last executing test programs: 4m17.95289233s ago: executing program 0 (id=210): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)="0ef9924e", 0x4}], 0x1}}], 0x1, 0x4048884) 4m16.242197067s ago: executing program 0 (id=218): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2, 0xe4}, 0x18) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000540)={'pim6reg0\x00', 0xffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) readv(r9, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, 0x0) preadv(r11, &(0x7f0000001cc0), 0x0, 0x0, 0xa3) write(r10, &(0x7f0000000000)="fa", 0xfffffdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r15, 0x0, r13, 0x0, 0x40000000000002, 0x2) fcntl$setstatus(r13, 0x4, 0x46800) vmsplice(r12, &(0x7f0000000180), 0x0, 0x8) write$binfmt_elf64(r14, &(0x7f0000000000)=ANY=[], 0x18c6) sysinfo(0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3d8, 0x218, 0x218, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x5, 0x0, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x3, 0x7, 0x7fff, 0x0, 0x9, 0x1, 'ip6erspan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010101, @multicast2, 0x7}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @remote, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)}], 0x1}, 0x94) 4m9.871976698s ago: executing program 0 (id=227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 4m7.645936244s ago: executing program 0 (id=235): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2, 0xe4}, 0x18) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000540)={'pim6reg0\x00', 0xffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) readv(r9, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, 0x0) preadv(r11, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1, 0x0, 0xa3) write(r10, &(0x7f0000000000)="fa", 0xfffffdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r15, 0x0, r13, 0x0, 0x40000000000002, 0x2) fcntl$setstatus(r13, 0x4, 0x46800) vmsplice(r12, &(0x7f0000000180), 0x0, 0x8) write$binfmt_elf64(r14, &(0x7f0000000000)=ANY=[], 0x18c6) sysinfo(0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3d8, 0x218, 0x218, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x5, 0x0, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x3, 0x7, 0x7fff, 0x0, 0x9, 0x1, 'ip6erspan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010101, @multicast2, 0x7}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @remote, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)}], 0x1}, 0x94) 4m1.264107635s ago: executing program 0 (id=241): r0 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4m0.019096345s ago: executing program 0 (id=246): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m43.873627594s ago: executing program 32 (id=246): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m9.187441185s ago: executing program 3 (id=343): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x700}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x4000) 3m8.547280723s ago: executing program 3 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32=r1], 0x1000f) 3m7.335054131s ago: executing program 3 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x0) 3m5.842932327s ago: executing program 3 (id=354): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x1e, 0x0, 0x0) 3m4.996493377s ago: executing program 1 (id=355): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x700}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x4000) 3m3.98346065s ago: executing program 3 (id=358): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2, 0xe4}, 0x18) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000540)={'pim6reg0\x00', 0xffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) readv(r9, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, 0x0) preadv(r11, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1, 0x0, 0xa3) write(r10, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r15, 0x0, r13, 0x0, 0x40000000000002, 0x2) fcntl$setstatus(r13, 0x4, 0x46800) vmsplice(r12, &(0x7f0000000180), 0x0, 0x8) write$binfmt_elf64(r14, &(0x7f0000000000)=ANY=[], 0x18c6) sysinfo(0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3d8, 0x218, 0x218, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x5, 0x0, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x3, 0x7, 0x7fff, 0x0, 0x9, 0x1, 'ip6erspan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010101, @multicast2, 0x7}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @remote, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)}], 0x1}, 0x94) 3m3.891930778s ago: executing program 1 (id=359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32=r1], 0x1000f) 3m2.696424954s ago: executing program 3 (id=361): creat(&(0x7f00000002c0)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setrlimit(0x8, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3da120f75723415d029b6fcea374dc26e54840afc65a79ba011b52f3033baee89b19f17c6065b37f9222c7b3ef94e2f8beea141607cfdf5388c3476db8e3282e4404c4394a", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',k']) truncate(0x0, 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r6 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r6, 0x16) socket$nl_netfilter(0x10, 0x3, 0xc) 3m2.618212859s ago: executing program 1 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035003c"], 0x74}}, 0x0) 3m1.646363936s ago: executing program 1 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x0) 3m0.477602372s ago: executing program 1 (id=365): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000"], 0x50) r5 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000002000099"], 0x10}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 3m0.363430741s ago: executing program 2 (id=366): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1", 0x1e2}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0d", 0x16}, {&(0x7f00000000c0)="63686a201e1333f9f36772", 0xb}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x4044040) 2m55.44173972s ago: executing program 1 (id=367): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB="63726561746f723dc56e4aeb2c6e6f6465636f6d706f73652c6e6f6465636f6d706f73652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d63703836322c6465636f6d706f73652c6e6f6465636f6d706f73652c747970653ddf5cd7822c747970653d3562f9492c000d636f31f7e2e29beddb4ef82378682a8bca041768e6169888b12b7f494512dc26ff4f2c465fd72a12deca9a90c583035a0dbc483cec6bd64deb7182de40eb18fcd2a95121eea8d2f6d20ae3e32e000000000000"], 0x3, 0x6b3, &(0x7f0000000780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ftruncate(r0, 0xc254) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) r2 = getpid() ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000001540), 0x4001) syz_80211_inject_frame(0x0, &(0x7f0000001780)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xb}, @device_b, @device_b, @random="0aff426f3d63", {0x2, 0x4}}, 0x0, 0x25, @random=0x7, @val={0x1, 0x1, [{0x48, 0x1}]}, @void}, 0x21) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2c, 0x4, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0x2, 0x0, &(0x7f00000003c0)=""/4096, 0x1000) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000013c0)=ANY=[@ANYRES16, @ANYRES16=r3, @ANYBLOB="988cf302a9d2c704c903175eb81612cec2bcb8c0637567c235d972acd8c2421fef66fa262b5669911523f540b53d28a03e0f653fec73300bab088d0a98de9f8f64b09e2f3ac038616d8e0fdb6d0b4e451718529dd9da6d2a9655c02a1f04da3ba8d888f27c98ee495b9d1decaa78ee451ccc1c5acf9e3b71bc2fe689e0cbafcf7b195ad9122792e964dd1ed4ae1c701638e058287f8d07e08dfff32fdea9ca59", @ANYRES64=r1, @ANYBLOB="1e26e77d4437b6aa0dc7f8c24ffec3858e0af9788671"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x10, 0x3, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=@v1={0x1000000, [{0xbe, 0x6}]}, 0xc, 0x2) write(r6, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) 2m55.209205617s ago: executing program 2 (id=369): r0 = syz_io_uring_setup(0x1370, &(0x7f0000000580)={0x0, 0x49fa, 0x10, 0x4, 0x4c}, &(0x7f00000001c0), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300), 0x0) 2m53.407389272s ago: executing program 2 (id=370): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2, 0xe4}, 0x18) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000540)={'pim6reg0\x00', 0xffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) readv(r9, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, 0x0) preadv(r11, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1, 0x0, 0xa3) write(r10, &(0x7f0000000000)="fa", 0xfffffdef) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r13, 0x0, 0xffffffffffffffff, 0x0, 0x40000000000002, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x8) write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[], 0x18c6) sysinfo(0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3d8, 0x218, 0x218, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x5, 0x0, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x3, 0x7, 0x7fff, 0x0, 0x9, 0x1, 'ip6erspan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010101, @multicast2, 0x7}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @remote, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)}], 0x1}, 0x94) 2m51.555178118s ago: executing program 2 (id=372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035003c"], 0x74}}, 0x0) 2m50.536771524s ago: executing program 2 (id=373): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3, @loopback, 0x6}, {0xa, 0x4e20, 0xf, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1}, r3, 0x31}}, 0x48) 2m49.245029737s ago: executing program 2 (id=375): r0 = syz_io_uring_setup(0x23a, &(0x7f0000000200)={0x0, 0x51c4, 0x4, 0xffffffff}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) accept(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={0x0, 0x80000001}, 0x0) r5 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x2, r5) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r6 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x4, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x4, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}]}) 2m44.957994263s ago: executing program 33 (id=361): creat(&(0x7f00000002c0)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setrlimit(0x8, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3da120f75723415d029b6fcea374dc26e54840afc65a79ba011b52f3033baee89b19f17c6065b37f9222c7b3ef94e2f8beea141607cfdf5388c3476db8e3282e4404c4394a", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',k']) truncate(0x0, 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="cb16000201000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d3287a7b01ab84d336f3c0f45a0642d6f2c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d253e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd3153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd4"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r6 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r6, 0x16) socket$nl_netfilter(0x10, 0x3, 0xc) 2m39.392800086s ago: executing program 34 (id=367): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB="63726561746f723dc56e4aeb2c6e6f6465636f6d706f73652c6e6f6465636f6d706f73652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d63703836322c6465636f6d706f73652c6e6f6465636f6d706f73652c747970653ddf5cd7822c747970653d3562f9492c000d636f31f7e2e29beddb4ef82378682a8bca041768e6169888b12b7f494512dc26ff4f2c465fd72a12deca9a90c583035a0dbc483cec6bd64deb7182de40eb18fcd2a95121eea8d2f6d20ae3e32e000000000000"], 0x3, 0x6b3, &(0x7f0000000780)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBiNVIFjUjsrEqChNSAEMohQhFcerUSp7HipJXjorRCZAMUJE6cUA8cilA49IQQQionRDkjIXHhlHskbhxyAIzmz9pre+PYieN1289Hmp03+96895tf5s/ubKwJ8Jl1/vXs76fI+RMXbpXL9+72Fu7d7V0flJNMJGkl7XqWopsUHyfnUk/5fPlm013xsHFevf9R0X7/w1691G6mqn1rs/U2GNmynxxYWdiXZKou/mcLHbZG91dNVT+XVvt7TMVK3GXCjg8SB+O2vEF/tXLUobHW1o9bYM+6XV83N5hMDqa+upafA9KcHR59Zhi/Tc9N/d2LAwAAAJ6Wkd/lhz3zIA9yK4d2JxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4dCjqZwYWzdQalKdSDJ7/3xl6pn5nzOE+ofeuVLPvPjPuQAAAAAAAAADgiRx7kAe5lUOD5eWi+s3/pWrhcPX6ubydm5nLYk7mVmazlKUsZibJ5FBHnVuzS0uLMxvX/GXKNZeXl283a54euebptXH11wc66n8abGgEAAAAAAAAAJ9ZP8r51d//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLyiSffWsmg4PypNptZMcSNIpplaad8Ya7A7487gDAAAAgKev28wPFf+rC8tF9Z3/SPW9/0Dezo0sZT5LWchcLlf3Aupv/a2/93sL9+72rpfTxo6/8a9txVH1mPrew+iRp6sWL6yscT7fzvdyIlO5mMXM5/uZzVLmMpVvVaXZFJls7l5M3rvbzSDWjfGeW7N0cX1sx4bKZXxHq0i6uZL5KraTudQZhN5q2h0dGu2PnWTdiHfK7BSvNbaYo8vNvNyiXzTzvWGy2vL9KxmZbnJfZuPZ4bxvzP0295P1I82ktXIP6vDqKOXi+pEeK+cHm3mZ658+3Zxv81ba2kz0f14uDfa+I5vnPPnyP/5y8WrrxrWrV26e2Du70WNav0/0hjLx4pYysVBmov8EmTjwJPHvnE6Tjfosur2z5UvVuocyn+/kzVzOXM5kOjM5m+l8LafTy+mhvL6weV6rY621vWPt+JeaQnlN+tnQtWnXTDysoszrs0N5HT7TTVZ1w++sZum5LWSp6GR0lv45MpT2F5pCOcaPh64447c+EzNDmXh+80z8+r/LSW4u3Li2eHX2rS2O93IzLw/b99aem3+zIxu0fc3mlvvLc+U/VurLxvDeUdY9P6hbl69O84tLu+lsTV0n1fFc1z3qSC17OnJnVE913YsjR+lVdUeH6tZ8ysmbWVj5FNLY9YMUgC04+MrBTvd+92/dD7o/6V7tXjjwzYmzE1/sZP9f23/a97vWb1tfL17JB/lhDo07UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS4+c6712YXFuYW92AhrR3u8M7IqkEq6nc6I9ocyx7IxiejMLHZHvX71I9resjqnXHE3M1D49ndQtq7MNZERlRdWHmnm7RW4klybY884A54Gk4tXX/r1M133v3K/PXZN+bemLtx+uyZ1870vjpz+9SV+YW56fq1adwec7DAjlr9GDDuSAAAAAAAAAAAAICt2o0/bxgxbNEfw7YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn0znX8/+forMTJ+cLpfv3e0tlNOgvNqynaSVpPhBUnycnEs9ZXKou+Jh47x6/6Nfvfz+h73VvtqD9q116/3h38vL29yKfjNlKsm+Zv5oE1vq79JQf/1tBlYrVrawTNjxQeJg3P4fAAD//+/HBYc=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ftruncate(r0, 0xc254) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) r2 = getpid() ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000001540), 0x4001) syz_80211_inject_frame(0x0, &(0x7f0000001780)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xb}, @device_b, @device_b, @random="0aff426f3d63", {0x2, 0x4}}, 0x0, 0x25, @random=0x7, @val={0x1, 0x1, [{0x48, 0x1}]}, @void}, 0x21) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2c, 0x4, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0x2, 0x0, &(0x7f00000003c0)=""/4096, 0x1000) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000013c0)=ANY=[@ANYRES16, @ANYRES16=r3, @ANYBLOB="988cf302a9d2c704c903175eb81612cec2bcb8c0637567c235d972acd8c2421fef66fa262b5669911523f540b53d28a03e0f653fec73300bab088d0a98de9f8f64b09e2f3ac038616d8e0fdb6d0b4e451718529dd9da6d2a9655c02a1f04da3ba8d888f27c98ee495b9d1decaa78ee451ccc1c5acf9e3b71bc2fe689e0cbafcf7b195ad9122792e964dd1ed4ae1c701638e058287f8d07e08dfff32fdea9ca59", @ANYRES64=r1, @ANYBLOB="1e26e77d4437b6aa0dc7f8c24ffec3858e0af9788671"]) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x10, 0x3, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=@v1={0x1000000, [{0xbe, 0x6}]}, 0xc, 0x2) write(r6, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) 2m33.571984237s ago: executing program 35 (id=375): r0 = syz_io_uring_setup(0x23a, &(0x7f0000000200)={0x0, 0x51c4, 0x4, 0xffffffff}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) accept(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={0x0, 0x80000001}, 0x0) r5 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x2, r5) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r6 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x4, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x4, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}]}) 18.52423832s ago: executing program 8 (id=492): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000000)) setreuid(0xee00, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x2000c}]}}}]}, 0x44}}, 0x48000) 15.238900611s ago: executing program 8 (id=497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe0000000) 12.18094711s ago: executing program 7 (id=499): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x13, 0x2ff, &(0x7f0000000300)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='cpuacct.usage_all\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x44) creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) 10.994491164s ago: executing program 8 (id=502): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_io_uring_setup(0x498, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3, @loopback, 0x6}, {0xa, 0x4e20, 0xf, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1}, r4, 0x31}}, 0x48) 10.899491616s ago: executing program 7 (id=503): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 10.779775768s ago: executing program 4 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 10.614660223s ago: executing program 5 (id=505): ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x3) 9.784426149s ago: executing program 5 (id=506): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) userfaultfd(0x801) r3 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', 0x0, &(0x7f00000004c0)='msdos\x00', 0xfffffffffffffffa) request_key(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000400)='\x00', r3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r4, 0x1) listen(r4, 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0xbc, 0x8000e, 0x2, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) shutdown(r4, 0x0) 9.670498976s ago: executing program 8 (id=507): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") 9.647549175s ago: executing program 4 (id=508): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r1, &(0x7f0000010800)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1, 0x2, 0x5) 7.700308912s ago: executing program 4 (id=509): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2, 0xe4}, 0x18) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000540)={'pim6reg0\x00', 0xffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) readv(r9, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, 0x0) preadv(r11, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1, 0x0, 0xa3) write(r10, &(0x7f0000000000)="fa", 0xfffffdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r13, 0x0, 0x40000000000002, 0x2) fcntl$setstatus(r13, 0x4, 0x46800) vmsplice(r12, &(0x7f0000000180), 0x0, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x18c6) sysinfo(0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3d8, 0x218, 0x218, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x5, 0x0, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x3, 0x7, 0x7fff, 0x0, 0x9, 0x1, 'ip6erspan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010101, @multicast2, 0x7}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @remote, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)}], 0x1}, 0x94) 7.13077878s ago: executing program 8 (id=510): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = creat(&(0x7f0000000500)='./file1\x00', 0x1ae) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) io_setup(0x3, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x1, 0x0, r0, 0x0, 0x0, 0xa00}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x6, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000020000000000000000000000a5b828748dfb62c5b6672da8024f73028e23c448b9307f7f3b9403c8245f95fbc57d17617bfb677d594eb6eb79bee100085c4faf1b13f8b9ad924d63", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xcd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10) 6.097321803s ago: executing program 5 (id=511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040055}, 0x4045) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.309405393s ago: executing program 7 (id=512): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x13, 0x2ff, &(0x7f0000000300)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='cpuacct.usage_all\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) 5.034848207s ago: executing program 4 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 3.984679674s ago: executing program 4 (id=514): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x13, 0x2ff, &(0x7f0000000300)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='cpuacct.usage_all\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x44) 3.670321744s ago: executing program 7 (id=515): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x10b042, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x3) 2.573567643s ago: executing program 5 (id=516): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3, @loopback, 0x6}, {0xa, 0x4e20, 0xf, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1}, r3, 0x31}}, 0x48) 1.507836761s ago: executing program 7 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1.432406572s ago: executing program 4 (id=518): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x12, &(0x7f0000000140)={[{@enospc_debug}, {@enospc_debug}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x510c, &(0x7f0000005180)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX/jei4r/D8W2kmPK2vzwpGkcDoW8vOhWziWFE7EM+3ztfl008L3sZBfYDEfr6BY070kIulxtV+PhcINe5ztHhwAAOCeEsNznmXHepshjbLztUE7rB60w8igHeqDdhhNdkh37Lc9zPYW4vb2mY1Le/7/keHyf3wrVmWLftf/h3j9f/5cw+71/7Ox0EgK87HQSu8Y0IrHyMLux/EYjVbe48r6bgEAAADuavF7gfoKzwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ye/eY+Sq7sOBn32O9+H1QvJTCL8o2SQ1jpt4vbbJQy1V1pSqEWmadUODqiiNjb0mixfs2KbEKETGJqIRgtIGKfmjCKMoqvkDagUikgLCRYojVB4RVVEAgUJriIJIKUlEmiDF1ey9Z/bOuTuPtb3GSz4fyTtn5nuedx6ec++dcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN8Nh79y1d82iz/82wuefu7i8cv2rb/45WsuOPPxECZmHu/Iwh391986/vM7z79r331rb7vn6IXv783L5fEwUP3Tmd+5LtZ6dGkI93aE0J0GVg1mgZ78/mCs7x2DIZwRZgO1EpP9WYm04fD9vhAOhNlArarv9YUwWAhc9MRDD95YTdzSF8LyEEIlbePZStZGXxo4pzcL9KeB7d1Z4FfHMrXAdzuzAJyw+GaovegPTdRnGJ67XIPXX89J69gbKx1eV0wMN873s/UL3KmC3vSBiRN62krVsSBKb4/D3m2L4N1W2s43e9qKX6TybyjHZkOV0LllcuumK6d3x0c6w+hoV6OaFuh5furVL22eT3rRvA5jB4ZPyuvwpseW39m18hOP3rNq+YsHP7D/pRPt5o8Km7SYXmiVkL/mFs3zGI37PFkEb7/St6QRX7pCCFs//3ufbBYvzf+Hm8//48s53nbW5Y61vj6Uzc3jI4Mx8cpQNjcHAACARWMx7DXdPvrAR5rVV5r/j7R3/D8e8s8n89loD4cwPpPYvyyEs2YezwJ3xOYuWRbCu2dSE/WB9UngcAhvn0msrFWVlFgSS4wkgZ8M5YHxJHAkBiaSwLdi4OYkcF0MHEoCm2PgcBI4PwbCVP04fn8oH0fbgb4Y2JhtxEPxLIRfDMXWkm31TK0qAACAkySfHfbU3y2c63CiGeL08lBfqwzxDOyGGSpJDekMtjatalhDd6saOlvVUBv33ubDL9Xc0arm0mkYHfUZbv3l33wqNFGa/481n/9X5uhIR+n4fwgbZv7G3J15ZLoW3zhRlwEAAAA4AQP/+/w3m8VL8//x9s7/j/tEugqZwyNxN8S2ZSGM1Qeyav+wHMiOeg/kAQAAAFgMasfja8fCp/Lb7BTtdD5dzj8xz/zxwP/4nPl7D9+/sVl/S/P/ifbO/++vv806cST24mvLQlhSCPwg9rIamDESAz/+aH0gH/+RuAFuiFXlJybUqrohltgYA2NJ4ECjEj+slTirPpA/WbXG99fGMZWXKAQAAADglIu7A+Jx+Xj+/3t+s/aqZuVK8/+N8zv/f2YeXDq9f3oghNXdIXSlPwx4pD9bGDAGBjvyxAP9WV1daVXX9odwXnVgaVXP5+v/d6drDD7Rl1UVA2e95+Cr51QT3+wLYXUx8ORnbv9gNbE7CdQa/8u+EN5VHW3a+HeWZI33pI1/fUkI7ywEalVdsiSEamO9aVUPVfLrGKRV/XMlhLcUArWqPlQJYU8AYJGK/5VuKT64a8/V2zZNT0/uXMBE3IffF7ZOTU+Obt4+vaXSoE9bkj7XLWN0bXlM7V755pl8iaJP371hsJ107XeCY8W28v34pRMH8/vxu1DPzDjX9tTdXZcO+X3vLTcRCt+kGg25c4GH3F+sZPZJLNUf8/eGgbDkyl2TO0e/uGn37p1rsr/tZl+b/Y2HmbJttSbdVv1z9a2Nl0fD1bISx7utVhQrWb378h2rd+25etXU5Zsunbx08oo1H1o7du7YurEPn7u6Oqqx7G+Loa6Yq+pkqMdub3NcJ3GoZ3cXKjkVnxoSEhKLLbF9YEXT/5NL8/8dzef/8VMnfvLn6zM0Ov4/HA/zZ4/PHubfGAMHysf/6/6XqB3/H250NL92YsBIEtgbA3sd5gcAAODNIU7y49w57pX+6crvvNisXGn+v7e93/+fpPX/a0vXX9homf+VscRYo/X/02X+a+v/7220/n+6zH9t/f8Db8D6/1fWAskm+YX1/wEAgDeDU7f+f8vl/dMLBJQytFzeP71AQClDy2X8271AwLzX/3/2P//qv0MTpfn/ze3N/y3cDwAAAKePL//ZVf+vWbw0/z/Q3vz/1K//Fxqd/z/SKDDRaGFA6/8BAACwSDVa/2/4+v7PNStXmv8fam/+H0+76KzLHWt9fShb0y6ka9q9MlT7yQAAAAAsDp1hdLSnzbx1K6OuP/42n8qXAm2WLnr+T47O7/z/w+3N/+t+l3HTY8vv7Fr5iUdfv2fV8hcPfmD/S7PH/wEAAICF0+5+CQAAAAAAAAAAAAAA4I33/H/sW9csXvr9f9gw83ij3//H6/7F3xe8tS53rLX1+n/5/Ys+fteemSULHxkK4b3FwLZ9284I+bX5VxQDD3525duqiX1pifufO/+FauJzaeBjq858rZo4LwlsjIskvj0NxKsqvrY0CcTlFf89DcTtcSgN9OaBry7NxtGRbqufDmbbqiPdVk8PhrCsEKhtq3sHszY60gHekgRqA/xCGogD/PM80Jn26q6BrFcxMBiL3jaQ9QoAgNNW/BbYE7ZOTU+Oxa/w8fbs7vrbqG7JsmvL1Xa02fwz+dJkn757w2A76a70u+jstcZ7QqU6hDWlr6vFLB0zozw5tbTYdG9tMORWq711NiiXmu+m6208or5sRKObt09v6Wk58HWts6ztbpllTWmyU8zSObNJ26iljb60MaI2t00bXY73O8PoaFeS6w9icDjUafWKaPf3+sV1/hq9Cop5rji6/1fN6ivN/4fbm/9XiuN6Lb8YwN54Zb2/W2aZfwAAAFhYX13/62/Ef5+6/uEnm+Utzf9H2pv/xz1Y+aHgbG/H4Xj9//3LQpi5tP5wFrgjNnfJshDePZOaiCWyC+pfGEuMZYE74g6TlbHExon6qpbEwKEk8JOhPHA4CRyJgXwvxcGQ78r5+6EQPjiT2lBfYkcsMZwEPhkDI0lgNAbGksDSGBhPAi8vzQMTSeDfYiBM1W+ru5fm2woAAGA+8nlWT/3dkM7zDnW3ytDRKkN/qwydrTJUWmVoNIp4/9sxQ09y8kpHIVNPWmtfUkspQ7wY/rz7VcoQflifMy1Yajqef1A736CjPsN9H+muhCZK8/+x9ub/2ZN5rL71I3H+P3v9vyzwg9i9r8VTx0di4McfrQ/kOwaOxMnuDbWqJvIS+aT9hlhiPAZGksCOGBhPAhs35IEDb6sP5DPtWuP7a41P5SUKAQAAADjl4g6CuJsmzv9v2/WVgWblSvP/8fbm/7G9gWJj18Vajy4N4d6O2d7UAqsGs0DcjzEYfx7/jsEQzijs4KiVmOzPSvQmDYfv92W/UO9Nq/peX/bjg3j/oiceevDGauKWvhCWF/a+1Np4tpK10ZcGzunNAv1pYHt3Foh7fmqB73ZmAThhtb2C8QWVn+pSMzx3uQavvzfLNUHT4ZX2gc6Rb67fXC2U0g7XfJ9qzfyetqb7bzlpSm+Pw95ti/HdNuzdVvwilX9DOTYbqoTOLZNbN105vTs+Uvwla8kCPc/FX6m2kz4Jr8O9x9/b1ippB8aSj4+xucvN/TrsiNXd9NjyO7tWfuLRe1Ytf/HgB/a/1HY3Gog/FH7omn8d/FFh8y60Sshfc4vu82TC58li/G9gxNMWQtjw8tdvaBYvzf8n2pv/dye3M34dN+auZSG8r7BxH4mb/4+XZZ+DhUD2KfmWciA75P5fQw0/OQEAAOBkq+3uqO0vmMpvsxPC03lyOf/EPPPH/RXjc+Zvt9/9f/3Z5c3ipfn/xubz/yVJNx3/d/yfBeL4/5xO913RS9IH9p7QruhSdSwIx//ndLq/2xz/n5Pj/47/z8Xx/xYc/5/T6f60lb4l7fClK4Tw4h898HSzeGn+v6O9+b/1/+ZetK+2/t/GRuv/7Wi0/t9e6/8BAAALqsFCc+k8r7R6XylDunpfKUPLBQJbLjFo/b95r//3wtnP/iY0UZr/721v/h9fDgPF1hfL+n8jGxpUdXMM7LAwIAAAAKejRjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGPd9w//s6VZ/OHfXvD0cxePX7Zv/cUvX3PBmY+HMDXzeEcW7ui//tbxn995/l377lt72z1HL3x/JS/Xk9/+/7rcsdbXh0I4UHhkMCZeGaremQ1c9PG79nRXE48MhfDeYmDbvm1nVBPfGgphRTHw4GdXvq2a2JeWuP+581+oJj6XBj626szXqonzNnVm3Uy7+49Ls+52pN29cWkIywqBWncvW5q10ZG28ad5oDNt458GszZiYDAW/cZg1kYMTMcSU0tCWN0dQlda1cOVrKqutKp/qWRVdaVVfbkSwnkhhO60qud6s6q605E/3ptVFQNnvefgq+dUEwd6Q1hdDDz5mds/WE18IQnUGv+L3hDeVX3JpI1/uydrvCdt/JaeEN4ZQuhNS/yyOyvRm5Z4vjuEtxQCtcY/3x3CnsCbQvzwqftE27Xn6m2bpqcndy5gojdvqy9snZqeHN28fXpLJelTIx2F9LFrj3/sz7z6pc3V20/fvWGwnXR3Xq5npstre+rurjvdex/71V+sZPb5KNUf8/eGgbDkyl2TO0e/uGn37p1rsr/tZl+b/e3Ko9m2WtNkW3UV77zR22pFsZLVuy/fsXrXnqtXTV2+6dLJSyevWPOhtWPnjq0b+/C5q6ujGsv+tj/U0HCot5/6oZ7dXajkVHwAzC8RN8/p0h8Jid/FRGfdp9vY6f6fXumL/mxHe0Jl5gO6NK0oZumYGeXJGPT64xzx8XxPaTmiNaWJQynL2tZZ1pUmE7NZ+rIsM9/rSpPDYk2dM5s03u8Mo6NdjbbDcP3d4ub92Qls3qfyTdduGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMClAAAA///9yyc9") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x3b4, &(0x7f0000000480)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080), 0x8) 1.178997791s ago: executing program 8 (id=519): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, 0x0) recvmmsg(r1, &(0x7f0000001900)=[{{&(0x7f0000000040)=@ieee802154, 0x80, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/108, 0x6c}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000540)=""/185, 0xb9}], 0x3, &(0x7f0000000240)=""/28, 0x1c}}, {{0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/186, 0xba}, 0x100}], 0x2, 0x32000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 1.000445835s ago: executing program 5 (id=520): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet(0x23, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010400000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 470.023037ms ago: executing program 7 (id=521): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 5 (id=522): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2, 0xe4}, 0x18) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000540)={'pim6reg0\x00', 0xffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) readv(r9, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, 0x0) preadv(r11, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1, 0x0, 0xa3) write(r10, &(0x7f0000000000)="fa", 0xfffffdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r15, 0x0, r13, 0x0, 0x40000000000002, 0x2) fcntl$setstatus(r13, 0x4, 0x46800) vmsplice(r12, 0x0, 0x0, 0x8) write$binfmt_elf64(r14, &(0x7f0000000000)=ANY=[], 0x18c6) sysinfo(0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3d8, 0x218, 0x218, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x5, 0x0, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x3, 0x7, 0x7fff, 0x0, 0x9, 0x1, 'ip6erspan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010101, @multicast2, 0x7}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @remote, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)}], 0x1}, 0x94) kernel console output (not intermixed with test programs): Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.712362][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.722105][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.729963][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.750838][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.765224][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.774540][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.791392][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.799889][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.811102][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.819922][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.829454][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.842504][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.862811][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.873481][ T5107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.887946][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.913592][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.932424][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.941898][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.946396][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.967955][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.970051][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.982851][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.995629][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.010332][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.339402][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 214.543053][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 214.918867][ T5814] Bluetooth: hci0: command tx timeout [ 215.005777][ T5814] Bluetooth: hci1: command tx timeout [ 215.074418][ T5814] Bluetooth: hci3: command tx timeout [ 215.080153][ T5814] Bluetooth: hci4: command tx timeout [ 215.087446][ T5814] Bluetooth: hci2: command tx timeout [ 215.458100][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 215.573462][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 215.809829][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 216.036434][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.047503][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.055444][ T5805] bridge_slave_0: entered allmulticast mode [ 216.065880][ T5805] bridge_slave_0: entered promiscuous mode [ 216.115313][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.123133][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.132663][ T5815] bridge_slave_0: entered allmulticast mode [ 216.147954][ T5815] bridge_slave_0: entered promiscuous mode [ 216.296994][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.305373][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.313113][ T5805] bridge_slave_1: entered allmulticast mode [ 216.323141][ T5805] bridge_slave_1: entered promiscuous mode [ 216.338670][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.348788][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.357343][ T5815] bridge_slave_1: entered allmulticast mode [ 216.367440][ T5815] bridge_slave_1: entered promiscuous mode [ 216.944820][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.004948][ T5812] Bluetooth: hci0: command tx timeout [ 217.075840][ T5812] Bluetooth: hci1: command tx timeout [ 217.125994][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.136158][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.143906][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.152084][ T5808] bridge_slave_0: entered allmulticast mode [ 217.162370][ T5808] bridge_slave_0: entered promiscuous mode [ 217.176415][ T5812] Bluetooth: hci2: command tx timeout [ 217.181056][ T5814] Bluetooth: hci4: command tx timeout [ 217.182065][ T5812] Bluetooth: hci3: command tx timeout [ 217.207606][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.280764][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.293416][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.301407][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.309245][ T5808] bridge_slave_1: entered allmulticast mode [ 217.319090][ T5808] bridge_slave_1: entered promiscuous mode [ 217.612695][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.620687][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.628708][ T5817] bridge_slave_0: entered allmulticast mode [ 217.638365][ T5817] bridge_slave_0: entered promiscuous mode [ 217.706277][ T5805] team0: Port device team_slave_0 added [ 217.726018][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.747643][ T5805] team0: Port device team_slave_1 added [ 217.803116][ T5815] team0: Port device team_slave_0 added [ 217.856866][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.864933][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.872727][ T5817] bridge_slave_1: entered allmulticast mode [ 217.883045][ T5817] bridge_slave_1: entered promiscuous mode [ 217.993122][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.008337][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.015634][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.042970][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.067897][ T5815] team0: Port device team_slave_1 added [ 218.120046][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.128104][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.136305][ T5809] bridge_slave_0: entered allmulticast mode [ 218.146275][ T5809] bridge_slave_0: entered promiscuous mode [ 218.283970][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.291358][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.317865][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.369377][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.377301][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.385340][ T5809] bridge_slave_1: entered allmulticast mode [ 218.395936][ T5809] bridge_slave_1: entered promiscuous mode [ 218.407810][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.415302][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.441933][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.520841][ T5808] team0: Port device team_slave_0 added [ 218.559952][ T5808] team0: Port device team_slave_1 added [ 218.573969][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.581433][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.608699][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.711571][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.743588][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.935765][ T5817] team0: Port device team_slave_0 added [ 219.002053][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.015045][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.022250][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.049086][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.075596][ T5812] Bluetooth: hci0: command tx timeout [ 219.111459][ T5817] team0: Port device team_slave_1 added [ 219.154519][ T5812] Bluetooth: hci1: command tx timeout [ 219.178707][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.236012][ T5812] Bluetooth: hci3: command tx timeout [ 219.240565][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.241778][ T5820] Bluetooth: hci4: command tx timeout [ 219.249007][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.249187][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.255241][ T5814] Bluetooth: hci2: command tx timeout [ 219.485813][ T5809] team0: Port device team_slave_0 added [ 219.520352][ T5805] hsr_slave_0: entered promiscuous mode [ 219.531186][ T5805] hsr_slave_1: entered promiscuous mode [ 219.550751][ T5809] team0: Port device team_slave_1 added [ 219.628424][ T5815] hsr_slave_0: entered promiscuous mode [ 219.638977][ T5815] hsr_slave_1: entered promiscuous mode [ 219.649130][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 219.655286][ T5815] Cannot create hsr debugfs directory [ 219.798718][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.806416][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.832963][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.850519][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.858710][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.885428][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.960256][ T5808] hsr_slave_0: entered promiscuous mode [ 219.970845][ T5808] hsr_slave_1: entered promiscuous mode [ 219.980343][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 219.986495][ T5808] Cannot create hsr debugfs directory [ 219.996294][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.003741][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.030571][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.153942][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.161261][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.187718][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.483494][ T5817] hsr_slave_0: entered promiscuous mode [ 220.494405][ T5817] hsr_slave_1: entered promiscuous mode [ 220.503340][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 220.509669][ T5817] Cannot create hsr debugfs directory [ 220.983987][ T5809] hsr_slave_0: entered promiscuous mode [ 220.995299][ T5809] hsr_slave_1: entered promiscuous mode [ 221.005266][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 221.011227][ T5809] Cannot create hsr debugfs directory [ 221.154729][ T5814] Bluetooth: hci0: command tx timeout [ 221.234524][ T5814] Bluetooth: hci1: command tx timeout [ 221.314720][ T5814] Bluetooth: hci3: command tx timeout [ 221.320458][ T5812] Bluetooth: hci4: command tx timeout [ 221.395896][ T5814] Bluetooth: hci2: command tx timeout [ 222.265017][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.317142][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.341660][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.386409][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.471329][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.594963][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.733124][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.761984][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.787536][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.858222][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.974649][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.016279][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.080337][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.196298][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.295714][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 223.339199][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 223.499125][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.556515][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.633301][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.659099][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 224.197099][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.541617][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.570535][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.678718][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.728973][ T3915] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.736913][ T3915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.831697][ T3915] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.839593][ T3915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.930376][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.988121][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.104952][ T3915] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.112621][ T3915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.136379][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.231322][ T3915] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.239203][ T3915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.333400][ T3915] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.341220][ T3915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.405016][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.436653][ T3915] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.444525][ T3915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.598310][ T3915] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.606260][ T3915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.836968][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.872303][ T3915] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.880001][ T3915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.148128][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.292798][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.528393][ T3915] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.536397][ T3915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.555310][ T3915] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.563002][ T3915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.746748][ T5817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.759136][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.260532][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.516646][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.872205][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.902715][ T5815] veth0_vlan: entered promiscuous mode [ 229.063969][ T5815] veth1_vlan: entered promiscuous mode [ 229.135569][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.342084][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.404803][ T5808] veth0_vlan: entered promiscuous mode [ 229.546132][ T5815] veth0_macvtap: entered promiscuous mode [ 229.582303][ T5808] veth1_vlan: entered promiscuous mode [ 229.642997][ T5815] veth1_macvtap: entered promiscuous mode [ 229.983894][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.006970][ T5809] veth0_vlan: entered promiscuous mode [ 230.047766][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.170631][ T5808] veth0_macvtap: entered promiscuous mode [ 230.243755][ T5809] veth1_vlan: entered promiscuous mode [ 230.266877][ T3677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.310085][ T5817] veth0_vlan: entered promiscuous mode [ 230.329229][ T3841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.361014][ T5808] veth1_macvtap: entered promiscuous mode [ 230.420680][ T3841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.495882][ T3841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.533430][ T5817] veth1_vlan: entered promiscuous mode [ 230.720503][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.773039][ T5809] veth0_macvtap: entered promiscuous mode [ 230.845306][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.905366][ T5809] veth1_macvtap: entered promiscuous mode [ 230.917218][ T3841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.021416][ T3841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.072265][ T3841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.161308][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.199833][ T5817] veth0_macvtap: entered promiscuous mode [ 231.259983][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.290106][ T5817] veth1_macvtap: entered promiscuous mode [ 231.369168][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.481340][ T3804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.562454][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.570581][ T3915] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.676763][ T3915] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.720402][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.766204][ T3915] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.870258][ T3804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.946069][ T3804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.005310][ T3915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.094314][ T3915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.637322][ T5805] veth0_vlan: entered promiscuous mode [ 232.787421][ T5805] veth1_vlan: entered promiscuous mode [ 233.296594][ T5805] veth0_macvtap: entered promiscuous mode [ 233.362385][ T5805] veth1_macvtap: entered promiscuous mode [ 233.618417][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.702383][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.781649][ T1322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.870619][ T1322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.928465][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.997159][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.950552][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.958604][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.325705][ T3915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.333797][ T3915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.561728][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.570317][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.800999][ T3841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.809424][ T3841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.944620][ T3769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.952976][ T3769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.113602][ T3712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.122526][ T3712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.216502][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.225500][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.239938][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 240.911086][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.923422][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.967653][ T5991] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 241.215148][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.226469][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.919362][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 246.655290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 246.676459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 246.755987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 247.064602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 247.084311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 247.166556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 247.301459][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.310748][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.701381][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.709839][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.956698][ T6018] loop0: detected capacity change from 0 to 2048 [ 248.213816][ T6021] loop1: detected capacity change from 0 to 2048 [ 248.534820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 248.624897][ T6021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.747530][ T6021] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.909712][ T6021] EXT4-fs error (device loop1): ext4_lookup:1787: inode #13: comm syz.1.11: unexpected EA_INODE flag [ 249.488237][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.526446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 249.622631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 249.635761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 254.571621][ T6040] loop1: detected capacity change from 0 to 512 [ 254.677235][ T6040] EXT4-fs: Ignoring removed nobh option [ 254.898518][ T6040] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.13: iget: bad i_size value: 38620345925642 [ 254.936405][ T6040] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.13: couldn't read orphan inode 15 (err -117) [ 255.021977][ T6040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.765395][ T6050] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 258.381586][ T3915] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 72 with error 28 [ 258.394711][ T3915] EXT4-fs (loop1): This should not happen!! Data will be lost [ 258.394711][ T3915] [ 258.405565][ T3915] EXT4-fs (loop1): Total free blocks count 0 [ 258.411874][ T3915] EXT4-fs (loop1): Free/Dirty block details [ 258.418186][ T3915] EXT4-fs (loop1): free_blocks=0 [ 258.423455][ T3915] EXT4-fs (loop1): dirty_blocks=76 [ 258.434855][ T3915] EXT4-fs (loop1): Block reservation details [ 258.441079][ T3915] EXT4-fs (loop1): i_reserved_data_blocks=76 [ 258.731274][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.897056][ T6083] loop4: detected capacity change from 0 to 64 [ 260.053719][ T6080] loop0: detected capacity change from 0 to 1024 [ 262.267562][ T6080] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 263.250927][ T6080] loop0: detected capacity change from 0 to 32768 [ 263.261071][ T6080] XFS: ikeep mount option is deprecated. [ 263.333382][ T6080] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 264.294043][ T6102] netlink: 76 bytes leftover after parsing attributes in process `syz.4.32'. [ 264.588857][ T6080] XFS (loop0): Ending clean mount [ 264.628140][ T6080] XFS (loop0): Quotacheck needed: Please wait. [ 264.814663][ T6080] XFS (loop0): Quotacheck: Done. [ 264.935067][ T5808] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 265.846729][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 269.777737][ T6122] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 269.784571][ T6122] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 269.797083][ T6122] vhci_hcd vhci_hcd.0: Device attached [ 269.871948][ T6134] vhci_hcd: connection closed [ 269.873792][ T3804] vhci_hcd: stop threads [ 269.884446][ T3804] vhci_hcd: release socket [ 269.889069][ T3804] vhci_hcd: disconnect device [ 273.741149][ T6160] loop1: detected capacity change from 0 to 4096 [ 273.855588][ T6160] NILFS (loop1): invalid segment: Checksum error in segment payload [ 273.864010][ T6160] NILFS (loop1): trying rollback from an earlier position [ 274.002970][ T6160] NILFS (loop1): recovery complete [ 274.068091][ T6172] loop3: detected capacity change from 0 to 8 [ 274.131632][ T6172] SQUASHFS error: xz decompression failed, data probably corrupt [ 274.140072][ T6172] SQUASHFS error: Failed to read block 0x108: -5 [ 274.147094][ T6172] SQUASHFS error: Unable to read metadata cache entry [106] [ 274.154808][ T6172] SQUASHFS error: Unable to read inode 0x11f [ 274.347563][ T6172] geneve2: entered promiscuous mode [ 274.353401][ T6172] geneve2: entered allmulticast mode [ 274.601203][ T6174] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.668822][ T6204] loop2: detected capacity change from 0 to 2048 [ 281.823858][ T6204] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.953195][ T30] audit: type=1800 audit(1754132794.024:2): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.66" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 293.605860][ T6244] netlink: 76 bytes leftover after parsing attributes in process `syz.1.78'. [ 293.615564][ T6244] netlink: 76 bytes leftover after parsing attributes in process `syz.1.78'. [ 293.724675][ T5867] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 293.995275][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 294.546070][ T5867] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 294.555914][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.564578][ T5867] usb 1-1: Product: syz [ 294.568988][ T5867] usb 1-1: Manufacturer: syz [ 294.578651][ T5867] usb 1-1: SerialNumber: syz [ 294.646566][ T5867] usb 1-1: config 0 descriptor?? [ 295.008822][ T6242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.77'. [ 295.285135][ T5867] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 295.298998][ T5867] airspy 1-1:0.0: Could not detect board [ 295.306949][ T5867] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 295.613810][ T5867] usb 1-1: USB disconnect, device number 2 [ 296.426691][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.433481][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.292534][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 298.770680][ T6257] loop3: detected capacity change from 0 to 4096 [ 298.884410][ T6257] ======================================================= [ 298.884410][ T6257] WARNING: The mand mount option has been deprecated and [ 298.884410][ T6257] and is ignored by this kernel. Remove the mand [ 298.884410][ T6257] option from the mount to silence this warning. [ 298.884410][ T6257] ======================================================= [ 298.925333][ T6257] ntfs3: Invalid value for umask. [ 300.424215][ T6276] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 300.725321][ T6279] Zero length message leads to an empty skb [ 301.793099][ T6283] loop2: detected capacity change from 0 to 4096 [ 301.877169][ T6283] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 302.581384][ T6283] ntfs3(loop2): ino=1a, mi_enum_attr [ 302.587684][ T6283] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 302.740494][ T6283] ntfs3(loop2): ino=1a, mi_enum_attr [ 302.746368][ T6283] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 303.361048][ T6307] ntfs3(loop2): ino=1b, mi_enum_attr [ 303.367344][ T6307] ntfs3(loop2): ino=1b, mi_enum_attr [ 303.465958][ T6308] netlink: 48 bytes leftover after parsing attributes in process `syz.4.99'. [ 303.509697][ T6307] overlayfs: upper fs does not support tmpfile. [ 303.611034][ T6307] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 303.619717][ T6307] overlayfs: failed to get uuid (/file0, err=-22); falling back to uuid=null. [ 303.629388][ T6307] overlayfs: failed to get origin (-22) [ 303.636918][ T6307] ntfs3(loop2): ino=1b, "file0" mi_enum_attr [ 303.643534][ T6307] ntfs3(loop2): ino=1b, "file0" mi_enum_attr [ 303.651021][ T6307] ntfs3(loop2): ino=1b, "file0" mi_enum_attr [ 303.658242][ T6307] overlayfs: failed to verify upper root origin [ 304.482151][ T6317] loop4: detected capacity change from 0 to 64 [ 305.483054][ T6326] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 311.049466][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 311.926309][ T6354] kvm: pic: level sensitive irq not supported [ 311.926881][ T6354] kvm: pic: non byte read [ 312.375008][ T6364] loop2: detected capacity change from 0 to 64 [ 314.456275][ T24] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 314.787525][ T24] usb 3-1: config 150 has an invalid interface number: 204 but max is 0 [ 314.796943][ T24] usb 3-1: config 150 has no interface number 0 [ 314.803664][ T24] usb 3-1: config 150 interface 204 has no altsetting 0 [ 315.097187][ T24] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 315.107331][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.116046][ T24] usb 3-1: Product: syz [ 315.120451][ T24] usb 3-1: Manufacturer: syz [ 315.125495][ T24] usb 3-1: SerialNumber: syz [ 315.619413][ T24] usb 3-1: USB disconnect, device number 2 [ 315.637212][ T6053] udevd[6053]: setting mode of /dev/bus/usb/003/002 to 020664 failed: No such file or directory [ 315.678062][ T6053] udevd[6053]: setting owner of /dev/bus/usb/003/002 to uid=0, gid=0 failed: No such file or directory [ 316.108431][ T6387] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[6387] [ 319.512221][ T6404] loop0: detected capacity change from 0 to 64 [ 325.495352][ T5864] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 325.824974][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 325.961032][ T5864] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 325.970542][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.982044][ T5864] usb 5-1: config 0 has no interface number 0 [ 325.988580][ T5864] usb 5-1: config 0 interface 237 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 326.002121][ T5864] usb 5-1: Dual-Role OTG device on HNP port [ 326.382913][ T5864] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=3b.dc [ 326.392856][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.447284][ T5864] usb 5-1: config 0 descriptor?? [ 326.569433][ T5864] usbserial_generic 5-1:0.237: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 326.581425][ T5864] usbserial_generic 5-1:0.237: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 326.592928][ T5864] usbserial_generic 5-1:0.237: device has no bulk endpoints [ 328.293876][ T6448] loop1: detected capacity change from 0 to 64 [ 328.803782][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 329.179394][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 333.410777][ T24] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 333.420279][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.428850][ T24] usb 4-1: Product: syz [ 333.867446][ T24] usb 4-1: config 0 descriptor?? [ 333.982090][ T24] usb 4-1: can't set config #0, error -71 [ 334.209381][ T24] usb 4-1: USB disconnect, device number 2 [ 334.253772][ T5867] usb 5-1: USB disconnect, device number 2 [ 335.387886][ T6474] fuse: Bad value for 'fd' [ 339.396726][ T6486] Bluetooth: hci4: command 0x0406 tx timeout [ 339.403010][ T6486] Bluetooth: hci0: command 0x0406 tx timeout [ 339.411628][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 339.414727][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 339.419531][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 339.866720][ T6497] loop3: detected capacity change from 0 to 64 [ 341.021682][ T6495] loop0: detected capacity change from 0 to 8192 [ 341.429458][ T6495] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 341.711566][ T6510] loop2: detected capacity change from 0 to 2048 [ 342.313281][ T6510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.462193][ T30] audit: type=1804 audit(1754132854.434:3): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.171" name="/newroot/39/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 343.096842][ T6518] fuse: Bad value for 'fd' [ 344.243957][ T6521] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 344.907197][ T6527] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 344.926101][ T6527] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 345.879602][ T6513] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 346.015169][ T6521] gretap1: entered promiscuous mode [ 346.036650][ T6521] bond1: (slave gretap1): making interface the new active one [ 346.046753][ T6521] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 349.122126][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.127104][ T6546] loop0: detected capacity change from 0 to 64 [ 351.151554][ T6557] fuse: Bad value for 'fd' [ 351.165212][ T5864] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 351.443920][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.456045][ T5864] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 351.465702][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.649132][ T5864] usb 4-1: config 0 descriptor?? [ 352.110639][ T5864] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 352.221666][ T5864] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input5 [ 352.706929][ T5864] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 352.786355][ T6570] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 352.955244][ T5864] usb 4-1: USB disconnect, device number 3 [ 353.345029][ T6574] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 353.364433][ T6574] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 353.717467][ T6575] gretap1: entered promiscuous mode [ 353.738612][ T6575] bond1: (slave gretap1): making interface the new active one [ 353.749074][ T6575] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 354.105684][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 354.456585][ T6576] fido_id[6576]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 354.884475][ T6587] loop3: detected capacity change from 0 to 64 [ 355.686211][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 357.571924][ T6602] loop4: detected capacity change from 0 to 4096 [ 357.606707][ T6602] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 357.686846][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 357.845059][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 358.216734][ T6602] ntfs3(loop4): ino=19, mi_enum_attr [ 358.222360][ T6602] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 358.533795][ T6619] loop3: detected capacity change from 0 to 64 [ 359.760242][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 360.555141][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 365.552410][ T6665] loop3: detected capacity change from 0 to 64 [ 367.411650][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 369.358777][ T6690] loop1: detected capacity change from 0 to 8 [ 370.546806][ T6690] overlayfs: missing 'lowerdir' [ 375.267638][ T6710] loop4: detected capacity change from 0 to 64 [ 376.245799][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 377.525200][ T6734] loop1: detected capacity change from 0 to 8 [ 378.689964][ T6734] overlay: Unknown parameter '/' [ 382.616054][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 382.724403][ T6768] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 385.696596][ T6781] loop1: detected capacity change from 0 to 8 [ 385.852141][ T6781] overlay: Unknown parameter '/' [ 388.438363][ T6805] loop3: detected capacity change from 0 to 128 [ 388.510505][ T6805] EXT4-fs (loop3): Test dummy encryption mode enabled [ 388.604771][ T6805] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 388.656104][ T6805] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 389.027622][ C1] hrtimer: interrupt took 263015 ns [ 389.267248][ T6805] fscrypt (loop3): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 389.849840][ T5809] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 394.296517][ T6841] input: syz1 as /devices/virtual/input/input6 [ 394.671587][ T5107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 394.683021][ T5107] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 394.696005][ T5107] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 394.727904][ T5107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 394.741449][ T5107] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 395.475147][ T6847] loop4: detected capacity change from 0 to 4096 [ 397.706199][ T5107] Bluetooth: hci5: command tx timeout [ 397.715996][ T6857] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 399.099088][ T6848] chnl_net:caif_netlink_parms(): no params data found [ 399.423388][ T6873] loop3: detected capacity change from 0 to 64 [ 399.457200][ T6869] loop4: detected capacity change from 0 to 4096 [ 399.595798][ T6869] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 399.714567][ T6488] Bluetooth: hci5: command tx timeout [ 400.139246][ T6869] ntfs3(loop4): ino=19, mi_enum_attr [ 400.146343][ T6869] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 401.304933][ T5864] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 401.512005][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.523661][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.534084][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.547555][ T5864] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.556982][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.794962][ T6488] Bluetooth: hci5: command tx timeout [ 401.904485][ T5864] usb 4-1: config 0 descriptor?? [ 402.104753][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.112746][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.121545][ T6848] bridge_slave_0: entered allmulticast mode [ 402.134815][ T6848] bridge_slave_0: entered promiscuous mode [ 402.173220][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.182032][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.190923][ T6848] bridge_slave_1: entered allmulticast mode [ 402.209287][ T6848] bridge_slave_1: entered promiscuous mode [ 403.874473][ T6488] Bluetooth: hci5: command tx timeout [ 405.287898][ T30] audit: type=1326 audit(1754132917.274:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.4.302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9a638eb69 code=0x0 [ 405.316846][ T5864] usbhid 4-1:0.0: can't add hid device: -71 [ 405.331026][ T5864] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 405.391063][ T5864] usb 4-1: USB disconnect, device number 4 [ 406.310082][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.179142][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.753084][ T6848] team0: Port device team_slave_0 added [ 409.869179][ T6848] team0: Port device team_slave_1 added [ 409.927739][ T6913] loop2: detected capacity change from 0 to 64 [ 410.438898][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.447376][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.474465][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.669637][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.677418][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.708318][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.265601][ T6848] hsr_slave_0: entered promiscuous mode [ 411.275766][ T6848] hsr_slave_1: entered promiscuous mode [ 411.285045][ T6848] debugfs: 'hsr0' already exists in 'hsr' [ 411.291028][ T6848] Cannot create hsr debugfs directory [ 412.105504][ T6916] loop3: detected capacity change from 0 to 4096 [ 412.369861][ T6916] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 414.385162][ T6916] ntfs3(loop3): Failed to read $UpCase (-4). [ 415.772410][ T6848] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 415.945460][ T6848] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 416.149823][ T6848] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 416.299148][ T6848] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 416.815279][ T6954] loop3: detected capacity change from 0 to 64 [ 418.877744][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.275311][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 421.218065][ T6848] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.381002][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.388784][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.584417][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.592150][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.050845][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.887947][ T6848] veth0_vlan: entered promiscuous mode [ 430.007527][ T6848] veth1_vlan: entered promiscuous mode [ 430.637733][ T7048] loop1: detected capacity change from 0 to 8 [ 430.710736][ T7048] SQUASHFS error: xz decompression failed, data probably corrupt [ 430.719172][ T7048] SQUASHFS error: Failed to read block 0x108: -5 [ 430.725949][ T7048] SQUASHFS error: Unable to read metadata cache entry [106] [ 430.733526][ T7048] SQUASHFS error: Unable to read inode 0x11f [ 430.888469][ T6848] veth0_macvtap: entered promiscuous mode [ 431.300236][ T6848] veth1_macvtap: entered promiscuous mode [ 431.647760][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.827017][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.017283][ T1322] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.056412][ T1322] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.124729][ T1322] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.217039][ T1322] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.111092][ T3677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.460373][ T3677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.700254][ T3677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.990724][ T3677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.173029][ T3677] bridge_slave_1: left allmulticast mode [ 436.179817][ T3677] bridge_slave_1: left promiscuous mode [ 436.187015][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.963782][ T3677] bridge_slave_0: left allmulticast mode [ 436.970076][ T3677] bridge_slave_0: left promiscuous mode [ 436.976797][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.261162][ T7096] loop1: detected capacity change from 0 to 1024 [ 442.076115][ T7099] loop4: detected capacity change from 0 to 32768 [ 442.085763][ T7099] XFS: ikeep mount option is deprecated. [ 442.210123][ T7099] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 442.272841][ T3677] bond1 (unregistering): (slave gretap1): Releasing active interface [ 442.765789][ T7099] XFS (loop4): Ending clean mount [ 442.796389][ T7099] XFS (loop4): Quotacheck needed: Please wait. [ 443.084756][ T7099] XFS (loop4): Quotacheck: Done. [ 443.426953][ T7110] 9pnet_virtio: no channels available for device syz [ 443.626317][ T7095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.652598][ T3677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.725410][ T3677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.841364][ T3677] bond0 (unregistering): Released all slaves [ 443.861427][ T3677] bond1 (unregistering): Released all slaves [ 444.571664][ T5805] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 445.456355][ T3677] hsr_slave_0: left promiscuous mode [ 445.520575][ T3677] hsr_slave_1: left promiscuous mode [ 445.534438][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.542070][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.655242][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.662896][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.793165][ T3677] veth1_macvtap: left promiscuous mode [ 445.801465][ T3677] veth0_macvtap: left promiscuous mode [ 445.808318][ T3677] veth1_vlan: left promiscuous mode [ 445.813937][ T3677] veth0_vlan: left promiscuous mode [ 448.048307][ T3677] team0 (unregistering): Port device team_slave_1 removed [ 448.171914][ T3677] team0 (unregistering): Port device team_slave_0 removed [ 453.969722][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 453.996065][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 454.021205][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 454.155383][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.207927][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 456.090123][ T7169] loop4: detected capacity change from 0 to 32768 [ 456.100879][ T7169] XFS: ikeep mount option is deprecated. [ 456.219834][ T7169] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 456.305719][ T5107] Bluetooth: hci1: command tx timeout [ 457.166749][ T6488] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 457.175966][ T6488] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 457.190919][ T6488] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 457.203691][ T6488] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 457.215825][ T6488] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 457.921935][ T7169] XFS (loop4): Ending clean mount [ 457.953538][ T7169] XFS (loop4): Quotacheck needed: Please wait. [ 458.300946][ T7169] XFS (loop4): Quotacheck: Done. [ 458.355437][ T6488] Bluetooth: hci1: command tx timeout [ 458.728418][ T5805] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 459.038491][ T7163] chnl_net:caif_netlink_parms(): no params data found [ 459.404426][ T6488] Bluetooth: hci6: command tx timeout [ 460.434411][ T6488] Bluetooth: hci1: command tx timeout [ 460.526067][ T5821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 460.546613][ T5821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 460.562379][ T5821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 460.579785][ T5821] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 460.597056][ T5821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 461.215413][ T7180] chnl_net:caif_netlink_parms(): no params data found [ 461.592893][ T6488] Bluetooth: hci6: command tx timeout [ 462.379991][ T4421] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.516515][ T6488] Bluetooth: hci1: command tx timeout [ 462.755959][ T6488] Bluetooth: hci7: command tx timeout [ 462.881984][ T4421] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.379055][ T4421] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.556385][ T7163] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.564296][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.572171][ T7163] bridge_slave_0: entered allmulticast mode [ 463.580983][ T7163] bridge_slave_0: entered promiscuous mode [ 463.721033][ T6488] Bluetooth: hci6: command tx timeout [ 464.161208][ T4421] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.463429][ T7163] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.474532][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.482559][ T7163] bridge_slave_1: entered allmulticast mode [ 464.492550][ T7163] bridge_slave_1: entered promiscuous mode [ 464.746581][ T3804] hfsplus: b-tree write err: -5, ino 4 [ 464.855734][ T6488] Bluetooth: hci7: command tx timeout [ 465.857306][ T6488] Bluetooth: hci6: command tx timeout [ 466.038107][ T7163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.457816][ T7189] chnl_net:caif_netlink_parms(): no params data found [ 466.480727][ T4421] bridge_slave_1: left allmulticast mode [ 466.492551][ T4421] bridge_slave_1: left promiscuous mode [ 466.499613][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.614371][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 466.624499][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 466.648227][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 466.665570][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 466.677979][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 466.717355][ T7218] netlink: 'syz.4.385': attribute type 1 has an invalid length. [ 466.805365][ T4421] bridge_slave_0: left allmulticast mode [ 466.816261][ T4421] bridge_slave_0: left promiscuous mode [ 466.822776][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.918718][ T5821] Bluetooth: hci7: command tx timeout [ 467.808961][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.029603][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.073261][ T4421] bond0 (unregistering): Released all slaves [ 468.151126][ T7163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.289015][ T7180] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.296894][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.304968][ T7180] bridge_slave_0: entered allmulticast mode [ 468.313750][ T7180] bridge_slave_0: entered promiscuous mode [ 468.356689][ T7218] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 468.529569][ T7222] gretap1: entered promiscuous mode [ 468.646162][ T4421] hsr_slave_0: left promiscuous mode [ 468.681394][ T4421] hsr_slave_1: left promiscuous mode [ 468.690257][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.698048][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.760944][ T5821] Bluetooth: hci5: command tx timeout [ 468.825224][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.832948][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.004572][ T5821] Bluetooth: hci7: command tx timeout [ 469.104473][ T4421] veth1_macvtap: left promiscuous mode [ 469.110434][ T4421] veth0_macvtap: left promiscuous mode [ 469.116649][ T4421] veth1_vlan: left promiscuous mode [ 469.122225][ T4421] veth0_vlan: left promiscuous mode [ 470.008589][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 470.076956][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 470.373926][ T7180] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.381631][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.389683][ T7180] bridge_slave_1: entered allmulticast mode [ 470.402462][ T7180] bridge_slave_1: entered promiscuous mode [ 470.841260][ T5821] Bluetooth: hci5: command tx timeout [ 471.119158][ T7163] team0: Port device team_slave_0 added [ 471.395571][ T7163] team0: Port device team_slave_1 added [ 471.653791][ T7180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.083812][ T7180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.127586][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.138721][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.166072][ T7163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.969167][ T7238] loop4: detected capacity change from 0 to 32768 [ 472.978950][ T7238] XFS: ikeep mount option is deprecated. [ 473.007326][ T5821] Bluetooth: hci5: command tx timeout [ 473.301619][ T7238] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 473.926952][ T7180] team0: Port device team_slave_0 added [ 473.947000][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.955599][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.985220][ T7163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.078035][ T7180] team0: Port device team_slave_1 added [ 474.515934][ T7238] XFS (loop4): Ending clean mount [ 474.528087][ T7238] XFS (loop4): Quotacheck needed: Please wait. [ 474.657758][ T7238] XFS (loop4): Quotacheck: Done. [ 475.316548][ T5821] Bluetooth: hci5: command tx timeout [ 475.582518][ T7180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.590816][ T7180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.621029][ T7180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.746941][ T7163] hsr_slave_0: entered promiscuous mode [ 475.756561][ T7163] hsr_slave_1: entered promiscuous mode [ 475.764885][ T7163] debugfs: 'hsr0' already exists in 'hsr' [ 475.770810][ T7163] Cannot create hsr debugfs directory [ 475.797196][ T7180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.804662][ T7180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.836362][ T7180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.284715][ T3804] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.394905][ T7217] chnl_net:caif_netlink_parms(): no params data found [ 476.555324][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.562930][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.571031][ T7189] bridge_slave_0: entered allmulticast mode [ 476.581432][ T7189] bridge_slave_0: entered promiscuous mode [ 476.602312][ T5805] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 476.649728][ T3804] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.911478][ T3804] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.758901][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.772478][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.781041][ T7189] bridge_slave_1: entered allmulticast mode [ 477.791861][ T7189] bridge_slave_1: entered promiscuous mode [ 477.879716][ T3804] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.851176][ T7180] hsr_slave_0: entered promiscuous mode [ 478.861989][ T7180] hsr_slave_1: entered promiscuous mode [ 478.871266][ T7180] debugfs: 'hsr0' already exists in 'hsr' [ 478.877462][ T7180] Cannot create hsr debugfs directory [ 479.061683][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.089067][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 479.169971][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.252212][ T3804] bridge_slave_1: left allmulticast mode [ 479.258373][ T3804] bridge_slave_1: left promiscuous mode [ 479.265097][ T3804] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.450966][ T3804] bridge_slave_0: left allmulticast mode [ 479.457139][ T3804] bridge_slave_0: left promiscuous mode [ 479.463837][ T3804] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.707399][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.735369][ T3804] bond1 (unregistering): (slave gretap1): Releasing active interface [ 481.252222][ T3804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.362913][ T3804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.445372][ T3804] bond0 (unregistering): Released all slaves [ 481.474654][ T3804] bond1 (unregistering): Released all slaves [ 481.988313][ T7189] team0: Port device team_slave_0 added [ 482.505520][ T7189] team0: Port device team_slave_1 added [ 483.025923][ T7276] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 483.312465][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.319955][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.346467][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.366049][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.373236][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.401869][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.515528][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.522943][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.531185][ T7217] bridge_slave_0: entered allmulticast mode [ 483.540137][ T7217] bridge_slave_0: entered promiscuous mode [ 483.787192][ T7277] gretap1: entered promiscuous mode [ 483.860298][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.868114][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.876271][ T7217] bridge_slave_1: entered allmulticast mode [ 484.008387][ T7217] bridge_slave_1: entered promiscuous mode [ 484.169850][ T3804] hsr_slave_0: left promiscuous mode [ 484.225710][ T3804] hsr_slave_1: left promiscuous mode [ 484.236162][ T3804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.243715][ T3804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.317373][ T3804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.327243][ T3804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.354587][ T3804] veth1_macvtap: left promiscuous mode [ 484.360367][ T3804] veth0_macvtap: left promiscuous mode [ 484.366332][ T3804] veth1_vlan: left promiscuous mode [ 484.371789][ T3804] veth0_vlan: left promiscuous mode [ 485.380496][ T3804] team0 (unregistering): Port device team_slave_1 removed [ 485.468110][ T3804] team0 (unregistering): Port device team_slave_0 removed [ 486.522787][ T7189] hsr_slave_0: entered promiscuous mode [ 486.533898][ T7189] hsr_slave_1: entered promiscuous mode [ 486.543349][ T7189] debugfs: 'hsr0' already exists in 'hsr' [ 486.549385][ T7189] Cannot create hsr debugfs directory [ 486.567596][ T7217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.662274][ T7217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.758732][ T7163] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 487.130177][ T7163] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 487.322171][ T7163] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 487.648087][ T7217] team0: Port device team_slave_0 added [ 487.656000][ T7163] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 487.806644][ T7217] team0: Port device team_slave_1 added [ 488.459963][ T7217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.467394][ T7217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.493778][ T7217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.642962][ T7217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.650305][ T7217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.676766][ T7217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.387444][ T7294] loop4: detected capacity change from 0 to 32768 [ 490.398706][ T7294] XFS: ikeep mount option is deprecated. [ 490.463621][ T7294] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 490.724630][ T4421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.334621][ T7180] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 491.352307][ T7294] XFS (loop4): Ending clean mount [ 491.392578][ T4421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.395228][ T7294] XFS (loop4): Quotacheck needed: Please wait. [ 491.523297][ T7217] hsr_slave_0: entered promiscuous mode [ 491.532640][ T7217] hsr_slave_1: entered promiscuous mode [ 491.541113][ T7217] debugfs: 'hsr0' already exists in 'hsr' [ 491.547135][ T7217] Cannot create hsr debugfs directory [ 491.637898][ T7180] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 491.652782][ T7294] XFS (loop4): Quotacheck: Done. [ 492.230222][ T4421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.306718][ T5805] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 492.524112][ T7180] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 492.607379][ T7189] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 492.742247][ T4421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.864445][ T7180] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 492.952552][ T7189] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 493.219834][ T7189] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 493.416981][ T7189] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 494.264830][ T4421] bridge_slave_1: left allmulticast mode [ 494.270774][ T4421] bridge_slave_1: left promiscuous mode [ 494.277706][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.311553][ T4421] bridge_slave_0: left allmulticast mode [ 494.318890][ T4421] bridge_slave_0: left promiscuous mode [ 494.325902][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.676274][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 494.855715][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.878296][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.899000][ T4421] bond0 (unregistering): Released all slaves [ 495.636018][ T7163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.825101][ T4421] hsr_slave_0: left promiscuous mode [ 495.845138][ T4421] hsr_slave_1: left promiscuous mode [ 495.853585][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.861587][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.906556][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.914357][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.958893][ T4421] veth1_macvtap: left promiscuous mode [ 495.964948][ T4421] veth0_macvtap: left promiscuous mode [ 495.970883][ T4421] veth1_vlan: left promiscuous mode [ 495.977190][ T4421] veth0_vlan: left promiscuous mode [ 497.217296][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 497.271984][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 497.942512][ T7217] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 498.003651][ T7217] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 498.075802][ T7163] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.098563][ T7217] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 498.192253][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.199965][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.255911][ T7217] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 498.362258][ T4421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.585491][ T4421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.629962][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.637713][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.847078][ T4421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.953659][ T7180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.007763][ T7337] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 499.029249][ T4421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.138733][ T7189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.434631][ T7180] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.705344][ T7189] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.808309][ T3988] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.816014][ T3988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.963622][ T3988] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.971372][ T3988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.991217][ T4421] bridge_slave_1: left allmulticast mode [ 499.997209][ T4421] bridge_slave_1: left promiscuous mode [ 500.003920][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.088294][ T4421] bridge_slave_0: left allmulticast mode [ 500.097976][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.752242][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.827085][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.866470][ T4421] bond0 (unregistering): Released all slaves [ 500.993279][ T3988] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.000997][ T3988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.200728][ T3988] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.208472][ T3988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.981243][ T7180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.017911][ T7217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.337441][ T4421] hsr_slave_0: left promiscuous mode [ 502.399595][ T4421] hsr_slave_1: left promiscuous mode [ 502.408114][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.416523][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.482542][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.490502][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.560953][ T4421] veth1_macvtap: left promiscuous mode [ 502.567065][ T4421] veth0_macvtap: left promiscuous mode [ 502.573006][ T4421] veth1_vlan: left promiscuous mode [ 502.578895][ T4421] veth0_vlan: left promiscuous mode [ 502.580797][ T7354] loop4: detected capacity change from 0 to 32768 [ 502.594919][ T7354] XFS: ikeep mount option is deprecated. [ 503.112705][ T7354] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 503.552305][ T7354] XFS (loop4): Ending clean mount [ 503.567961][ T7354] XFS (loop4): Quotacheck needed: Please wait. [ 503.607748][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 503.651011][ T7354] XFS (loop4): Quotacheck: Done. [ 503.701936][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 504.698613][ T7217] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.884910][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.892510][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.062736][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.070470][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.104296][ T5805] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 506.042623][ T7163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.132565][ T7180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.208683][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.116215][ T7217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.286854][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 509.457293][ T7163] veth0_vlan: entered promiscuous mode [ 509.643080][ T7163] veth1_vlan: entered promiscuous mode [ 510.109304][ T7163] veth0_macvtap: entered promiscuous mode [ 510.239373][ T7163] veth1_macvtap: entered promiscuous mode [ 510.563009][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.618391][ T7180] veth0_vlan: entered promiscuous mode [ 510.705799][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.859170][ T7189] veth0_vlan: entered promiscuous mode [ 510.896810][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.921472][ T7180] veth1_vlan: entered promiscuous mode [ 510.968085][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.021868][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.036111][ T5858] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 511.060338][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.132165][ T7189] veth1_vlan: entered promiscuous mode [ 511.289957][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.301743][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.313135][ T5858] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 511.323860][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.467587][ T7180] veth0_macvtap: entered promiscuous mode [ 511.529914][ T5858] usb 5-1: config 0 descriptor?? [ 511.708977][ T7180] veth1_macvtap: entered promiscuous mode [ 511.834445][ T7189] veth0_macvtap: entered promiscuous mode [ 511.883407][ T7217] veth0_vlan: entered promiscuous mode [ 511.980080][ T7189] veth1_macvtap: entered promiscuous mode [ 512.081616][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.138558][ T7217] veth1_vlan: entered promiscuous mode [ 512.318656][ T5858] usb 5-1: language id specifier not provided by device, defaulting to English [ 512.342508][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.419995][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.537207][ T3769] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.602601][ T3769] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.622961][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.702105][ T3769] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.784586][ T5858] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0002/input/input9 [ 512.817866][ T3769] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.842610][ T7217] veth0_macvtap: entered promiscuous mode [ 512.887888][ T3915] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.910617][ T5858] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0002/input/input10 [ 512.990415][ T3915] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.015492][ T7217] veth1_macvtap: entered promiscuous mode [ 513.126307][ T5858] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0002/input/input11 [ 513.253306][ T3915] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.400771][ T3915] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.471767][ T5858] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0002/input/input12 [ 513.616832][ T7217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.825088][ T5858] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 513.936499][ T7217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.162144][ T3712] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.401117][ T3712] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.540525][ T3712] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.699312][ T3712] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.712536][ T5858] usb 5-1: USB disconnect, device number 3 [ 515.761652][ T7443] udevd[7443]: setting owner of /dev/input/event7 to uid=0, gid=104 failed: No such file or directory [ 515.855573][ T7442] fido_id[7442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 516.105751][ T6488] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 516.116686][ T6488] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 516.136402][ T6488] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 516.183758][ T6488] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 516.216214][ T6488] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 517.134900][ T6488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 517.269427][ T6488] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 517.281559][ T6488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 517.319923][ T6488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 517.334617][ T6488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 518.614521][ T6488] Bluetooth: hci2: command tx timeout [ 519.502242][ T6488] Bluetooth: hci3: command tx timeout [ 520.308322][ T7475] fuse: Bad value for 'fd' [ 520.677831][ T6488] Bluetooth: hci2: command tx timeout [ 521.366790][ T7449] chnl_net:caif_netlink_parms(): no params data found [ 521.529891][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.555053][ T6488] Bluetooth: hci3: command tx timeout [ 521.704804][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.735284][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 521.756816][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 521.766756][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 521.781777][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 521.794843][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 521.826561][ T7455] chnl_net:caif_netlink_parms(): no params data found [ 522.220173][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.747163][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.774677][ T5821] Bluetooth: hci2: command tx timeout [ 523.637633][ T5821] Bluetooth: hci3: command tx timeout [ 523.974391][ T5821] Bluetooth: hci1: command tx timeout [ 524.234923][ T12] bridge_slave_1: left allmulticast mode [ 524.240866][ T12] bridge_slave_1: left promiscuous mode [ 524.249000][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.392609][ T12] bridge_slave_0: left allmulticast mode [ 524.400458][ T12] bridge_slave_0: left promiscuous mode [ 524.407358][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.903098][ T5821] Bluetooth: hci2: command tx timeout [ 525.485564][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.503576][ T6488] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 525.521269][ T6488] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 525.531192][ T6488] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 525.545550][ T6488] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 525.557838][ T6488] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 525.574482][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 525.599463][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.619585][ T12] bond0 (unregistering): Released all slaves [ 525.719310][ T6488] Bluetooth: hci3: command tx timeout [ 525.798243][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 525.821067][ T24] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 525.830548][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.839028][ T24] usb 5-1: Product: syz [ 525.843421][ T24] usb 5-1: Manufacturer: syz [ 525.848467][ T24] usb 5-1: SerialNumber: syz [ 525.899367][ T24] usb 5-1: config 0 descriptor?? [ 526.044703][ T6488] Bluetooth: hci1: command tx timeout [ 526.151475][ T24] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 526.159410][ T24] airspy 5-1:0.0: Could not detect board [ 526.165923][ T24] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 526.248778][ T24] usb 5-1: USB disconnect, device number 4 [ 526.321574][ T12] hsr_slave_0: left promiscuous mode [ 526.336873][ T12] hsr_slave_1: left promiscuous mode [ 526.357680][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.365595][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.409193][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.417828][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.468369][ T12] veth1_macvtap: left promiscuous mode [ 526.474528][ T12] veth0_macvtap: left promiscuous mode [ 526.480465][ T12] veth1_vlan: left promiscuous mode [ 526.487513][ T12] veth0_vlan: left promiscuous mode [ 527.650789][ T6488] Bluetooth: hci4: command tx timeout [ 527.697225][ T12] team0 (unregistering): Port device team_slave_1 removed [ 527.724604][ T12] team0 (unregistering): Port device team_slave_0 removed [ 528.114770][ T6488] Bluetooth: hci1: command tx timeout [ 528.145463][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.156196][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.165492][ T7449] bridge_slave_0: entered allmulticast mode [ 528.176214][ T7449] bridge_slave_0: entered promiscuous mode [ 528.487504][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.495406][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.503271][ T7449] bridge_slave_1: entered allmulticast mode [ 528.513389][ T7449] bridge_slave_1: entered promiscuous mode [ 528.803443][ T7455] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.811426][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.819551][ T7455] bridge_slave_0: entered allmulticast mode [ 528.829526][ T7455] bridge_slave_0: entered promiscuous mode [ 528.926088][ T7455] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.933777][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.942043][ T7455] bridge_slave_1: entered allmulticast mode [ 528.952140][ T7455] bridge_slave_1: entered promiscuous mode [ 528.990601][ T7486] chnl_net:caif_netlink_parms(): no params data found [ 529.608799][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.720123][ T6488] Bluetooth: hci4: command tx timeout [ 529.767632][ T7455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.789328][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.899438][ T7455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.231154][ T6488] Bluetooth: hci1: command tx timeout [ 530.270024][ T7455] team0: Port device team_slave_0 added [ 530.813254][ T7449] team0: Port device team_slave_0 added [ 530.886810][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.975166][ T7455] team0: Port device team_slave_1 added [ 531.069761][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.176497][ T7449] team0: Port device team_slave_1 added [ 531.534215][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.630460][ T7538] input: syz1 as /devices/virtual/input/input14 [ 531.804855][ T6488] Bluetooth: hci4: command tx timeout [ 531.925385][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.949600][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.958228][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.984684][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.162917][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.170388][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.197106][ T7455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.247233][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.254815][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.283738][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.471714][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.480411][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.507463][ T7455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.530261][ T7513] chnl_net:caif_netlink_parms(): no params data found [ 532.583172][ T7486] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.591073][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.599289][ T7486] bridge_slave_0: entered allmulticast mode [ 532.609460][ T7486] bridge_slave_0: entered promiscuous mode [ 532.845111][ T7486] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.852900][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.861149][ T7486] bridge_slave_1: entered allmulticast mode [ 532.871672][ T7486] bridge_slave_1: entered promiscuous mode [ 533.892306][ T6488] Bluetooth: hci4: command tx timeout [ 533.918994][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.961310][ T7449] hsr_slave_0: entered promiscuous mode [ 533.972725][ T7449] hsr_slave_1: entered promiscuous mode [ 533.982216][ T7449] debugfs: 'hsr0' already exists in 'hsr' [ 533.990484][ T7449] Cannot create hsr debugfs directory [ 534.016641][ T7455] hsr_slave_0: entered promiscuous mode [ 534.035909][ T7455] hsr_slave_1: entered promiscuous mode [ 534.073791][ T7455] debugfs: 'hsr0' already exists in 'hsr' [ 534.080177][ T7455] Cannot create hsr debugfs directory [ 534.103059][ T7486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.125407][ T5870] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 534.173155][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.215401][ T7486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.344391][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 534.416896][ T5870] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 534.427737][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.438748][ T5870] usb 5-1: Product: syz [ 534.443412][ T5870] usb 5-1: Manufacturer: syz [ 534.450855][ T5870] usb 5-1: SerialNumber: syz [ 534.505847][ T5870] usb 5-1: config 0 descriptor?? [ 534.570245][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.918339][ T5870] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 534.926080][ T5870] airspy 5-1:0.0: Could not detect board [ 534.932320][ T5870] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 534.948036][ T5870] usb 5-1: USB disconnect, device number 5 [ 535.080624][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.109097][ T7486] team0: Port device team_slave_0 added [ 535.151217][ T7486] team0: Port device team_slave_1 added [ 535.385897][ T7513] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.393591][ T7513] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.402347][ T7513] bridge_slave_0: entered allmulticast mode [ 535.412626][ T7513] bridge_slave_0: entered promiscuous mode [ 535.516878][ T7486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.524453][ T7486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.551257][ T7486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.575169][ T7486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.582328][ T7486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.609182][ T7486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.649886][ T7513] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.657937][ T7513] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.666498][ T7513] bridge_slave_1: entered allmulticast mode [ 535.676992][ T7513] bridge_slave_1: entered promiscuous mode [ 535.906729][ T5870] IPVS: starting estimator thread 0... [ 536.004629][ T7560] IPVS: using max 192 ests per chain, 9600 per kthread [ 536.330519][ T7513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.530121][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.603663][ T7513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.693729][ T7486] hsr_slave_0: entered promiscuous mode [ 536.705518][ T7486] hsr_slave_1: entered promiscuous mode [ 536.714857][ T7486] debugfs: 'hsr0' already exists in 'hsr' [ 536.720799][ T7486] Cannot create hsr debugfs directory [ 536.972335][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.189058][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.331104][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.516558][ T7513] team0: Port device team_slave_0 added [ 537.663033][ T7513] team0: Port device team_slave_1 added [ 537.902041][ T7513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.910210][ T7513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.936815][ T7513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.155835][ T7513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.163300][ T7513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.191940][ T7513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.678216][ T12] bridge_slave_1: left allmulticast mode [ 538.684890][ T12] bridge_slave_1: left promiscuous mode [ 538.691675][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.722034][ T12] bridge_slave_0: left allmulticast mode [ 538.728235][ T12] bridge_slave_0: left promiscuous mode [ 538.735383][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.765079][ T12] bridge_slave_1: left allmulticast mode [ 538.771132][ T12] bridge_slave_1: left promiscuous mode [ 538.778202][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.807980][ T12] bridge_slave_0: left allmulticast mode [ 538.816440][ T12] bridge_slave_0: left promiscuous mode [ 538.827540][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.859528][ T12] bridge_slave_1: left allmulticast mode [ 538.867728][ T12] bridge_slave_1: left promiscuous mode [ 538.877041][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.960295][ T12] bridge_slave_0: left allmulticast mode [ 538.966517][ T12] bridge_slave_0: left promiscuous mode [ 538.973661][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.892265][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.936601][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.965962][ T12] bond0 (unregistering): Released all slaves [ 540.327146][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.382465][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.412070][ T12] bond0 (unregistering): Released all slaves [ 540.670530][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.689797][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.708004][ T12] bond0 (unregistering): Released all slaves [ 540.773554][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 540.963202][ T7513] hsr_slave_0: entered promiscuous mode [ 540.975799][ T7513] hsr_slave_1: entered promiscuous mode [ 540.983377][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 540.986142][ T7513] debugfs: 'hsr0' already exists in 'hsr' [ 540.994887][ T7513] Cannot create hsr debugfs directory [ 541.064416][ T24] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 541.073906][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.082526][ T24] usb 5-1: Product: syz [ 541.087262][ T24] usb 5-1: Manufacturer: syz [ 541.092105][ T24] usb 5-1: SerialNumber: syz [ 541.121488][ T24] usb 5-1: config 0 descriptor?? [ 541.327653][ T12] hsr_slave_0: left promiscuous mode [ 541.340381][ T12] hsr_slave_1: left promiscuous mode [ 541.350313][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.358313][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.393144][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.402219][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.443368][ T24] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 541.451138][ T24] airspy 5-1:0.0: Could not detect board [ 541.457574][ T24] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 541.481366][ T24] usb 5-1: USB disconnect, device number 6 [ 541.521151][ T12] hsr_slave_0: left promiscuous mode [ 541.556829][ T12] hsr_slave_1: left promiscuous mode [ 541.566082][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.573689][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.601998][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.610508][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.640721][ T12] hsr_slave_0: left promiscuous mode [ 541.651345][ T12] hsr_slave_1: left promiscuous mode [ 541.660674][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.671204][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.682792][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.692969][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.753577][ T12] veth1_macvtap: left promiscuous mode [ 541.759558][ T12] veth0_macvtap: left promiscuous mode [ 541.766249][ T12] veth1_vlan: left promiscuous mode [ 541.771966][ T12] veth0_vlan: left promiscuous mode [ 541.786348][ T12] veth1_macvtap: left promiscuous mode [ 541.792130][ T12] veth0_macvtap: left promiscuous mode [ 541.802310][ T12] veth1_vlan: left promiscuous mode [ 541.808230][ T12] veth0_vlan: left promiscuous mode [ 541.816660][ T12] veth1_macvtap: left promiscuous mode [ 541.822458][ T12] veth0_macvtap: left promiscuous mode [ 541.828649][ T12] veth1_vlan: left promiscuous mode [ 541.834328][ T12] veth0_vlan: left promiscuous mode [ 542.197512][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.746462][ T7574] loop4: detected capacity change from 0 to 2048 [ 542.972126][ T7574] loop4: p1 < > p3 [ 543.012417][ T7574] loop4: p3 size 134217728 extends beyond EOD, truncated [ 543.517969][ T12] team0 (unregistering): Port device team_slave_1 removed [ 543.619369][ T12] team0 (unregistering): Port device team_slave_0 removed [ 544.475171][ T12] team0 (unregistering): Port device team_slave_1 removed [ 544.507604][ T12] team0 (unregistering): Port device team_slave_0 removed [ 545.328305][ T12] team0 (unregistering): Port device team_slave_1 removed [ 545.401534][ T12] team0 (unregistering): Port device team_slave_0 removed [ 545.427579][ T7586] loop4: detected capacity change from 0 to 256 [ 545.438367][ T7586] exfat: Unknown parameter '184467440737095516150xffffffffffffffff0xffffffffffffffff' [ 545.561686][ T7586] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 545.568445][ T7586] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 545.769398][ T7586] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 545.776446][ T7586] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 545.879107][ T7586] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 546.089564][ T7586] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 546.096367][ T7586] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 546.252793][ T7586] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 546.310260][ T7586] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 546.316825][ T7586] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 546.522231][ T7586] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 546.572078][ T7586] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 546.580059][ T7586] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 546.629634][ T7586] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 546.834356][ T7449] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 546.933399][ T7449] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 547.075849][ T7449] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 547.215919][ T7449] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 547.563841][ T6488] Bluetooth: hci0: command 0x0406 tx timeout [ 547.592994][ T7455] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 547.674799][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 547.686739][ T7455] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 547.784141][ T7455] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 547.802194][ T6488] Bluetooth: hci2: command 0x0c1a tx timeout [ 547.914291][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 547.939198][ T7455] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 548.005658][ T24] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 548.017217][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.026413][ T24] usb 5-1: Product: syz [ 548.030810][ T24] usb 5-1: Manufacturer: syz [ 548.036255][ T24] usb 5-1: SerialNumber: syz [ 548.114279][ T6488] Bluetooth: hci3: command 0x0c1a tx timeout [ 548.178202][ T24] usb 5-1: config 0 descriptor?? [ 548.359328][ T6488] Bluetooth: hci1: command 0x0c1a tx timeout [ 548.436845][ T7589] netlink: 68 bytes leftover after parsing attributes in process `syz.4.436'. [ 548.580733][ T24] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 548.588621][ T24] airspy 5-1:0.0: Could not detect board [ 548.595081][ T24] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 548.606711][ T6488] Bluetooth: hci4: command 0x0c1a tx timeout [ 548.744186][ T7486] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 548.758691][ T24] usb 5-1: USB disconnect, device number 7 [ 548.944624][ T7486] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 549.044436][ T7486] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 549.109955][ T7513] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 549.169996][ T7486] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 549.242431][ T7513] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 549.329366][ T7513] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 549.463300][ T7449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.507650][ T7513] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 549.635485][ T6488] Bluetooth: hci0: command 0x0406 tx timeout [ 549.740319][ T7449] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.876244][ T6488] Bluetooth: hci2: command 0x0c1a tx timeout [ 549.888561][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.896424][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.088279][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.096096][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.165201][ T7455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.195278][ T5870] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 550.195592][ T6488] Bluetooth: hci3: command 0x0c1a tx timeout [ 550.394974][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 550.421001][ T7455] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.454997][ T6488] Bluetooth: hci1: command 0x0c1a tx timeout [ 550.491183][ T5870] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 550.634271][ T3841] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.641857][ T3841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.660778][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.668761][ T3841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.694637][ T6488] Bluetooth: hci4: command 0x0c1a tx timeout [ 550.713877][ T5870] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 550.723891][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.732731][ T5870] usb 5-1: Product: syz [ 550.737330][ T5870] usb 5-1: Manufacturer: syz [ 550.742183][ T5870] usb 5-1: SerialNumber: syz [ 550.909580][ T5870] usb 5-1: config 0 descriptor?? [ 550.950947][ T7449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.097909][ T7455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 551.110234][ T7455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.420438][ T7486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.465396][ T7513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.645488][ T7486] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.747352][ T3712] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.755140][ T3712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.785229][ T7513] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.887325][ T3712] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.895068][ T3712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.971361][ T6488] Bluetooth: hci2: command 0x0c1a tx timeout [ 552.012602][ T3712] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.020365][ T3712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.092647][ T3915] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.100363][ T3915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.281691][ T6488] Bluetooth: hci3: command 0x0c1a tx timeout [ 552.516074][ T6488] Bluetooth: hci1: command 0x0c1a tx timeout [ 552.757029][ T6488] Bluetooth: hci4: command 0x0c1a tx timeout [ 553.505231][ T5863] usb 5-1: USB disconnect, device number 8 [ 553.947008][ T7449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.183205][ T7455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.271497][ T7486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.505354][ T7513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.588201][ T7449] veth0_vlan: entered promiscuous mode [ 557.757991][ T7449] veth1_vlan: entered promiscuous mode [ 558.193251][ T7455] veth0_vlan: entered promiscuous mode [ 558.519813][ T7455] veth1_vlan: entered promiscuous mode [ 559.201756][ T7449] veth0_macvtap: entered promiscuous mode [ 559.428224][ T7449] veth1_macvtap: entered promiscuous mode [ 559.979103][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.288142][ T7449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.559767][ T7455] veth0_macvtap: entered promiscuous mode [ 560.637016][ T3712] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.691907][ T3712] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.007545][ T7455] veth1_macvtap: entered promiscuous mode [ 561.065586][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.198336][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.221254][ T7513] veth0_vlan: entered promiscuous mode [ 561.306415][ T7486] veth0_vlan: entered promiscuous mode [ 561.403296][ T7486] veth1_vlan: entered promiscuous mode [ 561.693711][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.706421][ T7513] veth1_vlan: entered promiscuous mode [ 561.796245][ T7486] veth0_macvtap: entered promiscuous mode [ 561.835082][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.926465][ T7486] veth1_macvtap: entered promiscuous mode [ 562.040537][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.150421][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.218000][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 562.253143][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.309902][ T7486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.389892][ T3988] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.464282][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 562.498745][ T7513] veth0_macvtap: entered promiscuous mode [ 562.521503][ T7486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.585002][ T24] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 562.601310][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.611315][ T24] usb 5-1: Product: syz [ 562.615974][ T24] usb 5-1: Manufacturer: syz [ 562.620783][ T24] usb 5-1: SerialNumber: syz [ 562.644673][ T7513] veth1_macvtap: entered promiscuous mode [ 562.741051][ T1322] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.796506][ T1322] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.839439][ T24] usb 5-1: config 0 descriptor?? [ 562.863875][ T1322] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.899278][ T7513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.948908][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.066644][ T7513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.193904][ T7673] netlink: 68 bytes leftover after parsing attributes in process `syz.4.443'. [ 563.248889][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.310532][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.335681][ T24] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 563.343081][ T24] airspy 5-1:0.0: Could not detect board [ 563.350184][ T24] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 563.412218][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.486746][ T3804] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.531596][ T24] usb 5-1: USB disconnect, device number 9 [ 564.662599][ T7690] loop4: detected capacity change from 0 to 512 [ 564.753011][ T7690] EXT4-fs: Ignoring removed bh option [ 564.932914][ T7690] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 564.947613][ T7690] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 564.958242][ T7690] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 565.082602][ T7690] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 565.190434][ T7690] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 565.238429][ T7690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.892338][ T5805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.218118][ T7747] loop4: detected capacity change from 0 to 32768 [ 570.340151][ T7747] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 570.593186][ T30] audit: type=1326 audit(1754133082.644:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.4.448" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9a638eb69 code=0x0 [ 571.115011][ T5805] ocfs2: Unmounting device (7,4) on (node local) [ 571.524159][ T3677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.532330][ T3677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.808323][ T3988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.817139][ T3988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.008254][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.016658][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.158809][ T3804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.168377][ T3804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.331040][ T7778] loop5: detected capacity change from 0 to 8 [ 573.599989][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.608447][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.977219][ T7778] overlay: Unknown parameter '/' [ 574.788681][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.797156][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.652255][ T3712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.666430][ T3712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.110909][ T3677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.120021][ T3677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.217862][ T7786] loop5: detected capacity change from 0 to 736 [ 576.727949][ T7788] loop4: detected capacity change from 0 to 2048 [ 577.366217][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 577.381143][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 577.406039][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 577.438338][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 577.477618][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 579.634457][ T5821] Bluetooth: hci5: command tx timeout [ 580.121657][ T7827] loop4: detected capacity change from 0 to 8 [ 581.045629][ T7799] chnl_net:caif_netlink_parms(): no params data found [ 581.698336][ T7834] netlink: 'syz.7.460': attribute type 5 has an invalid length. [ 581.714632][ T7834] netlink: 24 bytes leftover after parsing attributes in process `syz.7.460'. [ 581.731181][ T5821] Bluetooth: hci5: command tx timeout [ 581.831581][ T7839] netlink: 56 bytes leftover after parsing attributes in process `syz.4.461'. [ 581.898316][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.995328][ T7843] warning: `syz.4.461' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 582.097004][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.141561][ T7839] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input15 [ 582.423158][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.808891][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.682850][ T7853] loop4: detected capacity change from 0 to 64 [ 583.799434][ T5821] Bluetooth: hci5: command tx timeout [ 584.282389][ T35] bridge_slave_1: left allmulticast mode [ 584.288473][ T35] bridge_slave_1: left promiscuous mode [ 584.295614][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.427344][ T35] bridge_slave_0: left allmulticast mode [ 584.441461][ T35] bridge_slave_0: left promiscuous mode [ 584.448649][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.382457][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 585.875293][ T5821] Bluetooth: hci5: command tx timeout [ 586.033876][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.103562][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.136836][ T35] bond0 (unregistering): Released all slaves [ 586.183714][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.191535][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.199595][ T7799] bridge_slave_0: entered allmulticast mode [ 586.214588][ T7799] bridge_slave_0: entered promiscuous mode [ 586.307383][ T7866] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 586.366427][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.384368][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.392919][ T7799] bridge_slave_1: entered allmulticast mode [ 586.404525][ T7799] bridge_slave_1: entered promiscuous mode [ 587.112807][ T7799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.135512][ T7876] loop5: detected capacity change from 0 to 2048 [ 587.202245][ T7876] EXT4-fs: inline encryption not supported [ 587.209604][ T7876] EXT4-fs: Ignoring removed mblk_io_submit option [ 587.217220][ T7876] ext4: Unknown parameter 'audit' [ 587.994452][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 588.232231][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.242966][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 588.252496][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.641373][ T7799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.890584][ T35] hsr_slave_0: left promiscuous mode [ 589.009703][ T35] hsr_slave_1: left promiscuous mode [ 589.018798][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.026795][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.218216][ T9] usb 5-1: config 0 descriptor?? [ 589.267436][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.275420][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.675583][ T35] veth1_macvtap: left promiscuous mode [ 589.681362][ T35] veth0_macvtap: left promiscuous mode [ 589.687844][ T35] veth1_vlan: left promiscuous mode [ 589.700634][ T35] veth0_vlan: left promiscuous mode [ 590.504063][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 591.044944][ T9] pwc: send_video_command error -71 [ 591.050386][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 591.059065][ T9] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 591.229756][ T9] usb 5-1: USB disconnect, device number 10 [ 591.922815][ T35] team0 (unregistering): Port device team_slave_1 removed [ 591.991815][ T35] team0 (unregistering): Port device team_slave_0 removed [ 593.502134][ T7799] team0: Port device team_slave_0 added [ 593.610450][ T7799] team0: Port device team_slave_1 added [ 594.105682][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.113209][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.139882][ T7799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.164832][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.172039][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.201604][ T7799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.509753][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.8.482'. [ 594.849848][ T7921] dummy0: entered promiscuous mode [ 594.855373][ T7921] macsec1: entered promiscuous mode [ 594.861806][ T7921] macsec1: entered allmulticast mode [ 594.867538][ T7921] dummy0: entered allmulticast mode [ 594.914603][ T7799] hsr_slave_0: entered promiscuous mode [ 594.925568][ T7799] hsr_slave_1: entered promiscuous mode [ 594.933710][ T7799] debugfs: 'hsr0' already exists in 'hsr' [ 594.939889][ T7799] Cannot create hsr debugfs directory [ 595.005277][ T7924] syz_tun: entered allmulticast mode [ 601.097283][ T5861] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 601.152914][ T7799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 601.246048][ T7799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 601.370608][ T7799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 601.379628][ T5861] usb 6-1: Using ep0 maxpacket: 8 [ 601.414559][ T5861] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 601.423871][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.432417][ T5861] usb 6-1: Product: syz [ 601.436916][ T5861] usb 6-1: Manufacturer: syz [ 601.441652][ T5861] usb 6-1: SerialNumber: syz [ 601.450229][ T7799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 601.541287][ T5861] usb 6-1: config 0 descriptor?? [ 601.735962][ T7974] input: syz0 as /devices/virtual/input/input16 [ 602.604535][ T5861] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 602.612230][ T5861] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 604.089855][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 604.259844][ T7971] loop8: detected capacity change from 0 to 512 [ 604.419891][ T7976] loop7: detected capacity change from 0 to 64 [ 604.605873][ T7971] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.620516][ T7971] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.632196][ T9] usb 6-1: USB disconnect, device number 2 [ 605.447004][ T7513] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.828859][ T7799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.091810][ T7799] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.264153][ T7608] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 606.324885][ T3769] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.332739][ T3769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.477511][ T3769] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.485207][ T3769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.512183][ T7608] usb 8-1: Using ep0 maxpacket: 8 [ 606.659269][ T7608] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 606.668825][ T7608] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.677425][ T7608] usb 8-1: Product: syz [ 606.681850][ T7608] usb 8-1: Manufacturer: syz [ 606.687461][ T7608] usb 8-1: SerialNumber: syz [ 606.912357][ T7608] usb 8-1: config 0 descriptor?? [ 606.985139][ T7608] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 607.706280][ T8003] loop8: detected capacity change from 0 to 2048 [ 607.911498][ T7608] gspca_sonixj: reg_r err -32 [ 607.916914][ T7608] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 608.118294][ T8003] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.137810][ T8003] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.215254][ T7513] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.864687][ T9] usb 8-1: USB disconnect, device number 2 [ 611.147903][ T8031] loop8: detected capacity change from 0 to 512 [ 611.264528][ T8031] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 611.368183][ T8036] loop7: detected capacity change from 0 to 64 [ 611.505536][ T8031] EXT4-fs (loop8): 1 truncate cleaned up [ 611.513580][ T8031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.555312][ T7799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.295943][ T8049] loop4: detected capacity change from 0 to 64 [ 615.219207][ T7513] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.395205][ T8068] ===================================================== [ 616.402513][ T8068] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 616.412337][ T8068] _copy_to_user+0xcc/0x120 [ 616.422158][ T8068] move_addr_to_user+0x29c/0x410 [ 616.431303][ T8068] ____sys_recvmsg+0x232/0x610 [ 616.436724][ T8068] ___sys_recvmsg+0x20b/0x850 [ 616.441667][ T8068] do_recvmmsg+0x40e/0xdf0 [ 616.446505][ T8068] __x64_sys_recvmmsg+0x383/0x500 [ 616.451799][ T8068] x64_sys_call+0x2f74/0x3e20 [ 616.457010][ T8068] do_syscall_64+0xd9/0x210 [ 616.461763][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.468011][ T8068] [ 616.470447][ T8068] Uninit was stored to memory at: [ 616.475969][ T8068] nr_recvmsg+0x59b/0x790 [ 616.480501][ T8068] sock_recvmsg+0x2dc/0x390 [ 616.485483][ T8068] ____sys_recvmsg+0x193/0x610 [ 616.490505][ T8068] ___sys_recvmsg+0x20b/0x850 [ 616.495555][ T8068] do_recvmmsg+0x40e/0xdf0 [ 616.500225][ T8068] __x64_sys_recvmmsg+0x383/0x500 [ 616.505780][ T8068] x64_sys_call+0x2f74/0x3e20 [ 616.510701][ T8068] do_syscall_64+0xd9/0x210 [ 616.516257][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.527405][ T8068] [ 616.529861][ T8068] Uninit was created at: [ 616.536166][ T8068] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 616.542319][ T8068] kmalloc_reserve+0x13c/0x4b0 [ 616.547718][ T8068] __alloc_skb+0x347/0x7d0 [ 616.552383][ T8068] nr_loopback_queue+0x5f/0x400 [ 616.557611][ T8068] nr_route_frame+0x264/0xff0 [ 616.562637][ T8068] nr_transmit_buffer+0x1ab/0x2f0 [ 616.568060][ T8068] nr_kick+0x5b0/0x940 [ 616.572351][ T8068] nr_output+0x7a0/0x7d0 [ 616.577003][ T8068] nr_sendmsg+0xb10/0xe30 [ 616.581542][ T8068] __sock_sendmsg+0x333/0x3d0 [ 616.586558][ T8068] ____sys_sendmsg+0x7e0/0xd80 [ 616.591555][ T8068] ___sys_sendmsg+0x271/0x3b0 [ 616.596686][ T8068] __x64_sys_sendmsg+0x211/0x3e0 [ 616.601904][ T8068] x64_sys_call+0x1dfd/0x3e20 [ 616.608079][ T8068] do_syscall_64+0xd9/0x210 [ 616.612855][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.619132][ T8068] [ 616.626455][ T8068] Bytes 2-8 of 16 are uninitialized [ 616.632421][ T8068] Memory access of size 16 starts at ffff88811aa87a38 [ 616.641428][ T8068] Data copied to user address 0000200000000040 [ 616.647972][ T8068] [ 616.650462][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz.8.519 Not tainted 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 616.662428][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 616.672803][ T8068] ===================================================== [ 616.680761][ T8068] Disabling lock debugging due to kernel taint [ 616.687225][ T8068] Kernel panic - not syncing: kmsan.panic set ... [ 616.693832][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz.8.519 Tainted: G B 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 616.707198][ T8068] Tainted: [B]=BAD_PAGE [ 616.711488][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 616.721815][ T8068] Call Trace: [ 616.725285][ T8068] [ 616.728359][ T8068] __dump_stack+0x26/0x30 [ 616.732934][ T8068] dump_stack_lvl+0x53/0x270 [ 616.737787][ T8068] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.743995][ T8068] dump_stack+0x1e/0x25 [ 616.748413][ T8068] vpanic+0x361/0xbc0 [ 616.752657][ T8068] panic+0x15d/0x160 [ 616.756849][ T8068] kmsan_report+0x31c/0x320 [ 616.761574][ T8068] ? kmsan_internal_check_memory+0x16c/0x230 [ 616.767772][ T8068] ? kmsan_copy_to_user+0xf1/0x190 [ 616.773135][ T8068] ? _copy_to_user+0xcc/0x120 [ 616.778049][ T8068] ? move_addr_to_user+0x29c/0x410 [ 616.783441][ T8068] ? ____sys_recvmsg+0x232/0x610 [ 616.788646][ T8068] ? ___sys_recvmsg+0x20b/0x850 [ 616.793748][ T8068] ? do_recvmmsg+0x40e/0xdf0 [ 616.798556][ T8068] ? __x64_sys_recvmmsg+0x383/0x500 [ 616.803969][ T8068] ? x64_sys_call+0x2f74/0x3e20 [ 616.809067][ T8068] ? do_syscall_64+0xd9/0x210 [ 616.814032][ T8068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.820415][ T8068] ? __slab_free+0x367/0x9e0 [ 616.825220][ T8068] ? kmem_cache_free+0x5df/0xec0 [ 616.830382][ T8068] ? kmsan_get_metadata+0xfb/0x160 [ 616.835691][ T8068] ? kmsan_get_metadata+0xfb/0x160 [ 616.841041][ T8068] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.847079][ T8068] ? kmsan_get_metadata+0xfb/0x160 [ 616.852484][ T8068] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.858588][ T8068] kmsan_internal_check_memory+0x16c/0x230 [ 616.864610][ T8068] kmsan_copy_to_user+0xf1/0x190 [ 616.869895][ T8068] _copy_to_user+0xcc/0x120 [ 616.874648][ T8068] move_addr_to_user+0x29c/0x410 [ 616.880076][ T8068] ____sys_recvmsg+0x232/0x610 [ 616.885112][ T8068] ___sys_recvmsg+0x20b/0x850 [ 616.890071][ T8068] ? kmsan_get_metadata+0xfb/0x160 [ 616.895389][ T8068] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.901406][ T8068] do_recvmmsg+0x40e/0xdf0 [ 616.906060][ T8068] ? stack_depot_save_flags+0x35/0x7b0 [ 616.911701][ T8068] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.917711][ T8068] ? kmsan_get_metadata+0xfb/0x160 [ 616.923071][ T8068] __x64_sys_recvmmsg+0x383/0x500 [ 616.928345][ T8068] x64_sys_call+0x2f74/0x3e20 [ 616.933269][ T8068] do_syscall_64+0xd9/0x210 [ 616.938003][ T8068] ? irqentry_exit+0x16/0x60 [ 616.942836][ T8068] ? clear_bhb_loop+0x40/0x90 [ 616.947719][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.953821][ T8068] RIP: 0033:0x7f9b3bf8eb69 [ 616.958402][ T8068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.978206][ T8068] RSP: 002b:00007f9b39df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 616.986836][ T8068] RAX: ffffffffffffffda RBX: 00007f9b3c1b5fa0 RCX: 00007f9b3bf8eb69 [ 616.994993][ T8068] RDX: 0000000000000002 RSI: 0000200000001900 RDI: 0000000000000004 [ 617.003134][ T8068] RBP: 00007f9b3c011df1 R08: 0000000000000000 R09: 0000000000000000 [ 617.011284][ T8068] R10: 0000000000032000 R11: 0000000000000246 R12: 0000000000000000 [ 617.019408][ T8068] R13: 0000000000000000 R14: 00007f9b3c1b5fa0 R15: 00007ffc6ce5e968 [ 617.027572][ T8068] [ 617.031187][ T8068] Kernel Offset: disabled [ 617.035632][ T8068] Rebooting in 86400 seconds..