last executing test programs: 21m16.595904699s ago: executing program 32 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffffffffffffffff}, 0x14}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb34}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f0000001240)="$eJzs3AuYTlX7MPD7XmttxjTxNMlhWGvdmycNlkOSHJLkkCTJK0lOCaFJkoTEOEsakiTHSXIYQnKYxqRxPh9yTpKkSZKQkLC+S3993rf30Pf+/32f63vn/l3Xvqz72c+99r2fez/2s/dzPfNdj1F1mtWt2YSI4H8E/+ufZACIAYBhAJAPAAIAqBhfMf7y+jwSk/9nG2F/rofTrnUF7Fri/uds3P+cjfufs3H/czbuf87G/c/ZuP85G/efsZxs2+zCN/CScxe+/5+T8fn/P0h2mUlfbShzU89/I4X7n7Nx/3M27n/Oxv3P2bj/ORv3P2fj/uds3H/GcrL//r1j/u7gP2G51scfY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLGc4Zy/SgHAb+NrXRdjjDHGGGOMMcb+PD73ta6AMcYYY4wxxhhj//chCJCACJALckMM5IFYuA7i4HrIC/kgAjdAPNwI+eEmKAAFoRAUhgQoAkVBgwELBCEUg+IQhZuhBNwCiVASSkFpcFAGykI5KA+3QgW4DSrC7VAJ7oDKUAWqQjW4E6rDXVAD7oaacA/UgtpQB+rCvVAP7oP6cD80gAegITwIjeAhaAx/gSbwMDSFR6AZPArN4TFoAS2hFbSGNv+t/BehD7wEfaEfJEN/GAADYRAMhiEwFIbByzAcXoER8CqkwEgYBa/BaHgdxsAbMBbehHHwFoyHCTARJsFkmAKp8DZMhXdgGrwL02EGzIRZkAazYQ68B3NhHsyH92EBfAALYREshiWQDh9CBiyFTPgIlsHHkAXLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBp/AdtgBO2EX7IY9sBc+hX3wGeyHz+EAfPFv5p/9XX5PBAQUKFChwlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBQNGiQkVFeOpBJYAhMxEUthKXTosCyWxfJ4K1bAClgRK2IlrISVsQpWwWpYDatjdayBNbAm1sRaWAvrYB28F+/F+7A+1scG2AAbYkNshI2wMTbGJtgEm2JTbIbNsDk2xxbYAlthK2yDbbAttsV22A47YAfsiB2xM3bGJEzCLtgFu2JX7IbdsDt2xx7YA3tiL+yFL+KL+BK+hP2wluiPA3AADsJBOASH4lB8GYfjK/gKvoopOBJH4Wv4Gr6OY/AMjsU3cRyOw+piAk7ESUhiCqZiKk7FqTgNp+F0nIEzcBam4Wycg3NwLs7Defg+LsAP8ANchItwCaZjOmbgUszETFyGZzELl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBU/wU9wB+7AXbgL91x+rfFT/Aw/wxQ8gAfwIB7EQ3gID+NhzMZsPIJH8CgexWN4DI/jcTyBJ/EUnsTTeBrP4Fk8h+fwPJ7HC/h8wjdN95RcnwLiMiWUyCVyiRgRI2JFrIgTcSKvyCsiIiLiRbzIL/KLAqKAKCQKiQSRIIqKosIII0iEopgoJqIiKkqIEiJRJIpSopRwwomyoqwoL8qLCqKCqChuF5XEHaKyqCLau2qimqguOrga4m5RU9QUtURtUUfUFXVFPVFP1Bf1RQPRQDQUDUUj8ZBoLPrjEHxYXO5MMzESm4tR2EK0FK1Ea/E6Pi7aijHYTrQXHcST4k0ci51FW5cknhZdxETsKp4Vk/A50V1MwR7iBdFT9BK9xYuij2jn+op+Yjr2FwPELBwkBoshYqiYi7XF5Y7VEa+KFDFSjBKviSX4uvjtGB8n3hLjxQQxUUwSk8UUkSreFlPFO2KaeFdMFzPETDFLpInZYo54T8wV88R88b5YID4QC8UisVgsEeniQ5EhlopM8ZFYJj4WWWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im3iE7Fd7BA7xS6xW+wRe8WnYp/4TOwXn4sD4gtxUHwpDomvxGHxtcgW34gj4ltxVHwnjonvxXHxgzghTopT4kdxWvwkzoiz4pz4WZwXv4gL4qK4JLwAiVJIKZUMZC6ZW8bIPDJWXifj5PUyr8wnI/IGGS9vlPnlTbKALCgLycIyQRaRRaWWRlpJMpTFZHEZlTfLEvIWmShLylKytHSyjCwry8ny8lZZQd4mK8rbZSV5h6wsq8iqspq8U1aXd8ka8m5ZU94ja8naso6sK++V9eR9sr68XzaQD8iG8kHZSD4kG8u/yCbyYdlUPiKbyUdlc/mYbCFbylaytWwjH5dt5ROynWwvO8gnZUfZSXaWT8kk+bTsIp+RXeWzspt8TnaXz8se8gXZU/aSveVFeUl62Vf2k8myvxwgB8pBcrAcIofKYfJlOVy+IkfIV2VKDADI1+Ro+bocI9+QY+Wbcpx8S46XE+REOUlOllNkqnxbTpXvyGnyXTldzpAz5SyZJmfLIVdmmv9/kP/OP8gfIVPkSLlVbpOfyO1yh9wpd8ndco/cK/fKfXKf3C/3ywPygDwoD8pD8pA8LA/LbJktj8gj8qg8Ko/JY/K4PC5PyJPyZ/mjPC1/kmfkWXlW/izPy/PywpXXABQqoaRSKlC5VG4Vo/KoWHWdilPXq7wqn4qoG1S8ulHlVzepAqqgKqQKqwRVRBVVWhllFalQFVPFVVTdjFfeIqqUKq2cKqPKqnL/Tr4qoW5Riark3+T/UX1tVBvVVrVV7VQ71UF1UB1VR9VZdVZJKkl1UV1UV9VVdVPdVHfVXfVQPVRP1VP1Vr1VH9VH9VV9VbJKVgPUQDVIDVZD1FA1rD+o4Wq4GqFGqBSVokapUWq0Gq3GqDFqrBqrxqlxarwaryaqiWqymqxSVaqaqqaqaWqamq6mq5lqpkpTaWqOmqPmqrlqvpqvFqgFaqFaqBarxSpdpasMlaEyVaZappapLLVcLVcr1Uq1Wq1Wa9VatV6tVxvVRrVZbVZZapvaprar7Wqn2ql2q91qr9qr9ql9ar/arw6oA+qgOqgOqUPqsDqsslW2OqKOqKPqqDqmjqnj6rg6oU6oU+qUOq1OqzPqjDqnzqnz6ry6oC6oS+qSggACEYhABSrIFeQKYoKYIDaIDeKCuCBvkDeIBJEgPogP8gc3BQWCgkGhoHCQEBQJigY6MIENKAiDYkHxIBrcHJQIbgkSg5JBqaB04IIyQdmgXFA+uDWoENwWVAxuDyoFdwSVgypB1aBacGdQPbgrqBHcHdQM7glqBbWDOkHd4N6gXnBfUD+4P2gQPBA0DB4MGgUPBY2DvwRNgoeDpsEjQbPg0aB58FjQImgZtApaB23+rPkVBE0D788UfML11f10su6vB+iBepAerIfooXqYflkP16/oEfpVnaJH6lH6NT1av67H6Df0WP2mHqff0uP1BD1RT9KT9RSdqt/WU/U7epp+V0/XM/RMPUun6dl6jn5Pz9Xz9Hz9vl6gP9AL9SK9WC/R6fpDnaGX6kz9kV6mP9ZZerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbfoTvV3v0Dv1Lr1b79F79ad6n/5M79ef6wP6C31Qf6kP6a/0Yf21ztbf6CP6W31Uf6eP6e/1cf2DPqFP6lP6R31a/6TP6LP6nP5Zn9e/6Av6or6k/eUP95dP70YZZXKZXCbGxJhYE2viTJzJa/KaiImYeBNv8pv8poApYAqZQibBJJiipqi5jAyZYqaYiZqoKWFKmESTaEqZUsYZZ8qasqa8KW8qmAqmoqloKplKprKpbKqaquZOc6e5y9xl7jZ3m3vMPaa2qW3qmrqmnqln6pv6poFpYBqahqaRaWQam8amiWlimpqmpplpZpqb5qaFaWFamVamjWlj2pq2pp1pZzqYDqaj6Wg6m84mySSZLqaL6Wq6mm6mm+luupsepofpaXqa3qa36WP6mL6mr0k2yWaAGWAGmUFmiBlihplhZrgZbkaYESbFpJhRZpQZbUabMWaMGWveNOPMW2a8mWAmmklmspliUk2qmWqmmmlmmpluppuZZqZJM2lmjplj5pq5Zr6ZbxaYBWahWWgWm8Um3aSbDJNhMk2mWWaWmSyTZVaYFWaVWWXWmDVmnVlnNpgNZpPZZLaYLWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W8OmAPmoDnoEcAcNodNtsk2R8wRc9QcNcfMMXPcHDcnzAlzypwyp81pc8acMefMOXPe/GIumIvmkvEmxuaxsfY6G2evt3ltPvv7uJAtbBNsEVvUalvAFvyb2FhrE21JW+q3S0xbziZePpfa0tbZMrasLWcr2yq2qq1m77TV7V22xu/jfGDvs/Xt/baBfcDWtffaen8VN7QP2kb2UdvYPmab2Ja2qW1tm9lHbXP7mG1hW9pWtrXtaDvZzvYpm2Sftl3sM38XZ9ildp1dbzfYjXaf/cyesz/bo/Y7e97+YvvafnaYfdkOt6/YEfZVm2JH/l08zr5lx9sJdqKdZCfbKX8Xz7SzbJqdbefY9+xcO+/v4nT7oV1gM+1Cu8gutkt+jS/XlGk/ssvsxzbLLrcr7Eq7yq62a+za/13rSrvZbrFb7V77qd1ud9iddpfdbff8Gl/ej/32c3vAfmGP2G/tIfuVPWyP2Wz7za/x5f07Zr+3x+0P9oQ9aU/ZH+1p+5M9Y89e3n9/ed9/tBftJestEJIgSYoCykW5KYbyUCxdR3F0PeWlfBShGyiebqT8dBMVoIJUiApTAhWhoqTJkCWikIpRcYrSzVSCbqFEKkmlqDQ5KkNlqRyVp1upAt1GFel2qkR3UGWqQlWpGt1J1ekuqkF3U026h2pRbapDdeleqkf3UX26nxrQA9SQHqRG9BA1pr9QE3qYmtIj1Iwepeb0GLWgltSKWlMbepza0hPUjtpTB3qSOlIn6kxPURI9TV3oGepKz1I3eo660/PUg16gntSLetOL1Ideor7Uj5KpPw2ggTSIBtMQGkrD6GUaTq/QCHqVUmgkjaLXaDS9TmPoDRpLb9I4eovG0wSaSJNoMk2hVHqbptI7NI3epek0g2bSLEqj2TSH3qO5NI/m0/u0gD6ghbSIFtMSSqcPKYOWUiZ9RMvoY8qi5bSCVtIqWk1raC2to/W0gTbSJtpMW2grbaNPaDvtoJ20i3bTHtpLn9I+ynPlDfcFHaQv6RB9RYfpa8qmb+gIfUtH6Ts6Rt/TcfqBTtBJOkU/0mn6ic7QWTpHP9N5+oUu0EW6RJ4gxFCEMlRhEOYKc4cxYZ4wNrwujAuvD/OG+cJIeEMYH94Y5g9vCguEBcNCYeEwISwSFg11aEIbUhiGxcLiYTS8OSwR3hImhiXDUmHp0IVlwrJhubB8eGtYIbwtrBjeHlYK7wgrh1XCRx+oFt4ZVg/vCmuEd4c1w3vCWmHtsE5YN7w3rBfeF9YP7w8bhA+EFcIHw0bhQyFc+b1K0/CRsFn4aNg8fCxsEbYMW4Wtwzbh42Hb8ImwXdg+7BA+GXYMO4Wdw6fCpPDpsEv4zB+uTw77hwPCgeHA0Pv75eLokmh69MNoRnRpNDP6UXRZ9ONoVnR5dEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a9T7urnBoRNOOuUCl8vldjEuj4t117k4d73L6/K5iLvBxbsbXX53kyvgCrpCrrBLcEVcUaedcdaRC10xV9xF3c2uhLvFJbqSrpQr7Zwr48q61q6Na+PauidcO9fedXBPuiddJ9fJPeWeck+7Lu4Z19U967q551x397x73r3gerperrd70fVxL7m+rp9LdslugBvgBrlBbogb4oa5YW64G+5GuBEuxaW4UW6UG+1GuzFujBvrxrpxbpwb78a7iW6im+wmu1SX6qa6qW6am+YCAJjpZro0l+bmuDlurpvr5rv5bkHiArfQLXSL3WKX7tJdhstwmS7TLXPLXJbLcivcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXPb3Xa30+10u91ut9ftdfvcPrff7XcH3AF30B10h9whd9h97bLdN+6I+9Yddd+5Y+57d9z94E64k+6U+9Gddj+5M+6sO+d+dufdL+6Cu+guOe9SI29HpkbeiUyLvBuZHpkRmRmZFUmLzI7MibwXmRuZF5kfeT+yIPJBZGFkUWRxZEkkPfJhJCOyNJIZ+SiyLPJxJCuyPLIisjKyKrJagS+yPfTFfHEf9Tf7Ev4Wn+hL+lK+tHe+jM/ty/ny/lZfwd/mK/rbfSV/h6/sq/iq/jHfwrf0rXxr38Y/7tv6J3w739538E/6jr6T7+yf8kn+ad/FP+O7+md9N/+c7+6f9z38C76n7+V7+xd9H/+S7+v7+WTf3w/wA/0gP9gP8UP9MP+yH+5f8SP8qz7Fj/Sj/Gt+tH/dj/Fv+LH+TT/Ov+XH+wl+op/kJ/spPtW/7af6d/w0/66f7mf4mX6WT/Oz/Rz/np/r5/n5/n2/wH/gF/pFfrFf4tP9hz7DL/WZ/iO/zH/ss/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8J3673+F3+l1+t9/j9/pP/T7/md/vP/cH/Bf+oP/SH/Jf+cP+a5/tv/FHsr71R/13/pj/3h/3P/gT/qQ/5X/0p/1P/ow/68/5n/15/4u/4C/6S//mb9Zq/xm3zhljjDHG/j808A/W9/8HjykAEFfGv3jvr99ROPuv10sA2FTgv8aDRULHCAA83a/Hw78ttWolJydfeW6WhKD4IgCI/G4DV+Ll0AE6QRK0h/L/sL7Botd5+hfzZ4yhydHbAWL/KicGrsZX5//yn8z/+JPjMiqF5+L/ef3RRQCJxa/mXL4K/y1eDh1+/eqwPVT4J/MXbPuv6s+SkOerVIB2f5UTBwDt8vy+/rLwBDwDSX/zzAb/cJuMMcYYY4wxxnKewaJqtz+4/vz1+jxBXc3JDVfjP7o+Z4wxxhhjjDHG2LX3XK/eTz2elNS+Gw94wIMcNuj0L55zrf9nYowxxhhjjP3Zrn7ov/pYnmtZEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9v/hLY9d6HxljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLFr7X8FAAD//8HaM+M=") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 15m30.916403582s ago: executing program 33 (id=843): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x81, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) execve(&(0x7f00000002c0)='./file0/file2\x00', 0x0, 0x0) 11m27.664610908s ago: executing program 6 (id=1347): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, 0x0) shutdown(r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 11m24.331181034s ago: executing program 6 (id=1354): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 11m21.613631713s ago: executing program 6 (id=1359): syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000401, &(0x7f0000000000)=ANY=[], 0x1, 0x22f, &(0x7f0000001080)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 11m16.767989221s ago: executing program 6 (id=1365): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11m15.736221224s ago: executing program 6 (id=1370): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x8, 0x80000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x8004) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008000) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000007a40)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f00000000c0)={0x1, 0xead, 0x1, 0x5}) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) 11m9.747737524s ago: executing program 6 (id=1377): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x0, r1}, 0x60) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 10m54.535977014s ago: executing program 34 (id=1377): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x0, r1}, 0x60) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 9m4.587785393s ago: executing program 4 (id=1640): mkdirat(0xffffffffffffff9c, 0x0, 0x0) inotify_init() open(0x0, 0x14000, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 9m1.724143092s ago: executing program 4 (id=1646): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x8, 0x80000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x8004) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008000) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000007a40)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f00000000c0)={0x1, 0xead, 0x1, 0x5}) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 8m59.76456258s ago: executing program 4 (id=1651): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x183002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x3, 0xfffffffc}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x43) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) 8m57.531242229s ago: executing program 4 (id=1656): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 8m55.607293593s ago: executing program 4 (id=1660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0x1}) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)="000087000000000000cc4c", 0xb, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/67, 0x43, 0x0) 8m54.598191504s ago: executing program 4 (id=1664): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0x100000000, 0x2) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000003c0)="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") r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000140007800500140080ff00000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r7, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)}) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000000900)=""/106, 0x6a}], 0x3}, 0x2000000}], 0x1, 0x101, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000300)='./file2\x00', 0x10, &(0x7f0000000440)=ANY=[], 0x3, 0x31d, &(0x7f0000000700)="$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") sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) 8m39.502932314s ago: executing program 35 (id=1664): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0x100000000, 0x2) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000003c0)="fefc312443f99b5d198a11695c6835652872ae901da3652c9acc564f5ac161d5210131d32b4370949939a49a716c4d163deb611e33c3ed2b5b1876948a2578a1d01a154ba85cd07e7053d1ef3c00f063453ce355abf5df988b31db48186c25e996dc1ab06919ea25ed38e565d11588649e98ef0d34ea060da2749403776e5308278d3223a1060e0a7750bb1c076f2614788dc22b9eae245c4d1e23881c02a9f4b79d551e908d4f1bc6ff21b601662197039c572151128a750ee62b06eab3c9110f60edd0f1e7ac6d860336e9656c603fea1c8933587ea18be81e53907acecc6bff7476a4c1e74024c8f62aea55c98cf58f62bd538f8f9b182c0629e7007cd8c9") r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000140007800500140080ff00000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r7, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)}) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000000900)=""/106, 0x6a}], 0x3}, 0x2000000}], 0x1, 0x101, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000300)='./file2\x00', 0x10, &(0x7f0000000440)=ANY=[], 0x3, 0x31d, &(0x7f0000000700)="$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") sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) 6m1.489433618s ago: executing program 8 (id=2004): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x34}}, 0x20000000) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) timer_create(0x2, &(0x7f0000000200)={0x0, 0x1f, 0x2, @tid=0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = semget$private(0x0, 0x7, 0x191) semop(r3, &(0x7f0000000180)=[{0x3, 0x5, 0x3000}, {0x2, 0x2, 0x800}], 0x2) semctl$GETZCNT(r3, 0x5, 0xf, 0x0) 6m0.582410131s ago: executing program 8 (id=2006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'mpc624\x00', [0x9e1, 0x2166, 0x0, 0xffffe, 0x188d8, 0x8e, 0x1, 0x10, 0x1002, 0xffffffff, 0x200, 0x40008, 0x344, 0x7, 0x7, 0x3, 0x8, 0x803, 0xb, 0xe, 0x4, 0x3, 0x7, 0x8000000a, 0x5, 0x0, 0x22c, 0x7df, 0x6, 0x400007, 0x1]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x488c0) 5m55.576941122s ago: executing program 8 (id=2017): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}], 0x2}}], 0x2, 0xf000000) 5m54.624050958s ago: executing program 8 (id=2020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'mpc624\x00', [0x9e1, 0x2166, 0x0, 0xffffe, 0x188d8, 0x8e, 0x1, 0x10, 0x1002, 0xffffffff, 0x200, 0x40008, 0x344, 0x7, 0x7, 0x3, 0x8, 0x803, 0xb, 0xe, 0x4, 0x3, 0x7, 0x8000000a, 0x5, 0x0, 0x22c, 0x7df, 0x6, 0x400007, 0x1]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x488c0) 5m42.181360277s ago: executing program 8 (id=2047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 5m41.188326776s ago: executing program 8 (id=2050): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000000)={0xc9}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) userfaultfd(0x800) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 5m25.960919828s ago: executing program 36 (id=2050): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000000)={0xc9}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) userfaultfd(0x800) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 4m59.237504091s ago: executing program 7 (id=2147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000000000000840000000100000000000001"], 0x30}], 0x1, 0x0) 4m57.405842387s ago: executing program 7 (id=2149): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(0x0, r1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, 0x0, 0x0) fchown(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x0, 0x74, 0x7, 0x5, 0x21, @mcast1, @remote, 0x1, 0x87, 0x4, 0x1}}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x80000001, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040010) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) unshare(0x60600) syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) r8 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000100)="3cd60d000000e4ff000000000000e3ff", 0x20) 4m57.218055593s ago: executing program 7 (id=2151): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000000)={0xc9}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) userfaultfd(0x800) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 4m50.623464841s ago: executing program 7 (id=2164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'mpc624\x00', [0x9e1, 0x2166, 0x0, 0xffffe, 0x188d8, 0x8e, 0x1, 0x10, 0x1002, 0xffffffff, 0x200, 0x40008, 0x344, 0x7, 0x7, 0x3, 0x8, 0x803, 0xb, 0xe, 0x4, 0x3, 0x7, 0x8000000a, 0x5, 0x0, 0x22c, 0x7df, 0x6, 0x400007, 0x1]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x488c0) 4m49.841380864s ago: executing program 7 (id=2166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'mpc624\x00', [0x9e1, 0x2166, 0x0, 0xffffe, 0x188d8, 0x8e, 0x1, 0x10, 0x1002, 0xffffffff, 0x200, 0x40008, 0x344, 0x7, 0x7, 0x3, 0x8, 0x803, 0xb, 0xe, 0x4, 0x3, 0x7, 0x8000000a, 0x5, 0x0, 0x22c, 0x7df, 0x6, 0x400007, 0x1]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x488c0) 4m49.115765663s ago: executing program 7 (id=2167): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000000)={0xc9}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) userfaultfd(0x800) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 4m33.859587466s ago: executing program 37 (id=2167): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000000)={0xc9}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) userfaultfd(0x800) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 20.735033597s ago: executing program 1 (id=2935): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff00080003"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 20.564057151s ago: executing program 1 (id=2936): io_setup(0x200, &(0x7f0000000140)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x1, 0x0, r1, 0x0, 0x0, 0x2ffc}]) 20.389608905s ago: executing program 1 (id=2938): syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x18d, &(0x7f0000000500)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 20.089277459s ago: executing program 1 (id=2942): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, 0x0, 0x402100, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 19.039520583s ago: executing program 1 (id=2951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$sock_attach_bpf(r1, 0x6, 0x25, &(0x7f0000000200), 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) 18.33647151s ago: executing program 1 (id=2959): pipe2(&(0x7f00000000c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 18.159289424s ago: executing program 38 (id=2959): pipe2(&(0x7f00000000c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 5.60377878s ago: executing program 9 (id=3037): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 5.444082554s ago: executing program 9 (id=3040): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(r0, 0x0, 0x0, 0x73a, 0x21) 5.201361463s ago: executing program 9 (id=3045): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 4.483768871s ago: executing program 9 (id=3050): socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) 3.181855555s ago: executing program 3 (id=3058): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x4078, &(0x7f0000004080)="$eJzs079KwlEUB/CjQ0EtFj3A3SKQ+vknySkqGhrMwamxwkIQg7RwaelteqQeoOcwMIP4lYMFBfH5TOfe7z2Xs5zVl6eDiCjs3A1648gpRsRkWu0XIwoRUZ8lhfzT4XWvf37R7b91FfMxCyvNuX94nBVLi/+5uRZxmiJiZfS8cfST6fgnlrfOPh4nU5/3+3tODlupfdxKWaNR7VSq6V0t1bKvO7Ism5P8tvVS52qc7ru3w97NIO1u18qpfTlKlb1yqjSb9b8eDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGUHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WSXRuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAAAAP//CaUg2w==") timer_gettime(r0, 0x0) 2.791439666s ago: executing program 5 (id=3061): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x30, r1, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) 2.550356336s ago: executing program 5 (id=3063): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r0) 2.345623262s ago: executing program 9 (id=3064): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000fc18ffff730108000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) 2.345479892s ago: executing program 0 (id=3065): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='projid_map\x00') read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 2.183234515s ago: executing program 9 (id=3066): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x0, 0x31, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x20, 0x8, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000200)={0x0, 0xe, 0x1, "90"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.112142061s ago: executing program 0 (id=3067): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x7, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x1c4292}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.902652697s ago: executing program 3 (id=3069): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0x54}}, 0x0) 1.569924534s ago: executing program 2 (id=3070): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 1.524160828s ago: executing program 0 (id=3071): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) 1.335433593s ago: executing program 2 (id=3072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a010200000000000000000100ffff0900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010000040c00024000000000000000010900010073797a31000000000400048014000000020a010200000000000000000000000314000000110001"], 0xcc}}, 0x200000d4) 1.280313537s ago: executing program 3 (id=3073): socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x2, 0x0, 0x1, 0x40}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 1.176773735s ago: executing program 2 (id=3074): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)="32780f64398323756224d03ac5cb3838e854cf6fe7e38c09daa0e76828c158699b396cff6b5ef9b454e678333fb7c00b", 0x30, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) shutdown(r0, 0x1) 1.175680466s ago: executing program 0 (id=3075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)={0xd4, 0x36, 0x2, 0x70bd28, 0x25dfdbfc, "", [@generic="ef2c04e39bf75096de5a2960042a80d377b9ec8325e2f932185c1ce1", @nested={0x18, 0x100, 0x0, 0x1, [@nested={0x4, 0x10d}, @typed={0xc, 0xe9, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0xa8}]}, @generic="c0e2d76ece076559a7ae9c17c74313f02c4bf9fdb9ba7a6fff45147d7a97f86a0af4da9eecb85d44cd5ad7bf94f115ef155af58968317b913561529a361a6f17d26d013ecc0965eb61a798d126ce5084386ab99115f91a0085fa683e11e4e0bad746d874a07d0e21fdb156e82ec121dc1e84e3e3a073f4a053903fe2fb685146a0a6de9707e0ddd0667aa17ec30b"]}, 0xd4}], 0x1, &(0x7f0000000f40), 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.028071528s ago: executing program 3 (id=3076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r1, 0x201, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x29000}, 0x8000) 986.670701ms ago: executing program 2 (id=3077): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000340)={0x0, 0x0, 0x10300}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) 959.870923ms ago: executing program 0 (id=3078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)={0x100, 0x36, 0x2, 0x70bd28, 0x25dfdbfc, "", [@generic="ef2c04e39bf75096de5a2960042a80d377b9ec8325e2f932185c1ce1", @nested={0x18, 0x100, 0x0, 0x1, [@nested={0x4, 0x10d}, @typed={0xc, 0xe9, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0xa8}]}, @generic="c0e2d76ece076559a7ae9c17c74313f02c4bf9fdb9ba7a6fff45147d7a97f86a0af4da9eecb85d44cd5ad7bf94f115ef155af58968317b913561529a361a6f17d26d013ecc0965eb61a798d126ce5084386ab99115f91a0085fa683e11e4e0bad746d874a07d0e21fdb156e82ec121dc1e84e3e3a073f4a053903fe2fb685146a0a6de9707e0ddd0667aa17ec30b3008e1af022b7296d407ad4ebcded6d74449049cc7565edbc48717701ec3ea58d3c5f3f230e3d932b74739"]}, 0x100}], 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 860.161561ms ago: executing program 3 (id=3079): unshare(0x2c020400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000080)) 785.530777ms ago: executing program 0 (id=3080): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r2, 0x42d, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) 748.50707ms ago: executing program 2 (id=3081): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000200)={0x2080025, 0xf46, 0xffffffff, 0x675, 0x8001}) 709.061613ms ago: executing program 3 (id=3082): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r0, 0x1) 708.957613ms ago: executing program 5 (id=3083): unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) 552.116836ms ago: executing program 5 (id=3084): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 308.177155ms ago: executing program 2 (id=3085): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000003000/0x3000)=nil) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0xc000680) syz_clone(0xb41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, r3}, 0x94) 134.587249ms ago: executing program 5 (id=3086): request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, 0x0, 0x0) 0s ago: executing program 5 (id=3087): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd25, 0x25dfcbfb, {0xa, 0x80, 0x14, 0x0, 0xff, 0x1, 0x0, 0x4, 0x3600}, [@RTA_GATEWAY={0x14, 0x5, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040884) kernel console output (not intermixed with test programs): T11605] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.756722][T11641] overlayfs: failed to clone upperpath [ 926.171304][ T4293] Bluetooth: hci4: command 0x041b tx timeout [ 927.906804][T11605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.982544][T11605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 928.575855][T11605] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.681313][T11605] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.697644][T11605] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.707569][T11605] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.872174][ T9511] Bluetooth: hci4: command 0x040f tx timeout [ 929.452009][T11675] Error parsing options; rc = [-22] [ 930.018298][T11681] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 930.887091][ T9511] Bluetooth: hci4: command 0x0419 tx timeout [ 931.191042][T11686] Error parsing options; rc = [-22] [ 932.257566][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.265094][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.554010][T11599] chnl_net:caif_netlink_parms(): no params data found [ 934.839341][T11599] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.847800][T11599] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.857217][T11599] device bridge_slave_0 entered promiscuous mode [ 935.548016][T11599] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.573531][T11753] overlayfs: failed to clone upperpath [ 935.621359][T11599] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.684308][T11599] device bridge_slave_1 entered promiscuous mode [ 935.868143][T11759] overlayfs: failed to clone upperpath [ 935.905952][T11754] Error parsing options; rc = [-22] [ 935.920532][T11754] loop7: detected capacity change from 0 to 64 [ 936.133964][T11599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.188083][T11599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.458583][T11754] hfs: get root inode failed [ 936.474753][T11599] team0: Port device team_slave_0 added [ 936.524466][T11599] team0: Port device team_slave_1 added [ 936.752702][T11599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.851496][T11599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.751186][T11599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.765902][T11599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.774633][T11599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.865448][T11599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.804738][T11599] device hsr_slave_0 entered promiscuous mode [ 938.874525][T11599] device hsr_slave_1 entered promiscuous mode [ 939.071536][T11599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 939.429653][T11599] Cannot create hsr debugfs directory [ 941.883135][T11805] overlayfs: failed to clone upperpath [ 944.915660][T11836] overlayfs: failed to clone upperpath [ 945.639867][T11844] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 945.651457][T11844] ubi: mtd0 is already attached to ubi31 [ 946.164120][T11845] 9pnet: Insufficient options for proto=fd [ 946.841760][T11864] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 947.313131][T11599] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 947.374620][T11599] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 947.448763][T11599] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 947.762788][T11599] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 949.195819][T11599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.632341][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 949.707359][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 949.878153][T11599] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.928451][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 949.962033][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 950.032203][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.040904][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.134780][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 950.880095][T11907] 9pnet: Insufficient options for proto=fd [ 950.911029][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 950.957231][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 951.031860][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.040250][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.222039][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 951.294552][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 951.681074][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 951.817357][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 951.828282][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 951.950112][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 952.164792][T11926] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 952.176265][T11926] ubi: mtd0 is already attached to ubi31 [ 953.431627][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 953.470582][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 953.684064][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 953.999086][T11599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 954.055723][T11599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 954.174934][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 954.210481][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 954.366480][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 954.385182][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 955.342119][T11599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.604224][T11956] Error parsing options; rc = [-22] [ 956.493446][T11972] loop7: detected capacity change from 0 to 1024 [ 956.515992][T11972] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 956.792075][T11972] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 957.446179][T11972] 9pnet: Insufficient options for proto=fd [ 957.482551][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 957.525482][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 957.835522][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 957.891363][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 957.910805][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 957.930880][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 957.983556][T11599] device veth0_vlan entered promiscuous mode [ 958.140579][T11599] device veth1_vlan entered promiscuous mode [ 958.345164][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 958.386074][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 958.494465][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 958.605661][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 959.060550][T11599] device veth0_macvtap entered promiscuous mode [ 959.671564][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 959.949933][T11599] device veth1_macvtap entered promiscuous mode [ 960.071822][T12011] netlink: 'syz.7.1763': attribute type 2 has an invalid length. [ 960.080624][T12011] netlink: 'syz.7.1763': attribute type 8 has an invalid length. [ 960.090240][T12011] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1763'. [ 960.181051][T11599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.295986][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 960.572411][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 960.970784][T12018] capability: warning: `syz.7.1765' uses deprecated v2 capabilities in a way that may be insecure [ 960.973940][T11599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.040153][T11599] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.124908][T12018] loop7: detected capacity change from 0 to 512 [ 961.172452][T11599] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.191714][T11599] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.200458][T11599] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.333585][ T8506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 961.354806][ T8506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 961.852806][ T8506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.746142][ T8506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.205825][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 965.346208][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.358119][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.225376][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 975.621722][T12117] overlayfs: failed to clone upperpath [ 986.625350][T12167] netlink: 'syz.5.1804': attribute type 2 has an invalid length. [ 986.633401][T12167] netlink: 'syz.5.1804': attribute type 8 has an invalid length. [ 986.641729][T12167] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1804'. [ 988.280504][T12185] overlayfs: failed to clone upperpath [ 989.439762][T12189] Illegal XDP return value 4294967274, expect packet loss! [ 992.205348][T12224] netlink: 'syz.8.1818': attribute type 2 has an invalid length. [ 992.215836][T12224] netlink: 'syz.8.1818': attribute type 8 has an invalid length. [ 992.225449][T12224] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1818'. [ 993.524541][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.531736][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.371944][T12232] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.379630][T12232] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.690979][T12232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.777405][T12232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.567948][T12232] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.582112][T12232] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.611985][T12232] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.625154][T12232] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.401960][T12272] overlayfs: failed to clone upperpath [ 1000.010867][T12279] device bridge_slave_0 left promiscuous mode [ 1000.787005][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.855717][T12279] device bridge_slave_1 left promiscuous mode [ 1000.868652][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.115639][T12279] bond0: (slave bond_slave_0): Releasing backup interface [ 1002.197124][T12279] bond0: (slave bond_slave_1): Releasing backup interface [ 1002.238708][T12279] team0: Port device team_slave_0 removed [ 1002.433087][T12279] team0: Port device team_slave_1 removed [ 1002.447002][T12279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.457082][T12279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.823700][T12343] overlayfs: failed to clone upperpath [ 1008.725125][T12351] loop7: detected capacity change from 0 to 16 [ 1008.771150][T12351] erofs: (device loop7): mounted with root inode @ nid 36. [ 1009.064296][T12356] autofs4:pid:12356:autofs_fill_super: called with bogus options [ 1010.989867][ T8506] device hsr_slave_0 left promiscuous mode [ 1011.034293][ T8506] device hsr_slave_1 left promiscuous mode [ 1011.056330][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.093071][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.123859][ T8506] device bridge_slave_1 left promiscuous mode [ 1011.131027][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.188818][ T8506] device bridge_slave_0 left promiscuous mode [ 1011.490959][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.742661][T12377] Error parsing options; rc = [-22] [ 1013.440558][ T8506] team0 (unregistering): Port device team_slave_1 removed [ 1013.532023][ T8506] team0 (unregistering): Port device team_slave_0 removed [ 1013.579750][ T8506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.630912][ T8506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.068666][ T8506] bond0 (unregistering): Released all slaves [ 1014.387171][T12379] team0: Port device syz_tun removed [ 1014.441975][T12379] device bridge_slave_0 left promiscuous mode [ 1014.452217][T12379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.621661][T12379] device bridge_slave_1 left promiscuous mode [ 1014.628187][T12379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.061684][T12413] Error parsing options; rc = [-22] [ 1015.138556][T12379] bond0: (slave bond_slave_0): Releasing backup interface [ 1015.405055][T12379] bond0: (slave bond_slave_1): Releasing backup interface [ 1015.774078][T12379] team0: Port device team_slave_0 removed [ 1015.854610][T12379] team0: Port device team_slave_1 removed [ 1015.881701][T12379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.926763][T12379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.739839][T12483] netlink: 'syz.0.1877': attribute type 10 has an invalid length. [ 1022.748778][T12483] batman_adv: batadv0: Adding interface: team0 [ 1022.756335][T12483] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.785136][T12483] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1022.869723][T12497] netlink: 'syz.1.1878': attribute type 10 has an invalid length. [ 1022.888152][T12497] batman_adv: batadv0: Adding interface: team0 [ 1022.895797][T12497] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.941892][T12497] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1031.484823][T12566] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1034.818862][T12605] 9pnet: Insufficient options for proto=fd [ 1035.433796][T12619] netlink: 'syz.5.1903': attribute type 10 has an invalid length. [ 1035.448795][T12619] batman_adv: batadv0: Adding interface: team0 [ 1035.458728][T12619] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.487986][T12619] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1038.269856][T12644] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1040.278044][T12661] netlink: 'syz.0.1910': attribute type 10 has an invalid length. [ 1040.704661][T12669] loop7: detected capacity change from 0 to 1024 [ 1040.980002][T12669] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 1041.654043][T12669] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 1041.691313][ T4247] Bluetooth: hci3: command 0x0406 tx timeout [ 1042.307600][T12683] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1042.591721][T12668] 9pnet: Insufficient options for proto=fd [ 1046.411929][T12722] overlayfs: failed to clone upperpath [ 1047.601721][ T4467] Bluetooth: hci4: command 0x0406 tx timeout [ 1048.623929][T12738] 9pnet: Insufficient options for proto=fd [ 1050.848199][T12736] netlink: 'syz.0.1929': attribute type 10 has an invalid length. [ 1052.825378][T12785] netlink: 'syz.1.1936': attribute type 10 has an invalid length. [ 1055.194784][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.202045][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.310471][T12811] loop7: detected capacity change from 0 to 16 [ 1055.467009][T12811] erofs: (device loop7): mounted with root inode @ nid 36. [ 1056.837735][T12838] autofs4:pid:12838:autofs_fill_super: called with bogus options [ 1057.815994][T12849] overlayfs: failed to clone upperpath [ 1058.466424][T12860] Error parsing options; rc = [-22] [ 1063.218466][T12871] netlink: 'syz.5.1958': attribute type 10 has an invalid length. [ 1065.633221][T12924] Error parsing options; rc = [-22] [ 1070.272425][T12965] overlayfs: failed to clone upperpath [ 1075.856124][T13025] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1075.856124][T13025] The task syz.1.1993 (13025) triggered the difference, watch for misbehavior. [ 1077.379260][T13042] netlink: 'syz.0.1997': attribute type 2 has an invalid length. [ 1077.387209][T13042] netlink: 'syz.0.1997': attribute type 8 has an invalid length. [ 1077.395129][T13042] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1997'. [ 1078.994437][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2001'. [ 1082.982124][T13111] netlink: 'syz.1.2007': attribute type 10 has an invalid length. [ 1084.195817][T13115] netlink: 'syz.5.2014': attribute type 10 has an invalid length. [ 1088.492227][T13155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2022'. [ 1088.600105][T13168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2023'. [ 1089.469788][T13166] 9pnet: Insufficient options for proto=fd [ 1090.948639][T13192] overlayfs: missing 'lowerdir' [ 1092.261782][T13207] overlayfs: failed to clone upperpath [ 1095.346425][T13234] 9pnet: Insufficient options for proto=fd [ 1097.270634][T13264] Error parsing options; rc = [-22] [ 1099.238703][T13280] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2047'. [ 1099.630429][T13292] Error parsing options; rc = [-22] [ 1102.927392][T13332] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1102.938979][T13332] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1103.550842][T13338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2061'. [ 1103.638307][T13343] Error parsing options; rc = [-22] [ 1105.882140][T13352] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1105.892208][T13352] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1106.498627][T13364] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1108.787848][T13388] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1112.672000][T13419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2074'. [ 1115.010383][T13438] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1116.404681][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.411749][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.247437][T13473] overlayfs: failed to clone upperpath [ 1118.850667][ T2858] Bluetooth: hci1: command 0x0409 tx timeout [ 1119.432446][T13472] netlink: 'syz.1.2084': attribute type 10 has an invalid length. [ 1120.239797][T13447] chnl_net:caif_netlink_parms(): no params data found [ 1121.089694][ T2858] Bluetooth: hci1: command 0x041b tx timeout [ 1121.673120][T13447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.691448][T13447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.455705][T13447] device bridge_slave_0 entered promiscuous mode [ 1122.492953][T13447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.513947][T13447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.550248][T13447] device bridge_slave_1 entered promiscuous mode [ 1122.733046][T13516] 9pnet: Insufficient options for proto=fd [ 1122.931700][T13447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.136886][T13447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.272578][T13528] overlayfs: failed to clone upperpath [ 1123.611938][ T2858] Bluetooth: hci1: command 0x040f tx timeout [ 1124.031821][T13447] team0: Port device team_slave_0 added [ 1124.165571][T13549] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2102'. [ 1124.261790][T13447] team0: Port device team_slave_1 added [ 1124.336804][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2102'. [ 1124.400204][T13447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.457826][T13447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.538432][T13447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.580481][T13447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.593428][T13447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.635483][T13447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.903016][T13447] device hsr_slave_0 entered promiscuous mode [ 1124.932818][T13447] device hsr_slave_1 entered promiscuous mode [ 1124.947958][T13447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1124.968271][T13447] Cannot create hsr debugfs directory [ 1125.387349][T13565] 9pnet: Insufficient options for proto=fd [ 1125.580406][T13447] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1125.608969][T13447] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1125.633515][T13447] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1125.654740][T13447] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1125.681317][ T2858] Bluetooth: hci1: command 0x0419 tx timeout [ 1126.049125][T13447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.090306][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1126.106360][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1126.125347][T13447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.170685][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1126.229419][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1126.255413][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.264077][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.469692][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1127.315663][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1127.366479][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1128.358641][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.366970][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.432029][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1128.472306][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1128.513001][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1128.565520][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1128.654451][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1128.664706][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1128.676257][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1128.960960][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1129.094906][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1129.720292][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1129.735310][T13620] 9pnet: Insufficient options for proto=fd [ 1129.759692][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1129.806281][T13447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1133.892911][ T8506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1133.922811][ T8506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1134.069191][T13447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.123535][T13670] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2128'. [ 1134.135813][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 1135.595316][T13681] 9pnet: Insufficient options for proto=fd [ 1136.410946][T13696] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2133'. [ 1136.519560][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2133'. [ 1136.962186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1136.989363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1137.318792][T13447] device veth0_vlan entered promiscuous mode [ 1137.363271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1137.390327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1137.438967][T13447] device veth1_vlan entered promiscuous mode [ 1137.510781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1137.537065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1137.565455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1137.669410][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1137.862217][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1138.301277][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1138.345247][T13447] device veth0_macvtap entered promiscuous mode [ 1138.369813][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1138.402221][T13447] device veth1_macvtap entered promiscuous mode [ 1138.489853][T13447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.521355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1138.539712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1138.596783][T13447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.611562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1138.633872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1138.755049][T13447] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.903912][T13447] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.117567][T13447] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.731415][T13447] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.932394][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.979727][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.420620][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.438362][ T8506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1141.450537][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.566985][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1146.133407][T13810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2156'. [ 1147.020508][T13811] netlink: 'syz.7.2151': attribute type 10 has an invalid length. [ 1147.634746][T13811] batman_adv: batadv0: Adding interface: team0 [ 1147.712961][T13811] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.892895][T13811] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1160.241921][T13927] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1160.806499][T13941] Error parsing options; rc = [-22] [ 1161.058135][T13943] overlayfs: missing 'workdir' [ 1162.886152][T13959] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1164.192583][T13965] netlink: 'syz.5.2191': attribute type 2 has an invalid length. [ 1164.201315][T13965] netlink: 'syz.5.2191': attribute type 8 has an invalid length. [ 1164.209663][T13965] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2191'. [ 1169.995357][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2212'. [ 1170.080183][T14059] Error parsing options; rc = [-22] [ 1172.923274][T14067] netlink: 'syz.5.2213': attribute type 10 has an invalid length. [ 1173.313286][T14096] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1173.890807][T14097] Error parsing options; rc = [-22] [ 1173.916528][T14097] loop9: detected capacity change from 0 to 64 [ 1174.348682][ T4247] Bluetooth: hci3: command 0x0409 tx timeout [ 1174.428211][T14097] hfs: get root inode failed [ 1174.622014][T14050] chnl_net:caif_netlink_parms(): no params data found [ 1174.930354][T14101] 9pnet: Insufficient options for proto=fd [ 1176.561330][ T9511] Bluetooth: hci3: command 0x041b tx timeout [ 1177.723848][T14050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.738444][T14050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.826954][T14050] device bridge_slave_0 entered promiscuous mode [ 1177.845607][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.852852][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.952928][T14050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.123882][T14050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.139617][T14050] device bridge_slave_1 entered promiscuous mode [ 1178.961313][ T9511] Bluetooth: hci3: command 0x040f tx timeout [ 1179.540190][T14050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.902412][T14050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.002574][T14188] Error parsing options; rc = [-22] [ 1181.099982][ T9514] Bluetooth: hci3: command 0x0419 tx timeout [ 1182.134735][T14050] team0: Port device team_slave_0 added [ 1182.167503][T14050] team0: Port device team_slave_1 added [ 1182.230023][T14050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.247289][T14050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.297397][T14050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.692163][T14210] ubi: mtd0 is already attached to ubi31 [ 1183.221296][T14050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.228693][T14050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.256352][T14050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.866951][T14219] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2244'. [ 1184.891868][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'. [ 1185.082013][T14050] device hsr_slave_0 entered promiscuous mode [ 1185.454341][T14050] device hsr_slave_1 entered promiscuous mode [ 1185.488871][T14050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1185.498724][T14050] Cannot create hsr debugfs directory [ 1188.076381][T14000] device hsr_slave_0 left promiscuous mode [ 1188.748033][T14000] device hsr_slave_1 left promiscuous mode [ 1188.764166][T14000] batman_adv: batadv0: Removing interface: team0 [ 1189.969442][T14000] bond0 (unregistering): Released all slaves [ 1193.367710][T14336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2274'. [ 1193.454163][T14050] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1193.467329][T14050] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1193.534178][T14343] Error parsing options; rc = [-22] [ 1194.293991][T14050] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1194.401252][T14050] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1196.216950][T14392] Error parsing options; rc = [-22] [ 1197.039304][T14050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.193903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1198.212712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1199.133706][T14050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.201351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1199.355817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1199.425836][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.433579][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.330063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1200.501344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1200.722142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1201.111471][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.119357][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.199124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1201.369095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1201.561974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1201.785451][T14462] Error parsing options; rc = [-22] [ 1202.283829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1202.338969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1202.384717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1202.447804][T14050] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1202.664683][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 1202.835234][T14050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1202.922458][T14474] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1203.652809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1203.682016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1203.855155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1203.928372][T14481] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1204.652719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1204.673128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1204.692031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1207.197741][T14129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1207.234392][T14129] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1208.202026][T14050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.342250][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1208.380323][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1208.428828][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1208.469112][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1208.524151][T14050] device veth0_vlan entered promiscuous mode [ 1208.671658][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1208.711795][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1209.495355][T14050] device veth1_vlan entered promiscuous mode [ 1209.586937][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1209.604948][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1209.635132][T14050] device veth0_macvtap entered promiscuous mode [ 1211.083896][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1211.247450][T14050] device veth1_macvtap entered promiscuous mode [ 1212.106481][T14562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2308'. [ 1213.140155][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.333268][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.580388][T14050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.591849][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.604376][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.617028][T14050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1213.629501][T14050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.639803][T14050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.698076][T14050] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.709700][T14050] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.131507][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1214.164051][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1214.222438][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1214.348420][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1215.606044][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.692116][T14608] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1215.707020][T14608] ubi: mtd0 is already attached to ubi31 [ 1216.417956][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.596884][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1217.398179][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.613254][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.809870][T14129] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1218.781507][T14650] Error parsing options; rc = [-22] [ 1218.797641][T14650] loop2: detected capacity change from 0 to 64 [ 1218.947135][T14650] hfs: get root inode failed [ 1219.710111][T14646] netlink: 'syz.0.2321': attribute type 10 has an invalid length. [ 1220.031318][T14662] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1226.370047][T14731] Error parsing options; rc = [-22] [ 1226.396368][T14731] loop2: detected capacity change from 0 to 64 [ 1227.244496][T14731] hfs: get root inode failed [ 1227.360067][T14744] loop9: detected capacity change from 0 to 1024 [ 1227.366097][T14742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2344'. [ 1227.493906][T14744] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 1227.576372][T14744] EXT4-fs (loop9): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 1227.623769][T14744] 9pnet: Insufficient options for proto=fd [ 1228.226429][T14775] Error parsing options; rc = [-22] [ 1228.251712][T14775] loop9: detected capacity change from 0 to 64 [ 1228.828689][T14775] hfs: get root inode failed [ 1229.564246][T14794] Error parsing options; rc = [-22] [ 1229.591382][T14794] loop9: detected capacity change from 0 to 64 [ 1229.972801][T14794] hfs: get root inode failed [ 1232.215688][T14812] 9pnet: Insufficient options for proto=fd [ 1232.812231][T14835] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1235.416189][T14855] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1236.344194][T14865] Error parsing options; rc = [-22] [ 1236.374370][T14865] loop2: detected capacity change from 0 to 64 [ 1237.103743][T14865] hfs: get root inode failed [ 1238.377817][T14874] 9pnet: Insufficient options for proto=fd [ 1238.861150][T14895] Error parsing options; rc = [-22] [ 1239.320770][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.502385][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.600811][T14917] netlink: 'syz.1.2384': attribute type 10 has an invalid length. [ 1241.371373][ T4239] Bluetooth: hci1: command 0x0406 tx timeout [ 1241.488777][T14921] netlink: 'syz.0.2386': attribute type 10 has an invalid length. [ 1245.426321][T14968] Error parsing options; rc = [-22] [ 1245.452932][T14968] loop2: detected capacity change from 0 to 64 [ 1246.298919][T14968] hfs: get root inode failed [ 1246.635393][T14981] Error parsing options; rc = [-22] [ 1246.659093][T14981] loop9: detected capacity change from 0 to 64 [ 1247.179558][T14981] hfs: get root inode failed [ 1248.717257][T14995] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1250.200746][T15012] Error parsing options; rc = [-22] [ 1251.776794][T15021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2411'. [ 1252.390654][T15039] Error parsing options; rc = [-22] [ 1252.419936][T15039] loop9: detected capacity change from 0 to 64 [ 1253.300841][T15039] hfs: get root inode failed [ 1256.452644][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'. [ 1263.270094][T15175] device syzkaller0 entered promiscuous mode [ 1264.416426][T15214] netlink: 'syz.9.2461': attribute type 10 has an invalid length. [ 1264.653613][T15214] batman_adv: batadv0: Adding interface: team0 [ 1264.700695][T15214] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1264.985199][T15214] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1266.156268][T15217] loop2: detected capacity change from 0 to 32768 [ 1266.305239][T15217] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2463 (15217) [ 1266.479552][T15217] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1266.519146][T15217] BTRFS info (device loop2): using free space tree [ 1266.549986][T15217] BTRFS info (device loop2): has skinny extents [ 1268.222203][T15217] BTRFS error (device loop2): open_ctree failed: -12 [ 1271.195238][T15314] netlink: 'syz.1.2474': attribute type 10 has an invalid length. [ 1273.388744][T15326] 9pnet: Insufficient options for proto=fd [ 1273.622696][T15336] netlink: 'syz.5.2478': attribute type 10 has an invalid length. [ 1275.989522][T15379] netlink: 'syz.1.2491': attribute type 10 has an invalid length. [ 1279.624406][T15437] netlink: 'syz.9.2502': attribute type 10 has an invalid length. [ 1283.950233][T15478] netlink: 'syz.0.2511': attribute type 10 has an invalid length. [ 1286.916686][T15512] loop9: detected capacity change from 0 to 1024 [ 1287.872692][T15512] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1291.115849][T15541] netlink: 'syz.5.2534': attribute type 10 has an invalid length. [ 1297.681567][ T4247] Bluetooth: hci3: command 0x0406 tx timeout [ 1302.845396][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.853156][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.578558][T15681] loop2: detected capacity change from 0 to 1024 [ 1304.751708][T15681] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1305.755766][T15677] netlink: 'syz.5.2561': attribute type 10 has an invalid length. [ 1309.174324][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2576'. [ 1312.937395][T15786] loop2: detected capacity change from 0 to 32768 [ 1313.046066][T15786] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2589 (15786) [ 1313.260210][T15786] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1313.310117][T15786] BTRFS info (device loop2): using free space tree [ 1313.354248][T15786] BTRFS info (device loop2): has skinny extents [ 1313.913827][T15786] BTRFS info (device loop2): enabling ssd optimizations [ 1315.053013][ T1282] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 1318.256071][T15914] netlink: 'syz.1.2607': attribute type 10 has an invalid length. [ 1319.958457][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'. [ 1322.234253][T15984] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1329.732592][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2640'. [ 1329.819416][T16075] loop2: detected capacity change from 0 to 1024 [ 1330.051740][T16075] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1330.351573][T16085] netlink: 'syz.5.2637': attribute type 10 has an invalid length. [ 1333.001235][T15939] Bluetooth: hci0: command 0x0409 tx timeout [ 1334.766207][T16141] netlink: 'syz.2.2644': attribute type 10 has an invalid length. [ 1335.051099][ T9511] Bluetooth: hci0: command 0x041b tx timeout [ 1335.138334][T16141] batman_adv: batadv0: Adding interface: team0 [ 1335.909888][T16141] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.940347][T16141] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1336.395119][T16089] chnl_net:caif_netlink_parms(): no params data found [ 1336.712249][T16089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.720463][T16089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.895912][T16089] device bridge_slave_0 entered promiscuous mode [ 1336.927692][T16089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.966220][T16089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.023982][T16089] device bridge_slave_1 entered promiscuous mode [ 1337.124502][ T9511] Bluetooth: hci0: command 0x040f tx timeout [ 1337.361860][T16089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1337.479563][T16089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1337.792123][T16089] team0: Port device team_slave_0 added [ 1338.566439][T16089] team0: Port device team_slave_1 added [ 1339.248261][ T4247] Bluetooth: hci0: command 0x0419 tx timeout [ 1339.506533][T16089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.524532][T16089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1340.253551][T16089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1340.285317][T16089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.332483][T16089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.365597][T16089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.659942][T16089] device hsr_slave_0 entered promiscuous mode [ 1341.715918][T16089] device hsr_slave_1 entered promiscuous mode [ 1342.003473][T16089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1342.014783][T16089] Cannot create hsr debugfs directory [ 1343.179995][T16250] netlink: 'syz.1.2669': attribute type 10 has an invalid length. [ 1344.439706][T16261] device syzkaller0 entered promiscuous mode [ 1344.733068][T16089] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1344.752746][T16089] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1344.782768][T16089] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1344.859457][T16089] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1345.038794][T16278] loop9: detected capacity change from 0 to 2048 [ 1345.271236][T16280] loop2: detected capacity change from 0 to 2048 [ 1345.347060][T16280] NILFS (loop2): invalid segment: Magic number mismatch [ 1345.355883][T16280] NILFS (loop2): trying rollback from an earlier position [ 1345.383168][T16278] NILFS (loop9): invalid segment: Magic number mismatch [ 1345.391056][T16278] NILFS (loop9): trying rollback from an earlier position [ 1345.408502][T16280] NILFS (loop2): recovery complete [ 1345.439903][T16291] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1345.464116][T16278] NILFS (loop9): recovery complete [ 1345.502630][T16292] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1347.037238][ T8506] device hsr_slave_0 left promiscuous mode [ 1347.071891][ T8506] device hsr_slave_1 left promiscuous mode [ 1347.318441][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.332217][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.361073][ T8506] device bridge_slave_1 left promiscuous mode [ 1348.605670][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.069228][ T8506] device bridge_slave_0 left promiscuous mode [ 1349.088438][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.692678][ T8506] team0 (unregistering): Port device team_slave_1 removed [ 1350.779349][ T8506] team0 (unregistering): Port device team_slave_0 removed [ 1350.829433][ T8506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1350.859253][ T8506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1351.046381][ T8506] bond0 (unregistering): Released all slaves [ 1351.168887][T16325] device syzkaller0 entered promiscuous mode [ 1351.187240][T16089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.272088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1351.286509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1351.408785][T16089] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.482421][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1351.500755][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1351.535128][T14000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.543029][T14000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.601342][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1351.734895][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1351.749436][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1351.764436][T14000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.772528][T14000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.483805][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1352.667191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1353.210392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1353.339421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1354.385695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1354.433612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1354.455714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1354.502039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1354.538226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1354.634564][T16089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1355.883261][T16089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1355.913432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1356.154687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1357.885519][T16388] device syzkaller0 entered promiscuous mode [ 1358.275034][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1358.284244][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1358.324967][T16405] loop9: detected capacity change from 0 to 2048 [ 1358.372344][T16089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1358.479274][T16405] NILFS (loop9): invalid segment: Magic number mismatch [ 1358.487223][T16405] NILFS (loop9): trying rollback from an earlier position [ 1358.516960][T16405] NILFS (loop9): recovery complete [ 1358.562094][T16410] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1358.779662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1358.863051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1359.510159][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1359.576515][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1359.645008][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1359.654105][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1359.753764][T16089] device veth0_vlan entered promiscuous mode [ 1359.874662][T16089] device veth1_vlan entered promiscuous mode [ 1360.427089][T16089] device veth0_macvtap entered promiscuous mode [ 1360.460835][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1360.496872][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1360.554904][T16089] device veth1_macvtap entered promiscuous mode [ 1360.601748][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1360.686164][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1360.971169][T16089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.156725][T16089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.783483][T16089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.826761][T16089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.066065][T16089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.080084][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1362.164982][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.172328][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.196494][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1362.243420][T16089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.301098][T16089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.402317][T16089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.450731][T16089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.243413][T16089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.292158][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1366.521361][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1366.605177][T16089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.692094][T16089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.901073][T16089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.154148][T16089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.921821][T16465] autofs4:pid:16465:autofs_fill_super: called with bogus options [ 1369.168212][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.191561][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.413381][T16470] device syzkaller0 entered promiscuous mode [ 1369.465896][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1369.496291][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.713150][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.781684][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1372.042731][T16507] loop2: detected capacity change from 0 to 2048 [ 1372.096804][T16507] NILFS (loop2): invalid segment: Magic number mismatch [ 1372.106641][T16507] NILFS (loop2): trying rollback from an earlier position [ 1372.124908][T16507] NILFS (loop2): recovery complete [ 1372.242840][T16511] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1372.677190][ T6934] bond0: (slave syz_tun): Releasing backup interface [ 1374.433006][T16520] chnl_net:caif_netlink_parms(): no params data found [ 1374.916973][T16540] device syzkaller0 entered promiscuous mode [ 1375.178155][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2730'. [ 1376.336213][T15938] Bluetooth: hci2: command 0x0409 tx timeout [ 1377.012346][T16520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.104565][T16520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.413699][T16520] device bridge_slave_0 entered promiscuous mode [ 1377.535885][T16520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.731303][T16520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.596463][T15938] Bluetooth: hci2: command 0x041b tx timeout [ 1378.692377][T16520] device bridge_slave_1 entered promiscuous mode [ 1379.888635][T16520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1380.142492][T16602] device syzkaller0 entered promiscuous mode [ 1380.164044][T16520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.913101][T15938] Bluetooth: hci2: command 0x040f tx timeout [ 1381.050161][T16520] team0: Port device team_slave_0 added [ 1381.082980][T16520] team0: Port device team_slave_1 added [ 1381.199847][T16621] loop0: detected capacity change from 0 to 2048 [ 1381.263811][T16621] NILFS (loop0): invalid segment: Magic number mismatch [ 1381.271254][T16621] NILFS (loop0): trying rollback from an earlier position [ 1381.289225][T16621] NILFS (loop0): recovery complete [ 1381.302883][T16628] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1382.129506][T16623] loop9: detected capacity change from 0 to 2048 [ 1382.139598][T16520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1382.148297][T16520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1382.194806][T16520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1382.240249][T16520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1382.259506][T16520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1382.301811][T16520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.559092][T16623] NILFS (loop9): invalid segment: Magic number mismatch [ 1382.923246][T16623] NILFS (loop9): trying rollback from an earlier position [ 1382.949935][T16651] loop0: detected capacity change from 0 to 2048 [ 1382.973226][ T9479] Bluetooth: hci2: command 0x0419 tx timeout [ 1382.981405][T16651] NILFS (loop0): invalid segment: Magic number mismatch [ 1382.988779][T16651] NILFS (loop0): trying rollback from an earlier position [ 1383.010498][T16651] NILFS (loop0): recovery complete [ 1383.031376][T16623] NILFS (loop9): recovery complete [ 1383.047117][T16654] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1383.067657][T16657] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1383.910847][T16520] device hsr_slave_0 entered promiscuous mode [ 1384.262398][T16520] device hsr_slave_1 entered promiscuous mode [ 1384.661511][T16520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1384.672319][T16520] Cannot create hsr debugfs directory [ 1384.761709][T16674] loop2: detected capacity change from 0 to 1024 [ 1384.834809][T16674] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 1385.103515][T16674] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 1385.223821][T16674] 9pnet: Insufficient options for proto=fd [ 1386.308371][T16696] loop2: detected capacity change from 0 to 2048 [ 1386.316168][T16693] loop0: detected capacity change from 0 to 1024 [ 1386.397427][T16696] NILFS (loop2): invalid segment: Magic number mismatch [ 1386.480797][T16696] NILFS (loop2): trying rollback from an earlier position [ 1386.512898][T16693] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1386.585536][T16696] NILFS (loop2): recovery complete [ 1387.281037][T16706] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1387.960403][T16520] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1388.141957][T16520] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1388.226498][T16520] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1388.349299][T16520] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1389.036424][T16520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.058733][T16739] loop9: detected capacity change from 0 to 2048 [ 1389.170103][T16739] NILFS (loop9): invalid segment: Magic number mismatch [ 1389.177667][T16739] NILFS (loop9): trying rollback from an earlier position [ 1389.198333][T16739] NILFS (loop9): recovery complete [ 1389.212071][ T8506] device hsr_slave_0 left promiscuous mode [ 1389.228659][T16740] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1389.277868][ T8506] device hsr_slave_1 left promiscuous mode [ 1389.305986][ T8506] batman_adv: batadv0: Removing interface: team0 [ 1389.325506][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.355473][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.375043][ T8506] device bridge_slave_1 left promiscuous mode [ 1389.389886][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.262742][ T8506] device bridge_slave_0 left promiscuous mode [ 1390.269969][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.680325][ T8506] team0 (unregistering): Port device team_slave_1 removed [ 1392.750086][ T8506] team0 (unregistering): Port device team_slave_0 removed [ 1392.788568][ T8506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.979968][ T8506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.197828][ T8506] bond0 (unregistering): Released all slaves [ 1394.317342][T16781] loop2: detected capacity change from 0 to 2048 [ 1394.378653][T16781] NILFS (loop2): invalid segment: Magic number mismatch [ 1394.386374][T16781] NILFS (loop2): trying rollback from an earlier position [ 1394.399873][T16781] NILFS (loop2): recovery complete [ 1394.436162][T16782] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1394.556912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1394.618092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1394.801897][T16520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.575494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1395.587904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1395.947033][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.955216][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.912906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1397.752276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1397.994372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1398.004523][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.012364][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.854517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1399.123608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1399.219473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1399.303193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1399.312763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1399.323438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1400.568752][T16836] loop9: detected capacity change from 0 to 2048 [ 1400.589502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1400.620024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1400.657535][T16836] NILFS (loop9): invalid segment: Magic number mismatch [ 1400.665973][T16836] NILFS (loop9): trying rollback from an earlier position [ 1400.679465][T16836] NILFS (loop9): recovery complete [ 1400.697152][T16840] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1400.713454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1400.783995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1400.923444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1400.944274][T16520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1401.932865][T16852] loop9: detected capacity change from 0 to 2048 [ 1401.982552][T16852] NILFS (loop9): invalid segment: Magic number mismatch [ 1402.004768][T16852] NILFS (loop9): trying rollback from an earlier position [ 1402.047436][T16852] NILFS (loop9): recovery complete [ 1402.072174][T16857] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1405.302920][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2795'. [ 1405.433787][T16881] loop2: detected capacity change from 0 to 2048 [ 1405.555684][T16881] NILFS (loop2): invalid segment: Magic number mismatch [ 1405.564431][T16881] NILFS (loop2): trying rollback from an earlier position [ 1405.590605][T16881] NILFS (loop2): recovery complete [ 1405.612222][T16867] loop9: detected capacity change from 0 to 32768 [ 1405.624904][T16890] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1405.711824][T16867] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.2793 (16867) [ 1405.923992][T16867] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 1405.984920][T16867] BTRFS info (device loop9): using free space tree [ 1406.434752][T16867] BTRFS info (device loop9): has skinny extents [ 1406.552229][T16520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.749190][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1406.759632][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1406.785293][T16655] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by udevd (16655) [ 1406.800137][T16867] BTRFS error (device loop9): open_ctree failed: -12 [ 1406.889473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1406.921784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1407.874385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1407.961988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1408.045998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1408.085870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1408.120590][T16899] netlink: 'syz.2.2799': attribute type 10 has an invalid length. [ 1408.130207][T16520] device veth0_vlan entered promiscuous mode [ 1408.182671][T16520] device veth1_vlan entered promiscuous mode [ 1408.374143][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1408.412191][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1408.479550][T16520] device veth0_macvtap entered promiscuous mode [ 1408.533775][T16520] device veth1_macvtap entered promiscuous mode [ 1408.697961][T16520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1408.739825][T16520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.769590][T16520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1408.841270][T16520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.864965][T16520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1408.892841][T16520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.968840][T16520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1409.035287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1409.062342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1409.089573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1409.120343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1409.178419][T16520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.255554][T16948] netlink: 'syz.5.2806': attribute type 1 has an invalid length. [ 1409.278573][T16520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.314129][T16948] netlink: 'syz.5.2806': attribute type 1 has an invalid length. [ 1409.340723][T16520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.392160][T16520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.441014][T16520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1409.493581][T16520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.543784][T16520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1409.576713][T16958] netlink: 'syz.5.2810': attribute type 21 has an invalid length. [ 1409.597873][T16958] netlink: 14565 bytes leftover after parsing attributes in process `syz.5.2810'. [ 1409.654963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1409.680429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1409.760160][T16520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.794165][T16520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.836672][T16520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.877104][T16520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.076620][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2816'. [ 1410.200018][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.232088][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.326219][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.329893][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1410.402454][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.480811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1411.346392][T17023] netlink: set zone limit has 8 unknown bytes [ 1411.643107][T17041] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2838'. [ 1412.489840][T17065] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 1414.222662][T17138] netlink: 'syz.9.2875': attribute type 39 has an invalid length. [ 1414.241014][T17140] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2873'. [ 1414.377496][T17140] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2873'. [ 1414.401304][T17135] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2873'. [ 1414.452498][T17143] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2873'. [ 1415.067844][T17180] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2889'. [ 1415.143911][T17184] netlink: 'syz.0.2890': attribute type 1 has an invalid length. [ 1415.196505][T17184] netlink: 'syz.0.2890': attribute type 3 has an invalid length. [ 1415.294725][T17184] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2890'. [ 1415.382753][T17191] loop9: detected capacity change from 0 to 1024 [ 1415.581193][ T4247] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1415.669588][T17200] loop0: detected capacity change from 0 to 2048 [ 1415.807166][T17202] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1415.848251][T17200] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1415.870106][T17204] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1415.906614][T17200] Remounting filesystem read-only [ 1415.914624][T17204] batman_adv: batadv0: Removing interface: team0 [ 1415.985657][T17204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1416.021624][T17204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1416.032536][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.045273][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.059141][T17204] device bridge_slave_0 left promiscuous mode [ 1416.066093][ T4247] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1416.077166][T17204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.085793][ T4247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.099259][ T4247] usb 2-1: config 0 descriptor?? [ 1416.143951][T17204] device bridge_slave_1 left promiscuous mode [ 1416.192127][T17204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.209697][T17204] bond0: (slave bond_slave_0): Releasing backup interface [ 1416.254586][T17204] bond0: (slave bond_slave_1): Releasing backup interface [ 1416.358669][T17204] team0: Port device team_slave_0 removed [ 1416.393125][ T8506] hfsplus: b-tree write err: -5, ino 4 [ 1416.420088][T17204] team0: Port device team_slave_1 removed [ 1416.449232][T17204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1416.458495][T17204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.483901][T17204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.529601][T17204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.539853][T17218] loop9: detected capacity change from 0 to 1024 [ 1416.729162][ T4406] hfsplus: b-tree write err: -5, ino 4 [ 1416.851728][ T4247] usb 2-1: string descriptor 0 read error: -71 [ 1416.913088][ T4247] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 1416.960785][T17227] netlink: 'syz.2.2905': attribute type 10 has an invalid length. [ 1416.976384][ T4247] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 1416.989952][ T4247] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 1417.019939][ T4247] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 1417.065514][ T4247] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 1417.118366][ T4247] usb 2-1: USB disconnect, device number 10 [ 1417.226373][T17241] loop9: detected capacity change from 0 to 1024 [ 1417.321924][T17227] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1417.520551][T17245] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2913'. [ 1417.593652][ T4384] hfsplus: b-tree write err: -5, ino 3 [ 1417.731144][ T8334] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1417.756168][T17252] kernel profiling enabled (shift: 17) [ 1417.863574][ T4247] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1417.949496][T17256] loop9: detected capacity change from 0 to 1024 [ 1417.981031][ T8334] usb 2-1: Using ep0 maxpacket: 32 [ 1418.012867][T17256] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none. [ 1418.068831][T17256] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz.9.2918: directory missing '.' [ 1418.101368][ T8334] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1418.117088][ T8334] usb 2-1: config 0 has no interface number 0 [ 1418.281265][ T8334] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1418.281849][ T4247] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1418.296014][ T8334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.326385][ T4247] usb 3-1: config 0 has no interface number 0 [ 1418.341619][ T4247] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1418.366786][ T8334] usb 2-1: Product: syz [ 1418.396385][ T8334] usb 2-1: Manufacturer: syz [ 1418.438407][ T8334] usb 2-1: SerialNumber: syz [ 1418.466722][ T8334] usb 2-1: config 0 descriptor?? [ 1418.521101][T17269] overlayfs: failed to verify origin (/syz9, ino=363, err=-116) [ 1418.539245][ T8334] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1418.541135][T17269] overlayfs: failed to verify upper root origin [ 1418.594364][ T4247] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1418.620048][ T4247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.631523][ T4247] usb 3-1: Product: syz [ 1418.636626][ T4247] usb 3-1: Manufacturer: syz [ 1418.646615][ T4247] usb 3-1: SerialNumber: syz [ 1418.655293][ T4247] usb 3-1: config 0 descriptor?? [ 1418.762569][ T8334] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1418.809764][ T8334] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1419.092263][T17290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2928'. [ 1419.101250][T17270] chnl_net:caif_netlink_parms(): no params data found [ 1419.172755][T17293] loop0: detected capacity change from 0 to 2048 [ 1419.200992][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1419.211433][ T9532] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1419.230277][ T8334] usb 2-1: USB disconnect, device number 11 [ 1419.239815][T17270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.250758][ T8334] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1419.319254][ T8334] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1419.327280][T17270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.365545][T17270] device bridge_slave_0 entered promiscuous mode [ 1419.379338][ T4247] CoreChips: probe of 3-1:0.41 failed with error -71 [ 1419.386125][T17293] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 1419.401878][ T8334] quatech2 2-1:0.51: device disconnected [ 1419.433733][T17270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.445299][ T4247] usb 3-1: USB disconnect, device number 3 [ 1419.454140][T17270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.467001][T17270] device bridge_slave_1 entered promiscuous mode [ 1419.482877][ T9532] usb 10-1: Using ep0 maxpacket: 32 [ 1419.543862][T17302] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1419.552133][T17270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.575698][T17270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.600523][T17302] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 224 with error 28 [ 1419.632119][ T9532] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1419.651147][T17302] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1419.651147][T17302] [ 1419.651259][T17270] team0: Port device team_slave_0 added [ 1419.662175][ T9532] usb 10-1: config 0 has no interface number 0 [ 1419.674522][T17270] team0: Port device team_slave_1 added [ 1419.682688][T17302] EXT4-fs (loop0): Total free blocks count 0 [ 1419.682762][T17302] EXT4-fs (loop0): Free/Dirty block details [ 1419.682831][T17302] EXT4-fs (loop0): free_blocks=2415919104 [ 1419.682887][T17302] EXT4-fs (loop0): dirty_blocks=224 [ 1419.682903][T17302] EXT4-fs (loop0): Block reservation details [ 1419.682918][T17302] EXT4-fs (loop0): i_reserved_data_blocks=14 [ 1419.693599][ T9532] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1419.822856][ T9532] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1419.893719][T17270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.911680][T17270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.997216][ T8506] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 1420.037264][ T8506] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1420.037264][ T8506] [ 1420.049209][T17270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.111355][ T9532] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1420.111653][T17270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.129869][ T9532] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.154672][ T9532] usb 10-1: Product: syz [ 1420.154817][T17270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.175556][ T9532] usb 10-1: Manufacturer: syz [ 1420.198120][T17270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.211259][ T9532] usb 10-1: SerialNumber: syz [ 1420.256336][ T9532] usb 10-1: config 0 descriptor?? [ 1420.362219][T17335] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 1420.384589][T17333] loop1: detected capacity change from 0 to 22 [ 1420.399293][T17270] device hsr_slave_0 entered promiscuous mode [ 1420.422110][T17333] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1420.431582][T17270] device hsr_slave_1 entered promiscuous mode [ 1420.455297][T17270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1420.477315][T17270] Cannot create hsr debugfs directory [ 1420.503731][T17333] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1420.535516][T17341] loop2: detected capacity change from 0 to 256 [ 1420.621896][T17341] exfat: Deprecated parameter 'utf8' [ 1420.633604][T17341] exfat: Deprecated parameter 'utf8' [ 1420.641282][T11663] Bluetooth: hci4: command 0x0409 tx timeout [ 1420.697138][T17341] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 1420.818910][T17350] loop1: detected capacity change from 0 to 1024 [ 1420.923883][T17350] EXT4-fs (loop1): Ignoring removed bh option [ 1420.981325][ T9532] appletouch 10-1:0.85: Geyser mode initialized. [ 1421.027814][ T9532] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input5 [ 1421.031498][T17350] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 1421.067592][T11663] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1421.149239][T11663] Bluetooth: hci0: Injecting HCI hardware error event [ 1421.188281][ T4190] Bluetooth: hci0: hardware error 0x00 [ 1421.216325][ T9532] usb 10-1: USB disconnect, device number 2 [ 1421.346542][ T9532] appletouch 10-1:0.85: input: appletouch disconnected [ 1421.397244][T17369] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1421.453945][T17270] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1421.504309][T17270] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1421.518588][T17270] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1421.529516][T17270] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1421.615180][T17270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.649247][T17270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.669674][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1421.689197][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1421.771160][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1421.806466][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1421.820218][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.828185][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.880699][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1421.894513][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1421.907961][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.917779][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.921610][T17385] netlink: 4083 bytes leftover after parsing attributes in process `syz.9.2953'. [ 1421.945841][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1422.022262][T17385] netlink: 4083 bytes leftover after parsing attributes in process `syz.9.2953'. [ 1422.039973][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1422.053993][T17383] netlink: 4083 bytes leftover after parsing attributes in process `syz.9.2953'. [ 1422.071577][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1422.086359][T17387] netlink: 4083 bytes leftover after parsing attributes in process `syz.9.2953'. [ 1422.133027][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1422.166342][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1422.176038][T17391] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2956'. [ 1422.178706][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1422.202433][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1422.212977][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1422.241632][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1422.253754][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1422.280998][T11663] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1422.281787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1422.302662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1422.354278][ T4406] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.422552][T17270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1422.491329][ T4406] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.541412][T11663] usb 1-1: Using ep0 maxpacket: 32 [ 1422.602051][ T4406] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.661355][T11663] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1422.681261][T11663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.696500][ T4406] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.717153][T16697] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1422.728724][T11663] usb 1-1: config 0 descriptor?? [ 1422.735823][T15939] Bluetooth: hci4: command 0x041b tx timeout [ 1422.783941][T11663] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1422.818558][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1422.830329][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1422.868807][T17270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.991061][T16697] usb 10-1: Using ep0 maxpacket: 32 [ 1423.121264][T16697] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.187488][T16697] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.249630][T16697] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1423.272281][T16697] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.305554][T16697] usb 10-1: config 0 descriptor?? [ 1423.372560][T16697] hub 10-1:0.0: USB hub found [ 1423.606453][T16697] hub 10-1:0.0: 1 port detected [ 1423.613669][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.631367][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.671889][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1423.716625][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1423.771755][T17406] chnl_net:caif_netlink_parms(): no params data found [ 1423.809626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1423.820856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1423.822939][T17433] loop2: detected capacity change from 0 to 4096 [ 1423.842843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1423.861098][T16697] hub 10-1:0.0: hub_hub_status failed (err = -71) [ 1423.877175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1423.881592][T16697] hub 10-1:0.0: config failed, can't get hub status (err -71) [ 1423.915734][T17270] device veth0_vlan entered promiscuous mode [ 1423.998130][T17270] device veth1_vlan entered promiscuous mode [ 1424.021216][T16697] usbhid 10-1:0.0: can't add hid device: -71 [ 1424.031183][T16697] usbhid: probe of 10-1:0.0 failed with error -71 [ 1424.056460][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1424.093482][T16697] usb 10-1: USB disconnect, device number 3 [ 1424.210772][T17406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.220069][T17406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.229791][T17406] device bridge_slave_0 entered promiscuous mode [ 1424.239126][T17406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.246550][T17406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.256431][T17406] device bridge_slave_1 entered promiscuous mode [ 1424.352688][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1424.372911][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1424.381459][T17450] loop2: detected capacity change from 0 to 128 [ 1424.385949][T17270] device veth0_macvtap entered promiscuous mode [ 1424.472499][T17406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.515222][T17270] device veth1_macvtap entered promiscuous mode [ 1424.566742][T17406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.688538][T17406] team0: Port device team_slave_0 added [ 1424.700541][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.745879][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.774747][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.795953][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.811276][T12659] Bluetooth: hci4: command 0x040f tx timeout [ 1424.821102][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.864097][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.878432][T17466] loop2: detected capacity change from 0 to 256 [ 1424.920806][T17270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1424.943563][T17406] team0: Port device team_slave_1 added [ 1424.988360][T17466] FAT-fs (loop2): Directory bread(block 64) failed [ 1424.998678][T17466] FAT-fs (loop2): Directory bread(block 65) failed [ 1425.006907][T17466] FAT-fs (loop2): Directory bread(block 66) failed [ 1425.014565][T17466] FAT-fs (loop2): Directory bread(block 67) failed [ 1425.022099][T17466] FAT-fs (loop2): Directory bread(block 68) failed [ 1425.029004][T17466] FAT-fs (loop2): Directory bread(block 69) failed [ 1425.029560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1425.036693][T17466] FAT-fs (loop2): Directory bread(block 70) failed [ 1425.036793][T17466] FAT-fs (loop2): Directory bread(block 71) failed [ 1425.048461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1425.064468][T17466] FAT-fs (loop2): Directory bread(block 72) failed [ 1425.070832][T12659] Bluetooth: hci2: command 0x0409 tx timeout [ 1425.087758][T17466] FAT-fs (loop2): Directory bread(block 73) failed [ 1425.097855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1425.114395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1425.135644][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.155654][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.188374][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.200149][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.219566][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.236871][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.252044][T17270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.278748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1425.358005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1425.388625][T17471] loop2: detected capacity change from 0 to 1024 [ 1425.411465][T11663] gspca_vc032x: reg_r err -71 [ 1425.418649][T17270] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.428776][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.441093][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.451019][T17270] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.459890][T17270] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.481008][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.483356][T17471] EXT4-fs (loop2): Ignoring removed nobh option [ 1425.496794][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.521969][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.531058][T17270] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.534828][T17471] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1425.541147][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.575521][T17477] loop9: detected capacity change from 0 to 64 [ 1425.576149][T17406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.592063][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.598485][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.602765][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1425.606301][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.639250][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.649203][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.657254][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.669576][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.676994][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.685668][T17471] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,data_err=abort,init_itable,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b0,noblock_validity,grpquota,nobh,user_xattr,inode_readahead_blks=0x0000000000000004,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1425.689792][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.724482][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.730274][T11663] gspca_vc032x: I2c Bus Busy Wait 00 [ 1425.736205][T11663] gspca_vc032x: Unknown sensor... [ 1425.741908][T11663] vc032x: probe of 1-1:0.0 failed with error -22 [ 1425.757934][T11663] usb 1-1: USB disconnect, device number 5 [ 1425.778306][T17406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.834219][ T4406] device hsr_slave_0 left promiscuous mode [ 1425.854423][ T4406] device hsr_slave_1 left promiscuous mode [ 1425.985004][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.002527][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.022095][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1426.044417][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.074382][ T4406] device bridge_slave_1 left promiscuous mode [ 1426.082935][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.098790][ T4406] device bridge_slave_0 left promiscuous mode [ 1426.116418][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.203058][ T4406] device veth1_macvtap left promiscuous mode [ 1426.219576][T17492] loop0: detected capacity change from 0 to 1024 [ 1426.237270][ T4406] device veth0_macvtap left promiscuous mode [ 1426.256195][ T4406] device veth1_vlan left promiscuous mode [ 1426.271467][ T4406] device veth0_vlan left promiscuous mode [ 1426.361228][T17492] EXT4-fs (loop0): Ignoring removed bh option [ 1426.410748][T17492] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,bh,,errors=continue. Quota mode: writeback. [ 1426.854488][T17513] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1426.861370][T17513] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1426.871744][T17513] vhci_hcd vhci_hcd.0: Device attached [ 1426.881326][ T4247] Bluetooth: hci4: command 0x0419 tx timeout [ 1426.918817][ T4406] team0 (unregistering): Port device team_slave_1 removed [ 1426.940703][ T4406] team0 (unregistering): Port device team_slave_0 removed [ 1426.961369][ T4406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1426.980100][ T4406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1427.066550][ T4406] bond0 (unregistering): Released all slaves [ 1427.081427][ T9532] vhci_hcd: vhci_device speed not set [ 1427.127746][T15939] Bluetooth: hci2: command 0x041b tx timeout [ 1427.131231][T17406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1427.143010][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1427.174606][T17406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1427.183496][ T9532] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 1427.195123][ T4247] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 1427.272226][T17406] device hsr_slave_0 entered promiscuous mode [ 1427.307682][T17406] device hsr_slave_1 entered promiscuous mode [ 1427.361487][T17406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1427.381768][T17520] tmpfs: Unknown parameter 'usrquota' [ 1427.389479][T17406] Cannot create hsr debugfs directory [ 1427.539901][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.574804][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.611571][ T4247] usb 1-1: config 0 has no interfaces? [ 1427.617759][ T4247] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1427.631113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1427.662073][ T4247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.690782][ T4247] usb 1-1: config 0 descriptor?? [ 1427.796999][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.828857][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.987642][T17514] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1428.005325][T15938] usb 1-1: USB disconnect, device number 6 [ 1428.016163][ T4384] vhci_hcd: stop threads [ 1428.019992][T17534] loop9: detected capacity change from 0 to 4096 [ 1428.020774][ T4384] vhci_hcd: release socket [ 1428.043677][ T4384] vhci_hcd: disconnect device [ 1428.096214][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1428.103749][T17534] ntfs3: Unknown parameter 'nocase' [ 1428.476818][T17555] loop2: detected capacity change from 0 to 512 [ 1428.541200][T17555] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1428.561271][T16697] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1428.598577][T17555] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1428.648501][T17555] EXT4-fs (loop2): 1 truncate cleaned up [ 1428.656072][T17559] loop0: detected capacity change from 0 to 2048 [ 1428.660486][T17555] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,auto_da_alloc,debug_want_extra_isize=0x0000000000000068,errors=continue,lazytime,quota,,errors=continue. Quota mode: writeback. [ 1428.788680][T17559] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,,errors=continue. Quota mode: none. [ 1428.861076][T16697] usb 6-1: Using ep0 maxpacket: 8 [ 1428.981342][T16697] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.009262][T16697] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.031689][T16697] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1429.040445][T16697] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1429.064424][T16697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.113847][T16697] usb 6-1: config 0 descriptor?? [ 1429.201383][T15937] Bluetooth: hci2: command 0x040f tx timeout [ 1429.321944][T17406] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1429.341114][T17406] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1429.372712][T17406] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1429.381291][ T2858] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1429.471856][T17406] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1429.603676][T16697] steelseries_srws1 0003:1038:1410.0002: item fetching failed at offset 3/5 [ 1429.641672][T16697] steelseries_srws1 0003:1038:1410.0002: parse failed [ 1429.649082][T16697] steelseries_srws1: probe of 0003:1038:1410.0002 failed with error -22 [ 1429.733974][T17406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.741128][T15916] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1429.751436][ T2858] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1429.785986][ T2858] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1429.811069][ T2858] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.821751][T16697] usb 6-1: USB disconnect, device number 5 [ 1429.828906][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1429.855918][ T2858] usb 10-1: config 0 descriptor?? [ 1429.861956][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1429.881470][T17565] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1429.935567][T17406] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.967157][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1429.987365][T15916] usb 1-1: Using ep0 maxpacket: 8 [ 1430.005273][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1430.037096][ T1282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.045349][ T1282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.085652][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1430.129989][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1430.162121][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1430.197350][ T1282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.205468][ T1282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1430.232367][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1430.242998][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1430.271165][T15916] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1430.290281][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1430.303403][T15916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.345014][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1430.354369][T15916] usb 1-1: Product: syz [ 1430.359257][T15916] usb 1-1: Manufacturer: syz [ 1430.367225][ T2858] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 1430.383727][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1430.393153][T15916] usb 1-1: SerialNumber: syz [ 1430.402460][T15916] usb 1-1: config 0 descriptor?? [ 1430.420375][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1430.458974][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1430.469722][T17609] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2997'. [ 1430.478622][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1430.495705][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1430.518154][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1430.561704][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1430.592422][T17406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1430.600548][T17405] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1430.644986][T17613] loop5: detected capacity change from 0 to 128 [ 1430.691249][T15916] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1430.875363][T17619] attempt to access beyond end of device [ 1430.875363][T17619] loop5: rw=2049, want=250, limit=128 [ 1430.937517][T17621] attempt to access beyond end of device [ 1430.937517][T17621] loop5: rw=2049, want=146, limit=128 [ 1430.981253][T17405] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1430.996348][T17405] usb 3-1: config 1 has no interface number 0 [ 1430.996775][T17621] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 1431.016372][T17405] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1431.031458][T15916] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1431.054432][T15916] usb 1-1: USB disconnect, device number 7 [ 1431.078052][T17405] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1431.140181][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1431.152456][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1431.176619][T17406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1431.229479][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1431.250231][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1431.281503][T17405] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1431.281574][T15939] Bluetooth: hci2: command 0x0419 tx timeout [ 1431.299527][T17405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.316822][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1431.332532][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1431.343601][T17405] usb 3-1: Product: syz [ 1431.348279][T17405] usb 3-1: Manufacturer: syz [ 1431.366857][T17406] device veth0_vlan entered promiscuous mode [ 1431.384553][T17405] usb 3-1: SerialNumber: syz [ 1431.396163][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1431.419538][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1431.431533][T17605] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1431.446677][T17406] device veth1_vlan entered promiscuous mode [ 1431.458257][T17405] usb 3-1: Expected 3 endpoints, found: 2 [ 1431.533229][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1431.563950][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1431.608669][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1431.642923][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1431.701797][T17406] device veth0_macvtap entered promiscuous mode [ 1431.758055][T17406] device veth1_macvtap entered promiscuous mode [ 1431.842854][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1431.889253][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.921444][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1431.943766][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.954165][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1431.965228][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.978375][T17406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1432.017878][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1432.061556][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1432.064894][T17650] loop0: detected capacity change from 0 to 256 [ 1432.088522][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1432.122956][T14000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1432.171421][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.207341][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.222784][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.239428][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.289044][T17406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.310702][T17406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.311226][ T9511] usb 10-1: USB disconnect, device number 4 [ 1432.331154][ T9532] vhci_hcd: vhci_device speed not set [ 1432.333069][T17406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1432.350015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1432.365462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1432.382543][T17405] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1432.471384][T17406] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.499011][T17406] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.524707][T17406] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.539623][T17406] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.711357][T17670] netlink: 'syz.0.3009': attribute type 1 has an invalid length. [ 1432.750560][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.771121][T17670] netlink: 'syz.0.3009': attribute type 7 has an invalid length. [ 1432.786980][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.837918][ T8506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1432.869193][ T8506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.873376][T15916] usb 3-1: USB disconnect, device number 4 [ 1432.901221][ T8506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.961299][T17405] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1432.971466][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1433.005983][T17405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.032077][T17678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3011'. [ 1433.081176][T17405] usb 6-1: Product: syz [ 1433.085787][T17405] usb 6-1: Manufacturer: syz [ 1433.142145][T17405] usb 6-1: SerialNumber: syz [ 1433.411329][T17695] loop3: detected capacity change from 0 to 128 [ 1433.477570][ T26] audit: type=1800 audit(1755908817.242:39): pid=17695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3016" name="file2" dev="loop3" ino=1048664 res=0 errno=0 [ 1433.491615][T17695] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 1433.554361][T17695] FAT-fs (loop3): Filesystem has been set read-only [ 1433.610029][T17702] loop0: detected capacity change from 0 to 128 [ 1433.631766][T17695] attempt to access beyond end of device [ 1433.631766][T17695] loop3: rw=524288, want=2073, limit=128 [ 1433.659968][T17702] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1433.684430][T17702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1433.718023][T17695] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 1433.728163][T17695] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 1433.806585][T17699] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 1433.871242][T17405] (unnamed net_device) (uninitialized): Assigned a random MAC address: e6:5d:3f:61:23:0f [ 1433.875765][T17699] attempt to access beyond end of device [ 1433.875765][T17699] loop3: rw=524288, want=2073, limit=128 [ 1433.935794][T17699] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 1433.968435][T17699] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 1433.991344][T17695] attempt to access beyond end of device [ 1433.991344][T17695] loop3: rw=0, want=2073, limit=128 [ 1434.010987][T17405] rtl8150 6-1:1.0: eth5: rtl8150 is detected [ 1434.092930][T17405] usb 6-1: USB disconnect, device number 6 [ 1434.140386][ T26] audit: type=1800 audit(1755908817.902:40): pid=17693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3015" name="/" dev="fuse" ino=3 res=0 errno=0 [ 1434.144084][T17699] attempt to access beyond end of device [ 1434.144084][T17699] loop3: rw=0, want=2073, limit=128 [ 1434.306059][T17695] attempt to access beyond end of device [ 1434.306059][T17695] loop3: rw=0, want=2073, limit=128 [ 1434.511588][T17733] syz.0.3027 uses obsolete (PF_INET,SOCK_PACKET) [ 1434.634993][T17731] loop2: detected capacity change from 0 to 4096 [ 1434.766998][T17731] ntfs3: Unknown parameter 'windows_names' [ 1434.824435][T17748] netlink: 'syz.9.3030': attribute type 10 has an invalid length. [ 1434.928883][T17748] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1435.143921][T17759] loop5: detected capacity change from 0 to 2048 [ 1435.280817][T17771] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1435.348857][ T26] audit: type=1326 audit(1755908819.112:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ffa00be9 code=0x7ffc0000 [ 1435.406038][T17776] loop0: detected capacity change from 0 to 64 [ 1435.488776][ T26] audit: type=1326 audit(1755908819.182:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6ffa00be9 code=0x7ffc0000 [ 1435.608701][T17787] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3045'. [ 1435.630993][ T26] audit: type=1326 audit(1755908819.182:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ffa00be9 code=0x7ffc0000 [ 1435.687885][T17783] loop2: detected capacity change from 0 to 4096 [ 1435.806080][T17798] loop0: detected capacity change from 0 to 128 [ 1435.821229][ T26] audit: type=1326 audit(1755908819.182:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fe6ffa00be9 code=0x7ffc0000 [ 1435.837204][T17792] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1435.846691][ T26] audit: type=1326 audit(1755908819.182:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17770 comm="syz.9.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ffa00be9 code=0x7ffc0000 [ 1435.968566][T17792] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 1436.038805][T17783] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1436.106089][T17795] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3047'. [ 1436.353553][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3049'. [ 1436.651022][T15937] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1436.926767][T15937] usb 10-1: Using ep0 maxpacket: 32 [ 1437.021108][ T4468] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1437.059611][T17837] loop0: detected capacity change from 0 to 2048 [ 1437.081283][T15937] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 1437.111387][T15937] usb 10-1: config 0 has no interface number 0 [ 1437.141162][T15937] usb 10-1: config 0 interface 89 has no altsetting 0 [ 1437.154941][T17835] loop3: detected capacity change from 0 to 4096 [ 1437.241948][T17842] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1437.271075][ T4468] usb 3-1: Using ep0 maxpacket: 32 [ 1437.294219][T17837] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 1437.371017][T15937] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1437.383922][T15937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.391256][ T4468] usb 3-1: config 0 has no interfaces? [ 1437.422192][T15937] usb 10-1: Product: syz [ 1437.442270][T15937] usb 10-1: Manufacturer: syz [ 1437.473096][T15937] usb 10-1: SerialNumber: syz [ 1437.490519][T17837] Remounting filesystem read-only [ 1437.521774][T15937] usb 10-1: config 0 descriptor?? [ 1437.551278][ T4468] usb 3-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 1437.578098][ T4468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.611525][ T4468] usb 3-1: Product: syz [ 1437.611571][T15937] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1437.616243][ T4468] usb 3-1: Manufacturer: syz [ 1437.679193][T15937] em28xx 10-1:0.89: Video interface 89 found: bulk [ 1437.693730][ T4468] usb 3-1: SerialNumber: syz [ 1437.735411][ T4468] usb 3-1: config 0 descriptor?? [ 1437.951253][T15937] em28xx 10-1:0.89: unknown em28xx chip ID (0) [ 1437.994798][ T4468] usb 3-1: USB disconnect, device number 5 [ 1438.151422][T15937] em28xx 10-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1438.179314][T15937] em28xx 10-1:0.89: board has no eeprom [ 1438.321564][T15937] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67) [ 1438.351362][T15937] em28xx 10-1:0.89: analog set to bulk mode. [ 1438.405384][T15937] usb 10-1: USB disconnect, device number 5 [ 1438.456707][T15937] em28xx 10-1:0.89: Disconnecting em28xx [ 1438.471144][T17405] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1438.484236][T15938] em28xx 10-1:0.89: Registering V4L2 extension [ 1438.526287][ T4247] Bluetooth: hci4: command 0x0406 tx timeout [ 1438.648961][T15938] em28xx 10-1:0.89: Config register raw data: 0xffffffed [ 1438.679950][T15938] em28xx 10-1:0.89: AC97 chip type couldn't be determined [ 1438.700329][T15938] em28xx 10-1:0.89: No AC97 audio processor [ 1438.758735][T15938] usb 10-1: Decoder not found [ 1438.784420][T15938] em28xx 10-1:0.89: failed to create media graph [ 1438.806348][T15938] em28xx 10-1:0.89: V4L2 device video103 deregistered [ 1438.851266][T17405] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.854939][T15938] em28xx 10-1:0.89: Registering snapshot button... [ 1438.888784][T17405] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1438.896219][T15938] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input6 [ 1438.929731][T15938] em28xx 10-1:0.89: Remote control support is not available for this card. [ 1438.938265][T17405] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1438.939902][T15937] em28xx 10-1:0.89: Closing input extension [ 1438.980996][T17405] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1438.987812][T15937] em28xx 10-1:0.89: Deregistering snapshot button [ 1439.021018][T17405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.104167][T17405] usb 6-1: invalid MIDI out EP 0 [ 1439.392952][T15937] em28xx 10-1:0.89: Freeing device [ 1439.597038][T17405] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 1439.691170][T17405] usb 6-1: USB disconnect, device number 7 [ 1439.811203][T15937] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1439.922202][T17921] udevd[17921]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1440.107472][T17933] loop2: detected capacity change from 0 to 4096 [ 1440.205010][T17933] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1440.220636][T15937] usb 10-1: config 0 has an invalid interface number: 128 but max is 0 [ 1440.234165][T15937] usb 10-1: config 0 has no interface number 0 [ 1440.284310][T17946] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1440.453513][T15937] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1440.465960][T15937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.533871][T15937] usb 10-1: Product: syz [ 1440.539479][T15937] usb 10-1: Manufacturer: syz [ 1440.555494][T15937] usb 10-1: SerialNumber: syz [ 1440.617608][T15937] usb 10-1: config 0 descriptor?? [ 1440.742298][T17962] [ 1440.745101][T17962] ====================================================== [ 1440.752895][T17962] WARNING: possible circular locking dependency detected [ 1440.760549][T17962] 5.15.189-syzkaller #0 Not tainted [ 1440.766465][T17962] ------------------------------------------------------ [ 1440.774845][T17962] syz.2.3085/17962 is trying to acquire lock: [ 1440.781158][T17962] ffff88805c784c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 1440.793051][T17962] [ 1440.793051][T17962] but task is already holding lock: [ 1440.801260][T17962] ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 1440.811347][T17962] [ 1440.811347][T17962] which lock already depends on the new lock. [ 1440.811347][T17962] [ 1440.822773][T17962] [ 1440.822773][T17962] the existing dependency chain (in reverse order) is: [ 1440.832208][T17962] [ 1440.832208][T17962] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1440.840671][T17962] __mutex_lock_common+0x1eb/0x2390 [ 1440.846459][T17962] mutex_lock_nested+0x17/0x20 [ 1440.852323][T17962] rfkill_register+0x33/0x8a0 [ 1440.858207][T17962] hci_register_dev+0x452/0x970 [ 1440.864060][T17962] vhci_create_device+0x32c/0x5c0 [ 1440.870675][T17962] vhci_write+0x391/0x450 [ 1440.876367][T17962] vfs_write+0x712/0xd00 [ 1440.881908][T17962] ksys_write+0x14d/0x250 [ 1440.886888][T17962] do_syscall_64+0x4c/0xa0 [ 1440.891864][T17962] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1440.899945][T17962] [ 1440.899945][T17962] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1440.908889][T17962] __mutex_lock_common+0x1eb/0x2390 [ 1440.915191][T17962] mutex_lock_nested+0x17/0x20 [ 1440.921007][T17962] vhci_send_frame+0x88/0x100 [ 1440.926981][T17962] hci_send_frame+0x1a9/0x2e0 [ 1440.932986][T17962] hci_tx_work+0x9f9/0x1710 [ 1440.938919][T17962] process_one_work+0x863/0x1000 [ 1440.944823][T17962] worker_thread+0xaa8/0x12a0 [ 1440.950455][T17962] kthread+0x436/0x520 [ 1440.955296][T17962] ret_from_fork+0x1f/0x30 [ 1440.961477][T17962] [ 1440.961477][T17962] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1440.972743][T17962] __flush_work+0xdd/0x1b0 [ 1440.977886][T17962] hci_dev_do_close+0x1e7/0x1030 [ 1440.983778][T17962] hci_error_reset+0x101/0x2c0 [ 1440.990227][T17962] process_one_work+0x863/0x1000 [ 1440.995890][T17962] worker_thread+0xaa8/0x12a0 [ 1441.002169][T17962] kthread+0x436/0x520 [ 1441.007342][T17962] ret_from_fork+0x1f/0x30 [ 1441.012873][T17962] [ 1441.012873][T17962] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1441.021557][T17962] __mutex_lock_common+0x1eb/0x2390 [ 1441.028428][T17962] mutex_lock_nested+0x17/0x20 [ 1441.034635][T17962] bg_scan_update+0x44/0x3b0 [ 1441.040005][T17962] process_one_work+0x863/0x1000 [ 1441.046375][T17962] worker_thread+0xaa8/0x12a0 [ 1441.052238][T17962] kthread+0x436/0x520 [ 1441.057887][T17962] ret_from_fork+0x1f/0x30 [ 1441.063872][T17962] [ 1441.063872][T17962] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1441.076136][T17962] __lock_acquire+0x2c33/0x7c60 [ 1441.082626][T17962] lock_acquire+0x197/0x3f0 [ 1441.087941][T17962] __flush_work+0xdd/0x1b0 [ 1441.094081][T17962] __cancel_work_timer+0x3ac/0x520 [ 1441.100187][T17962] hci_request_cancel_all+0xcc/0x300 [ 1441.106981][T17962] hci_dev_do_close+0x4e/0x1030 [ 1441.112554][T17962] hci_rfkill_set_block+0x10a/0x190 [ 1441.118696][T17962] rfkill_set_block+0x1c6/0x420 [ 1441.124707][T17962] rfkill_fop_write+0x458/0x560 [ 1441.130903][T17962] vfs_write+0x300/0xd00 [ 1441.136338][T17962] ksys_write+0x14d/0x250 [ 1441.141513][T17962] do_syscall_64+0x4c/0xa0 [ 1441.146744][T17962] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1441.153938][T17962] [ 1441.153938][T17962] other info that might help us debug this: [ 1441.153938][T17962] [ 1441.165874][T17962] Chain exists of: [ 1441.165874][T17962] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1441.165874][T17962] [ 1441.182912][T17962] Possible unsafe locking scenario: [ 1441.182912][T17962] [ 1441.190661][T17962] CPU0 CPU1 [ 1441.196135][T17962] ---- ---- [ 1441.201893][T17962] lock(rfkill_global_mutex); [ 1441.206761][T17962] lock(&data->open_mutex); [ 1441.214168][T17962] lock(rfkill_global_mutex); [ 1441.222679][T17962] lock((work_completion)(&hdev->bg_scan_update)); [ 1441.230624][T17962] [ 1441.230624][T17962] *** DEADLOCK *** [ 1441.230624][T17962] [ 1441.240216][T17962] 1 lock held by syz.2.3085/17962: [ 1441.245717][T17962] #0: ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 1441.256824][T17962] [ 1441.256824][T17962] stack backtrace: [ 1441.263354][T17962] CPU: 0 PID: 17962 Comm: syz.2.3085 Not tainted 5.15.189-syzkaller #0 [ 1441.273619][T17962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1441.284239][T17962] Call Trace: [ 1441.287809][T17962] [ 1441.291051][T17962] dump_stack_lvl+0x168/0x230 [ 1441.296495][T17962] ? load_image+0x3b0/0x3b0 [ 1441.302214][T17962] ? show_regs_print_info+0x20/0x20 [ 1441.307977][T17962] ? print_circular_bug+0x12b/0x1a0 [ 1441.313556][T17962] check_noncircular+0x274/0x310 [ 1441.319189][T17962] ? add_chain_block+0x940/0x940 [ 1441.325104][T17962] ? lockdep_lock+0xdc/0x1e0 [ 1441.330085][T17962] ? __lock_acquire+0x12d9/0x7c60 [ 1441.335879][T17962] ? lockdep_lock+0x1e0/0x1e0 [ 1441.340858][T17962] ? mark_lock+0x94/0x320 [ 1441.345875][T17962] ? _find_first_zero_bit+0xce/0xf0 [ 1441.351389][T17962] __lock_acquire+0x2c33/0x7c60 [ 1441.356636][T17962] ? verify_lock_unused+0x140/0x140 [ 1441.362494][T17962] lock_acquire+0x197/0x3f0 [ 1441.367535][T17962] ? __flush_work+0xc1/0x1b0 [ 1441.372439][T17962] ? __lock_acquire+0x7c60/0x7c60 [ 1441.377849][T17962] ? read_lock_is_recursive+0x10/0x10 [ 1441.383328][T17962] ? start_flush_work+0x776/0x820 [ 1441.388590][T17962] __flush_work+0xdd/0x1b0 [ 1441.393398][T17962] ? __flush_work+0xc1/0x1b0 [ 1441.398188][T17962] ? flush_work+0x20/0x20 [ 1441.402706][T17962] ? try_to_grab_pending+0xf3/0x7e0 [ 1441.408725][T17962] ? lockdep_hardirqs_off+0x70/0x100 [ 1441.414224][T17962] ? mark_lock+0x94/0x320 [ 1441.418865][T17962] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1441.425247][T17962] ? lock_chain_count+0x20/0x20 [ 1441.430475][T17962] ? mark_lock+0x94/0x320 [ 1441.435586][T17962] ? __cancel_work_timer+0x331/0x520 [ 1441.441346][T17962] __cancel_work_timer+0x3ac/0x520 [ 1441.447360][T17962] ? cancel_work_sync+0x20/0x20 [ 1441.452488][T17962] ? __cancel_work+0x1f4/0x2d0 [ 1441.457639][T17962] ? lockdep_hardirqs_on+0x94/0x140 [ 1441.462999][T17962] ? __cancel_work+0x26f/0x2d0 [ 1441.468362][T17962] ? cancel_work+0x20/0x20 [ 1441.473324][T17962] ? lock_chain_count+0x20/0x20 [ 1441.478428][T17962] hci_request_cancel_all+0xcc/0x300 [ 1441.484033][T17962] hci_dev_do_close+0x4e/0x1030 [ 1441.489354][T17962] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1441.495667][T17962] ? _raw_spin_unlock+0x40/0x40 [ 1441.501113][T17962] hci_rfkill_set_block+0x10a/0x190 [ 1441.506627][T17962] ? rcu_lock_release+0x20/0x20 [ 1441.511709][T17962] rfkill_set_block+0x1c6/0x420 [ 1441.517421][T17962] rfkill_fop_write+0x458/0x560 [ 1441.524155][T17962] ? rfkill_fop_read+0x4b0/0x4b0 [ 1441.529634][T17962] ? common_file_perm+0x150/0x1c0 [ 1441.535061][T17962] ? fsnotify_perm+0x5d/0x560 [ 1441.540319][T17962] ? security_file_permission+0x75/0xa0 [ 1441.546513][T17962] ? rfkill_fop_read+0x4b0/0x4b0 [ 1441.551603][T17962] vfs_write+0x300/0xd00 [ 1441.556265][T17962] ? file_end_write+0x250/0x250 [ 1441.561412][T17962] ? __fget_files+0x40f/0x480 [ 1441.566384][T17962] ? __fdget_pos+0x1e2/0x370 [ 1441.572055][T17962] ? ksys_write+0x71/0x250 [ 1441.576664][T17962] ksys_write+0x14d/0x250 [ 1441.581021][T17962] ? __ia32_sys_read+0x80/0x80 [ 1441.585945][T17962] ? lockdep_hardirqs_on+0x94/0x140 [ 1441.591730][T17962] do_syscall_64+0x4c/0xa0 [ 1441.596454][T17962] ? clear_bhb_loop+0x30/0x80 [ 1441.601653][T17962] ? clear_bhb_loop+0x30/0x80 [ 1441.607027][T17962] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1441.614052][T17962] RIP: 0033:0x7f6871091be9 [ 1441.618703][T17962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1441.640058][T17962] RSP: 002b:00007f686f2f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1441.649600][T17962] RAX: ffffffffffffffda RBX: 00007f68712b8fa0 RCX: 00007f6871091be9 [ 1441.658183][T17962] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000004 [ 1441.668656][T17962] RBP: 00007f6871114e19 R08: 0000000000000000 R09: 0000000000000000 [ 1441.677837][T17962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1441.687058][T17962] R13: 00007f68712b9038 R14: 00007f68712b8fa0 R15: 00007ffe7f98ed48 [ 1441.696420][T17962] [ 1441.761164][T15937] usb 10-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71 [ 1441.798794][T15937] usb 10-1: Firmware version (0.0) predates our first public release. [ 1441.854963][T15937] usb 10-1: Please update to version 0.2 or newer [ 1441.901046][T15937] usb 10-1: atusb_probe: initialization failed, error = -71 [ 1441.910550][T15937] atusb: probe of 10-1:0.128 failed with error -71 [ 1441.950065][T15937] usb 10-1: USB disconnect, device number 6 [ 1444.680129][ T8506] device hsr_slave_0 left promiscuous mode [ 1444.695289][ T8506] device hsr_slave_1 left promiscuous mode [ 1444.706878][ T8506] batman_adv: batadv0: Removing interface: team0 [ 1444.828536][ T8506] bond0 (unregistering): Released all slaves [ 1449.766300][ T4406] device hsr_slave_0 left promiscuous mode [ 1449.774244][ T4406] device hsr_slave_1 left promiscuous mode [ 1449.782472][ T4406] batman_adv: batadv0: Removing interface: team0 [ 1449.791537][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1449.800281][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.809625][ T4406] device bridge_slave_1 left promiscuous mode [ 1449.818068][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.828043][ T4406] device bridge_slave_0 left promiscuous mode [ 1449.839860][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.069631][ T4406] team0 (unregistering): Port device team_slave_1 removed [ 1450.085850][ T4406] team0 (unregistering): Port device team_slave_0 removed [ 1450.098778][ T4406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1450.115907][ T4406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.176763][ T4406] bond0 (unregistering): Released all slaves