last executing test programs: 1m55.427022469s ago: executing program 1 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) pwrite64(r1, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(0x0, 0x0) process_madvise(r2, &(0x7f0000000600), 0x0, 0x15, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x14) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x15) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x4) munmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000) 1m52.705681046s ago: executing program 1 (id=172): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, r4, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000cc0)=ANY=[], 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "a11d00", 0x44, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x6488, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0xa0}, 0x1, {0x4c289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1, 0x4}, 0x2, {0x200004, 0x2, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) 1m52.428318263s ago: executing program 1 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/netfilter/nf_conntrack_helper\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x6b8, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x6b8, @loopback}, 0x10) accept(r1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="0300002008010105007e00140500"/32, 0x20, 0x0, 0x0, 0x0) 1m52.160534189s ago: executing program 1 (id=176): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_xfrm(r0, 0x0, 0x20040014) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='wg0\x00', 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg', 0x3) syz_usb_disconnect(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'team0\x00', &(0x7f0000000100)=@ethtool_modinfo={0x42, 0x4, 0x4}}) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 1m50.533219749s ago: executing program 1 (id=190): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r0, 0x0, 0x0, 0x400001) timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000000)={0xa000, {{0xa, 0x4e23, 0x73a6425d, @mcast1, 0x60ebdd66}}, {{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xda0}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) r6 = socket(0x11, 0x2, 0x0) setsockopt(r6, 0x107, 0x1, &(0x7f0000000000)="110000000000060080010061cc000000", 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000110001002fbd700000dcdf2500000000", @ANYRES32=r5, @ANYBLOB="5738fdf53f21d0c5999aaacf3c0da800a65a0200"], 0x20}}, 0x2000e844) 1m49.674652961s ago: executing program 1 (id=195): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f0000000380)=@phonet, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)=""/203}, {&(0x7f0000000840)=""/249}], 0x0, &(0x7f0000000980)=""/55}, 0x1}], 0x40001d5, 0x18103, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 1m34.562369533s ago: executing program 32 (id=195): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f0000000380)=@phonet, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)=""/203}, {&(0x7f0000000840)=""/249}], 0x0, &(0x7f0000000980)=""/55}, 0x1}], 0x40001d5, 0x18103, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 1m31.260943574s ago: executing program 2 (id=277): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0x40, 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000050)={@private0, 0x40, 0x2}) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private0}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) close(0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @private0, {[], {{0x4e22, 0x4e23, 0x7fffffff, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}}, 0x0) 1m30.382533735s ago: executing program 2 (id=272): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 1m29.778217731s ago: executing program 2 (id=273): socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) 1m28.025857373s ago: executing program 2 (id=278): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000700)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x500]}}]}]}]}, 0x38}}, 0x0) 1m26.721830926s ago: executing program 2 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1m23.524147614s ago: executing program 2 (id=291): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x301400) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) pread64(r1, &(0x7f0000000340)=""/69, 0x45, 0x3) 1m9.234530866s ago: executing program 4 (id=337): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1m7.330833783s ago: executing program 33 (id=291): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x301400) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) pread64(r1, &(0x7f0000000340)=""/69, 0x45, 0x3) 1m7.298079964s ago: executing program 4 (id=346): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r0, 0x0, 0x317e, 0x4) write$tcp_mem(r1, &(0x7f0000000300)={0x3476, 0x20, 0xce, 0x20, 0x2}, 0x48) 1m4.953971771s ago: executing program 4 (id=352): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', r3, 0x2b, 0x6, 0x6, 0xc5, 0x40, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x48, 0x0, 0xffffffff, 0x800}}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xfa, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1m3.660551513s ago: executing program 4 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x50) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="0200"], 0x24, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) read$FUSE(r1, &(0x7f0000002b80)={0x2020}, 0x2020) 1m3.40239864s ago: executing program 4 (id=358): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x1000, &(0x7f0000000040)={0x0, 0x2, 0x20000}, 0x20) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4073, &(0x7f0000000400)="$eJzszzFKA1EQBuA/iWsWWQiCVoIYLOxk7az2FuklZ7CyUHFvYikewHt4B0s9QiTKBtfYBoJ8XzHM7M/sey9st4+uKVefBkle5s/7SU6maev6O9z5Cke97foixV45TJXkev3ns6eN3h0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANg24x/9sJfcJWlfb866uVyW3WWZH6W9bXJZJeXhJHkYpWiOBzlIpud/nDFK3pIMkrwnmU029xwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D+56k3j33HVNffrq4+naZtilS4Wn+zOMQEAIAwDwYwYxCQmg4V2vzPw346zJ7lv+woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcyAAAAAML8rfNoPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcFAAD//xGEFjw=") r3 = syz_open_procfs(r2, &(0x7f0000000240)='coredump_filter\x00') write$binfmt_format(r3, &(0x7f00000000c0)='0\x00', 0x2) 1m3.186335595s ago: executing program 4 (id=361): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 1m2.97775341s ago: executing program 34 (id=361): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 16.063051415s ago: executing program 3 (id=502): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000003d00)={0x9, 0xe1c8, 0xffffffffffffff7f, 0x1000, 0x0, 0xf5, 0x40, 0xb08}, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 13.129409477s ago: executing program 7 (id=515): socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x20000007, &(0x7f0000006680)) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) unshare(0x28000600) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(0x0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) setpgid(0x0, 0x0) 11.960241186s ago: executing program 7 (id=520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r2) syz_emit_ethernet(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000100)='map_files\x00') fchdir(r3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f0000000900)=ANY=[], 0x26, 0x7fb, &(0x7f0000001700)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x1c0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 11.349806131s ago: executing program 3 (id=524): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x66a42, 0x16a) socket$netlink(0x10, 0x3, 0x322a8c014aeafd8d) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) mknod$loop(0x0, 0x6000, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) listxattr(&(0x7f00000003c0)='./trace\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x10002) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x1) 10.97853161s ago: executing program 5 (id=526): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x2, 0x1}]}}, 0x0, 0x26}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 10.966127631s ago: executing program 7 (id=527): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 10.776157435s ago: executing program 5 (id=528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) listen(0xffffffffffffffff, 0xfff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x91, 0x20000000) 8.95053441s ago: executing program 3 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x48845) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0xfffffffffffffc01, 0x0) tee(r2, r4, 0x60000000000, 0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8.94976304s ago: executing program 5 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r0) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)='TESTUEID123456789012345678901234\x00', 0x21}], 0x1}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x38, 0x1401, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000b00)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000c00)={0x2, 0x4e20, @loopback}, 0x10) accept(r3, 0x0, 0x0) 8.94947423s ago: executing program 6 (id=530): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) landlock_restrict_self(r1, 0xa) 8.603034778s ago: executing program 7 (id=532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'R'}]}, 0x24}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x360809c, &(0x7f0000000000)=ANY=[], 0x1, 0x62d, &(0x7f0000000240)="$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") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 8.325628966s ago: executing program 5 (id=533): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000003d00)={0x9, 0xe1c8, 0xffffffffffffff7f, 0x1000, 0x0, 0xf5, 0x40, 0xb08}, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 6.665938526s ago: executing program 6 (id=534): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20e400, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 6.663693126s ago: executing program 7 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000180)=ANY=[], 0x24c4}, 0x1, 0x0, 0x0, 0x8}, 0xc0) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 6.348826714s ago: executing program 0 (id=536): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0xb, 0x0, 0x0, 0x0, @str='&\xe58\x83\xa8\xd7\xae'}]}]}, 0x2c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0xffffffffffffff90, 0x1, {{0xea, 0x2, 0xfffd, 0xfffd, 0x9, 0x5}, {0x1a, 0x0, 0x0, 0x401, 0x8001, 0x401400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x44080) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000f2101400042bbd7000fcdb5821496e144508fe0001"], 0x18}, 0x1, 0x0, 0x0, 0x200088c1}, 0x800) r5 = fanotify_init(0x10, 0x400) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r5) 6.348568934s ago: executing program 5 (id=537): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.348406314s ago: executing program 3 (id=538): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, 0x0, 0x40) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8917, &(0x7f0000000640)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r2, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x0, 0x200000, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2, 0x8) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x800) close(r0) execve(0x0, 0x0, 0x0) 6.211358358s ago: executing program 6 (id=540): r0 = getpid() syz_pidfd_open(r0, 0x0) unshare(0x20000400) r1 = gettid() r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2}, 0x0, &(0x7f0000000200)={0x1e, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.521745145s ago: executing program 0 (id=541): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffff8c05, 0x7, 0x6, 0x9, 0xfffffffa}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="0503222ed3fc1400fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.342318909s ago: executing program 3 (id=542): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r2, &(0x7f0000001180)=""/4096, 0x1000) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x4, 0x9, 0x10000, 0x9, 0x0, "67bd7d849dd889bdab58d7331b936fe22c6251", 0x6, 0x4}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000180)='2\x00', 0x2) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfc}]}, 0x10) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getchain={0x5c, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r5, {0xe, 0x1}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xcb}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xffff8000}]}, 0x5c}}, 0x4) 4.825718911s ago: executing program 7 (id=543): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getpid() syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x3, 0x9, 0x2, 0x8a56}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 4.825080152s ago: executing program 0 (id=554): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.087472594s ago: executing program 0 (id=545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r0) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)='TESTUEID123456789012345678901234\x00', 0x21}], 0x1}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x38, 0x1401, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000b00)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000c00)={0x2, 0x4e20, @loopback}, 0x10) accept(r3, 0x0, 0x0) 2.996704737s ago: executing program 6 (id=546): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r0, 0x0, 0x0, 0x6d, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.44839261s ago: executing program 5 (id=547): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r2) syz_emit_ethernet(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000100)='map_files\x00') fchdir(r3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f0000000900)=ANY=[], 0x26, 0x7fb, &(0x7f0000001700)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x1c0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 2.392033051s ago: executing program 6 (id=548): r0 = syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x7991e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x37, 0x62, 0x64, 0x33, 0x61, 0x30, 0x65, 0x34, 0x26, 0x61, 0x39, 0x35, 0x64, 0x31, 0x34, 0x37]}, &(0x7f0000000180)={0x0, "4a513fea0cd0945aaf59654c4001f834dcce5ed789f26b6de8bd690bef90af09d4aae4bf3508fe12418ecf591ea088cf3b22b037ebd31b9614b72403d6c9e9e7", 0x16}, 0x48, 0xfffffffffffffff8) keyctl$revoke(0x3, r4) mknod$loop(0x0, 0x8000, 0x0) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.099828659s ago: executing program 0 (id=549): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000f00)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000001100)="0200"/128, 0x80) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) write(r3, &(0x7f0000001500), 0x0) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) 1.824904945s ago: executing program 6 (id=550): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 1.672395509s ago: executing program 0 (id=551): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x10}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x80000001, @empty, 0x5}}, 0x10001fc, 0x7, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 0s ago: executing program 3 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 59.725998][ T4174] cgroup: Unknown subsys name 'net' [ 59.855431][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.212111][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.991881][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 63.057037][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 63.102030][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.135941][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 63.150421][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.157509][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.166637][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.202946][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.210299][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.217933][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.225540][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.277728][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.284961][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.293063][ T4199] device bridge_slave_0 entered promiscuous mode [ 63.322906][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.333486][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.341556][ T4199] device bridge_slave_1 entered promiscuous mode [ 63.350649][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.394554][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.427581][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.434813][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.443327][ T4195] device bridge_slave_0 entered promiscuous mode [ 63.457201][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.464768][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.473468][ T4195] device bridge_slave_1 entered promiscuous mode [ 63.484084][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.491348][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.499724][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.509415][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.526364][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.563190][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.570408][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.578147][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.588463][ T4187] team0: Port device team_slave_0 added [ 63.596661][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.619375][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.626451][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.634844][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.651088][ T4187] team0: Port device team_slave_1 added [ 63.664989][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.674288][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.681431][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.689520][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.699460][ T4199] team0: Port device team_slave_0 added [ 63.713538][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.742888][ T4199] team0: Port device team_slave_1 added [ 63.751616][ T4195] team0: Port device team_slave_0 added [ 63.764251][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.798596][ T4195] team0: Port device team_slave_1 added [ 63.805158][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.812212][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.838945][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.852471][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.863718][ T4188] team0: Port device team_slave_0 added [ 63.882512][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.889574][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.915789][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.928584][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.945883][ T4188] team0: Port device team_slave_1 added [ 63.952308][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.959424][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.985374][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.030874][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.037857][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.064466][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.076660][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.084095][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.110290][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.125069][ T4189] team0: Port device team_slave_0 added [ 64.147294][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.154386][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.180535][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.193331][ T4189] team0: Port device team_slave_1 added [ 64.199849][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.206811][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.233435][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.256427][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.263270][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.280995][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.287978][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.314163][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.346974][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.354141][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.380330][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.417163][ T4195] device hsr_slave_0 entered promiscuous mode [ 64.424200][ T4195] device hsr_slave_1 entered promiscuous mode [ 64.431437][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.439681][ T4195] Cannot create hsr debugfs directory [ 64.452223][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.459347][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.485472][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.525836][ T4199] device hsr_slave_0 entered promiscuous mode [ 64.532728][ T4199] device hsr_slave_1 entered promiscuous mode [ 64.539688][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.547263][ T4199] Cannot create hsr debugfs directory [ 64.556556][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.563596][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.570486][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.578056][ T4188] Cannot create hsr debugfs directory [ 64.686868][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.693598][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.700229][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.707776][ T4189] Cannot create hsr debugfs directory [ 64.714337][ T4176] Bluetooth: hci3: command 0x0409 tx timeout [ 64.729212][ T4176] Bluetooth: hci4: command 0x0409 tx timeout [ 64.735283][ T4176] Bluetooth: hci2: command 0x0409 tx timeout [ 64.741965][ T4176] Bluetooth: hci0: command 0x0409 tx timeout [ 64.748058][ T4176] Bluetooth: hci1: command 0x0409 tx timeout [ 64.954508][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.974847][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.984473][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.998047][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.058189][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.067256][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.079987][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.089906][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.145392][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.172402][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.187273][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.200225][ T4199] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.210778][ T4199] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.224871][ T4199] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.234883][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.251688][ T4199] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.271657][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.281018][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.290231][ T1417] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.297448][ T1417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.306155][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.347308][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.357941][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.367248][ T1417] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.374483][ T1417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.383739][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.401387][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.417278][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.430315][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.444723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.454909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.463762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.472860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.481530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.490801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.500046][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.510966][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.527494][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.536545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.547505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.568199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.577589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.588852][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.595914][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.624135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.632806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.642420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.651718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.660702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.669083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.677643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.686368][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.693500][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.701478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.714863][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.745571][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.778171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.800857][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.811226][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.823783][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.837382][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.851593][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.866921][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.879288][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.894092][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.912642][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.921831][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.937355][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.947070][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.957371][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.967022][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.975852][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.015713][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.037395][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.058678][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.068003][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.104668][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.123135][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.134193][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.145601][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.157665][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.170006][ T1417] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.177080][ T1417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.190079][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.203729][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.213349][ T1417] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.220474][ T1417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.252339][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.261028][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.269591][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.277337][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.286874][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.299350][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.310446][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.336369][ T4199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.346950][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.360023][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.370296][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.378712][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.388636][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.401972][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.410397][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.418676][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.427097][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.435696][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.443205][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.452291][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.461349][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.500630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.515893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.526336][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.533465][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.547729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.558020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.568577][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.575719][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.583468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.593422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.602786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.611656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.622974][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.663489][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.679720][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.700591][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.715466][ T4187] device veth0_vlan entered promiscuous mode [ 66.735117][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.749324][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.757081][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.779956][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.789721][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 66.795688][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.804007][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 66.810519][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 66.829186][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 66.836061][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.846779][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 66.853703][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.880253][ T4187] device veth1_vlan entered promiscuous mode [ 66.895227][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.905391][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.913598][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.922905][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.932126][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.940918][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.949461][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.957967][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.967866][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.976520][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.984798][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.992809][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.002817][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.015607][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.025587][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.058329][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.105424][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.120972][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.129993][ T1417] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.137071][ T1417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.145353][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.154491][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.163306][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.172051][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.180725][ T1417] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.187820][ T1417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.231877][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.246278][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.255968][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.265123][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.276049][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.285816][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.294776][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.303680][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.313957][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.322826][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.335112][ T4187] device veth0_macvtap entered promiscuous mode [ 67.353037][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.363491][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.372706][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.386861][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.400062][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.425754][ T4187] device veth1_macvtap entered promiscuous mode [ 67.432905][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.441817][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.452182][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.461518][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.470558][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.486631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.494290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.511517][ T4195] device veth0_vlan entered promiscuous mode [ 67.549695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.561447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.575660][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.597765][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.610322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.619253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.627066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.635706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.644731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.654421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.663929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.672108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.681621][ T4199] device veth0_vlan entered promiscuous mode [ 67.695094][ T4195] device veth1_vlan entered promiscuous mode [ 67.704122][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.732623][ T4199] device veth1_vlan entered promiscuous mode [ 67.745293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.755339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.769666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.778477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.824649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.833740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.843524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.852905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.861144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.869865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.877294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.886551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.894553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.905383][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.914796][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.923911][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.932890][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.943090][ T4188] device veth0_vlan entered promiscuous mode [ 67.952180][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.964897][ T4195] device veth0_macvtap entered promiscuous mode [ 67.986972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.995638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.007928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.017972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.034455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.044725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.056077][ T4195] device veth1_macvtap entered promiscuous mode [ 68.067875][ T4188] device veth1_vlan entered promiscuous mode [ 68.088152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.097162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.107389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.116436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.135457][ T4199] device veth0_macvtap entered promiscuous mode [ 68.148148][ T4199] device veth1_macvtap entered promiscuous mode [ 68.178409][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.191264][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.202446][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.225075][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.236108][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.246421][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.258085][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.270334][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.278240][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.288594][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.298597][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.307292][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.317791][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.327460][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.337330][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.346367][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.357981][ T4189] device veth0_vlan entered promiscuous mode [ 68.380942][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.400119][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.411643][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.419955][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.431377][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.441461][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.452274][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.463682][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.473308][ T4189] device veth1_vlan entered promiscuous mode [ 68.488481][ T4188] device veth0_macvtap entered promiscuous mode [ 68.501068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.510278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.519436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.528079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.537234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.547452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.556356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.566850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.578369][ T4199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.587229][ T4199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.596275][ T4199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.605372][ T4199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.618536][ T4188] device veth1_macvtap entered promiscuous mode [ 68.645258][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.654475][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.664018][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.673606][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.706791][ T1417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.722450][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.734220][ T1417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.746045][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.756098][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.767896][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.777827][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.790247][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.801840][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.829134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.837250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.845855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.855388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.864144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.873095][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 68.879520][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 68.893802][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 68.900066][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 68.906931][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 68.925444][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.936653][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.948556][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.959752][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.969694][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.980265][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.991552][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.999629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.008771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.017248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.028533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.058411][ T4189] device veth0_macvtap entered promiscuous mode [ 69.070430][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.080816][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.089772][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.098487][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.132366][ T1417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.140847][ T4189] device veth1_macvtap entered promiscuous mode [ 69.144990][ T1417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.155667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.166086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.174801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.215696][ T1417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.224341][ T1417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.259553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.288080][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.301086][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.311325][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.322326][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.332673][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.343386][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.354081][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.366498][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.382950][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.403413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.418996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.450891][ T1417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.454063][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.458774][ T1417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.496191][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.512495][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.523283][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.533165][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.544247][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.554177][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.564631][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.576211][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.602582][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.614947][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.623862][ T1417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.634817][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.644830][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.649366][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.654486][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.671152][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.680827][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.703420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.727741][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.746374][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.769327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.821466][ T1417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.863380][ T1417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.922011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.930502][ T1417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.938378][ T1417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.968753][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.981025][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.991706][ T4271] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.022408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.040526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.058166][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.078434][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.100672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.220847][ T4277] device syzkaller0 entered promiscuous mode [ 70.266000][ T4282] loop1: detected capacity change from 0 to 1024 [ 70.324897][ T4282] EXT4-fs (loop1): Ignoring removed bh option [ 70.417260][ T4282] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,dioread_lock,stripe=0x0000000000000005,nolazytime,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,barrier=0x0000000000000004,grpquota,bh,init_itable,. Quota mode: writeback. [ 70.511291][ T4289] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 70.531757][ T4282] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.561350][ T4229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.589214][ T4262] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.856983][ T4297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.869867][ T4229] usb 5-1: Using ep0 maxpacket: 16 [ 70.949813][ T4176] Bluetooth: hci4: command 0x0419 tx timeout [ 70.956158][ T4176] Bluetooth: hci3: command 0x0419 tx timeout [ 70.967814][ T4262] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 70.989966][ T4262] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 71.010198][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 71.025447][ T4262] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 71.038172][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.055421][ T4176] Bluetooth: hci1: command 0x0419 tx timeout [ 71.079021][ T4176] Bluetooth: hci0: command 0x0419 tx timeout [ 71.087680][ T4176] Bluetooth: hci2: command 0x0419 tx timeout [ 71.094439][ T4279] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.114217][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.120796][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.199610][ T4229] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 71.225623][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.253261][ T4229] usb 5-1: Product: syz [ 71.262196][ T4229] usb 5-1: Manufacturer: syz [ 71.276062][ T4229] usb 5-1: SerialNumber: syz [ 71.310678][ T4229] usb 5-1: config 0 descriptor?? [ 71.375305][ T4229] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 71.388438][ T4229] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 71.421737][ T23] usb 4-1: USB disconnect, device number 2 [ 72.059001][ T4229] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 72.069674][ T4176] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.329912][ T4176] usb 3-1: Using ep0 maxpacket: 8 [ 72.489048][ T4176] usb 3-1: config 0 has no interfaces? [ 72.494774][ T4176] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.509130][ T4176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.541070][ T4176] usb 3-1: config 0 descriptor?? [ 72.688985][ T4229] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 73.305922][ T4229] em28xx 5-1:0.0: board has no eeprom [ 73.527418][ T4234] usb 3-1: USB disconnect, device number 2 [ 73.610128][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.815458][ T4229] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 73.861555][ T4229] em28xx 5-1:0.0: dvb set to bulk mode. [ 75.014815][ T4338] xt_CONNSECMARK: invalid mode: 66 [ 75.378797][ C1] sched: RT throttling activated [ 75.424452][ T4229] usb 5-1: USB disconnect, device number 2 [ 75.491971][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 75.652336][ T1107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.699829][ T4229] em28xx 5-1:0.0: Disconnecting em28xx [ 75.707040][ T2175] em28xx 5-1:0.0: Binding DVB extension [ 75.760968][ T2175] em28xx 5-1:0.0: Registering input extension [ 75.767498][ T4229] em28xx 5-1:0.0: Closing input extension [ 75.833432][ T4229] em28xx 5-1:0.0: Freeing device [ 75.839341][ T4347] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.859210][ T4349] netlink: 252 bytes leftover after parsing attributes in process `syz.2.25'. [ 75.915387][ T1107] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 75.934320][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.960889][ T1107] usb 2-1: Product: syz [ 75.969931][ T1107] usb 2-1: Manufacturer: syz [ 75.974581][ T1107] usb 2-1: SerialNumber: syz [ 76.059158][ T1107] usb 2-1: can't set config #1, error -71 [ 76.078930][ T1107] usb 2-1: USB disconnect, device number 2 [ 76.216036][ T4359] syz.3.27 uses obsolete (PF_INET,SOCK_PACKET) [ 76.377107][ T4342] loop0: detected capacity change from 0 to 32768 [ 76.416114][ T4342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.22 (4342) [ 76.478507][ T4342] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 76.520838][ T4342] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 76.547465][ T4342] BTRFS info (device loop0): trying to use backup root at mount time [ 76.572397][ T4342] BTRFS info (device loop0): setting nodatasum [ 76.585097][ T4342] BTRFS info (device loop0): enabling ssd optimizations [ 76.595997][ T4342] BTRFS info (device loop0): using spread ssd allocation scheme [ 76.608298][ T4342] BTRFS info (device loop0): turning on flush-on-commit [ 76.623541][ T4342] BTRFS info (device loop0): force zlib compression, level 3 [ 76.640521][ T4342] BTRFS info (device loop0): using free space tree [ 76.682400][ T4342] BTRFS info (device loop0): has skinny extents [ 77.783812][ T4437] loop2: detected capacity change from 0 to 128 [ 77.834931][ T4438] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.007071][ T4446] attempt to access beyond end of device [ 78.007071][ T4446] loop2: rw=2049, want=329, limit=128 [ 78.351954][ T3065] attempt to access beyond end of device [ 78.351954][ T3065] loop2: rw=1, want=151, limit=128 [ 78.723192][ T3065] Buffer I/O error on dev loop2, logical block 150, lost async page write [ 79.380067][ T4469] loop2: detected capacity change from 0 to 7 [ 79.424897][ T4301] Dev loop2: unable to read RDB block 7 [ 79.457137][ T4301] loop2: unable to read partition table [ 79.504947][ T4301] loop2: partition table beyond EOD, truncated [ 79.549214][ T4469] Dev loop2: unable to read RDB block 7 [ 79.565747][ T4469] loop2: unable to read partition table [ 79.579040][ T4469] loop2: partition table beyond EOD, truncated [ 79.608225][ T4469] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 81.292845][ T4503] loop4: detected capacity change from 0 to 512 [ 81.359072][ T4503] ======================================================= [ 81.359072][ T4503] WARNING: The mand mount option has been deprecated and [ 81.359072][ T4503] and is ignored by this kernel. Remove the mand [ 81.359072][ T4503] option from the mount to silence this warning. [ 81.359072][ T4503] ======================================================= [ 81.574213][ T4512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 81.738406][ T4503] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.749769][ T4503] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.766592][ T4531] ODEBUG: Out of memory. ODEBUG disabled [ 84.230216][ T4537] device syzkaller0 entered promiscuous mode [ 84.256220][ T4537] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 85.768260][ T4541] smpboot: CPU 1 is now offline [ 86.323462][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 86.414770][ T4562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.426716][ T4567] loop1: detected capacity change from 0 to 512 [ 86.585535][ T7] cfg80211: failed to load regulatory.db [ 87.568532][ T4567] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000007,errors=continue,errors=remount-ro,. Quota mode: none. [ 87.756681][ T4567] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #12: comm syz.1.71: corrupted xattr block 8 [ 87.807055][ T4562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.860379][ T4567] EXT4-fs (loop1): Remounting filesystem read-only [ 88.137252][ T4586] binder: BINDER_SET_CONTEXT_MGR already set [ 88.217423][ T4586] binder: 4585:4586 ioctl 4018620d 2000000003c0 returned -16 [ 88.521909][ T4598] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 88.664039][ T4598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.463107][ T4598] loop3: detected capacity change from 0 to 1024 [ 90.584786][ T4598] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.78: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.655323][ T4598] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 90.691520][ T4598] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.78: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.711843][ T4581] loop0: detected capacity change from 0 to 32768 [ 90.772669][ T4581] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.65 (4581) [ 90.803816][ T4598] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 90.884100][ T4598] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.78: Failed to acquire dquot type 0 [ 90.943970][ T4581] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 90.966249][ T4598] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 91.011473][ T4581] BTRFS info (device loop0): using free space tree [ 91.023786][ T4598] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.78: mark_inode_dirty error [ 91.061660][ T4581] BTRFS info (device loop0): has skinny extents [ 91.077820][ T4598] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 91.148486][ T4598] EXT4-fs (loop3): 1 orphan inode deleted [ 91.205615][ T4598] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,noblock_validity,nolazytime,max_batch_time=0x0000000000000007,nodiscard,nouid32,noauto_da_alloc,,errors=continue. Quota mode: none. [ 91.337029][ T4581] BTRFS error (device loop0): open_ctree failed: -12 [ 91.346269][ T3065] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.430992][ T3065] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 91.491653][ T3065] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 91.615361][ T1183] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.830394][ T1183] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 92.126299][ T1183] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 92.178617][ T4641] device geneve1 entered promiscuous mode [ 92.194316][ T4188] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 92.286653][ T4188] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 92.377623][ T4188] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 92.615143][ T4646] loop2: detected capacity change from 0 to 512 [ 92.705096][ T4646] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 93.029822][ T4661] loop3: detected capacity change from 0 to 16 [ 94.058721][ T4661] erofs: (device loop3): erofs_read_superblock: blkszbits 10 isn't supported on this platform [ 94.074402][ T4646] EXT4-fs (loop2): group descriptors corrupted! [ 94.113971][ T4658] device syzkaller0 entered promiscuous mode [ 94.382495][ T4667] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.723566][ T4671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 94.745545][ T4684] bridge0: port 3(syz_tun) entered blocking state [ 94.791875][ T4684] bridge0: port 3(syz_tun) entered disabled state [ 94.900326][ T4684] device syz_tun entered promiscuous mode [ 95.046036][ T4684] bridge0: port 3(syz_tun) entered blocking state [ 95.052842][ T4684] bridge0: port 3(syz_tun) entered forwarding state [ 95.284795][ T4696] smc: net device lo applied user defined pnetid SYZ0 [ 96.250280][ T4709] Cannot find add_set index 0 as target [ 96.988080][ T26] audit: type=1804 audit(1785864717.245:2): pid=4712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.101" name=656E20726574726E736D74202020756964202074696D656F757420696E6F646520202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020200A dev="ramfs" ino=34858 res=1 errno=0 [ 97.274175][ T26] audit: type=1804 audit(1785864717.305:3): pid=4718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.101" name=656E20726574726E736D74202020756964202074696D656F757420696E6F646520202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020200A dev="ramfs" ino=34858 res=1 errno=0 [ 98.709094][ T4743] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 98.735401][ T4743] CIFS: Attempting to mount \\127.0.0.1\share [ 98.744236][ T4743] CIFS: VFS: Error connecting to socket. Aborting operation. [ 98.751747][ T4743] CIFS: VFS: cifs_mount failed w/return code = -111 [ 99.282429][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 99.357087][ T4751] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.372298][ T4747] device bridge_slave_1 left promiscuous mode [ 99.415777][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.076948][ T4747] device bridge_slave_0 left promiscuous mode [ 100.112725][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.629476][ T4760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 100.674625][ T4775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.116'. [ 100.687974][ T4760] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.697097][ T4760] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.705917][ T4760] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.714790][ T4760] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.874267][ T4763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 100.932819][ T4763] Zero length message leads to an empty skb [ 101.125228][ T4784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 101.702831][ T4800] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 102.202561][ T4808] loop4: detected capacity change from 0 to 256 [ 102.302594][ T4808] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 102.558952][ T4808] attempt to access beyond end of device [ 102.558952][ T4808] loop4: rw=524288, want=408, limit=256 [ 102.610630][ T26] audit: type=1326 audit(1785864722.875:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.0.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f745120a019 code=0x0 [ 102.737179][ T4808] attempt to access beyond end of device [ 102.737179][ T4808] loop4: rw=524288, want=664, limit=256 [ 102.841750][ T4808] attempt to access beyond end of device [ 102.841750][ T4808] loop4: rw=0, want=288, limit=256 [ 102.882044][ T4826] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.912318][ T26] audit: type=1800 audit(1785864723.175:5): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.126" name="file1" dev="loop4" ino=1048591 res=0 errno=0 [ 103.000870][ T4827] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.539256][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 104.041066][ T4851] TC_ACT_REPEAT abuse ? [ 105.189858][ C0] TC_ACT_REPEAT abuse ? [ 105.201576][ T4857] netlink: 'syz.4.137': attribute type 27 has an invalid length. [ 107.898431][ T4857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.948050][ T4857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.039919][ T4176] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 108.400290][ T4176] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 108.413886][ T4176] usb 4-1: config 179 has no interface number 0 [ 108.421303][ T4176] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 108.435815][ T4176] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 108.448515][ T4176] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 12336, setting to 8 [ 108.463400][ T4176] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 108.477301][ T4176] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 108.491015][ T4176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.519120][ T4887] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.541954][ T4176] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 108.562782][ T4176] xpad: probe of 4-1:179.65 failed with error -5 [ 108.686948][ T4857] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.700820][ T4857] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.712249][ T4857] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.723724][ T4857] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.794080][ T4176] usb 4-1: USB disconnect, device number 3 [ 108.898672][ T4876] netlink: 798 bytes leftover after parsing attributes in process `syz.2.143'. [ 110.816598][ T4910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.155'. [ 110.963969][ T4916] loop2: detected capacity change from 0 to 512 [ 111.082847][ T4916] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 111.137458][ T4916] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.163298][ T4924] loop4: detected capacity change from 0 to 512 [ 111.203366][ T4916] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.248429][ T4951] device syzkaller0 entered promiscuous mode [ 112.804344][ T5008] crypto_alloc_aead failed rc=-2 [ 112.911913][ T5024] netlink: 'syz.0.169': attribute type 13 has an invalid length. [ 113.003630][ T5024] netlink: 'syz.0.169': attribute type 17 has an invalid length. [ 113.267717][ T5024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.486508][ T5055] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 114.546706][ T5055] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 115.162026][ T5080] kvm: pic: non byte write [ 115.978217][ T5097] using random self ethernet address [ 116.030761][ T5097] using random host ethernet address [ 116.082286][ T5100] using random self ethernet address [ 116.111974][ T5100] using random host ethernet address [ 116.172336][ T5098] bond0: (slave bond_slave_1): Releasing backup interface [ 116.525298][ T5108] binder: BINDER_SET_CONTEXT_MGR already set [ 116.575210][ T5108] binder: 5104:5108 ioctl 4018620d 0 returned -16 [ 116.987315][ T5123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 117.063036][ T5125] Illegal XDP return value 511456316, expect packet loss! [ 117.135617][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 117.307142][ T5130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.202'. [ 117.442940][ T5137] HTB: quantum of class 80020008 is small. Consider r2q change. [ 117.514262][ T5138] device syzkaller0 entered promiscuous mode [ 117.905783][ T26] audit: type=1804 audit(1785864738.165:6): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.208" name="/newroot/40/file0" dev="fuse" ino=1 res=1 errno=0 [ 118.197578][ T5167] loop4: detected capacity change from 0 to 164 [ 118.482503][ T4990] tipc: Subscription rejected, illegal request [ 118.663192][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.859882][ T4547] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.901374][ T5185] loop3: detected capacity change from 0 to 256 [ 118.939048][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 119.059055][ T7] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.107555][ T7] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.121815][ T4547] usb 1-1: Using ep0 maxpacket: 16 [ 119.157496][ T7] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 119.225363][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.252497][ T4547] usb 1-1: config 0 interface 0 has no altsetting 0 [ 119.267978][ T7] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 119.284073][ T4547] usb 1-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.00 [ 119.321361][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.335099][ T4547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.379468][ T7] usb 5-1: config 0 descriptor?? [ 119.391580][ T4547] usb 1-1: config 0 descriptor?? [ 119.890401][ T7] hid (null): invalid report_size 1646145794 [ 119.923310][ T4547] wacom 0003:056A:010D.0001: unknown main item tag 0x0 [ 119.962747][ T7] hid (null): invalid report_size 31568 [ 119.993757][ T7] hid (null): global environment stack underflow [ 120.003751][ T4547] wacom 0003:056A:010D.0001: unknown main item tag 0x0 [ 120.165548][ T7] hid (null): invalid report_size 50238 [ 120.172665][ T4547] wacom 0003:056A:010D.0001: unknown main item tag 0x0 [ 120.194052][ T7] hid (null): report_id 4028825593 is invalid [ 121.382186][ T4547] wacom 0003:056A:010D.0001: unknown main item tag 0x0 [ 121.402412][ T7] hid (null): unknown global tag 0xd [ 121.407741][ T7] hid (null): unknown global tag 0xc [ 121.428984][ T4547] wacom 0003:056A:010D.0001: unknown main item tag 0x0 [ 121.458497][ T4547] wacom 0003:056A:010D.0001: ignoring exceeding usage max [ 121.468554][ T7] hid (null): invalid report_count -58712498 [ 121.497266][ T7] hid (null): unknown global tag 0x9a [ 121.534102][ T7] hid (null): invalid report_count -1163714139 [ 121.546075][ T4547] wacom 0003:056A:010D.0001: hidraw0: USB HID v20.81 Device [HID 056a:010d] on usb-dummy_hcd.0-1/input0 [ 121.607203][ T7] usb 5-1: USB disconnect, device number 3 [ 121.664062][ T4547] usb 1-1: USB disconnect, device number 2 [ 121.794525][ T5212] bridge0: port 3(syz_tun) entered disabled state [ 121.920858][ T5212] device syz_tun left promiscuous mode [ 121.928694][ T5226] fido_id[5226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 121.969043][ T5212] bridge0: port 3(syz_tun) entered disabled state [ 122.236681][ T5234] loop4: detected capacity change from 0 to 256 [ 122.337245][ T5234] exfat: Deprecated parameter 'utf8' [ 122.432334][ T5234] exfat: Bad value for 'errors' [ 124.821359][ T5283] device syzkaller0 entered promiscuous mode [ 125.626352][ T5307] loop3: detected capacity change from 0 to 1024 [ 125.703036][ T5307] hfsplus: unable to parse mount options [ 126.009195][ T5285] netlink: 'syz.4.233': attribute type 10 has an invalid length. [ 126.063812][ T5285] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 126.124060][ T5321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 126.286232][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 127.137499][ T5340] device syzkaller0 entered promiscuous mode [ 129.993421][ T5347] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.248'. [ 132.435200][ T5376] device syzkaller0 entered promiscuous mode [ 132.551367][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.557701][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.570502][ T4557] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.663123][ T5369] chnl_net:caif_netlink_parms(): no params data found [ 132.876329][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 132.999781][ T5369] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.015007][ T5369] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.054329][ T5369] device bridge_slave_0 entered promiscuous mode [ 133.099435][ T5369] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.119039][ T4557] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 133.163335][ T5369] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.177354][ T4557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.227152][ T26] audit: type=1326 audit(1785864753.485:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.4.262" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc0359019 code=0x7ffc0000 [ 133.255647][ T5369] device bridge_slave_1 entered promiscuous mode [ 133.276917][ T4557] usb 1-1: Product: syz [ 133.305982][ T4557] usb 1-1: Manufacturer: syz [ 133.338188][ T4557] usb 1-1: SerialNumber: syz [ 133.369600][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 133.419831][ T4557] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 133.429694][ T26] audit: type=1326 audit(1785864753.525:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.4.262" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc0359019 code=0x7ffc0000 [ 133.535874][ T5369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.578921][ T26] audit: type=1326 audit(1785864753.525:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.4.262" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc0359019 code=0x7ffc0000 [ 133.614866][ T5369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.715701][ T26] audit: type=1326 audit(1785864753.545:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.4.262" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bc0359019 code=0x7ffc0000 [ 133.750992][ T5369] team0: Port device team_slave_0 added [ 133.773284][ T5369] team0: Port device team_slave_1 added [ 133.827369][ T26] audit: type=1326 audit(1785864753.545:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.4.262" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc0359019 code=0x7ffc0000 [ 133.861742][ T5369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.884280][ T5369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.126967][ T26] audit: type=1326 audit(1785864753.545:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.4.262" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc0359019 code=0x7ffc0000 [ 134.405572][ T4557] Bluetooth: hci5: command 0x0409 tx timeout [ 134.436680][ T5369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.476986][ T5369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.487336][ T26] audit: type=1326 audit(1785864753.545:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.4.262" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc0359019 code=0x7ffc0000 [ 134.520718][ T5369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.583171][ T26] audit: type=1326 audit(1785864753.545:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.4.262" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3bc0359019 code=0x7ffc0000 [ 134.608313][ T4547] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 134.624298][ T5369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.673463][ T26] audit: type=1326 audit(1785864753.545:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.4.262" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc0359019 code=0x7ffc0000 [ 134.750936][ T5369] device hsr_slave_0 entered promiscuous mode [ 134.782301][ T5369] device hsr_slave_1 entered promiscuous mode [ 134.794634][ T26] audit: type=1326 audit(1785864753.575:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.4.262" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc0359019 code=0x7ffc0000 [ 134.919111][ T5369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.939717][ T5369] Cannot create hsr debugfs directory [ 135.164806][ T4557] usb 1-1: USB disconnect, device number 3 [ 135.632935][ T5423] netlink: 48 bytes leftover after parsing attributes in process `syz.3.269'. [ 135.670669][ T4547] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 135.678257][ T4547] ath9k_htc: Failed to initialize the device [ 135.714407][ T5425] loop3: detected capacity change from 0 to 64 [ 135.723444][ T4557] usb 1-1: ath9k_htc: USB layer deinitialized [ 136.230823][ T5429] loop0: detected capacity change from 0 to 1024 [ 136.501497][ T4558] Bluetooth: hci5: command 0x041b tx timeout [ 136.802950][ T5436] kvm: pic: non byte write [ 136.926574][ T5408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.112392][ T5369] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.190338][ T5369] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.255216][ T5369] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.410302][ T5444] loop3: detected capacity change from 0 to 1024 [ 138.434188][ T5369] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.950780][ T5453] xt_CONNSECMARK: invalid mode: 66 [ 139.313198][ T4557] Bluetooth: hci5: command 0x040f tx timeout [ 139.404577][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 139.720316][ T5369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.774399][ T5459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.282'. [ 139.947025][ T5459] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.956102][ T5459] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.964949][ T5459] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.973700][ T5459] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.089625][ T5459] device vxlan0 entered promiscuous mode [ 140.143693][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.175518][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.207848][ T5369] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.280754][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.299696][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.343922][ T4458] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.351037][ T4458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.436103][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.477128][ T5468] loop3: detected capacity change from 0 to 256 [ 140.488421][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.503394][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.547064][ T5468] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 140.571093][ T4458] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.578374][ T4458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.611752][ T4558] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.652160][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.676285][ T5468] attempt to access beyond end of device [ 140.676285][ T5468] loop3: rw=524288, want=408, limit=256 [ 140.704407][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.726768][ T5468] attempt to access beyond end of device [ 140.726768][ T5468] loop3: rw=524288, want=664, limit=256 [ 140.742648][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.758668][ T5470] netlink: 252 bytes leftover after parsing attributes in process `syz.0.286'. [ 140.770657][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.789604][ T5468] attempt to access beyond end of device [ 140.789604][ T5468] loop3: rw=0, want=288, limit=256 [ 140.811713][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.828260][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.844605][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 140.844615][ T26] audit: type=1800 audit(1785864761.119:72): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.285" name="file1" dev="loop3" ino=1048594 res=0 errno=0 [ 140.883238][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.896202][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.913132][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.937475][ T5369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.966583][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.996318][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.031848][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.056692][ T4558] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.128250][ T4558] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.311853][ T4558] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.334444][ T4558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.338078][ T5466] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.404942][ T4557] Bluetooth: hci5: command 0x0419 tx timeout [ 142.470416][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.499817][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.563745][ T5369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.701776][ T7] usb 5-1: USB disconnect, device number 4 [ 142.951896][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.965016][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.998841][ T5369] device veth0_vlan entered promiscuous mode [ 143.015830][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.028112][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.051363][ T5369] device veth1_vlan entered promiscuous mode [ 143.062308][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.074104][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.083297][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.113325][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 143.127043][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.157506][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.189825][ T5369] device veth0_macvtap entered promiscuous mode [ 143.209502][ T5369] device veth1_macvtap entered promiscuous mode [ 143.248451][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.315262][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.416816][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.437658][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.458550][ T5512] crypto_alloc_aead failed rc=-2 [ 143.474264][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.487674][ T5505] crypto_alloc_aead failed rc=-4 [ 143.537013][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.598904][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.666264][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.687257][ T5525] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 143.715367][ T5369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.749501][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.765319][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.783590][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.821645][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.848300][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.882995][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.911370][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.948744][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.979391][ T5369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.017660][ T5369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.060517][ T5369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.085640][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.109574][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.142888][ T5369] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.169193][ T5369] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.217268][ T5369] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.255281][ T5369] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.423596][ T4458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.431774][ T4458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.510470][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.548542][ T4992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.560120][ T5531] netlink: 252 bytes leftover after parsing attributes in process `syz.3.297'. [ 144.589422][ T4992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.619796][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.708069][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 147.104285][ T5549] cgroup: Name too long [ 147.317008][ T5553] netlink: 'syz.0.303': attribute type 27 has an invalid length. [ 147.842915][ T26] audit: type=1326 audit(1785864767.716:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.3.307" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce3540f019 code=0x0 [ 147.883353][ T5571] netlink: 252 bytes leftover after parsing attributes in process `syz.5.309'. [ 148.311860][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.319276][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.265718][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.324584][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.837469][ T5553] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.849748][ T5553] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.860394][ T5553] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.872124][ T5553] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.985529][ T5553] device syzkaller0 left promiscuous mode [ 150.028418][ T5576] device syzkaller0 entered promiscuous mode [ 150.149932][ T5581] loop5: detected capacity change from 0 to 256 [ 150.258592][ T5581] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 150.379966][ T5581] attempt to access beyond end of device [ 150.379966][ T5581] loop5: rw=524288, want=408, limit=256 [ 150.402557][ T5588] device syzkaller0 entered promiscuous mode [ 150.534121][ T5581] attempt to access beyond end of device [ 150.534121][ T5581] loop5: rw=524288, want=664, limit=256 [ 150.550710][ T5591] netlink: 'syz.3.323': attribute type 27 has an invalid length. [ 150.601648][ T5581] attempt to access beyond end of device [ 150.601648][ T5581] loop5: rw=0, want=288, limit=256 [ 150.659553][ T26] audit: type=1800 audit(1785864770.331:74): pid=5581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.311" name="file1" dev="loop5" ino=1048598 res=0 errno=0 [ 151.117302][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.125214][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.634161][ T5591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.687498][ T5591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.187122][ T5591] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.200798][ T5591] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.211990][ T5591] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.223714][ T5591] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.354006][ T5591] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.363098][ T5591] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.372207][ T5591] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.381057][ T5591] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.605342][ T5600] device syzkaller0 entered promiscuous mode [ 152.648063][ T5602] device syzkaller0 left promiscuous mode [ 154.891152][ T5624] device syzkaller0 entered promiscuous mode [ 154.979590][ T4262] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 155.023173][ T5629] device syzkaller0 entered promiscuous mode [ 155.617954][ T4262] usb 5-1: Using ep0 maxpacket: 16 [ 155.639899][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 155.759208][ T4262] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 155.769619][ T4262] usb 5-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 155.786255][ T4262] usb 5-1: config 0 has no interface number 0 [ 155.796880][ T4262] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.975772][ T4262] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 155.984988][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.997746][ T4262] usb 5-1: Product: syz [ 156.002410][ T4262] usb 5-1: Manufacturer: syz [ 156.007091][ T4262] usb 5-1: SerialNumber: syz [ 156.024039][ T4262] usb 5-1: config 0 descriptor?? [ 156.334003][ T4262] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 156.355370][ T4262] nokiaca42v2 ttyUSB0: required endpoint is missing [ 156.376000][ T4262] usb 5-1: USB disconnect, device number 5 [ 156.399131][ T4262] cypress_m8 5-1:0.35: device disconnected [ 156.545409][ T5648] bridge0: port 3(syz_tun) entered blocking state [ 156.564286][ T5648] bridge0: port 3(syz_tun) entered disabled state [ 156.575989][ T5648] device syz_tun entered promiscuous mode [ 156.830580][ T5653] device syzkaller0 entered promiscuous mode [ 156.918525][ T5656] process 'syz.0.336' launched './file0' with NULL argv: empty string added [ 158.832458][ T5677] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 159.066985][ T5677] device bond1 entered promiscuous mode [ 159.130424][ T5677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.224864][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.263921][ T5686] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 159.295246][ T5686] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 159.307741][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.373235][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.397286][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.418415][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.444271][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.479562][ T5681] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 159.577972][ T5681] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 159.779607][ T5681] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 161.133511][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.224489][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.272667][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.302981][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.322932][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.336155][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.359599][ T5684] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 161.383505][ T5684] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 161.577167][ T4556] Bluetooth: hci4: command 0x0409 tx timeout [ 161.627432][ T5711] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 161.693430][ T5711] retu-mfd: probe of 0-0002 failed with error -5 [ 161.768692][ T5711] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 162.670612][ T5693] chnl_net:caif_netlink_parms(): no params data found [ 162.780239][ T5723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 163.006193][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.035632][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.069096][ T5693] device bridge_slave_0 entered promiscuous mode [ 163.125444][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.158673][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.199973][ T5693] device bridge_slave_1 entered promiscuous mode [ 163.277242][ T5736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.313766][ T4556] wlan1: authenticate with 08:02:11:00:00:00 [ 163.341888][ T4556] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 163.384089][ T5693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.413410][ T5736] wlan1: aborting authentication with 08:02:11:00:00:00 by local choice (Reason: 45=QSTA_CIPHER_NOT_SUPP) [ 163.445050][ T5693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.557594][ T5693] team0: Port device team_slave_0 added [ 163.629178][ T4458] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.654380][ T5693] team0: Port device team_slave_1 added [ 163.709421][ T4458] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.764144][ T4458] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.825575][ T4458] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.834015][ T4556] Bluetooth: hci4: command 0x041b tx timeout [ 163.868413][ T5693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.883715][ T5693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.012048][ T5693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.066451][ T5693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.113246][ T5693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.256583][ T5693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.271258][ T5758] loop5: detected capacity change from 0 to 512 [ 164.443223][ T5758] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.510693][ T5758] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.527077][ T5693] device hsr_slave_0 entered promiscuous mode [ 164.554261][ T5693] device hsr_slave_1 entered promiscuous mode [ 164.609573][ T5693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.649323][ T5693] Cannot create hsr debugfs directory [ 164.912260][ T5739] chnl_net:caif_netlink_parms(): no params data found [ 165.197494][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.227453][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.258352][ T5739] device bridge_slave_0 entered promiscuous mode [ 165.300600][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.335681][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.375994][ T5739] device bridge_slave_1 entered promiscuous mode [ 165.431397][ T5693] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 165.499910][ T5693] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 165.529600][ T5793] loop3: detected capacity change from 0 to 1024 [ 165.599624][ T4458] bond0: (slave wlan1): Releasing backup interface [ 165.632022][ T5793] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000007,noquota,delalloc,noblock_validity,nodioread_nolock,errors=remount-ro,. Quota mode: none. [ 165.708253][ T5693] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 165.740851][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.772406][ T5693] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 165.795917][ T5793] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.821972][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.831845][ T4556] Bluetooth: hci0: command 0x0409 tx timeout [ 165.990669][ T5793] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.371: bg 0: block 112: padding at end of block bitmap is not set [ 166.019813][ T5739] team0: Port device team_slave_0 added [ 166.064622][ T4458] device hsr_slave_0 left promiscuous mode [ 166.084607][ T4547] Bluetooth: hci4: command 0x040f tx timeout [ 166.102347][ T4458] device hsr_slave_1 left promiscuous mode [ 166.122835][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.131196][ T5793] EXT4-fs (loop3): Remounting filesystem read-only [ 166.146281][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.588967][ T4458] team0 (unregistering): Port device team_slave_1 removed [ 166.640710][ T4458] team0 (unregistering): Port device team_slave_0 removed [ 166.780837][ T4458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.801003][ T4458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.485407][ T4458] bond0 (unregistering): Released all slaves [ 167.509990][ T4458] smc: removing net device lo with user defined pnetid SYZ0 [ 167.530414][ T5739] team0: Port device team_slave_1 added [ 167.554748][ T5813] netlink: 76 bytes leftover after parsing attributes in process `syz.3.373'. [ 167.739915][ T5693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.823999][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.995289][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.273616][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 168.301219][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.344420][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 168.351859][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 168.408799][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.429218][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.500860][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.552620][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.578069][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.631699][ T5693] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.708199][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.742356][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.882868][ T4992] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.889936][ T4992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.960902][ T5846] loop5: detected capacity change from 0 to 512 [ 170.447680][ T5846] EXT4-fs (loop5): Unrecognized mount option "appraise_type=imasig" or missing value [ 170.505009][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.513843][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 170.552100][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.600793][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.664724][ T4992] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.672027][ T4992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.727161][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.750414][ T5856] netlink: 168 bytes leftover after parsing attributes in process `syz.5.381'. [ 170.769710][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.783260][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.816027][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.859918][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.881604][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.911695][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.923207][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.937048][ T5693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.955025][ T5693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.966286][ T5739] device hsr_slave_0 entered promiscuous mode [ 170.977866][ T5739] device hsr_slave_1 entered promiscuous mode [ 170.985286][ T5739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.992941][ T5739] Cannot create hsr debugfs directory [ 171.048101][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.380'. [ 171.108742][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.141135][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.173159][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.562906][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.591697][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.631149][ T5693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.679210][ T5739] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 171.744249][ T5739] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 171.779608][ T5739] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 171.830539][ T5739] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 172.075814][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.140608][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.191874][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.221109][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.266657][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.299633][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.337467][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.362372][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.383948][ T4962] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.391019][ T4962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.428285][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.448626][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.469927][ T4962] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.476984][ T4962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.521298][ T5693] device veth0_vlan entered promiscuous mode [ 172.563925][ T5739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.601213][ T5739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.632770][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.653817][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.676874][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.698519][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.718935][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.740656][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.760524][ T4556] Bluetooth: hci0: command 0x0419 tx timeout [ 172.784068][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.805952][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.827667][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.850861][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.883232][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.893239][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.926669][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.961264][ T5693] device veth1_vlan entered promiscuous mode [ 173.015917][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.054263][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.101308][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.128668][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.159499][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.237558][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.276341][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.337991][ T5693] device veth0_macvtap entered promiscuous mode [ 173.381347][ T5693] device veth1_macvtap entered promiscuous mode [ 173.427260][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.461716][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.488706][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.496162][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.557496][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.600172][ T5693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.661973][ T5693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.736491][ T5693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.772899][ T5693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.801598][ T5693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.825143][ T5693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.841226][ T5693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.863373][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.898955][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.933235][ T5693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.978411][ T5693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.005183][ T5693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.021255][ T5693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.034009][ T5693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.052585][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.092683][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.131405][ T5693] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.158428][ T5693] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.177674][ T5693] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.186958][ T5693] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.258362][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.278202][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.321275][ T5739] device veth0_vlan entered promiscuous mode [ 174.340341][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.387430][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.432441][ T5739] device veth1_vlan entered promiscuous mode [ 174.444112][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.476876][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.510523][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.535902][ T5739] device veth0_macvtap entered promiscuous mode [ 174.571990][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.589023][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.614268][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.651960][ T5739] device veth1_macvtap entered promiscuous mode [ 174.678016][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.695598][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.724674][ T4458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.732597][ T4458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.801821][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.824318][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.848797][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.887971][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.906009][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.945282][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.965289][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.992943][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.019344][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.031660][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.040213][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.053478][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.075084][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.086604][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.102793][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.120490][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.130583][ T5739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.144740][ T5739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.160393][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.174478][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.183435][ T4962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.201826][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.215186][ T4962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.224582][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.240548][ T5739] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.249997][ T5739] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.264124][ T5739] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.272818][ T5739] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.889532][ T5929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.392'. [ 175.900852][ T4458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.212950][ T4458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.724045][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.769341][ T4458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.834036][ T4458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.879964][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.452533][ T5969] device syzkaller0 entered promiscuous mode [ 182.475085][ T5977] loop6: detected capacity change from 0 to 64 [ 183.273805][ T5998] tipc: Started in network mode [ 183.329101][ T5998] tipc: Node identity 2007ff, cluster identity 4711 [ 183.809061][ T6008] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5693] was attempted by ""[6008] [ 183.858821][ T5998] tipc: Node number set to 2099199 [ 184.048822][ T5996] device syzkaller0 entered promiscuous mode [ 184.531854][ T6017] tipc: Started in network mode [ 184.597245][ T6017] tipc: Node identity 080211000001, cluster identity 4711 [ 186.020926][ T6017] tipc: Enabled bearer , priority 0 [ 187.298874][ T4547] tipc: Node number set to 134418688 [ 189.811790][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 189.887631][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 189.899203][ T6112] loop7: detected capacity change from 0 to 64 [ 190.005725][ T6077] loop5: detected capacity change from 0 to 32768 [ 190.492346][ T6077] XFS (loop5): Mounting V5 Filesystem [ 190.603777][ T6077] XFS (loop5): Ending clean mount [ 190.880762][ T6130] loop6: detected capacity change from 0 to 256 [ 190.986842][ T6130] FAT-fs (loop6): bogus sectors per cluster 0 [ 191.030877][ T6130] FAT-fs (loop6): Can't find a valid FAT filesystem [ 191.332299][ T6142] loop0: detected capacity change from 0 to 16 [ 191.417328][ T5369] XFS (loop5): Unmounting Filesystem [ 191.464287][ T6142] erofs: (device loop0): mounted with root inode @ nid 36. [ 191.593047][ T6149] loop3: detected capacity change from 0 to 512 [ 191.680643][ T6149] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 191.752336][ T6142] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 191.800464][ T6142] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 191.820521][ T6147] kvm [6145]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x10000008b [ 191.850053][ T6153] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 191.872535][ T6147] kvm [6145]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 192.924394][ T6153] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 193.153675][ T6155] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 193.492666][ T6155] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 194.470110][ T6164] autofs4:pid:6164:autofs_fill_super: called with bogus options [ 197.080329][ T4556] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 197.763140][ T4556] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 197.805131][ T4556] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.860556][ T4556] usb 7-1: Product: syz [ 197.879332][ T4556] usb 7-1: Manufacturer: syz [ 198.547074][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.553372][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.585819][ T4556] usb 7-1: SerialNumber: syz [ 200.266658][ T4556] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 200.613355][ T4556] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 200.677570][ T4556] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 200.786237][ T6223] capability: warning: `syz.6.454' uses deprecated v2 capabilities in a way that may be insecure [ 200.864202][ T4556] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 200.927529][ T4556] lan78xx: probe of 7-1:1.0 failed with error -71 [ 201.010393][ T4556] usb 7-1: USB disconnect, device number 2 [ 201.836590][ T6250] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 202.065379][ T6244] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 202.173104][ T6244] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 202.234622][ T6264] loop7: detected capacity change from 0 to 512 [ 202.640634][ T6264] EXT4-fs (loop7): Ignoring removed bh option [ 203.305441][ T6264] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 203.687378][ T6296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.469'. [ 203.806598][ T6264] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 203.901829][ T6264] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.462: Corrupt directory, running e2fsck is recommended [ 204.047613][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.470'. [ 204.129449][ T6264] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 204.214373][ T6264] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.462: corrupted in-inode xattr [ 204.417736][ T6264] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.462: couldn't read orphan inode 15 (err -117) [ 204.556369][ T6264] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,commit=0x0000000000000000,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,bh,grpid,,,errors=continue. Quota mode: writeback. [ 204.610161][ T6319] device syzkaller0 entered promiscuous mode [ 206.612643][ T6376] netlink: 'syz.0.486': attribute type 10 has an invalid length. [ 206.734809][ T6376] bond0: (slave wlan1): Opening slave failed [ 206.928885][ T6382] device syzkaller0 entered promiscuous mode [ 207.065049][ T6391] loop0: detected capacity change from 0 to 256 [ 207.132956][ T6391] exfat: Deprecated parameter 'utf8' [ 207.221856][ T6391] exfat: Bad value for 'errors' [ 207.925953][ T6394] netlink: 'syz.5.498': attribute type 10 has an invalid length. [ 207.991796][ T6394] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 208.026416][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.491'. [ 212.736654][ T6492] netlink: 'syz.7.511': attribute type 10 has an invalid length. [ 212.756740][ T6492] team0: Device veth1_vlan failed to register rx_handler [ 213.176470][ T6501] netlink: 'syz.6.513': attribute type 10 has an invalid length. [ 213.261309][ T6501] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 214.483379][ T6548] loop7: detected capacity change from 0 to 764 [ 216.387554][ T6570] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5369] was attempted by ""[6570] [ 216.959818][ T6571] overlayfs: failed to resolve './file1': -2 [ 217.247017][ T6578] smc: net device lo applied user defined pnetid SYZ0 [ 217.333443][ T6578] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 217.429178][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 217.571803][ T6585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 217.761822][ T6588] loop7: detected capacity change from 0 to 1024 [ 219.334550][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.532'. [ 219.916878][ T6608] dlm: dev_write: no op 0 74000000000000 [ 220.874819][ T6600] raw_sendmsg: syz.7.535 forgot to set AF_INET. Fix it! [ 221.346037][ T4547] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 222.765702][ T4547] usb 4-1: Using ep0 maxpacket: 32 [ 222.960940][ T4547] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 223.015130][ T4547] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.123173][ T6637] smc: net device lo applied user defined pnetid SYZ0 [ 223.130617][ T4547] usb 4-1: config 0 has no interface number 0 [ 223.164898][ T4547] usb 4-1: config 0 interface 239 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 223.242778][ T4547] usb 4-1: config 0 interface 239 has no altsetting 0 [ 223.301285][ T6639] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 223.374302][ T6639] kvm: pic: non byte read [ 223.403168][ T6639] kvm: pic: level sensitive irq not supported [ 223.403886][ T6639] kvm: pic: non byte read [ 223.437888][ T4547] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 223.471846][ T4547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.484465][ T6639] kvm: pic: level sensitive irq not supported [ 223.484514][ T6639] kvm: pic: non byte read [ 223.534668][ T4547] usb 4-1: Product: syz [ 223.551659][ T6639] kvm: pic: level sensitive irq not supported [ 223.551706][ T6639] kvm: pic: non byte read [ 223.570470][ T4547] usb 4-1: Manufacturer: syz [ 223.598212][ T4547] usb 4-1: SerialNumber: syz [ 223.644937][ T4547] usb 4-1: config 0 descriptor?? [ 223.846501][ T6659] loop6: detected capacity change from 0 to 1024 [ 224.006026][ T6621] netlink: 60 bytes leftover after parsing attributes in process `syz.3.542'. [ 224.114940][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.346982][ T26] audit: type=1800 audit(1785865606.331:75): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.549" name="local" dev="configfs" ino=43695 res=0 errno=0 [ 224.549383][ T26] audit: type=1800 audit(1785865606.358:76): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.549" name="scan_secs" dev="configfs" ino=43697 res=0 errno=0 [ 226.047892][ T4557] usb 4-1: USB disconnect, device number 4 [ 340.019308][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 340.026322][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4992/1:b..l [ 340.034722][ C0] (detected by 0, t=10502 jiffies, g=29741, q=41) [ 340.041214][ C0] task:kworker/u4:17 state:R running task stack:22736 pid: 4992 ppid: 2 flags:0x00004000 [ 340.052769][ C0] Workqueue: bat_events batadv_nc_worker [ 340.058429][ C0] Call Trace: [ 340.061716][ C0] [ 340.064662][ C0] __schedule+0x11c3/0x4350 [ 340.069193][ C0] ? verify_lock_unused+0x140/0x140 [ 340.074384][ C0] ? release_firmware_map_entry+0x190/0x190 [ 340.080267][ C0] ? mark_lock+0x94/0x320 [ 340.084589][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 340.089870][ C0] preempt_schedule_irq+0xbb/0x160 [ 340.094968][ C0] ? __cond_resched+0xd0/0xd0 [ 340.099637][ C0] ? rcu_is_watching+0x11/0xa0 [ 340.104410][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 340.110293][ C0] irqentry_exit+0x63/0x70 [ 340.114719][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 340.120698][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 340.126789][ C0] Code: 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 70 13 12 0c 48 89 de 5b e9 47 5a 44 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d 04 73 89 7e 65 8b 15 05 73 89 7e 81 e2 00 01 ff 00 74 [ 340.146404][ C0] RSP: 0018:ffffc90003f0fb78 EFLAGS: 00000202 [ 340.152460][ C0] RAX: ffffffff89951fdd RBX: ffffffff899520e0 RCX: 0b8daa06ff5d6700 [ 340.160425][ C0] RDX: 0000000000000000 RSI: ffffffff8a7a41e0 RDI: ffffffff8a7a41a0 [ 340.168391][ C0] RBP: 0000000000000067 R08: dffffc0000000000 R09: 1ffffffff203dc18 [ 340.176376][ C0] R10: dffffc0000000000 R11: fffffbfff203dc19 R12: ffff8881423bfdd0 [ 340.184340][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88805ef94c80 [ 340.192306][ C0] ? batadv_nc_process_nc_paths+0x350/0x350 [ 340.198193][ C0] ? batadv_nc_process_nc_paths+0x24d/0x350 [ 340.204084][ C0] batadv_nc_process_nc_paths+0x24d/0x350 [ 340.209799][ C0] batadv_nc_worker+0x3df/0x5c0 [ 340.214671][ C0] process_one_work+0x867/0xff0 [ 340.219532][ C0] ? worker_detach_from_pool+0x240/0x240 [ 340.225158][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 340.230446][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 340.235469][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 340.241025][ C0] ? wq_worker_running+0x97/0x170 [ 340.246048][ C0] worker_thread+0xad7/0x12a0 [ 340.250741][ C0] kthread+0x42e/0x520 [ 340.254795][ C0] ? rcu_lock_release+0x20/0x20 [ 340.259633][ C0] ? kthread_blkcg+0xd0/0xd0 [ 340.264210][ C0] ret_from_fork+0x1f/0x30 [ 340.268642][ C0] [ 340.271656][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g29741 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 340.282869][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 340.292867][ C0] rcu: RCU grace-period kthread stack dump: [ 340.298742][ C0] task:rcu_preempt state:R running task stack:26896 pid: 15 ppid: 2 flags:0x00004000 [ 340.309609][ C0] Call Trace: [ 340.312905][ C0] [ 340.315844][ C0] __schedule+0x11c3/0x4350 [ 340.320376][ C0] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 340.325844][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 340.331042][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 340.336947][ C0] ? _raw_spin_unlock+0x40/0x40 [ 340.341793][ C0] ? rcu_is_watching+0x11/0xa0 [ 340.346591][ C0] ? release_firmware_map_entry+0x190/0x190 [ 340.352489][ C0] schedule+0x11b/0x1e0 [ 340.356634][ C0] schedule_timeout+0x184/0x2d0 [ 340.361475][ C0] ? console_conditional_schedule+0x40/0x40 [ 340.367359][ C0] ? update_process_times+0x200/0x200 [ 340.372947][ C0] ? prepare_to_swait_event+0x33d/0x360 [ 340.378510][ C0] rcu_gp_fqs_loop+0x2be/0x11f0 [ 340.383372][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 340.388571][ C0] ? rcu_gp_init+0xd72/0x10f0 [ 340.393249][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 340.398012][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 340.403203][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 340.408401][ C0] rcu_gp_kthread+0x9a/0x370 [ 340.412981][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 340.418097][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 340.424010][ C0] ? __kthread_parkme+0x14e/0x1b0 [ 340.429030][ C0] kthread+0x42e/0x520 [ 340.433086][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 340.438186][ C0] ? kthread_blkcg+0xd0/0xd0 [ 340.442772][ C0] ret_from_fork+0x1f/0x30 [ 340.447194][ C0] [ 340.450210][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 340.456528][ C0] NMI backtrace for cpu 0 [ 340.460841][ C0] CPU: 0 PID: 6683 Comm: syz.3.552 Not tainted syzkaller #0 [ 340.468116][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.478172][ C0] Call Trace: [ 340.481451][ C0] [ 340.484310][ C0] dump_stack_lvl+0x188/0x250 [ 340.488991][ C0] ? show_regs_print_info+0x20/0x20 [ 340.494191][ C0] ? load_image+0x410/0x410 [ 340.498751][ C0] ? irq_work_queue+0xbf/0x140 [ 340.503508][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 340.508473][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 340.514615][ C0] ? _printk+0xda/0x130 [ 340.518797][ C0] ? cpu_online+0x1d/0x30 [ 340.523114][ C0] ? load_image+0x410/0x410 [ 340.527638][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 340.533708][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 340.539682][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 340.545858][ C0] print_other_cpu_stall+0x1110/0x1270 [ 340.551339][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 340.556274][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 340.561572][ C0] rcu_sched_clock_irq+0x845/0x1120 [ 340.566868][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 340.571706][ C0] ? hrtimer_run_queues+0x162/0x400 [ 340.576911][ C0] ? account_process_tick+0x22a/0x3a0 [ 340.582286][ C0] update_process_times+0x193/0x200 [ 340.587477][ C0] tick_sched_timer+0x37d/0x560 [ 340.592343][ C0] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 340.597883][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 340.603084][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 340.609060][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 340.614164][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 340.620227][ C0] hrtimer_interrupt+0x397/0x8b0 [ 340.625182][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 340.631163][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 340.636805][ C0] [ 340.639724][ C0] [ 340.642643][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 340.648618][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 340.654671][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 70 13 12 0c 48 89 de 5b e9 47 5a 44 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d 04 73 89 7e 65 8b 15 05 73 89 7e 81 e2 00 [ 340.674263][ C0] RSP: 0018:ffffc900035d7b38 EFLAGS: 00000202 [ 340.680321][ C0] RAX: ffffffff817bea1e RBX: 0000004f2b07bc40 RCX: ffff88802bef8000 [ 340.688289][ C0] RDX: 0000000000000002 RSI: 0000000000000010 RDI: 0000000000000000 [ 340.696266][ C0] RBP: 0000000000000010 R08: ffff88802bef8000 R09: 0000000000000020 [ 340.704292][ C0] R10: 000000000000001f R11: 0000000000000002 R12: ffff8880736c24d8 [ 340.712297][ C0] R13: dffffc0000000000 R14: 00000000000004c8 R15: 0000000000096510 [ 340.720389][ C0] ? check_buffer+0x3ee/0x880 [ 340.725070][ C0] check_buffer+0x3f7/0x880 [ 340.729591][ C0] __rb_reserve_next+0x4d9/0xd00 [ 340.734527][ C0] ring_buffer_lock_reserve+0xadd/0xed0 [ 340.740082][ C0] ? arch_do_signal_or_restart+0xec5/0x12a0 [ 340.745987][ C0] trace_event_buffer_lock_reserve+0xd4/0x6a0 [ 340.752065][ C0] trace_event_buffer_reserve+0x2a8/0x3d0 [ 340.757791][ C0] ? trace_event_ignore_this_pid+0x130/0x130 [ 340.763775][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 340.769758][ C0] trace_event_raw_event_sys_enter+0x9c/0x140 [ 340.775822][ C0] trace_sys_enter+0x65/0x80 [ 340.780524][ C0] syscall_trace_enter+0x115/0x180 [ 340.785631][ C0] do_syscall_64+0x24/0xa0 [ 340.790048][ C0] ? clear_bhb_loop+0x30/0x80 [ 340.794736][ C0] ? clear_bhb_loop+0x30/0x80 [ 340.799417][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 340.805305][ C0] RIP: 0033:0x7fce35408d97 [ 340.809719][ C0] Code: 8d 3d 08 9f 0b 00 e8 58 1d fa ff e8 a3 87 00 00 0f 1f 00 b8 68 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 340.829329][ C0] RSP: 002b:00007fce33666b08 EFLAGS: 00000202 ORIG_RAX: 0000000000000027 [ 340.837750][ C0] RAX: ffffffffffffffda RBX: 00007fce33666c70 RCX: 00007fce35408d97 [ 340.845716][ C0] RDX: 00007fce33666b40 RSI: 00007fce33666c70 RDI: 0000000000000021 [ 340.853681][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.861648][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 340.869619][ C0] R13: 00007fce35697038 R14: 00007ffc4422efd0 R15: 00007ffc4422f0b8 [ 340.877625][ C0]