last executing test programs: 8m16.154311591s ago: executing program 32 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x4084) 8m14.856121596s ago: executing program 33 (id=101): r0 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2}) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000000)={0x80000000, 0x0, 'client0\x00', 0x7, "495218d51d8370ee", "27315db9f34dac3d618a687a54bb5de9e391f2f5f18f126cbd0600fc93d96590", 0x0, 0xb}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002280)={0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000001540)=[0x2]}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r5) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') setsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f0000000280), 0x4) io_uring_enter(r0, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) 7m46.989291635s ago: executing program 5 (id=159): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmmsg$unix(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x40408d0}}], 0x1, 0x4000000) 7m46.355730976s ago: executing program 5 (id=162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0xfff, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}]}}}]}, 0x6c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) write$P9_RMKNOD(r3, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x20, 0x2}}, 0x14) shutdown(r3, 0x1) 7m45.6545966s ago: executing program 34 (id=163): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x50) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400190d09004beafd0d8c560a84476080ffe0064e230003590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 7m45.645739111s ago: executing program 5 (id=165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) pwritev(r0, &(0x7f0000000400)=[{&(0x7f00000003c0)="f07eb3eed800470977be6d25369757d3cda6ad491ce34bbf7921927519aa6df0893f16d01369a976c6d529bab37db66163", 0x31}], 0x1, 0x1, 0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x8}, 0x8) r4 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002640)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc044560f, &(0x7f0000000080)=@multiplanar_mmap={0x2, 0x1, 0x4, 0x40, 0x49ab, {0x0, 0xea60}, {0x4, 0xc, 0x0, 0x8, 0xf9, 0xc, "87cf2e9a"}, 0x6, 0x1, {&(0x7f0000000580)=[{0x203, 0x9, {0xfffffff5}, 0x1000}, {0x6f30, 0x5, {0x9}, 0xbc}]}, 0xb, 0x0, r4}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)}, 0x4048043) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x1000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x30}}, 0x4804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030400000000fedbdf25000074007f6247ae2d209d4dfa98632deec5f6bd68fa5785de5a05dbf4751204f8346404cc06fb0b183cba533aa9bf464f07e9d006faa5496bb45f49509025c762", @ANYRES32=0x0, @ANYBLOB="00080000001200000a000100ffffffffffff0000140035006d616373656330000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x40008) 7m42.123527414s ago: executing program 5 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 7m41.839986368s ago: executing program 5 (id=171): socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x60}, 0x122) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 7m41.268945295s ago: executing program 5 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=") ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000500)=0x2) 7m40.77465926s ago: executing program 35 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000500)=0x2) 7m32.772923463s ago: executing program 3 (id=187): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x4000) get_mempolicy(0x0, 0x0, 0x5eb, &(0x7f0000001000/0x13000)=nil, 0x3) 7m32.44392523s ago: executing program 3 (id=188): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) 7m29.1669881s ago: executing program 3 (id=192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0xfff, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}]}}}]}, 0x6c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) write$P9_RMKNOD(r3, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x20, 0x2}}, 0x14) shutdown(r3, 0x1) 7m27.722205651s ago: executing program 3 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 7m27.573356539s ago: executing program 3 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x8, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 7m27.031906475s ago: executing program 3 (id=195): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF(r0, 0x80045440, &(0x7f0000000140)={0xe47, 0x7, 0x2080060f, 0xffffbffe, 0x12, "1c52b4c2e70c0088c84f1f00"}) 7m26.408419746s ago: executing program 36 (id=195): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF(r0, 0x80045440, &(0x7f0000000140)={0xe47, 0x7, 0x2080060f, 0xffffbffe, 0x12, "1c52b4c2e70c0088c84f1f00"}) 7m12.498372819s ago: executing program 7 (id=209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) pwritev(r0, &(0x7f0000000400)=[{&(0x7f00000003c0)="f07eb3eed800470977be6d25369757d3cda6ad491ce34bbf7921927519aa6df0893f16d01369a976c6d529bab37db66163", 0x31}], 0x1, 0x1, 0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x8}, 0x8) r4 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002640)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc044560f, &(0x7f0000000080)=@multiplanar_mmap={0x2, 0x1, 0x4, 0x40, 0x49ab, {0x0, 0xea60}, {0x4, 0xc, 0x0, 0x8, 0xf9, 0xc, "87cf2e9a"}, 0x6, 0x1, {&(0x7f0000000580)=[{0x203, 0x9, {0xfffffff5}, 0x1000}, {0x6f30, 0x5, {0x9}, 0xbc}]}, 0xb, 0x0, r4}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x1000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x30}}, 0x4804) 7m8.435502589s ago: executing program 7 (id=210): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000004}) epoll_pwait(r3, 0x0, 0x0, 0x7c0e, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7m6.99488557s ago: executing program 7 (id=212): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[0x0], 0x1, r3, r4, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 7m6.709319984s ago: executing program 7 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 7m6.459483506s ago: executing program 7 (id=214): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x4004) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f04f2ff0604"], 0x7) 7m5.875198134s ago: executing program 7 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1e7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000ffff00050400", @ANYRES32=0x1, @ANYBLOB="792dffff00"/20, @ANYRES32, @ANYBLOB="0000000024000000020000000300"/28], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="e39c7a657769bb4a0c97f1b99374d6dba6a5c6b6fd75fabf0806036528996bb03f2b09e027042d5fcb097d01773d6481d90e9b9c1bedf30985b17a1643e2ca397ef66da722e86039591f8e3611", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="330000001000000000000000", @ANYRES32=r3, @ANYBLOB="c2a7a1e616cd5883492450a4709ccb5153081c17f821a962688b0f54249b41e4d4b1eac42ae036406969220a93516b6c78d7287452a8f04357e5122d19b22d35959ffed75edffd3c1d9f", @ANYRES64=r4], 0x20) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a0000000000000000000000f1f34c3d0074598cb795aa263a680afdcefb8bd528db022776fb79468088b51dbe5a8a4f2227df93f73a7476699631e6fe2077a0b78c8ce693340bff0300003f8ab365dea268ad1d8c97267e669ac3a51b4d78aff1497749c38aba20bb5846b370a1f4c77897e597ed2fb1df2c381e5f011edfb3ab869fe7f1a5c19578ba1da43d716511db68072aa6e82d9586a62cab6b5b58ba173ca97ecdefd2a0e82658b6c27e3361c59747c278b7389091c226dab59365b44c377460f7", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r4], 0x20) socket$caif_seqpacket(0x25, 0x5, 0x3) 7m5.532020931s ago: executing program 37 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1e7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000ffff00050400", @ANYRES32=0x1, @ANYBLOB="792dffff00"/20, @ANYRES32, @ANYBLOB="0000000024000000020000000300"/28], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="e39c7a657769bb4a0c97f1b99374d6dba6a5c6b6fd75fabf0806036528996bb03f2b09e027042d5fcb097d01773d6481d90e9b9c1bedf30985b17a1643e2ca397ef66da722e86039591f8e3611", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="330000001000000000000000", @ANYRES32=r3, @ANYBLOB="c2a7a1e616cd5883492450a4709ccb5153081c17f821a962688b0f54249b41e4d4b1eac42ae036406969220a93516b6c78d7287452a8f04357e5122d19b22d35959ffed75edffd3c1d9f", @ANYRES64=r4], 0x20) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a0000000000000000000000f1f34c3d0074598cb795aa263a680afdcefb8bd528db022776fb79468088b51dbe5a8a4f2227df93f73a7476699631e6fe2077a0b78c8ce693340bff0300003f8ab365dea268ad1d8c97267e669ac3a51b4d78aff1497749c38aba20bb5846b370a1f4c77897e597ed2fb1df2c381e5f011edfb3ab869fe7f1a5c19578ba1da43d716511db68072aa6e82d9586a62cab6b5b58ba173ca97ecdefd2a0e82658b6c27e3361c59747c278b7389091c226dab59365b44c377460f7", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r4], 0x20) socket$caif_seqpacket(0x25, 0x5, 0x3) 3m44.778898786s ago: executing program 9 (id=635): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) unshare(0x6a040000) openat$sndtimer(0xffffff9c, &(0x7f0000000300), 0x40) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) writev(r5, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89", 0x1}], 0x2) 3m33.302362529s ago: executing program 9 (id=653): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0x173, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m31.180452343s ago: executing program 9 (id=657): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x8) 3m30.6363882s ago: executing program 9 (id=660): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf252100000009001f00706861793100"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000eb00000f1000000000000061020000000000009500050000000000929b569e5b468b4c53db3f7ac9bc09236ced48406ba73fa5a110a5121c8369c038dc56e6bc1875cceae7ccb46cba30367a0cfe1f5ab6abae43"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0xffd, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x2008840, &(0x7f00000002c0)={[{@index_on}, {@uuid_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, '0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k'}}]}) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) dup(0xffffffffffffffff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) 3m25.731450552s ago: executing program 9 (id=666): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0x173, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m25.655153185s ago: executing program 6 (id=667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x1, 0x10, 0x3ff, 0x4, 0x6}, {0xf, 0x1, 0x2, 0x1, 0x5}, 0x4, 0x100, 0x1b8f}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) 3m25.206128417s ago: executing program 6 (id=669): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsmount(r3, 0x1, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r4, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x40, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fda98800000000280012800a00010063616e"], 0x50}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000008) r7 = socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000280)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x1}}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000200)="0e714ae28353514d3cf70dc265a94c723f1b56567c2f94a9416c75b7edc70652923272b6cf87a257df131c4dd4a41fa78348951f574de4f357e257b805882d53232069731a34d7be44cd601a30f2990ec226a21fe0136a08f37ab6e87aa6171502466c85a4", 0x65, 0x4000084}, 0x805) bind$tipc(r8, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) 3m23.93360648s ago: executing program 6 (id=670): syz_usb_connect$midi(0x6, 0x58, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x3f, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x5, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x5, 0x7, 0x4, {0x4}}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x7a, 0xf7, 0x7, {0x4}}}, {{0x9, 0x5, 0xf, 0x15, 0x400, 0x1, 0x5, 0x3, {0x4}}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x1, 0x7c, 0x17, {0x4}}}]}}}}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="6700330080200900ffffffffffff080211"], 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x0) 3m23.32380756s ago: executing program 9 (id=673): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 3m21.477353871s ago: executing program 38 (id=673): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 3m21.464231281s ago: executing program 6 (id=675): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf252100000009001f00706861793100"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000eb00000f1000000000000061020000000000009500050000000000929b569e5b468b4c53db3f7ac9bc09236ced48406ba73fa5a110a5121c8369c038dc56e6bc1875cceae7ccb46cba30367a0cfe1f5ab6abae43"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0xffd, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000240), 0x2008840, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) dup(0xffffffffffffffff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) 3m19.612423822s ago: executing program 6 (id=680): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) 3m16.371615381s ago: executing program 6 (id=685): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x3b) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)="c6831ed8838056e08cc5b459bfef3e6fed75d2901ee87b68bbb4a231d4871bc6e77e9245", 0x24}], 0x1, &(0x7f0000000ac0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/33, 0x21}, {&(0x7f00000007c0)=""/137, 0x89}], 0x2}, 0xf0) 3m15.905769825s ago: executing program 39 (id=685): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x3b) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)="c6831ed8838056e08cc5b459bfef3e6fed75d2901ee87b68bbb4a231d4871bc6e77e9245", 0x24}], 0x1, &(0x7f0000000ac0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/33, 0x21}, {&(0x7f00000007c0)=""/137, 0x89}], 0x2}, 0xf0) 1m47.275901229s ago: executing program 8 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) 1m47.151422745s ago: executing program 8 (id=822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m46.957824585s ago: executing program 8 (id=823): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r4 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000054) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x3e4, 0x1d0, 0x12c, 0xffffffff, 0x12c, 0x0, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0x104, 0x12c, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'veth1_to_hsr\x00', 'veth1_vlan\x00', 0x0, 0x0, 0x4, 0x7fff, 0xb, 0xcd, {0x4}, {0x8}}}, @common=@ah={{0x2c}, {[0x1, 0x1ff], 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4, 0x1}, {0x0, 0x1, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @remote, @multicast2, @gre_key=0xf, @port=0x4e22}}}}, {{@ip={@private=0xa010100, @private=0xa010100, 0xffffffff, 0xffffff00, 'ip6gretap0\x00', 'geneve1\x00', {}, {0xff}, 0x11, 0x3, 0x2}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010102, @rand_addr=0x64010100, @gre_key=0x8, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@multicast2, @ipv6=@mcast1, @port=0x4e24, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x440) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x40000032, r6, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r8, 0x5402, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000640)={'batadv_slave_0\x00', &(0x7f0000000580)=@ethtool_flash={0x33, 0x4, './file0\x00'}}) openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) 1m44.324066014s ago: executing program 8 (id=825): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x8) 1m43.060737766s ago: executing program 8 (id=826): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000340), 0x404e80) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000380)={0x7, 0x9, 0x1, 'queue0\x00', 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r2, r3, 0x0, 0x201f00) 1m42.512601543s ago: executing program 8 (id=829): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000ac0), 0x90) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x83b1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xb, 0x2, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640), 0x10, 0x1}, 0x94) tee(0xffffffffffffffff, r1, 0x8, 0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, 0x0, 0x0) socket(0x16, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r4, &(0x7f0000000380)=[{&(0x7f0000001b00)=""/4104, 0x1008}, {&(0x7f0000000300)=""/71, 0x47}], 0x2) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 1m27.10531367s ago: executing program 40 (id=829): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000ac0), 0x90) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x83b1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xb, 0x2, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640), 0x10, 0x1}, 0x94) tee(0xffffffffffffffff, r1, 0x8, 0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, 0x0, 0x0) socket(0x16, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendto$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r4, &(0x7f0000000380)=[{&(0x7f0000001b00)=""/4104, 0x1008}, {&(0x7f0000000300)=""/71, 0x47}], 0x2) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 14.871917439s ago: executing program 0 (id=1019): prctl$PR_SCHED_CORE(0x39, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_STOP(r2, 0x6f2a) 13.004863771s ago: executing program 0 (id=1023): r0 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x1ff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016"], 0x44}}, 0x40) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) ioctl$MON_IOCT_RING_SIZE(r8, 0x9204, 0xc397e) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) 8.94999988s ago: executing program 1 (id=1040): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00010000", 0x23) 8.190863258s ago: executing program 1 (id=1044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="120100007f107240450c8062fcd5000000010902"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.200843537s ago: executing program 4 (id=1048): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) close_range(r0, 0xffffffffffffffff, 0x0) 6.894916911s ago: executing program 4 (id=1050): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20800, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000480)="26a4", 0x2, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000340), 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="7cc18893378bf594a09336655921692e5a9ff9ad9a36093b56de59aaa1d3d653f33f897abb716e8c8013d42c6d704b224cfec3a0eeaddb4fb34c4feca85a6e4b76124152f50d3770b06c87371a1899426ea84543e5667381e82904533baccf03c3f0d94b7517dd28876c4d40a1fc0221568b618473884545e2b627460d6aa1b1c0d95218bed9af245ec98ad5359e73961b92a25ba8fb780700e9b9a0175e5fad3d445c29dcd1ac01c836ea12831508ece8c808dece9cc6aa234da700"/199, @ANYRES16=r4, @ANYBLOB="01000014000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500870000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'amplc_dio200\x00', [0x5c22, 0x800, 0x1, 0xffff3244, 0x82, 0xe6, 0xc, 0x7441, 0x5, 0x6, 0x695b, 0x2, 0x41, 0x403, 0x3, 0x1, 0xfffffd, 0x0, 0x100010, 0x8, 0x90, 0x5, 0x200006, 0x5, 0x8004, 0x8, 0x2, 0x8, 0x5, 0x41, 0xfffffffd]}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5800009, 0x28011, r1, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f00002ff000/0x1000)=nil, 0x1000, 0x2000004, 0xe7ee32aa24a8b8f2, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 5.567667257s ago: executing program 4 (id=1051): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000004180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@rights={{0x10, 0x1, 0x1, [r1]}}], 0x10, 0x4000}}], 0x1, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.455825142s ago: executing program 0 (id=1053): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800d00010073796e70726f7879000000001c00028005000200060000000600013400000000080003400000000c09001a7567747a30000000000900020073797a320000000014000000180a0108000000000000000005000003140000001100010000000000000000000500000a"], 0x9c}}, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r7 = gettid() sched_setscheduler(r7, 0x1, &(0x7f0000000180)=0x3) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="2b72646d6120dd416ebe0b16904a20a86797d1709cddb99454aae53a1f7838ff96ff9c97f6ceed4c00ae045bb11aba56053bcd2406157391587a04166f22c722c76bc553dc73226f5c3b65104c2b8916e6ddc57a31b66480"], 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001b80)='pimreg1\x00') 4.549805407s ago: executing program 1 (id=1054): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.931877337s ago: executing program 1 (id=1056): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0)=0xf30d, 0x4) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, 0xffffffffffffffff, 0x100000000) inotify_init() mremap(&(0x7f00002bb000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESDEC], 0x0) 3.310213458s ago: executing program 2 (id=1058): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) close_range(r0, 0xffffffffffffffff, 0x0) 3.26454271s ago: executing program 0 (id=1059): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20800, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000480)="26a4", 0x2, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000340), 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="7cc18893378bf594a09336655921692e5a9ff9ad9a36093b56de59aaa1d3d653f33f897abb716e8c8013d42c6d704b224cfec3a0eeaddb4fb34c4feca85a6e4b76124152f50d3770b06c87371a1899426ea84543e5667381e82904533baccf03c3f0d94b7517dd28876c4d40a1fc0221568b618473884545e2b627460d6aa1b1c0d95218bed9af245ec98ad5359e73961b92a25ba8fb780700e9b9a0175e5fad3d445c29dcd1ac01c836ea12831508ece8c808dece9cc6aa234da700"/199, @ANYRES16=r4, @ANYBLOB="01000014000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500870000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'amplc_dio200\x00', [0x5c22, 0x800, 0x1, 0xffff3244, 0x82, 0xe6, 0xc, 0x7441, 0x5, 0x6, 0x695b, 0x2, 0x41, 0x403, 0x3, 0x1, 0xfffffd, 0x0, 0x100010, 0x8, 0x90, 0x5, 0x200006, 0x5, 0x8004, 0x8, 0x2, 0x8, 0x5, 0x41, 0xfffffffd]}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5800009, 0x28011, r1, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f00002ff000/0x1000)=nil, 0x1000, 0x2000004, 0xe7ee32aa24a8b8f2, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2.976470404s ago: executing program 2 (id=1060): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), r1, 0x2}}, 0x18) 2.847989661s ago: executing program 2 (id=1061): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, 0x0, 0x0) unshare(0x6a040000) r4 = openat$sndtimer(0xffffff9c, &(0x7f0000000300), 0x40) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e05411, &(0x7f0000000340)) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) writev(r5, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89", 0x1}], 0x2) 1.703012377s ago: executing program 0 (id=1062): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f0000000000)=[{0x4, 0x8c01, 0x45, &(0x7f00000007c0)="253ae1ff09423e082b90f4bf0aa5025a01c8d0fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3403169b921fe2c0b9370e56e21421bd29fcb0c911af3"}], 0x1}) 1.62086986s ago: executing program 4 (id=1063): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00010000", 0x23) 1.124610425s ago: executing program 2 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r3, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x0) 910.297826ms ago: executing program 2 (id=1065): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 653.037658ms ago: executing program 4 (id=1066): socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe2(&(0x7f0000000280), 0x4080) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) dup(0xffffffffffffffff) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 579.855872ms ago: executing program 0 (id=1067): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800d00010073796e70726f7879000000001c00028005000200060000000600013400000000080003400000000c09001a7567747a30000000000900020073797a320000000014000000180a0108000000000000000005000003140000001100010000000000000000000500000a"], 0x9c}}, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r7 = gettid() sched_setscheduler(r7, 0x1, &(0x7f0000000180)=0x3) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="2b72646d6120dd416ebe0b16904a20a86797d1709cddb99454aae53a1f7838ff96ff9c97f6ceed4c00ae045bb11aba56053bcd2406157391587a04166f22c722c76bc553dc73226f5c3b65104c2b8916e6ddc57a31b66480"], 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001b80)='pimreg1\x00') 347.860483ms ago: executing program 1 (id=1068): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) close_range(r0, 0xffffffffffffffff, 0x0) 216.80264ms ago: executing program 4 (id=1069): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010003000000000000000000010008000100", @ANYRES32=0x0, @ANYBLOB="06000600040000000c00030000000000"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 102.260055ms ago: executing program 1 (id=1070): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20800, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000480)="26a4", 0x2, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000340), 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="7cc18893378bf594a09336655921692e5a9ff9ad9a36093b56de59aaa1d3d653f33f897abb716e8c8013d42c6d704b224cfec3a0eeaddb4fb34c4feca85a6e4b76124152f50d3770b06c87371a1899426ea84543e5667381e82904533baccf03c3f0d94b7517dd28876c4d40a1fc0221568b618473884545e2b627460d6aa1b1c0d95218bed9af245ec98ad5359e73961b92a25ba8fb780700e9b9a0175e5fad3d445c29dcd1ac01c836ea12831508ece8c808dece9cc6aa234da700"/199, @ANYRES16=r4, @ANYBLOB="01000014000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500870000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'amplc_dio200\x00', [0x5c22, 0x800, 0x1, 0xffff3244, 0x82, 0xe6, 0xc, 0x7441, 0x5, 0x6, 0x695b, 0x2, 0x41, 0x403, 0x3, 0x1, 0xfffffd, 0x0, 0x100010, 0x8, 0x90, 0x5, 0x200006, 0x5, 0x8004, 0x8, 0x2, 0x8, 0x5, 0x41, 0xfffffffd]}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5800009, 0x28011, r1, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f00002ff000/0x1000)=nil, 0x1000, 0x2000004, 0xe7ee32aa24a8b8f2, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 0s ago: executing program 2 (id=1071): ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) kernel console output (not intermixed with test programs): 34419][ T4203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.875296][ T6230] veth0_vlan: entered promiscuous mode [ 145.938973][ T6230] veth1_vlan: entered promiscuous mode [ 145.947459][ T23] usb 4-1: device descriptor read/64, error -71 [ 146.042772][ T6230] veth0_macvtap: entered promiscuous mode [ 146.049714][ T5757] usb usb38-port1: attempt power cycle [ 146.080490][ T23] usb usb4-port1: attempt power cycle [ 146.110475][ T6230] veth1_macvtap: entered promiscuous mode [ 146.199308][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.216246][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.241772][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.266393][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.313956][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.334900][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.373883][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.405177][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.431296][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.474563][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.516492][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.518210][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.557147][ T23] usb 4-1: device descriptor read/8, error -71 [ 146.571874][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.583190][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.597082][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.609297][ T6230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.618578][ T6230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.629776][ T6230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.768809][ T5757] usb usb38-port1: unable to enumerate USB device [ 146.777282][ T6230] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.846504][ T6454] netlink: 'syz.2.143': attribute type 2 has an invalid length. [ 149.504729][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.583157][ T23] usb 4-1: device descriptor read/8, error -71 [ 150.728282][ T23] usb usb4-port1: unable to enumerate USB device [ 150.735305][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.776282][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.944369][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.972437][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.256360][ T6505] netlink: 'syz.2.151': attribute type 2 has an invalid length. [ 155.548536][ T6519] syz.3.155[6519]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 155.736285][ T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 155.966371][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.006250][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.016091][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.075011][ T27] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 156.106428][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.136047][ T27] usb 3-1: config 0 descriptor?? [ 156.461809][ T6519] loop3: detected capacity change from 0 to 32768 [ 156.501576][ T6519] ======================================================= [ 156.501576][ T6519] WARNING: The mand mount option has been deprecated and [ 156.501576][ T6519] and is ignored by this kernel. Remove the mand [ 156.501576][ T6519] option from the mount to silence this warning. [ 156.501576][ T6519] ======================================================= [ 156.589045][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 156.597034][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 156.605278][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 156.612739][ T27] usbhid 3-1:0.0: can't add hid device: -32 [ 156.618905][ T27] usbhid: probe of 3-1:0.0 failed with error -32 [ 156.661075][ T27] usb 3-1: USB disconnect, device number 11 [ 156.713198][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.771493][ T6519] JBD2: Ignoring recovery information on journal [ 156.957516][ T6519] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 156.980533][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.211549][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.298025][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 157.616884][ T6556] netlink: 'syz.5.165': attribute type 2 has an invalid length. [ 159.691256][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.172084][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.182498][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.190827][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.202228][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.212273][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.226840][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.678910][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.688806][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.716560][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.739360][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.831485][ T6611] netlink: 'syz.2.177': attribute type 2 has an invalid length. [ 162.989815][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 163.000304][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.360129][ T51] Bluetooth: hci0: command tx timeout [ 164.724992][ T6611] netlink: 32 bytes leftover after parsing attributes in process `syz.2.177'. [ 164.842244][ T6579] chnl_net:caif_netlink_parms(): no params data found [ 165.366369][ T51] Bluetooth: hci1: command tx timeout [ 165.737893][ T51] Bluetooth: hci0: command tx timeout [ 167.123977][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.152154][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.162367][ T6579] bridge_slave_0: entered allmulticast mode [ 167.173673][ T6579] bridge_slave_0: entered promiscuous mode [ 167.310233][ T12] hsr_slave_0: left promiscuous mode [ 167.322542][ T12] hsr_slave_1: left promiscuous mode [ 167.345047][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.364159][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.374610][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.389608][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.397080][ T51] Bluetooth: hci1: command tx timeout [ 167.406044][ T12] bridge_slave_1: left allmulticast mode [ 167.415999][ T12] bridge_slave_1: left promiscuous mode [ 167.424444][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.442593][ T12] bridge_slave_0: left allmulticast mode [ 167.451947][ T12] bridge_slave_0: left promiscuous mode [ 167.461609][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.504423][ T12] veth1_macvtap: left promiscuous mode [ 167.528601][ T12] veth0_macvtap: left promiscuous mode [ 167.534327][ T12] veth1_vlan: left promiscuous mode [ 167.553905][ T12] veth0_vlan: left promiscuous mode [ 167.796324][ T51] Bluetooth: hci0: command tx timeout [ 168.321740][ T12] team0 (unregistering): Port device team_slave_1 removed [ 168.375743][ T12] team0 (unregistering): Port device team_slave_0 removed [ 168.430093][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.483729][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.987171][ T12] bond0 (unregistering): Released all slaves [ 169.093541][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.101422][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.109024][ T6579] bridge_slave_1: entered allmulticast mode [ 169.116866][ T6579] bridge_slave_1: entered promiscuous mode [ 169.150655][ T6639] warning: `syz.2.183' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 169.278241][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.300494][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.469591][ T6579] team0: Port device team_slave_0 added [ 169.493346][ T51] Bluetooth: hci1: command tx timeout [ 169.550065][ T6579] team0: Port device team_slave_1 added [ 169.684851][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.702474][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.732124][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.772752][ T6602] chnl_net:caif_netlink_parms(): no params data found [ 169.788169][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.795950][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.823302][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.886687][ T51] Bluetooth: hci0: command tx timeout [ 170.193009][ T6579] hsr_slave_0: entered promiscuous mode [ 170.207280][ T6579] hsr_slave_1: entered promiscuous mode [ 170.255096][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.265848][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.277134][ T6602] bridge_slave_0: entered allmulticast mode [ 170.293020][ T6602] bridge_slave_0: entered promiscuous mode [ 170.384167][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.392276][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.400158][ T6602] bridge_slave_1: entered allmulticast mode [ 170.410989][ T6602] bridge_slave_1: entered promiscuous mode [ 170.579975][ T6602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.624473][ T6602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.698763][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.730594][ T786] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 170.842122][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.890659][ T6602] team0: Port device team_slave_0 added [ 170.928889][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 170.940488][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.950050][ T786] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 170.968918][ T786] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 170.985891][ T786] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 171.000810][ T6602] team0: Port device team_slave_1 added [ 171.012752][ T786] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 171.031552][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.041630][ T786] usb 4-1: Product: syz [ 171.045985][ T786] usb 4-1: Manufacturer: syz [ 171.054396][ T786] usb 4-1: SerialNumber: syz [ 171.101428][ T786] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 171.111450][ T786] imon 4-1:155.0: unable to initialize intf0, err -19 [ 171.115093][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.128252][ T786] imon:imon_probe: failed to initialize context! [ 171.139752][ T786] imon 4-1:155.0: unable to register, err -19 [ 171.270322][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.282612][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.313658][ T6602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.332003][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.339586][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.366387][ T6602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.472202][ T6579] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 171.484878][ T6579] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 171.517199][ T6579] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 171.555526][ T6579] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 171.557871][ T51] Bluetooth: hci1: command tx timeout [ 171.590321][ T6602] hsr_slave_0: entered promiscuous mode [ 171.601665][ T6602] hsr_slave_1: entered promiscuous mode [ 171.608841][ T6602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.617413][ T6602] Cannot create hsr debugfs directory [ 172.414063][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.431207][ T6602] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 172.492816][ T6602] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 172.518185][ T6602] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 172.532503][ T6602] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 172.588688][ T6579] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.655910][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.663172][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.692171][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.699395][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.987277][ T12] hsr_slave_0: left promiscuous mode [ 173.010972][ T12] hsr_slave_1: left promiscuous mode [ 173.027191][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.034705][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.047095][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.054589][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.067641][ T12] bridge_slave_1: left allmulticast mode [ 173.075080][ T12] bridge_slave_1: left promiscuous mode [ 173.086416][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.105326][ T12] bridge_slave_0: left allmulticast mode [ 173.112795][ T12] bridge_slave_0: left promiscuous mode [ 173.125638][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.168845][ T12] veth1_macvtap: left promiscuous mode [ 173.186593][ T12] veth0_macvtap: left promiscuous mode [ 173.192330][ T12] veth1_vlan: left promiscuous mode [ 173.215085][ T12] veth0_vlan: left promiscuous mode [ 173.536411][ T8] usb 4-1: USB disconnect, device number 7 [ 174.051421][ T6703] Zero length message leads to an empty skb [ 174.336292][ T2178] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.387409][ T12] team0 (unregistering): Port device team_slave_1 removed [ 174.434131][ T12] team0 (unregistering): Port device team_slave_0 removed [ 174.484136][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.508980][ T2178] usb 3-1: device descriptor read/64, error -71 [ 174.542502][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.786533][ T2178] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 174.945375][ T12] bond0 (unregistering): Released all slaves [ 174.956464][ T2178] usb 3-1: device descriptor read/64, error -71 [ 175.070438][ T2178] usb usb3-port1: attempt power cycle [ 175.153070][ T6602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.284901][ T6602] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.323413][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.330669][ T4203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.372345][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.379693][ T4203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.496288][ T2178] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 175.549499][ T2178] usb 3-1: device descriptor read/8, error -71 [ 175.689485][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.816816][ T2178] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 175.886618][ T2178] usb 3-1: device descriptor read/8, error -71 [ 176.026480][ T2178] usb usb3-port1: unable to enumerate USB device [ 176.052999][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.243263][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.429143][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.480578][ T6602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.577800][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.835627][ T6579] veth0_vlan: entered promiscuous mode [ 176.988496][ T6579] veth1_vlan: entered promiscuous mode [ 178.596526][ T6579] veth0_macvtap: entered promiscuous mode [ 179.029574][ T6579] veth1_macvtap: entered promiscuous mode [ 179.226733][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.424143][ T6770] tipc: Can't bind to reserved service type 0 [ 179.567463][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.582799][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.625036][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.651362][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 179.664426][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.769215][ T6769] netlink: 48 bytes leftover after parsing attributes in process `syz.2.198'. [ 180.007013][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.036062][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.086374][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.105414][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.122231][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.205564][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.256315][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.272487][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.306215][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.338735][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.396595][ T6579] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.405516][ T6579] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.415275][ T6579] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.424378][ T6579] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.436069][ T6602] veth0_vlan: entered promiscuous mode [ 180.532510][ T6602] veth1_vlan: entered promiscuous mode [ 180.616428][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 180.823543][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.850196][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.892709][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.919209][ T8] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 180.931944][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.964737][ T8] usb 3-1: config 0 descriptor?? [ 181.008442][ T4203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.032902][ T4203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.131424][ T12] hsr_slave_0: left promiscuous mode [ 181.143391][ T12] hsr_slave_1: left promiscuous mode [ 181.153017][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.166335][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.181567][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.197565][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.205991][ T12] bridge_slave_1: left allmulticast mode [ 181.212307][ T12] bridge_slave_1: left promiscuous mode [ 181.218605][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.229416][ T12] bridge_slave_0: left allmulticast mode [ 181.235161][ T12] bridge_slave_0: left promiscuous mode [ 181.241911][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.268861][ T12] veth1_macvtap: left promiscuous mode [ 181.274612][ T12] veth0_macvtap: left promiscuous mode [ 181.280661][ T12] veth1_vlan: left promiscuous mode [ 181.288268][ T12] veth0_vlan: left promiscuous mode [ 181.602387][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 181.620283][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 181.641171][ T8] usb 3-1: USB disconnect, device number 16 [ 181.798813][ T5772] Bluetooth: hci3: command tx timeout [ 182.113974][ T12] team0 (unregistering): Port device team_slave_1 removed [ 182.182768][ T12] team0 (unregistering): Port device team_slave_0 removed [ 182.250474][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.325744][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.863749][ T12] bond0 (unregistering): Released all slaves [ 182.988851][ T6602] veth0_macvtap: entered promiscuous mode [ 183.022245][ T6602] veth1_macvtap: entered promiscuous mode [ 183.050259][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.067845][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.210163][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.237488][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.257433][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.286321][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.317970][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.330636][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.353437][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.363934][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.374560][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.397167][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.460944][ T6602] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.496336][ T6602] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.515739][ T6602] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.534400][ T6602] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.573854][ T6767] chnl_net:caif_netlink_parms(): no params data found [ 183.878882][ T5772] Bluetooth: hci3: command tx timeout [ 184.025725][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.051942][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.068462][ T6767] bridge_slave_0: entered allmulticast mode [ 184.087900][ T6767] bridge_slave_0: entered promiscuous mode [ 184.118272][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.125468][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.156606][ T6767] bridge_slave_1: entered allmulticast mode [ 184.164122][ T6767] bridge_slave_1: entered promiscuous mode [ 184.249396][ T6755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.270394][ T6755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.320496][ T6767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.354023][ T6767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.477543][ T6767] team0: Port device team_slave_0 added [ 184.499171][ T6755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.502180][ T6767] team0: Port device team_slave_1 added [ 184.536390][ T6755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.617136][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.624157][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.721145][ T6767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.765330][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.788882][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.826273][ T6767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.016375][ T6787] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 185.041683][ T6767] hsr_slave_0: entered promiscuous mode [ 185.048860][ T6767] hsr_slave_1: entered promiscuous mode [ 185.062971][ T6767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.071263][ T6767] Cannot create hsr debugfs directory [ 185.196426][ T6787] usb 7-1: device descriptor read/64, error -71 [ 185.956691][ T5772] Bluetooth: hci3: command tx timeout [ 187.152047][ T6787] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 188.036722][ T5772] Bluetooth: hci3: command tx timeout [ 188.381596][ T6767] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 188.420045][ T6767] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 188.455584][ T6767] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 188.474919][ T6767] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 188.739317][ T6767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.774833][ T6767] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.845981][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.853269][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.949236][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.956661][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.031858][ T5772] Bluetooth: Wrong link type (-57) [ 189.098896][ T6767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.851855][ T6767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.196097][ T6882] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 191.566371][ T6891] netlink: 'syz.7.209': attribute type 2 has an invalid length. [ 194.569816][ T6767] veth0_vlan: entered promiscuous mode [ 194.601887][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.608784][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.615346][ T6767] veth1_vlan: entered promiscuous mode [ 195.854569][ T6767] veth0_macvtap: entered promiscuous mode [ 195.932356][ T6767] veth1_macvtap: entered promiscuous mode [ 196.017937][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.066265][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.104327][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.153391][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.186802][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.214120][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.258333][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.308492][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.347752][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.376392][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.416296][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.441534][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.453844][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.485151][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.521779][ T6767] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.533300][ T6767] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.543851][ T6767] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.552996][ T6767] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.736469][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 196.775060][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.792523][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.839209][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.852195][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.886899][ T8] usb 3-1: device descriptor read/64, error -71 [ 196.966522][ T59] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.090250][ T59] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.176274][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 197.249116][ T59] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.346460][ T8] usb 3-1: device descriptor read/64, error -71 [ 197.438898][ T59] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.487255][ T8] usb usb3-port1: attempt power cycle [ 197.916462][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 198.847584][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.8.222'. [ 198.856675][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.8.222'. [ 199.416860][ T8] usb 3-1: device descriptor read/8, error -71 [ 199.750936][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.760252][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.768281][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.777009][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.822679][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 199.830180][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.129559][ T6965] CIFS: VFS: Malformed UNC in devname [ 200.682382][ T6956] chnl_net:caif_netlink_parms(): no params data found [ 202.156383][ T51] Bluetooth: hci1: command tx timeout [ 202.549220][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.597331][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.604729][ T6956] bridge_slave_0: entered allmulticast mode [ 202.655903][ T6956] bridge_slave_0: entered promiscuous mode [ 202.678674][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 202.687648][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.230'. [ 202.702897][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.723130][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.870621][ T6956] bridge_slave_1: entered allmulticast mode [ 202.898898][ T6956] bridge_slave_1: entered promiscuous mode [ 204.199336][ T51] Bluetooth: hci1: command tx timeout [ 204.496385][ T7011] netlink: 'syz.2.231': attribute type 2 has an invalid length. [ 206.286255][ T51] Bluetooth: hci1: command tx timeout [ 206.814625][ T6956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.867984][ T6956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.350733][ T59] hsr_slave_0: left promiscuous mode [ 207.373290][ T59] hsr_slave_1: left promiscuous mode [ 207.407769][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.431449][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.476466][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.514776][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.537681][ T59] bridge_slave_1: left allmulticast mode [ 207.566379][ T59] bridge_slave_1: left promiscuous mode [ 207.576597][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.609157][ T59] bridge_slave_0: left allmulticast mode [ 207.614844][ T59] bridge_slave_0: left promiscuous mode [ 207.642330][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.696590][ T59] veth1_macvtap: left promiscuous mode [ 207.702224][ T59] veth0_macvtap: left promiscuous mode [ 207.766669][ T59] veth1_vlan: left promiscuous mode [ 207.776641][ T59] veth0_vlan: left promiscuous mode [ 208.357417][ T51] Bluetooth: hci1: command tx timeout [ 209.957375][ T59] team0 (unregistering): Port device team_slave_1 removed [ 210.708064][ T59] team0 (unregistering): Port device team_slave_0 removed [ 210.907154][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.013834][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.483802][ T59] bond0 (unregistering): Released all slaves [ 211.579906][ T7011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.231'. [ 211.630898][ T6956] team0: Port device team_slave_0 added [ 211.652313][ T6956] team0: Port device team_slave_1 added [ 211.685711][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.692931][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.756200][ T6956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.808709][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.826827][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.853240][ T6956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.869975][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.239'. [ 211.880896][ T7034] netlink: 24 bytes leftover after parsing attributes in process `syz.8.239'. [ 211.916423][ T7043] netlink: 104 bytes leftover after parsing attributes in process `syz.2.241'. [ 212.119573][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 212.221504][ T6956] hsr_slave_0: entered promiscuous mode [ 212.268194][ T6956] hsr_slave_1: entered promiscuous mode [ 212.302119][ T6956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.322254][ T6956] Cannot create hsr debugfs directory [ 212.586351][ T23] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 212.786561][ T27] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 212.797081][ T23] usb 9-1: config 0 has no interfaces? [ 212.802868][ T23] usb 9-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 212.826274][ T23] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.874102][ T23] usb 9-1: config 0 descriptor?? [ 212.966324][ T27] usb 3-1: device descriptor read/64, error -71 [ 213.074990][ T6956] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 213.085961][ T6956] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 213.111815][ T6956] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 213.125060][ T6956] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 213.179433][ T23] usb 9-1: USB disconnect, device number 2 [ 213.239644][ T27] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 213.255750][ T7056] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 213.357172][ T6956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.382042][ T6956] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.416415][ T27] usb 3-1: device descriptor read/64, error -71 [ 213.429522][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.436735][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.450843][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.458097][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.526823][ T6956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.537628][ T27] usb usb3-port1: attempt power cycle [ 213.930835][ T7063] netlink: 52 bytes leftover after parsing attributes in process `syz.8.246'. [ 213.951026][ T6956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.966722][ T27] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 214.001852][ T27] usb 3-1: device descriptor read/8, error -71 [ 214.276995][ T27] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 214.331628][ T27] usb 3-1: device descriptor read/8, error -71 [ 214.467842][ T27] usb usb3-port1: unable to enumerate USB device [ 215.476561][ T7080] netlink: 'syz.6.249': attribute type 2 has an invalid length. [ 218.177536][ T7081] netlink: 32 bytes leftover after parsing attributes in process `syz.6.249'. [ 218.376555][ T6956] veth0_vlan: entered promiscuous mode [ 218.440952][ T6956] veth1_vlan: entered promiscuous mode [ 219.238500][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.8.250'. [ 219.247602][ T7087] netlink: 24 bytes leftover after parsing attributes in process `syz.8.250'. [ 219.365260][ T6956] veth0_macvtap: entered promiscuous mode [ 219.528055][ T6956] veth1_macvtap: entered promiscuous mode [ 220.403196][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.472813][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.485524][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.501298][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.512028][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.653151][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.678294][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.694709][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.254'. [ 220.718805][ T7102] bridge_slave_1: left allmulticast mode [ 220.732759][ T7102] bridge_slave_1: left promiscuous mode [ 220.746831][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.786912][ T7102] bridge_slave_0: left allmulticast mode [ 220.795077][ T7102] bridge_slave_0: left promiscuous mode [ 220.821403][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.992568][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.010691][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.046191][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.076375][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.114251][ T7098] delete_channel: no stack [ 221.116452][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.148345][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.169514][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.204490][ T6956] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.244010][ T6956] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.266206][ T6956] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.289746][ T6956] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.488095][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.510517][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.605444][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.628999][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.288679][ T7125] overlayfs: overlapping lowerdir path [ 222.390808][ T7126] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 222.399480][ T7126] overlayfs: overlapping lowerdir path [ 223.766282][ T6788] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 224.157096][ T6788] usb 7-1: device descriptor read/64, error -71 [ 224.855934][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.8.260'. [ 224.864994][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.8.260'. [ 225.634923][ T6788] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 228.102332][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 228.111362][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.270'. [ 228.961146][ T7159] loop6: detected capacity change from 0 to 32768 [ 229.022053][ T7159] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.266 (7159) [ 229.139138][ T7159] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.192296][ T7159] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 229.235200][ T7159] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 229.285170][ T7159] BTRFS info (device loop6): trying to use backup root at mount time [ 229.316845][ T7159] BTRFS info (device loop6): using free space tree [ 229.583364][ T1117] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xf187ebec4c8fe808032a11c24b221f7d5f4503ce88318e4c969ae916445d9e10 level 0 [ 229.615981][ T7159] BTRFS warning (device loop6): couldn't read tree root [ 229.636556][ T7159] BTRFS warning (device loop6): try to load backup roots slot 1 [ 229.681603][ T3500] BTRFS warning (device loop6): checksum verify failed on logical 5292032 mirror 1 wanted 0x71e9986adce26f47d358c48a094a2713636d7db020873728b415408513a1db55 found 0x48208b0caa6da3a738f36ca92654a91d6adb8fa845866e92f2edd67ab26e4d81 level 0 [ 229.772572][ T7159] BTRFS warning (device loop6): failed to read root (objectid=9): -5 [ 229.814779][ T7159] BTRFS warning (device loop6): try to load backup roots slot 2 [ 229.848180][ T3500] BTRFS warning (device loop6): checksum verify failed on logical 5255168 mirror 1 wanted 0xa2bc52bf83e4351a511664158b2f7d69be610068f1b706d330a0e4f01c3ea6c4 found 0xc6551eead63db9976b787ad49a12fd3f30ff3897923188c3553a067173bededa level 1 [ 229.913401][ T7159] BTRFS warning (device loop6): couldn't read tree root [ 229.940813][ T7159] BTRFS warning (device loop6): try to load backup roots slot 3 [ 229.957554][ T7159] BTRFS warning (device loop6): global root 2 0 already exists [ 229.969228][ T7159] BTRFS error (device loop6): failed to load root extent [ 230.210090][ T7159] BTRFS error (device loop6): open_ctree failed: -17 [ 230.504949][ T6905] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by udevd (6905) [ 232.136536][ T5757] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 232.316308][ T5757] usb 3-1: device descriptor read/64, error -71 [ 232.616569][ T5757] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 232.776318][ T5757] usb 3-1: device descriptor read/64, error -71 [ 232.914859][ T5757] usb usb3-port1: attempt power cycle [ 233.357735][ T5757] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 233.436340][ T5757] usb 3-1: device descriptor read/8, error -71 [ 234.548888][ T5757] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 235.518351][ T5757] usb 3-1: device not accepting address 28, error -71 [ 235.525588][ T5757] usb usb3-port1: unable to enumerate USB device [ 235.919731][ T7298] netlink: 'syz.9.287': attribute type 2 has an invalid length. [ 236.876563][ T6788] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 236.976439][ T7300] netlink: 32 bytes leftover after parsing attributes in process `syz.9.287'. [ 237.120478][ T6788] usb 3-1: config 0 has no interfaces? [ 237.135508][ T6788] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 237.173777][ T6788] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 237.236713][ T6788] usb 3-1: Product: syz [ 237.272869][ T6788] usb 3-1: Manufacturer: syz [ 237.306100][ T6788] usb 3-1: SerialNumber: syz [ 237.452688][ T6788] usb 3-1: config 0 descriptor?? [ 237.749433][ T5757] usb 3-1: USB disconnect, device number 29 [ 238.336267][ T5757] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 240.012250][ T5757] usb 3-1: device descriptor read/all, error -71 [ 240.682761][ T5835] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 242.434413][ T5835] usb 7-1: device descriptor read/64, error -71 [ 244.025129][ T7370] netlink: 'syz.9.304': attribute type 2 has an invalid length. [ 244.294282][ T7370] netlink: 32 bytes leftover after parsing attributes in process `syz.9.304'. [ 246.938391][ T5810] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 247.116490][ T5810] usb 7-1: Using ep0 maxpacket: 8 [ 247.129875][ T5810] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.129912][ T5810] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.129937][ T5810] usb 7-1: config 0 interface 0 has no altsetting 0 [ 247.129970][ T5810] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 247.130014][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.132652][ T5810] usb 7-1: config 0 descriptor?? [ 247.600582][ T5810] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 247.600672][ T5810] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 247.600700][ T5810] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 247.600728][ T5810] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 247.600754][ T5810] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 247.602588][ T5810] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 247.783536][ T5810] usb 7-1: USB disconnect, device number 8 [ 248.626371][ T6784] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 249.676369][ T7417] netlink: 'syz.6.316': attribute type 2 has an invalid length. [ 250.548438][ T6784] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 251.493905][ T6784] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 251.577257][ T6784] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 251.626016][ T6784] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 251.715757][ T6784] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 251.796377][ T8] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 251.805405][ T6784] usb 3-1: string descriptor 0 read error: -71 [ 251.855025][ T6784] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 251.933381][ T6784] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.028894][ T6784] usb 3-1: can't set config #1, error -71 [ 252.038498][ T8] usb 10-1: device descriptor read/64, error -71 [ 252.277021][ T6784] usb 3-1: USB disconnect, device number 32 [ 252.559973][ T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 253.662957][ T7451] netlink: 'syz.8.322': attribute type 3 has an invalid length. [ 255.826531][ T7451] netlink: 'syz.8.322': attribute type 3 has an invalid length. [ 255.841543][ T7451] netlink: 'syz.8.322': attribute type 3 has an invalid length. [ 255.858841][ T7451] netlink: 'syz.8.322': attribute type 3 has an invalid length. [ 255.967178][ T7451] netlink: 'syz.8.322': attribute type 3 has an invalid length. [ 255.975064][ T7451] netlink: 'syz.8.322': attribute type 3 has an invalid length. [ 255.988521][ T7451] netlink: 'syz.8.322': attribute type 3 has an invalid length. [ 255.999144][ T7451] netlink: 'syz.8.322': attribute type 3 has an invalid length. [ 256.010097][ T7451] netlink: 'syz.8.322': attribute type 3 has an invalid length. [ 256.020570][ T7451] netlink: 'syz.8.322': attribute type 3 has an invalid length. [ 256.051003][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.058212][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.070618][ T7451] netlink: 'syz.8.322': attribute type 3 has an invalid length. [ 257.235217][ T23] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 257.461433][ T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.831355][ T23] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 258.371566][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.552803][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 258.564633][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 258.578318][ T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.634908][ T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.277518][ T7497] overlayfs: overlapping lowerdir path [ 259.436947][ T7495] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 259.445282][ T7495] overlayfs: overlapping lowerdir path [ 260.440084][ T23] usb 3-1: Product: syz [ 260.444417][ T23] usb 3-1: Manufacturer: syz [ 261.078754][ T23] usb 3-1: can't set config #1, error -71 [ 261.088233][ T23] usb 3-1: USB disconnect, device number 33 [ 261.100196][ T7501] binder: 7499:7501 ioctl c0306201 200000000080 returned -14 [ 261.798119][ T7526] validate_nla: 42 callbacks suppressed [ 261.798132][ T7526] netlink: 'syz.8.340': attribute type 4 has an invalid length. [ 261.814774][ T5757] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 262.019861][ T5757] usb 7-1: config 0 has no interfaces? [ 262.036530][ T5757] usb 7-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 262.045661][ T5757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.108044][ T5757] usb 7-1: config 0 descriptor?? [ 262.356586][ T8] usb 7-1: USB disconnect, device number 9 [ 264.667082][ T7556] overlayfs: failed to clone lowerpath [ 264.826835][ T7555] overlayfs: failed to clone lowerpath [ 266.841506][ T7567] netlink: 'syz.6.350': attribute type 4 has an invalid length. [ 267.917138][ T7576] netlink: 'syz.6.351': attribute type 4 has an invalid length. [ 269.272037][ T6784] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 269.496328][ T6784] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 269.505133][ T6784] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 269.527052][ T6784] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 269.542624][ T6784] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 269.555383][ T6784] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 269.594779][ T6784] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 269.607453][ T6784] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 269.615616][ T6784] usb 10-1: Product: syz [ 269.625357][ T6784] usb 10-1: Manufacturer: syz [ 269.664751][ T6784] cdc_wdm 10-1:1.0: skipping garbage [ 269.706213][ T6784] cdc_wdm 10-1:1.0: skipping garbage [ 269.726703][ T6784] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 269.751497][ T6784] cdc_wdm 10-1:1.0: Unknown control protocol [ 269.907263][ T8] usb 10-1: USB disconnect, device number 4 [ 275.783965][ T7657] netdevsim netdevsim2: Direct firmware load for ./cgroup failed with error -2 [ 275.793571][ T7657] netdevsim netdevsim2: Falling back to sysfs fallback for: ./cgroup [ 283.381747][ T7695] netlink: 32 bytes leftover after parsing attributes in process `syz.8.380'. [ 283.576993][ T7706] netlink: 'syz.9.382': attribute type 4 has an invalid length. [ 284.528695][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 285.446589][ T7723] 9pnet_virtio: no channels available for device syz [ 287.994923][ T7736] fuse: Unknown parameter 'fd0x0000000000000003' [ 293.930680][ T7790] fuse: Unknown parameter 'fd0x0000000000000003' [ 298.006362][ T7809] netlink: 32 bytes leftover after parsing attributes in process `syz.8.405'. [ 301.840369][ T7849] overlayfs: failed to clone upperpath [ 304.672484][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 306.082150][ T7879] tipc: Started in network mode [ 306.112905][ T7879] tipc: Node identity 7f000001, cluster identity 4711 [ 306.173979][ T7879] tipc: Enabling of bearer rejected, failed to enable media [ 307.077660][ T7881] loop9: detected capacity change from 0 to 32768 [ 308.935848][ T7881] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 309.806435][ T7881] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 309.816838][ T7881] BTRFS warning (device loop9): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 309.828734][ T7881] BTRFS info (device loop9): trying to use backup root at mount time [ 309.844615][ T7881] BTRFS info (device loop9): using free space tree [ 309.854441][ T7881] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 309.863426][ T7881] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 309.875020][ T7881] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 309.888659][ T7881] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 309.899506][ T7881] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 309.910259][ T7881] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 309.920834][ T7881] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 309.933430][ T7881] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 309.944740][ T7881] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 309.957642][ T7881] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 309.969621][ T7881] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 309.985559][ T7881] BTRFS error (device loop9): open_ctree failed: -12 [ 311.113058][ T7698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by udevd (7698) [ 313.459472][ T51] Bluetooth: hci3: unexpected event for opcode 0x0006 [ 315.211880][ T7964] loop2: detected capacity change from 0 to 32768 [ 315.320781][ T7964] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 315.347863][ T7964] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 315.386432][ T7964] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 315.429609][ T7964] BTRFS info (device loop2): trying to use backup root at mount time [ 315.481301][ T7964] BTRFS info (device loop2): using free space tree [ 315.594380][ T51] Bluetooth: hci3: unexpected event for opcode 0x0006 [ 315.687694][ T1117] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xf187ebec4c8fe808032a11c24b221f7d5f4503ce88318e4c969ae916445d9e10 level 0 [ 317.206966][ T7964] BTRFS warning (device loop2): couldn't read tree root [ 317.214035][ T7964] BTRFS warning (device loop2): try to load backup roots slot 1 [ 317.413705][ T12] BTRFS warning (device loop2): checksum verify failed on logical 5292032 mirror 1 wanted 0x71e9986adce26f47d358c48a094a2713636d7db020873728b415408513a1db55 found 0x48208b0caa6da3a738f36ca92654a91d6adb8fa845866e92f2edd67ab26e4d81 level 0 [ 317.485196][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.491803][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.506245][ T7964] BTRFS warning (device loop2): failed to read root (objectid=9): -5 [ 317.514458][ T7964] BTRFS warning (device loop2): try to load backup roots slot 2 [ 317.534217][ T12] BTRFS warning (device loop2): checksum verify failed on logical 5255168 mirror 1 wanted 0xa2bc52bf83e4351a511664158b2f7d69be610068f1b706d330a0e4f01c3ea6c4 found 0xc6551eead63db9976b787ad49a12fd3f30ff3897923188c3553a067173bededa level 1 [ 317.686416][ T7964] BTRFS warning (device loop2): couldn't read tree root [ 317.706263][ T7964] BTRFS warning (device loop2): try to load backup roots slot 3 [ 317.790139][ T7964] BTRFS warning (device loop2): global root 2 0 already exists [ 317.814354][ T7964] BTRFS error (device loop2): failed to load root extent [ 318.004218][ T7964] BTRFS error (device loop2): open_ctree failed: -17 [ 318.364482][ T7698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (7698) [ 322.863456][ T8095] overlayfs: failed to clone lowerpath [ 322.951655][ T8099] overlayfs: failed to clone lowerpath [ 324.678337][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 327.464813][ T8137] netlink: 'syz.9.471': attribute type 5 has an invalid length. [ 327.572023][ T8137] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.581575][ T8137] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.590439][ T8137] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.599517][ T8137] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.987016][ T8137] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.996054][ T8137] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.005566][ T8137] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.014743][ T8137] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.817787][ T8159] overlayfs: overlapping lowerdir path [ 329.966919][ T8157] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 329.975144][ T8157] overlayfs: overlapping lowerdir path [ 334.786966][ T8215] overlayfs: overlapping lowerdir path [ 334.792826][ T8216] overlay: Unknown parameter '/dev/sequencer2' [ 342.186452][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.9.506'. [ 342.195631][ T8293] bridge_slave_1: left allmulticast mode [ 342.202175][ T8293] bridge_slave_1: left promiscuous mode [ 342.208465][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.297406][ T8293] bridge_slave_0: left allmulticast mode [ 342.306978][ T8293] bridge_slave_0: left promiscuous mode [ 342.312967][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.643047][ T8280] loop2: detected capacity change from 0 to 32768 [ 342.687961][ T8280] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 342.711451][ T8280] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 342.721217][ T8280] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 342.756921][ T8280] BTRFS info (device loop2): trying to use backup root at mount time [ 342.776679][ T8280] BTRFS info (device loop2): using free space tree [ 342.885674][ T49] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xf187ebec4c8fe808032a11c24b221f7d5f4503ce88318e4c969ae916445d9e10 level 0 [ 342.966375][ T8280] BTRFS warning (device loop2): couldn't read tree root [ 342.973416][ T8280] BTRFS warning (device loop2): try to load backup roots slot 1 [ 343.034206][ T1029] BTRFS warning (device loop2): checksum verify failed on logical 5292032 mirror 1 wanted 0x71e9986adce26f47d358c48a094a2713636d7db020873728b415408513a1db55 found 0x48208b0caa6da3a738f36ca92654a91d6adb8fa845866e92f2edd67ab26e4d81 level 0 [ 343.313117][ T8280] BTRFS warning (device loop2): failed to read root (objectid=9): -5 [ 343.373857][ T8280] BTRFS warning (device loop2): try to load backup roots slot 2 [ 343.453566][ T6039] BTRFS warning (device loop2): checksum verify failed on logical 5255168 mirror 1 wanted 0xa2bc52bf83e4351a511664158b2f7d69be610068f1b706d330a0e4f01c3ea6c4 found 0xc6551eead63db9976b787ad49a12fd3f30ff3897923188c3553a067173bededa level 1 [ 343.856386][ T8280] BTRFS warning (device loop2): couldn't read tree root [ 343.863491][ T8280] BTRFS warning (device loop2): try to load backup roots slot 3 [ 343.958054][ T8280] BTRFS warning (device loop2): global root 2 0 already exists [ 343.965844][ T8280] BTRFS error (device loop2): failed to load root extent [ 344.883354][ T8280] BTRFS error (device loop2): open_ctree failed: -17 [ 345.431740][ T8354] netlink: 32 bytes leftover after parsing attributes in process `syz.6.521'. [ 347.630998][ T8377] loop2: detected capacity change from 0 to 32768 [ 347.644087][ T8377] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.527 (8377) [ 347.715207][ T8377] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 347.737969][ T8377] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 347.769886][ T8377] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 347.807805][ T8377] BTRFS info (device loop2): trying to use backup root at mount time [ 347.840694][ T8377] BTRFS info (device loop2): using free space tree [ 347.940631][ T12] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xf187ebec4c8fe808032a11c24b221f7d5f4503ce88318e4c969ae916445d9e10 level 0 [ 347.973687][ T8377] BTRFS warning (device loop2): couldn't read tree root [ 347.981515][ T8377] BTRFS warning (device loop2): try to load backup roots slot 1 [ 348.010454][ T7083] BTRFS warning (device loop2): checksum verify failed on logical 5292032 mirror 1 wanted 0x71e9986adce26f47d358c48a094a2713636d7db020873728b415408513a1db55 found 0x48208b0caa6da3a738f36ca92654a91d6adb8fa845866e92f2edd67ab26e4d81 level 0 [ 348.071939][ T8377] BTRFS warning (device loop2): failed to read root (objectid=9): -5 [ 348.099677][ T8377] BTRFS warning (device loop2): try to load backup roots slot 2 [ 348.125203][ T59] BTRFS warning (device loop2): checksum verify failed on logical 5255168 mirror 1 wanted 0xa2bc52bf83e4351a511664158b2f7d69be610068f1b706d330a0e4f01c3ea6c4 found 0xc6551eead63db9976b787ad49a12fd3f30ff3897923188c3553a067173bededa level 1 [ 348.204960][ T8377] BTRFS warning (device loop2): couldn't read tree root [ 348.212820][ T8377] BTRFS warning (device loop2): try to load backup roots slot 3 [ 348.253266][ T8377] BTRFS warning (device loop2): global root 2 0 already exists [ 348.276554][ T8377] BTRFS error (device loop2): failed to load root extent [ 348.425354][ T8377] BTRFS error (device loop2): open_ctree failed: -17 [ 350.117258][ T8438] overlayfs: overlapping lowerdir path [ 350.124251][ T8439] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 350.132597][ T8439] overlayfs: overlapping lowerdir path [ 354.727002][ T8487] overlayfs: overlapping lowerdir path [ 354.916962][ T8486] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 354.925193][ T8486] overlayfs: overlapping lowerdir path [ 356.930068][ T8495] syzkaller0: entered promiscuous mode [ 356.936332][ T8495] syzkaller0: entered allmulticast mode [ 359.113387][ T8521] overlayfs: overlapping lowerdir path [ 359.147940][ T8521] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 359.156500][ T8521] overlayfs: overlapping lowerdir path [ 364.876654][ T8558] netlink: 'syz.8.570': attribute type 2 has an invalid length. [ 366.356302][ T8558] netlink: 32 bytes leftover after parsing attributes in process `syz.8.570'. [ 379.374610][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.381486][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.112586][ T8665] netlink: 32 bytes leftover after parsing attributes in process `syz.9.598'. [ 385.058139][ T8692] loop6: detected capacity change from 0 to 512 [ 385.206047][ T8692] EXT4-fs error (device loop6): ext4_orphan_get:1398: inode #15: comm syz.6.604: inode has both inline data and extents flags [ 385.257768][ T8692] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.604: couldn't read orphan inode 15 (err -117) [ 385.274683][ T8692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 386.883429][ T6579] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 387.272243][ T8712] netlink: 32 bytes leftover after parsing attributes in process `syz.9.609'. [ 389.507982][ T8718] netlink: 20 bytes leftover after parsing attributes in process `syz.9.611'. [ 390.003955][ T8742] loop6: detected capacity change from 0 to 512 [ 390.131878][ T8742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.165772][ T8742] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.271394][ T8749] netlink: 'syz.2.617': attribute type 4 has an invalid length. [ 392.283069][ T6579] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.631284][ T8762] netlink: 32 bytes leftover after parsing attributes in process `syz.6.620'. [ 392.682712][ T8752] netlink: 20 bytes leftover after parsing attributes in process `syz.8.618'. [ 392.746491][ T8752] netlink: 20 bytes leftover after parsing attributes in process `syz.8.618'. [ 396.616758][ T8793] netlink: 'syz.6.628': attribute type 4 has an invalid length. [ 397.704085][ T8799] netlink: 32 bytes leftover after parsing attributes in process `syz.8.630'. [ 398.520193][ T8818] 9pnet_virtio: no channels available for device syz [ 399.046943][ T8806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.634'. [ 399.099763][ T8825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.634'. [ 399.438288][ T2178] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 399.718188][ T2178] usb 3-1: device descriptor read/64, error -71 [ 400.066835][ T2178] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 400.336766][ T2178] usb 3-1: device descriptor read/64, error -71 [ 400.541655][ T2178] usb usb3-port1: attempt power cycle [ 401.090978][ T2178] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 402.296295][ T2178] usb 3-1: device descriptor read/8, error -71 [ 403.529102][ T8859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.641'. [ 403.726802][ T9] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 403.758665][ T8863] netlink: 'syz.2.642': attribute type 4 has an invalid length. [ 404.678308][ T9] usb 7-1: config 0 has no interfaces? [ 404.683873][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 404.722463][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.756781][ T9] usb 7-1: config 0 descriptor?? [ 406.061585][ T9] usb 7-1: USB disconnect, device number 10 [ 407.799664][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.6.645'. [ 407.842648][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.6.645'. [ 408.206489][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 408.432109][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 408.441108][ T8918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.649'. [ 409.184350][ T9] usb 7-1: device descriptor read/64, error -71 [ 409.255980][ T8921] netlink: 32 bytes leftover after parsing attributes in process `syz.8.650'. [ 409.444080][ T8924] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 409.460642][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 409.636441][ T9] usb 7-1: device descriptor read/64, error -71 [ 409.854945][ T9] usb usb7-port1: attempt power cycle [ 409.891820][ T8940] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 411.619588][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 411.699379][ T9] usb 7-1: device descriptor read/8, error -71 [ 412.386901][ T8959] loop9: detected capacity change from 0 to 512 [ 412.478280][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.659'. [ 412.488695][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz.6.659'. [ 413.273792][ T8959] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.396297][ T8959] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.088785][ T6956] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 417.139788][ T6956] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 417.184403][ T6956] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 417.238815][ T6956] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 417.292922][ T6956] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 417.353916][ T6956] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 417.369282][ T9003] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 417.382700][ T6956] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 417.422752][ T6956] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 417.453203][ T6956] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 417.485148][ T6956] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 418.069476][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.669'. [ 418.078539][ T9017] netlink: 24 bytes leftover after parsing attributes in process `syz.6.669'. [ 419.067640][ T9005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.668'. [ 419.103666][ T9024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.668'. [ 419.204307][ T6956] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.296021][ T34] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.396593][ T786] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 420.451067][ T34] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.764439][ T34] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.985811][ T34] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.574039][ T9045] loop6: detected capacity change from 0 to 512 [ 421.710530][ T9045] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.807631][ T9045] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.065807][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 423.074968][ T9067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.678'. [ 423.272595][ T6579] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.297142][ T6579] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.332236][ T6579] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.370030][ T6579] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.405483][ T6579] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.437131][ T6579] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.472143][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 423.483677][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 423.493187][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 423.502047][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 423.513597][ T6579] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.534047][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 423.546697][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 423.602554][ T6579] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.664484][ T6579] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 423.727042][ T6579] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 425.060049][ T6579] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.638042][ T5772] Bluetooth: hci1: command tx timeout [ 426.068662][ T9085] netlink: 20 bytes leftover after parsing attributes in process `syz.8.683'. [ 426.078666][ T9100] netlink: 20 bytes leftover after parsing attributes in process `syz.8.683'. [ 426.156904][ T9076] chnl_net:caif_netlink_parms(): no params data found [ 426.502687][ T34] hsr_slave_0: left promiscuous mode [ 426.526333][ T34] hsr_slave_1: left promiscuous mode [ 426.541414][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.554118][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.563342][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.577770][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.666566][ T34] veth1_macvtap: left promiscuous mode [ 426.672206][ T34] veth0_macvtap: left promiscuous mode [ 426.686418][ T34] veth1_vlan: left promiscuous mode [ 426.691831][ T34] veth0_vlan: left promiscuous mode [ 427.506639][ T9123] tmpfs: Bad value for 'nr_blocks' [ 427.727842][ T5772] Bluetooth: hci1: command tx timeout [ 428.473813][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.487398][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.496668][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.516380][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.525120][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 428.545385][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.801800][ T51] Bluetooth: hci1: command tx timeout [ 429.825912][ T34] team0 (unregistering): Port device team_slave_1 removed [ 429.893543][ T34] team0 (unregistering): Port device team_slave_0 removed [ 429.953353][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.014358][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.504152][ T34] bond0 (unregistering): Released all slaves [ 430.569925][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.8.689'. [ 430.579100][ T9148] netlink: 24 bytes leftover after parsing attributes in process `syz.8.689'. [ 430.689327][ T51] Bluetooth: hci0: command tx timeout [ 430.810791][ T9076] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.818683][ T9076] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.837856][ T9076] bridge_slave_0: entered allmulticast mode [ 430.867791][ T9076] bridge_slave_0: entered promiscuous mode [ 430.887632][ T9076] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.894853][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.941487][ T9076] bridge_slave_1: entered allmulticast mode [ 430.952444][ T9076] bridge_slave_1: entered promiscuous mode [ 431.054777][ T9076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.118503][ T9076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.242438][ T9076] team0: Port device team_slave_0 added [ 431.263713][ T9076] team0: Port device team_slave_1 added [ 431.345182][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.363450][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.391857][ T9076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.406788][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.413811][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.441585][ T9076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.794300][ T9076] hsr_slave_0: entered promiscuous mode [ 431.815323][ T9076] hsr_slave_1: entered promiscuous mode [ 431.823609][ T9076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.834954][ T9076] Cannot create hsr debugfs directory [ 431.886328][ T51] Bluetooth: hci1: command tx timeout [ 432.072116][ T9130] chnl_net:caif_netlink_parms(): no params data found [ 433.077998][ T51] Bluetooth: hci0: command tx timeout [ 434.190126][ T34] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.377546][ T34] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.474248][ T9130] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.484899][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.500450][ T9130] bridge_slave_0: entered allmulticast mode [ 434.513427][ T9130] bridge_slave_0: entered promiscuous mode [ 434.540969][ T9130] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.574366][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.596688][ T9130] bridge_slave_1: entered allmulticast mode [ 434.626720][ T9130] bridge_slave_1: entered promiscuous mode [ 434.712717][ T34] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.915634][ T9130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.949852][ T9130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.163680][ T34] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.179945][ T51] Bluetooth: hci0: command tx timeout [ 436.105803][ T9130] team0: Port device team_slave_0 added [ 436.131228][ T9130] team0: Port device team_slave_1 added [ 436.180351][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 436.189382][ T9197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.696'. [ 436.321909][ T9202] netlink: 'syz.8.697': attribute type 2 has an invalid length. [ 436.550287][ T9202] netlink: 32 bytes leftover after parsing attributes in process `syz.8.697'. [ 437.325556][ T51] Bluetooth: hci0: command tx timeout [ 437.451830][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.475154][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.512154][ T9130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.587492][ T9130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.603890][ T9130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.640115][ T9130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.381156][ T9130] hsr_slave_0: entered promiscuous mode [ 438.392135][ T9130] hsr_slave_1: entered promiscuous mode [ 438.403388][ T9130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.413353][ T9130] Cannot create hsr debugfs directory [ 440.364209][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.373352][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.067223][ T9216] netlink: 52 bytes leftover after parsing attributes in process `syz.8.702'. [ 441.300255][ T34] hsr_slave_0: left promiscuous mode [ 441.316850][ T34] hsr_slave_1: left promiscuous mode [ 441.323651][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.331757][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.348667][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.362124][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.384861][ T34] veth1_macvtap: left promiscuous mode [ 441.390726][ T34] veth0_macvtap: left promiscuous mode [ 441.397079][ T34] veth1_vlan: left promiscuous mode [ 441.402648][ T34] veth0_vlan: left promiscuous mode [ 441.911621][ T9232] netlink: 'syz.8.706': attribute type 2 has an invalid length. [ 444.073252][ T34] team0 (unregistering): Port device team_slave_1 removed [ 444.190446][ T34] team0 (unregistering): Port device team_slave_0 removed [ 444.251196][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.317024][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.007310][ T34] bond0 (unregistering): Released all slaves [ 445.243299][ T9233] netlink: 32 bytes leftover after parsing attributes in process `syz.8.706'. [ 451.175349][ T9076] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 451.193852][ T9076] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 451.221769][ T9076] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 451.233614][ T9076] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 451.402019][ T9130] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 451.430447][ T9130] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 451.453119][ T9130] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 451.487056][ T9130] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 453.494389][ T9076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.574855][ T9076] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.657032][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.664372][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.878586][ T9130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.131956][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.139371][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.183077][ T9130] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.265647][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.272945][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.325879][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.333166][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.054479][ T9076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.949989][ T9130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.183084][ T9076] veth0_vlan: entered promiscuous mode [ 464.304176][ T9076] veth1_vlan: entered promiscuous mode [ 464.391342][ T9130] veth0_vlan: entered promiscuous mode [ 464.443643][ T9130] veth1_vlan: entered promiscuous mode [ 464.484373][ T9076] veth0_macvtap: entered promiscuous mode [ 464.525430][ T9076] veth1_macvtap: entered promiscuous mode [ 464.612975][ T9130] veth0_macvtap: entered promiscuous mode [ 464.624720][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.637557][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.657846][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.669193][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.682477][ T9076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.693678][ T9130] veth1_macvtap: entered promiscuous mode [ 464.744227][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.755938][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.776141][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.789765][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.803370][ T9076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.825990][ T9076] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.839467][ T9076] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.863011][ T9076] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.889506][ T9076] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.613073][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.681452][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.716855][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.762807][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.802722][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.866257][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.910295][ T9130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.972850][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.989507][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.150399][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.165468][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.176063][ T9130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.194116][ T9130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.819784][ T9130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.889990][ T9130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.936170][ T9130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.974194][ T9130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.014050][ T9130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.719947][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.743547][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.835531][ T9407] netlink: 'syz.8.736': attribute type 4 has an invalid length. [ 469.919458][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.959114][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.041936][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.088050][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.173757][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.183257][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.185577][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 472.207640][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.737'. [ 476.848066][ T9453] netlink: 'syz.0.744': attribute type 4 has an invalid length. [ 479.417903][ T9475] netlink: 16 bytes leftover after parsing attributes in process `syz.8.745'. [ 479.626288][ T5835] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 480.076456][ T5835] usb 2-1: device descriptor read/64, error -71 [ 480.456549][ T5835] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 480.636346][ T5835] usb 2-1: device descriptor read/64, error -71 [ 480.756682][ T5835] usb usb2-port1: attempt power cycle [ 481.216186][ T5835] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 481.271742][ T5835] usb 2-1: device descriptor read/8, error -71 [ 481.566407][ T5835] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 481.629561][ T5835] usb 2-1: device descriptor read/8, error -71 [ 481.756403][ T5835] usb usb2-port1: unable to enumerate USB device [ 484.353001][ T9543] netlink: 'syz.1.758': attribute type 4 has an invalid length. [ 486.693924][ T27] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 486.906233][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 486.923433][ T27] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.961246][ T27] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.976875][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 487.004315][ T27] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 487.029020][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.047053][ T27] usb 3-1: config 0 descriptor?? [ 487.664976][ T27] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 487.680008][ T27] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 487.687744][ T27] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 489.056195][ T27] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 489.063876][ T27] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 489.071924][ T27] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 489.512564][ T27] usb 3-1: USB disconnect, device number 39 [ 489.806186][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 490.006257][ T9] usb 1-1: device descriptor read/64, error -71 [ 490.316290][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 490.466170][ T9] usb 1-1: device descriptor read/64, error -71 [ 490.597936][ T9] usb usb1-port1: attempt power cycle [ 491.061852][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 491.120197][ T9] usb 1-1: device descriptor read/8, error -71 [ 491.446467][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 491.550493][ T9] usb 1-1: device descriptor read/8, error -71 [ 491.748567][ T9] usb usb1-port1: unable to enumerate USB device [ 492.095510][ T9609] netlink: 'syz.8.769': attribute type 4 has an invalid length. [ 492.996565][ T5835] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 493.217187][ T5835] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 493.246749][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.278082][ T5835] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 493.306094][ T5835] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 493.314182][ T5835] usb 1-1: Manufacturer: syz [ 493.347935][ T5835] usb 1-1: config 0 descriptor?? [ 493.576102][ T5835] rc_core: IR keymap rc-hauppauge not found [ 493.582093][ T5835] Registered IR keymap rc-empty [ 493.601083][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.8.771'. [ 493.626887][ T5835] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 493.692221][ T5835] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 493.772970][ T5835] usb 1-1: USB disconnect, device number 7 [ 495.457754][ T9666] netlink: 'syz.8.779': attribute type 4 has an invalid length. [ 495.552097][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.780'. [ 497.496339][ T6788] IPVS: starting estimator thread 0... [ 497.596617][ T9677] IPVS: using max 16 ests per chain, 38400 per kthread [ 498.634727][ T9687] syzkaller0: entered promiscuous mode [ 498.647069][ T9687] syzkaller0: entered allmulticast mode [ 500.049005][ T9711] netlink: 'syz.2.789': attribute type 4 has an invalid length. [ 501.802893][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.809504][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.945793][ T9760] netlink: 'syz.8.801': attribute type 4 has an invalid length. [ 505.166297][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.8.803'. [ 508.162473][ T28] audit: type=1326 audit(1774092957.821:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff39c799 code=0x7ffc0000 [ 508.266268][ T28] audit: type=1326 audit(1774092957.841:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff39c799 code=0x7ffc0000 [ 508.358188][ T28] audit: type=1326 audit(1774092957.851:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff39c799 code=0x7ffc0000 [ 508.386268][ T28] audit: type=1326 audit(1774092957.851:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1ff39c799 code=0x7ffc0000 [ 508.419538][ T28] audit: type=1326 audit(1774092957.861:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff39c799 code=0x7ffc0000 [ 508.451462][ T28] audit: type=1326 audit(1774092957.861:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff39c799 code=0x7ffc0000 [ 508.482313][ T28] audit: type=1326 audit(1774092957.861:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff39c799 code=0x7ffc0000 [ 508.511895][ T28] audit: type=1326 audit(1774092957.861:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff39c799 code=0x7ffc0000 [ 508.563731][ T28] audit: type=1326 audit(1774092957.861:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa1ff39c799 code=0x7ffc0000 [ 508.616365][ T28] audit: type=1326 audit(1774092957.911:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.1.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff39c799 code=0x7ffc0000 [ 511.036743][ T9817] netlink: 'syz.2.811': attribute type 4 has an invalid length. [ 512.437850][ T51] Bluetooth: hci1: unknown advertising packet type: 0x22 [ 518.586337][ T9871] netlink: 'syz.1.824': attribute type 4 has an invalid length. [ 524.229290][ T9916] bridge1: entered promiscuous mode [ 524.246218][ T9916] bridge1: entered allmulticast mode [ 524.301553][ T9916] team0: Port device bridge1 added [ 524.359573][ T9919] bridge0: port 3(team0) entered blocking state [ 524.390900][ T9919] bridge0: port 3(team0) entered disabled state [ 524.409274][ T9919] team0: entered allmulticast mode [ 524.414637][ T9919] team_slave_0: entered allmulticast mode [ 524.436953][ T9919] team_slave_1: entered allmulticast mode [ 524.497817][ T9919] team0: entered promiscuous mode [ 524.542270][ T9919] team_slave_0: entered promiscuous mode [ 524.572883][ T9919] team_slave_1: entered promiscuous mode [ 524.589380][ T9919] bridge0: port 3(team0) entered blocking state [ 524.597058][ T9919] bridge0: port 3(team0) entered forwarding state [ 530.266268][ T9957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.842'. [ 531.467669][ T9962] bridge1: entered promiscuous mode [ 531.474275][ T9962] bridge1: entered allmulticast mode [ 531.528253][ T9962] team0: Port device bridge1 added [ 531.787606][ T9963] bridge0: port 3(team0) entered blocking state [ 531.796272][ T9963] bridge0: port 3(team0) entered disabled state [ 533.566462][ T9963] team0: entered allmulticast mode [ 533.954483][ T9963] team_slave_0: entered allmulticast mode [ 534.026163][ T9963] team_slave_1: entered allmulticast mode [ 534.065501][ T9963] team0: entered promiscuous mode [ 534.098945][ T9963] team_slave_0: entered promiscuous mode [ 534.104901][ T9963] team_slave_1: entered promiscuous mode [ 534.139747][ T9963] bridge0: port 3(team0) entered blocking state [ 534.146249][ T9963] bridge0: port 3(team0) entered forwarding state [ 534.447859][ T5757] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 534.648553][ T5757] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 534.683295][ T5757] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 534.718718][ T5757] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 534.734337][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.750167][ T9976] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 534.790285][ T5757] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 535.136669][ T5757] usb 2-1: USB disconnect, device number 6 [ 535.749247][ T9999] ucma_write: process 689 (syz.2.848) changed security contexts after opening file descriptor, this is not allowed. [ 536.758150][ T5772] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.773382][ T5772] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.782735][ T5772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.792116][ T5772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.800547][ T5772] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 536.809897][ T5772] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 536.905253][T10019] bridge1: entered promiscuous mode [ 536.956237][T10019] bridge1: entered allmulticast mode [ 536.988301][T10019] team0: Port device bridge1 added [ 537.030917][T10019] bridge0: port 3(team0) entered blocking state [ 537.056284][T10019] bridge0: port 3(team0) entered disabled state [ 537.062792][T10019] team0: entered allmulticast mode [ 537.097360][T10019] team_slave_0: entered allmulticast mode [ 537.125941][T10019] team_slave_1: entered allmulticast mode [ 538.457420][T10019] team0: entered promiscuous mode [ 538.597092][T10019] team_slave_0: entered promiscuous mode [ 538.617242][T10019] team_slave_1: entered promiscuous mode [ 540.506270][ T51] Bluetooth: hci4: command tx timeout [ 540.536233][T10019] bridge0: port 3(team0) entered blocking state [ 540.542684][T10019] bridge0: port 3(team0) entered forwarding state [ 542.476522][T10042] 9pnet_virtio: no channels available for device syz [ 542.526212][ T51] Bluetooth: hci4: command tx timeout [ 544.596335][ T51] Bluetooth: hci4: command tx timeout [ 545.901541][T10015] chnl_net:caif_netlink_parms(): no params data found [ 546.390971][T10015] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.399985][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.416707][T10015] bridge_slave_0: entered allmulticast mode [ 546.496435][T10015] bridge_slave_0: entered promiscuous mode [ 546.505864][T10015] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.546706][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.554065][T10015] bridge_slave_1: entered allmulticast mode [ 546.589106][T10015] bridge_slave_1: entered promiscuous mode [ 546.677701][ T51] Bluetooth: hci4: command tx timeout [ 546.780775][T10015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.832049][T10015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.153404][ T5810] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 548.315914][T10015] team0: Port device team_slave_0 added [ 548.335493][ T5810] usb 2-1: device descriptor read/64, error -71 [ 548.377215][T10015] team0: Port device team_slave_1 added [ 549.302954][T10081] bridge2: entered promiscuous mode [ 549.377211][T10081] bridge2: entered allmulticast mode [ 549.398994][T10081] team0: Port device bridge2 added [ 549.434431][T10015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.467401][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.525326][T10015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.624607][T10015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.659992][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.744957][T10015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.018985][T10015] hsr_slave_0: entered promiscuous mode [ 550.097769][T10015] hsr_slave_1: entered promiscuous mode [ 550.257503][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 555.085834][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 555.231371][T10139] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 555.237964][T10139] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 555.287645][T10139] vhci_hcd vhci_hcd.0: Device attached [ 555.576116][ T2178] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 555.607343][ T5806] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 555.766165][ T5806] usb 2-1: device descriptor read/64, error -71 [ 555.804089][T10144] vhci_hcd: connection reset by peer [ 555.839374][ T59] vhci_hcd: stop threads [ 555.844480][ T59] vhci_hcd: release socket [ 555.883425][ T59] vhci_hcd: disconnect device [ 556.046252][ T5806] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 556.113163][T10161] bridge3: entered promiscuous mode [ 556.121140][T10161] bridge3: entered allmulticast mode [ 556.142102][T10161] team0: Port device bridge3 added [ 556.218782][ T5806] usb 2-1: device descriptor read/64, error -71 [ 556.356972][ T5806] usb usb2-port1: attempt power cycle [ 556.480064][ T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.608989][T10015] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 556.674490][T10015] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 556.772881][ T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.825151][T10015] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 556.827032][ T5806] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 556.857639][T10015] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 556.896851][ T5806] usb 2-1: device descriptor read/8, error -71 [ 556.975804][ T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.178790][ T5806] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 557.238750][ T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.250295][ T5806] usb 2-1: device descriptor read/8, error -71 [ 557.386479][ T5806] usb usb2-port1: unable to enumerate USB device [ 557.638274][T10015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.811150][T10015] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.047986][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.055266][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.241309][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.248622][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.541161][T10015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 558.657500][T10184] binder_alloc: 10182: binder_alloc_buf, no vma [ 559.770004][T10015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.527595][T10219] bridge2: entered promiscuous mode [ 560.533551][T10219] bridge2: entered allmulticast mode [ 560.542942][T10219] team0: Port device bridge2 added [ 560.684029][ T2178] vhci_hcd: vhci_device speed not set [ 561.068609][T10234] binder_alloc: 10233: binder_alloc_buf, no vma [ 561.113861][T10015] veth0_vlan: entered promiscuous mode [ 561.428701][T10015] veth1_vlan: entered promiscuous mode [ 561.693609][T10015] veth0_macvtap: entered promiscuous mode [ 561.749166][T10227] netlink: 48 bytes leftover after parsing attributes in process `syz.2.886'. [ 561.779075][ T49] hsr_slave_0: left promiscuous mode [ 561.807665][ T49] hsr_slave_1: left promiscuous mode [ 561.846149][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.890007][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.904083][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.914656][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.924782][ T49] bridge_slave_1: left allmulticast mode [ 561.931365][ T49] bridge_slave_1: left promiscuous mode [ 561.938191][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.959310][ T49] bridge_slave_0: left allmulticast mode [ 561.965069][ T49] bridge_slave_0: left promiscuous mode [ 562.237654][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.356417][ T6461] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 562.376041][ T49] veth1_macvtap: left promiscuous mode [ 562.381926][ T49] veth0_macvtap: left promiscuous mode [ 562.388092][ T49] veth1_vlan: left promiscuous mode [ 562.393697][ T49] veth0_vlan: left promiscuous mode [ 562.637615][ T6461] usb 3-1: device descriptor read/64, error -71 [ 563.106459][ T6461] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 563.242944][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.256210][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.266120][ T6461] usb 3-1: device descriptor read/64, error -71 [ 563.403949][ T6461] usb usb3-port1: attempt power cycle [ 563.837678][ T6461] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 564.103745][ T49] team0 (unregistering): Port device team_slave_1 removed [ 564.261370][ T49] team0 (unregistering): Port device team_slave_0 removed [ 564.383430][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.537518][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.513510][ T49] bond0 (unregistering): Released all slaves [ 565.733576][T10227] netlink: 48 bytes leftover after parsing attributes in process `syz.2.886'. [ 565.953816][T10015] veth1_macvtap: entered promiscuous mode [ 566.514931][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.527576][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.542205][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.558408][ T6461] usb 3-1: device descriptor read/8, error -71 [ 566.604881][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.627134][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.651477][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.685125][T10262] binder: BINDER_SET_CONTEXT_MGR already set [ 566.701260][T10015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.726267][T10262] binder: 10261:10262 ioctl 4018620d 200000004a80 returned -16 [ 566.779821][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.814298][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.838934][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.860930][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.884904][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.907946][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.940581][T10015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.991515][T10015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.012292][T10015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.031480][T10015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.042156][T10015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.330705][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.357250][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.432067][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.452949][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.072319][T10283] bridge2: entered promiscuous mode [ 568.101583][T10283] bridge2: entered allmulticast mode [ 568.111241][T10283] team0: Port device bridge2 added [ 571.357338][T10314] netlink: 48 bytes leftover after parsing attributes in process `syz.2.900'. [ 571.374287][T10314] netlink: 48 bytes leftover after parsing attributes in process `syz.2.900'. [ 571.441665][T10327] binder: BINDER_SET_CONTEXT_MGR already set [ 571.449301][T10327] binder: 10325:10327 ioctl 4018620d 200000004a80 returned -16 [ 571.676249][ T6461] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 571.846231][ T6461] usb 3-1: device descriptor read/64, error -71 [ 572.128934][ T6461] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 572.306224][ T6461] usb 3-1: device descriptor read/64, error -71 [ 572.497211][ T6461] usb usb3-port1: attempt power cycle [ 572.538253][T10357] bridge3: entered promiscuous mode [ 572.543528][T10357] bridge3: entered allmulticast mode [ 572.568627][T10357] team0: Port device bridge3 added [ 572.966092][ T6461] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 573.522820][ T6461] usb 3-1: device descriptor read/8, error -71 [ 573.819935][T10374] syzkaller0: entered promiscuous mode [ 573.825489][T10374] syzkaller0: entered allmulticast mode [ 577.320632][T10405] bridge3: entered promiscuous mode [ 577.326530][T10405] bridge3: entered allmulticast mode [ 577.335403][T10405] team0: Port device bridge3 added [ 580.727438][T10463] bridge4: entered promiscuous mode [ 580.759240][T10463] bridge4: entered allmulticast mode [ 580.800841][T10463] team0: Port device bridge4 added [ 582.042553][ T51] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 588.574886][T10540] bridge5: entered promiscuous mode [ 588.620699][T10540] bridge5: entered allmulticast mode [ 588.654953][T10540] team0: Port device bridge5 added [ 588.804508][T10547] syzkaller0: entered promiscuous mode [ 588.811569][T10547] syzkaller0: entered allmulticast mode [ 588.844887][ T28] kauditd_printk_skb: 156 callbacks suppressed [ 588.844901][ T28] audit: type=1326 audit(1774093038.501:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aadb9c799 code=0x7ffc0000 [ 588.929568][ T28] audit: type=1326 audit(1774093038.541:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aadb9c799 code=0x7ffc0000 [ 589.000941][ T28] audit: type=1326 audit(1774093038.541:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aadb9c799 code=0x7ffc0000 [ 589.040757][ T28] audit: type=1326 audit(1774093038.551:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aadb9c799 code=0x7ffc0000 [ 589.074398][ T28] audit: type=1326 audit(1774093038.551:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aadb9c799 code=0x7ffc0000 [ 589.143944][ T28] audit: type=1326 audit(1774093038.561:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f1aadb9c799 code=0x7ffc0000 [ 589.228540][ T28] audit: type=1326 audit(1774093038.571:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aadb9c799 code=0x7ffc0000 [ 589.372949][ T28] audit: type=1326 audit(1774093038.571:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f1aadb9c799 code=0x7ffc0000 [ 589.540475][ T28] audit: type=1326 audit(1774093038.571:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aadb9c799 code=0x7ffc0000 [ 589.680427][ T28] audit: type=1326 audit(1774093038.591:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10543 comm="syz.2.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aadb9c799 code=0x7ffc0000 [ 592.251020][T10597] bridge4: entered promiscuous mode [ 592.269431][T10597] bridge4: entered allmulticast mode [ 592.301193][T10597] team0: Port device bridge4 added [ 592.348146][T10600] syzkaller0: entered promiscuous mode [ 592.367392][T10600] syzkaller0: entered allmulticast mode [ 592.590103][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.952'. [ 593.907449][T10630] syzkaller0: entered promiscuous mode [ 593.913021][T10630] syzkaller0: entered allmulticast mode [ 594.686870][T10650] bridge5: entered promiscuous mode [ 594.692179][T10650] bridge5: entered allmulticast mode [ 594.737023][T10650] team0: Port device bridge5 added [ 595.710868][T10670] netlink: 56 bytes leftover after parsing attributes in process `syz.0.974'. [ 596.732356][T10682] mmap: syz.2.973 (10682) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 598.687718][T10709] bridge6: entered promiscuous mode [ 598.698165][T10709] bridge6: entered allmulticast mode [ 598.713546][T10709] team0: Port device bridge6 added [ 598.886636][T10715] netlink: 56 bytes leftover after parsing attributes in process `syz.0.984'. [ 599.424444][T10720] kvm: kvm [10719]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd [ 600.084445][T10747] netlink: 56 bytes leftover after parsing attributes in process `syz.0.994'. [ 600.203829][T10750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.989'. [ 600.929900][T10755] bridge4: entered promiscuous mode [ 600.966989][T10755] bridge4: entered allmulticast mode [ 601.022600][T10755] team0: Port device bridge4 added [ 601.213177][T10761] overlayfs: missing 'workdir' [ 602.292029][T10776] netlink: 'syz.2.999': attribute type 4 has an invalid length. [ 603.459519][T10787] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1004'. [ 603.729245][T10796] bridge6: entered promiscuous mode [ 603.734531][T10796] bridge6: entered allmulticast mode [ 603.789515][T10796] team0: Port device bridge6 added [ 606.665567][T10821] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1014'. [ 607.734901][T10815] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1011'. [ 607.807066][T10815] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1011'. [ 608.028073][T10846] bridge5: entered promiscuous mode [ 608.042608][T10846] bridge5: entered allmulticast mode [ 608.055114][T10846] team0: Port device bridge5 added [ 608.127072][ T6461] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 608.306294][ T6461] usb 5-1: device descriptor read/64, error -71 [ 608.616278][ T6461] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 609.636142][ T6461] usb 5-1: device descriptor read/64, error -71 [ 609.796368][ T6461] usb usb5-port1: attempt power cycle [ 610.423417][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 610.423434][ T28] audit: type=1326 audit(1774093060.081:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.0.1023" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3410b9c799 code=0x0 [ 610.608542][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 611.123647][T10894] bridge6: entered promiscuous mode [ 611.146044][T10894] bridge6: entered allmulticast mode [ 611.173061][T10894] team0: Port device bridge6 added [ 612.009201][T10905] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1024'. [ 613.220223][T10912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1033'. [ 613.527785][ T5807] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 613.715687][ T5807] usb 5-1: device descriptor read/64, error -71 [ 613.935411][T10943] bridge7: entered promiscuous mode [ 613.949708][T10943] bridge7: entered allmulticast mode [ 613.974166][T10943] team0: Port device bridge7 added [ 613.989814][T10947] syzkaller0: entered promiscuous mode [ 613.995565][T10947] syzkaller0: entered allmulticast mode [ 614.026300][ T5807] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 614.206142][ T5807] usb 5-1: device descriptor read/64, error -71 [ 614.304304][T10953] Bluetooth: MGMT ver 1.22 [ 614.337121][ T5807] usb usb5-port1: attempt power cycle [ 614.766162][ T5807] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 614.818288][ T5807] usb 5-1: device descriptor read/8, error -71 [ 615.016174][ T23] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 615.106361][ T5807] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 615.251647][ T23] usb 2-1: config 0 has no interfaces? [ 615.276911][ T23] usb 2-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 615.316461][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.331399][ T5807] usb 5-1: device descriptor read/8, error -71 [ 615.393497][ T23] usb 2-1: config 0 descriptor?? [ 615.486487][ T5807] usb usb5-port1: unable to enumerate USB device [ 616.001725][T10990] syzkaller0: entered promiscuous mode [ 616.022096][T10990] syzkaller0: entered allmulticast mode [ 617.339003][ T6461] usb 2-1: USB disconnect, device number 13 [ 617.405877][T11002] bridge7: entered promiscuous mode [ 617.426287][T11002] bridge7: entered allmulticast mode [ 617.434565][T11002] team0: Port device bridge7 added [ 619.585127][T11037] overlayfs: failed to resolve './file0': -2 [ 619.797262][T11028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1056'. [ 620.796097][ T6461] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 621.056102][ T6461] usb 2-1: device descriptor read/64, error -71 [ 621.261324][T11054] bridge1: entered promiscuous mode [ 621.266769][T11054] bridge1: entered allmulticast mode [ 621.283742][T11054] team0: Port device bridge1 added [ 621.312875][T11054] bridge0: port 3(team0) entered blocking state [ 621.329256][T11054] bridge0: port 3(team0) entered disabled state [ 621.345556][T11054] team0: entered allmulticast mode [ 621.346546][ T6461] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 621.360119][T11054] team_slave_0: entered allmulticast mode [ 621.374794][T11054] team_slave_1: entered allmulticast mode [ 621.393279][T11054] team0: entered promiscuous mode [ 621.401331][T11054] team_slave_0: entered promiscuous mode [ 621.415027][T11054] team_slave_1: entered promiscuous mode [ 621.435403][T11054] bridge0: port 3(team0) entered blocking state [ 621.441949][T11054] bridge0: port 3(team0) entered forwarding state [ 621.517245][ T6461] usb 2-1: device descriptor read/64, error -71 [ 621.660218][ T6461] usb usb2-port1: attempt power cycle [ 622.086181][ T6461] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 622.385139][ T6461] usb 2-1: device not accepting address 16, error -71 [ 622.560344][T11080] overlayfs: failed to resolve './file0': -2 [ 622.858505][T11083] netlink: 'syz.4.1069': attribute type 3 has an invalid length. [ 622.942395][T11083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1069'. [ 622.986699][T11083] ------------[ cut here ]------------ [ 622.992363][T11083] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 623.023972][ T5772] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 623.043230][T11083] WARNING: CPU: 1 PID: 11083 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0 [ 623.052764][T11083] Modules linked in: [ 623.057097][T11083] CPU: 1 PID: 11083 Comm: syz.4.1069 Not tainted syzkaller #0 [ 623.064594][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.074996][T11083] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 623.080768][T11083] Code: f8 eb 59 e8 78 4f d9 f8 c6 05 51 c9 c7 05 01 b9 10 00 00 00 48 c7 c7 40 4f c7 8b 4c 89 f6 48 c7 c2 c0 4f c7 8b e8 96 09 a3 f8 <0f> 0b e9 86 f0 ff ff e8 4a 4f d9 f8 eb 24 e8 43 4f d9 f8 c6 05 f4 [ 623.100935][T11083] RSP: 0018:ffffc900038fed40 EFLAGS: 00010246 [ 623.107284][T11083] RAX: a19eb28ca038ed00 RBX: ffff88805f513000 RCX: 0000000000080000 [ 623.115291][T11083] RDX: ffffc90014891000 RSI: 000000000000742b RDI: 000000000000742c [ 623.123535][T11083] RBP: ffffc900038feef8 R08: ffffc900038fe947 R09: 1ffff9200071fd28 [ 623.131724][T11083] R10: dffffc0000000000 R11: fffff5200071fd29 R12: ffff88805f7e6c00 [ 623.139897][T11083] R13: ffff88805f7e6ce8 R14: 0000000000000020 R15: ffff88805a43bb80 [ 623.148037][T11083] FS: 00007f966cd846c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 623.157150][T11083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 623.163757][T11083] CR2: 000055d621a35048 CR3: 000000007b35b000 CR4: 00000000003526e0 [ 623.171816][T11083] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 623.179906][T11083] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 623.188154][T11083] Call Trace: [ 623.191472][T11083] [ 623.194434][T11083] ? tc_new_tfilter+0x8c6/0x1640 [ 623.199506][T11083] ? u32_get+0x370/0x370 [ 623.203795][T11083] tc_new_tfilter+0xe4f/0x1640 [ 623.208664][T11083] ? trace_irq_disable+0x37/0xe0 [ 623.213727][T11083] ? tcf_proto_signal_destroying+0x240/0x240 [ 623.219803][T11083] ? rcu_read_unlock+0x8c/0xa0 [ 623.224903][T11083] ? tcf_proto_signal_destroying+0x240/0x240 [ 623.231017][T11083] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 623.236317][T11083] ? tcf_proto_signal_destroying+0x240/0x240 [ 623.242446][T11083] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 623.247644][T11083] ? lockdep_hardirqs_on+0x98/0x150 [ 623.252937][T11083] ? rtnetlink_bind+0x80/0x80 [ 623.257763][T11083] ? preempt_schedule_common+0x82/0xc0 [ 623.263287][T11083] ? preempt_schedule+0xc0/0xd0 [ 623.268259][T11083] ? schedule_preempt_disabled+0x20/0x20 [ 623.273958][T11083] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 623.280051][T11083] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 623.286115][T11083] ? lock_chain_count+0x20/0x20 [ 623.291064][T11083] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 623.297039][T11083] ? lockdep_hardirqs_on+0x98/0x150 [ 623.302265][T11083] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 623.308222][T11083] ? _raw_spin_unlock+0x40/0x40 [ 623.313202][T11083] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 623.319923][T11083] netlink_rcv_skb+0x241/0x4d0 [ 623.324971][T11083] ? rtnetlink_bind+0x80/0x80 [ 623.329982][T11083] ? netlink_ack+0x1180/0x1180 [ 623.334782][T11083] ? __lock_acquire+0x7d40/0x7d40 [ 623.339934][T11083] ? __rcu_read_unlock+0x7c/0xd0 [ 623.344941][T11083] ? netlink_deliver_tap+0x2e/0x1b0 [ 623.350238][T11083] netlink_unicast+0x751/0x8d0 [ 623.355082][T11083] netlink_sendmsg+0x8d0/0xbf0 [ 623.359946][T11083] ? netlink_getsockopt+0x590/0x590 [ 623.365176][T11083] ? aa_sock_msg_perm+0x94/0x150 [ 623.370171][T11083] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 623.375481][T11083] ? security_socket_sendmsg+0x80/0xa0 [ 623.381037][T11083] ? netlink_getsockopt+0x590/0x590 [ 623.386303][T11083] ____sys_sendmsg+0x5ba/0x960 [ 623.391095][T11083] ? __asan_memset+0x22/0x40 [ 623.395715][T11083] ? __sys_sendmsg_sock+0x30/0x30 [ 623.401328][T11083] ? __import_iovec+0x5f2/0x850 [ 623.406389][T11083] ? import_iovec+0x73/0xa0 [ 623.410952][T11083] ___sys_sendmsg+0x2a6/0x360 [ 623.415668][T11083] ? __sys_sendmsg+0x2a0/0x2a0 [ 623.420552][T11083] __sys_sendmmsg+0x2ca/0x510 [ 623.425289][T11083] ? __ia32_sys_sendmsg+0x90/0x90 [ 623.430539][T11083] ? __ia32_sys_get_robust_list+0x110/0x110 [ 623.436669][T11083] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 623.442696][T11083] ? lock_chain_count+0x20/0x20 [ 623.447650][T11083] __x64_sys_sendmmsg+0xa0/0xb0 [ 623.452540][T11083] do_syscall_64+0x55/0xa0 [ 623.457103][T11083] ? clear_bhb_loop+0x40/0x90 [ 623.461813][T11083] ? clear_bhb_loop+0x40/0x90 [ 623.466541][T11083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.472490][T11083] RIP: 0033:0x7f966bf9c799 [ 623.477115][T11083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.496906][T11083] RSP: 002b:00007f966cd84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 623.505386][T11083] RAX: ffffffffffffffda RBX: 00007f966c215fa0 RCX: 00007f966bf9c799 [ 623.513435][T11083] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 623.521594][T11083] RBP: 00007f966c032c99 R08: 0000000000000000 R09: 0000000000000000 [ 623.529972][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.538090][T11083] R13: 00007f966c216038 R14: 00007f966c215fa0 R15: 00007fff36cf2a28 [ 623.546262][T11083] [ 623.549302][T11083] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 623.556623][T11083] CPU: 1 PID: 11083 Comm: syz.4.1069 Not tainted syzkaller #0 [ 623.564112][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.574185][T11083] Call Trace: [ 623.577505][T11083] [ 623.580462][T11083] dump_stack_lvl+0x18c/0x250 [ 623.585180][T11083] ? show_regs_print_info+0x20/0x20 [ 623.590410][T11083] ? load_image+0x400/0x400 [ 623.594952][T11083] panic+0x2dc/0x730 [ 623.598900][T11083] ? bpf_jit_dump+0xd0/0xd0 [ 623.603516][T11083] __warn+0x2e0/0x470 [ 623.607610][T11083] ? u32_change+0x1c5a/0x24f0 [ 623.612500][T11083] ? u32_change+0x1c5a/0x24f0 [ 623.617198][T11083] report_bug+0x2be/0x4f0 [ 623.621546][T11083] ? u32_change+0x1c5a/0x24f0 [ 623.626294][T11083] ? u32_change+0x1c5a/0x24f0 [ 623.631085][T11083] ? u32_change+0x1c5c/0x24f0 [ 623.635803][T11083] handle_bug+0xcf/0x120 [ 623.640143][T11083] exc_invalid_op+0x1a/0x50 [ 623.644768][T11083] asm_exc_invalid_op+0x1a/0x20 [ 623.649736][T11083] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 623.655048][T11083] Code: f8 eb 59 e8 78 4f d9 f8 c6 05 51 c9 c7 05 01 b9 10 00 00 00 48 c7 c7 40 4f c7 8b 4c 89 f6 48 c7 c2 c0 4f c7 8b e8 96 09 a3 f8 <0f> 0b e9 86 f0 ff ff e8 4a 4f d9 f8 eb 24 e8 43 4f d9 f8 c6 05 f4 [ 623.674691][T11083] RSP: 0018:ffffc900038fed40 EFLAGS: 00010246 [ 623.680782][T11083] RAX: a19eb28ca038ed00 RBX: ffff88805f513000 RCX: 0000000000080000 [ 623.688766][T11083] RDX: ffffc90014891000 RSI: 000000000000742b RDI: 000000000000742c [ 623.696756][T11083] RBP: ffffc900038feef8 R08: ffffc900038fe947 R09: 1ffff9200071fd28 [ 623.704757][T11083] R10: dffffc0000000000 R11: fffff5200071fd29 R12: ffff88805f7e6c00 [ 623.712804][T11083] R13: ffff88805f7e6ce8 R14: 0000000000000020 R15: ffff88805a43bb80 [ 623.720811][T11083] ? tc_new_tfilter+0x8c6/0x1640 [ 623.725792][T11083] ? u32_get+0x370/0x370 [ 623.730072][T11083] tc_new_tfilter+0xe4f/0x1640 [ 623.734872][T11083] ? trace_irq_disable+0x37/0xe0 [ 623.739874][T11083] ? tcf_proto_signal_destroying+0x240/0x240 [ 623.745999][T11083] ? rcu_read_unlock+0x8c/0xa0 [ 623.750793][T11083] ? tcf_proto_signal_destroying+0x240/0x240 [ 623.756815][T11083] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 623.761967][T11083] ? tcf_proto_signal_destroying+0x240/0x240 [ 623.767975][T11083] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 623.772942][T11083] ? lockdep_hardirqs_on+0x98/0x150 [ 623.778197][T11083] ? rtnetlink_bind+0x80/0x80 [ 623.782900][T11083] ? preempt_schedule_common+0x82/0xc0 [ 623.788505][T11083] ? preempt_schedule+0xc0/0xd0 [ 623.793389][T11083] ? schedule_preempt_disabled+0x20/0x20 [ 623.799054][T11083] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 623.805068][T11083] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 623.811073][T11083] ? lock_chain_count+0x20/0x20 [ 623.815948][T11083] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 623.821897][T11083] ? lockdep_hardirqs_on+0x98/0x150 [ 623.827112][T11083] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 623.833020][T11083] ? _raw_spin_unlock+0x40/0x40 [ 623.837939][T11083] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 623.844764][T11083] netlink_rcv_skb+0x241/0x4d0 [ 623.849552][T11083] ? rtnetlink_bind+0x80/0x80 [ 623.854272][T11083] ? netlink_ack+0x1180/0x1180 [ 623.859061][T11083] ? __lock_acquire+0x7d40/0x7d40 [ 623.864105][T11083] ? __rcu_read_unlock+0x7c/0xd0 [ 623.869058][T11083] ? netlink_deliver_tap+0x2e/0x1b0 [ 623.874278][T11083] netlink_unicast+0x751/0x8d0 [ 623.879071][T11083] netlink_sendmsg+0x8d0/0xbf0 [ 623.883860][T11083] ? netlink_getsockopt+0x590/0x590 [ 623.889075][T11083] ? aa_sock_msg_perm+0x94/0x150 [ 623.894114][T11083] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 623.899416][T11083] ? security_socket_sendmsg+0x80/0xa0 [ 623.904907][T11083] ? netlink_getsockopt+0x590/0x590 [ 623.910234][T11083] ____sys_sendmsg+0x5ba/0x960 [ 623.915038][T11083] ? __asan_memset+0x22/0x40 [ 623.919744][T11083] ? __sys_sendmsg_sock+0x30/0x30 [ 623.924795][T11083] ? __import_iovec+0x5f2/0x850 [ 623.929773][T11083] ? import_iovec+0x73/0xa0 [ 623.934293][T11083] ___sys_sendmsg+0x2a6/0x360 [ 623.939004][T11083] ? __sys_sendmsg+0x2a0/0x2a0 [ 623.943837][T11083] __sys_sendmmsg+0x2ca/0x510 [ 623.948546][T11083] ? __ia32_sys_sendmsg+0x90/0x90 [ 623.953649][T11083] ? __ia32_sys_get_robust_list+0x110/0x110 [ 623.959595][T11083] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 623.965622][T11083] ? lock_chain_count+0x20/0x20 [ 623.970546][T11083] __x64_sys_sendmmsg+0xa0/0xb0 [ 623.975443][T11083] do_syscall_64+0x55/0xa0 [ 623.979888][T11083] ? clear_bhb_loop+0x40/0x90 [ 623.984606][T11083] ? clear_bhb_loop+0x40/0x90 [ 623.989315][T11083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.995276][T11083] RIP: 0033:0x7f966bf9c799 [ 623.999711][T11083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.019342][T11083] RSP: 002b:00007f966cd84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 624.027783][T11083] RAX: ffffffffffffffda RBX: 00007f966c215fa0 RCX: 00007f966bf9c799 [ 624.035788][T11083] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 624.043799][T11083] RBP: 00007f966c032c99 R08: 0000000000000000 R09: 0000000000000000 [ 624.051805][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.059796][T11083] R13: 00007f966c216038 R14: 00007f966c215fa0 R15: 00007fff36cf2a28 [ 624.067794][T11083] [ 624.071440][T11083] Kernel Offset: disabled [ 624.075876][T11083] Rebooting in 86400 seconds..