta_evt+0x12db/0x3b80 [ 142.449958][ T4203] ? hci_event_packet+0x2a0/0x12f0 [ 142.455101][ T4203] ? hci_remote_host_features_evt+0x280/0x280 [ 142.461193][ T4203] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 142.466851][ T4203] ? mark_lock+0x94/0x320 [ 142.471210][ T4203] ? mutex_unlock+0x10/0x10 [ 142.475739][ T4203] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 142.481755][ T4203] ? lock_chain_count+0x20/0x20 [ 142.486637][ T4203] ? __rwlock_init+0x140/0x140 [ 142.491424][ T4203] hci_event_packet+0xe05/0x12f0 [ 142.496392][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 142.501622][ T4203] ? rcu_lock_release+0x20/0x20 [ 142.506510][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 142.511739][ T4203] hci_rx_work+0x255/0xa10 [ 142.516190][ T4203] process_one_work+0x863/0x1000 [ 142.521156][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 142.526801][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 142.532121][ T4203] ? _raw_spin_lock_irq+0xab/0xe0 [ 142.537174][ T4203] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 142.542578][ T4203] ? wq_worker_running+0x97/0x170 [ 142.547628][ T4203] worker_thread+0xaa8/0x12a0 [ 142.552337][ T4203] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 142.558254][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 142.563490][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 142.568733][ T4203] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 142.574676][ T4203] kthread+0x436/0x520 [ 142.578775][ T4203] ? rcu_lock_release+0x20/0x20 [ 142.583663][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 142.588282][ T4203] ret_from_fork+0x1f/0x30 [ 142.592745][ T4203] [ 142.595786][ T4203] [ 142.598133][ T4203] Allocated by task 6019: [ 142.602472][ T4203] __kasan_kmalloc+0xb5/0xf0 [ 142.607098][ T4203] __alloc_skb+0x22c/0x750 [ 142.611547][ T4203] vhci_write+0xbc/0x450 [ 142.615807][ T4203] vfs_write+0x712/0xd00 [ 142.620074][ T4203] ksys_write+0x14d/0x250 [ 142.624421][ T4203] do_syscall_64+0x4c/0xa0 [ 142.628863][ T4203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.634791][ T4203] [ 142.637136][ T4203] Last potentially related work creation: [ 142.642859][ T4203] kasan_save_stack+0x35/0x60 [ 142.647556][ T4203] kasan_record_aux_stack+0xb8/0x100 [ 142.652873][ T4203] kvfree_call_rcu+0x10a/0x7c0 [ 142.657676][ T4203] neigh_remove_one+0x4e8/0x5f0 [ 142.662540][ T4203] ___neigh_create+0x468/0x2250 [ 142.667405][ T4203] ip6_finish_output2+0xa01/0x1500 [ 142.672547][ T4203] NF_HOOK+0x15f/0x430 [ 142.676641][ T4203] mld_sendpack+0x713/0xc30 [ 142.681164][ T4203] mld_ifc_work+0x836/0xb40 [ 142.685685][ T4203] process_one_work+0x863/0x1000 [ 142.690649][ T4203] worker_thread+0xaa8/0x12a0 [ 142.695366][ T4203] kthread+0x436/0x520 [ 142.699449][ T4203] ret_from_fork+0x1f/0x30 [ 142.703883][ T4203] [ 142.706233][ T4203] The buggy address belongs to the object at ffff888075fe1800 [ 142.706233][ T4203] which belongs to the cache kmalloc-1k of size 1024 [ 142.720470][ T4203] The buggy address is located 4 bytes to the right of [ 142.720470][ T4203] 1024-byte region [ffff888075fe1800, ffff888075fe1c00) [ 142.734251][ T4203] The buggy address belongs to the page: [ 142.739932][ T4203] page:ffffea0001d7f800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75fe0 [ 142.750105][ T4203] head:ffffea0001d7f800 order:3 compound_mapcount:0 compound_pincount:0 [ 142.758445][ T4203] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 142.766456][ T4203] raw: 00fff00000010200 ffffea000090e000 0000000200000002 ffff888016841dc0 [ 142.775057][ T4203] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 142.783743][ T4203] page dumped because: kasan: bad access detected [ 142.790178][ T4203] page_owner tracks the page as allocated [ 142.795911][ T4203] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4184, ts 69292335758, free_ts 69286607578 [ 142.814426][ T4203] get_page_from_freelist+0x1b77/0x1c60 [ 142.819997][ T4203] __alloc_pages+0x1e1/0x470 [ 142.824627][ T4203] new_slab+0xc0/0x4b0 [ 142.828714][ T4203] ___slab_alloc+0x81e/0xdf0 [ 142.833341][ T4203] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 142.839302][ T4203] __alloc_skb+0x22c/0x750 [ 142.843741][ T4203] inet6_rt_notify+0xdd/0x290 [ 142.848539][ T4203] fib6_add+0x1d3b/0x3d30 [ 142.852931][ T4203] ip6_route_add+0x86/0x130 [ 142.857462][ T4203] addrconf_permanent_addr+0x652/0x980 [ 142.862958][ T4203] addrconf_notify+0x827/0xf00 [ 142.867741][ T4203] raw_notifier_call_chain+0xcb/0x160 [ 142.873134][ T4203] __dev_notify_flags+0x178/0x2d0 [ 142.878174][ T4203] dev_change_flags+0xe3/0x1a0 [ 142.883088][ T4203] do_setlink+0xc01/0x3980 [ 142.887537][ T4203] rtnl_newlink+0x1419/0x17d0 [ 142.892242][ T4203] page last free stack trace: [ 142.896922][ T4203] free_unref_page_prepare+0x637/0x6c0 [ 142.902486][ T4203] free_unref_page+0x94/0x280 [ 142.907182][ T4203] __unfreeze_partials+0x1a5/0x200 [ 142.912312][ T4203] put_cpu_partial+0x12d/0x190 [ 142.917095][ T4203] qlist_free_all+0x35/0x90 [ 142.921712][ T4203] kasan_quarantine_reduce+0x150/0x160 [ 142.927189][ T4203] __kasan_slab_alloc+0x2f/0xd0 [ 142.932064][ T4203] slab_post_alloc_hook+0x4c/0x380 [ 142.937291][ T4203] kmem_cache_alloc_trace+0x103/0x2a0 [ 142.942688][ T4203] ____ip_mc_inc_group+0x2ad/0xac0 [ 142.947823][ T4203] ip_mc_up+0x121/0x2f0 [ 142.952006][ T4203] inetdev_event+0xe02/0x1360 [ 142.956698][ T4203] raw_notifier_call_chain+0xcb/0x160 [ 142.962082][ T4203] __dev_notify_flags+0x178/0x2d0 [ 142.967109][ T4203] dev_change_flags+0xe3/0x1a0 [ 142.971875][ T4203] do_setlink+0xc01/0x3980 [ 142.976301][ T4203] [ 142.978636][ T4203] Memory state around the buggy address: [ 142.984268][ T4203] ffff888075fe1b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 142.992329][ T4203] ffff888075fe1b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 143.000397][ T4203] >ffff888075fe1c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.008457][ T4203] ^ [ 143.012523][ T4203] ffff888075fe1c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.020578][ T4203] ffff888075fe1d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.028636][ T4203] ================================================================== [ 143.036779][ T4203] Disabling lock debugging due to kernel taint [ 143.062878][ T4203] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 143.070205][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:7 Tainted: G B syzkaller #0 [ 143.079155][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.089224][ T4203] Workqueue: hci0 hci_rx_work [ 143.093959][ T4203] Call Trace: [ 143.097244][ T4203] [ 143.100190][ T4203] dump_stack_lvl+0x168/0x230 [ 143.104887][ T4203] ? show_regs_print_info+0x20/0x20 [ 143.110110][ T4203] ? load_image+0x3b0/0x3b0 [ 143.114627][ T4203] panic+0x2c9/0x7f0 [ 143.118551][ T4203] ? bpf_jit_dump+0xd0/0xd0 [ 143.123066][ T4203] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 143.128965][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 143.133824][ T4203] ? hci_le_meta_evt+0x12db/0x3b80 [ 143.138941][ T4203] check_panic_on_warn+0x80/0xa0 [ 143.143879][ T4203] ? hci_le_meta_evt+0x12db/0x3b80 [ 143.149084][ T4203] end_report+0x6d/0xf0 [ 143.153244][ T4203] kasan_report+0x102/0x130 [ 143.157755][ T4203] ? hci_le_meta_evt+0x12db/0x3b80 [ 143.162871][ T4203] hci_le_meta_evt+0x12db/0x3b80 [ 143.167812][ T4203] ? hci_event_packet+0x2a0/0x12f0 [ 143.172930][ T4203] ? hci_remote_host_features_evt+0x280/0x280 [ 143.178993][ T4203] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 143.184629][ T4203] ? mark_lock+0x94/0x320 [ 143.188962][ T4203] ? mutex_unlock+0x10/0x10 [ 143.193466][ T4203] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 143.199454][ T4203] ? lock_chain_count+0x20/0x20 [ 143.204335][ T4203] ? __rwlock_init+0x140/0x140 [ 143.209118][ T4203] hci_event_packet+0xe05/0x12f0 [ 143.214057][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 143.219340][ T4203] ? rcu_lock_release+0x20/0x20 [ 143.224188][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 143.229383][ T4203] hci_rx_work+0x255/0xa10 [ 143.233803][ T4203] process_one_work+0x863/0x1000 [ 143.238740][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 143.244368][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 143.249654][ T4203] ? _raw_spin_lock_irq+0xab/0xe0 [ 143.254674][ T4203] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 143.260048][ T4203] ? wq_worker_running+0x97/0x170 [ 143.265062][ T4203] worker_thread+0xaa8/0x12a0 [ 143.269829][ T4203] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 143.275719][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 143.280917][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 143.286112][ T4203] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 143.292001][ T4203] kthread+0x436/0x520 [ 143.296064][ T4203] ? rcu_lock_release+0x20/0x20 [ 143.300911][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 143.305495][ T4203] ret_from_fork+0x1f/0x30 [ 143.309916][ T4203] [ 143.313294][ T4203] Kernel Offset: disabled [ 143.317636][ T4203] Rebooting in 86400 seconds..