last executing test programs: 14.480102525s ago: executing program 0 (id=1751): chown(0x0, 0xee00, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="010002006401010000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324", 0x12}], 0x1}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x400000) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x4, 0xfc, 0x1, @time={0x2, 0xb06b}, {0x5, 0x9}, {0x9, 0x9}, @raw32={[0x3, 0x21e132a6, 0x3]}}, {0x3, 0x0, 0x9, 0x8, @time={0x2, 0x2}, {0x9, 0x4}, {0x9, 0x5}, @time=@tick=0x7f3}, {0x3, 0x18, 0x1, 0x98, @tick=0x6, {0x10, 0x40}, {0x8, 0xd5}, @raw32={[0xf, 0x7, 0x8]}}, {0xa, 0x9, 0x7, 0xbd, @time={0x3, 0x123}, {0x9b, 0x5}, {0xc, 0x7f}, @raw32={[0xffffffad, 0x3, 0x4]}}, {0x8, 0x1, 0x6, 0x1f, @tick=0x2678, {0x0, 0x6}, {0x60, 0x2}, @quote={{0xad, 0x7}, 0x5, &(0x7f0000000380)={0x5, 0x7f, 0x8, 0x85, @time={0x3, 0x4}, {0x4, 0x9}, {0xff, 0xdc}, @quote={{0x2, 0x40}, 0x4}}}}, {0x10, 0xe, 0x1b, 0x6, @tick=0xb9, {0x5f, 0x5}, {0x7c, 0x6}, @queue={0x3, {0xc, 0x200}}}], 0xa8) sched_setscheduler(0x0, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000180)={&(0x7f0000000040)=""/215, 0xd7}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) timer_delete(r2) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x310) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0xd, 0x1, 0x0, "9611e6d6ffc800000000000000000300000000000000010183df4800", 0x38303553}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfffd}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 11.365193879s ago: executing program 0 (id=1756): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xa, 0x801000089}, 0x0) msgget$private(0x0, 0xc4) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0xa4602, 0x18) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x40, 0x3, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001240)='./file1\x00', &(0x7f0000000180), 0x0, 0x841, 0x0) 9.403401117s ago: executing program 1 (id=1759): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x12b}, {0x6, 0xff, 0x0, 0xfffffcb9}]}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100), 0x2, 0x528, &(0x7f0000000c00)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x20000, 0x100) fanotify_init(0x8, 0x40000) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) preadv2(r2, &(0x7f0000000a80)=[{&(0x7f00000002c0)=""/46, 0x2e}], 0x1, 0x6, 0x7, 0x0) poll(&(0x7f0000000080), 0x0, 0xfffffffb) 9.265932589s ago: executing program 0 (id=1760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40043, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2) getpid() ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34524742, 0x0, 0x7, [{}, {0xfffffff7}, {}, {}, {}, {0x0, 0x4}, {0x2000000}, {0xc28f}], 0x2}}) syz_open_dev$sndctrl(&(0x7f0000000040), 0xfffffffffffffffe, 0x16ef03) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x0, [{@rand_addr=0x64010101, 0x4}, {@local, 0x8}, {@private=0xa010102, 0x8}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 8.722371709s ago: executing program 2 (id=1761): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000510"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x65}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) getpid() r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x1, @rand_addr=' \x01\x00', 0x3}, 0x1c, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e24, 0x0, @private0, 0x10000001}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x240040c4) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00", 0x2) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000005400)={0x0, @in6={{0xa, 0x4e23, 0x46, @mcast1, 0x40}}}, 0x84) bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x8}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @ioapic={0x4, 0x1, 0xfffffffd, 0x7, 0x0, [{0x8, 0x7, 0x4, '\x00', 0x5}, {0x7, 0x80, 0x7, '\x00', 0x4}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x8, 0x6, 0x40, '\x00', 0xd}, {0x1, 0x4, 0x4, '\x00', 0x10}, {0x8, 0x6, 0x0, '\x00', 0x2}, {0x5, 0x7, 0x3, '\x00', 0x4}, {0xb4, 0x3, 0x7f, '\x00', 0x9}, {0x80, 0x3, 0x7, '\x00', 0x4}, {0x9, 0x3, 0xa, '\x00', 0x17}, {0x2, 0x33, 0xde, '\x00', 0x2}, {0x0, 0xa3, 0x3, '\x00', 0x4}, {0x6, 0x9, 0x6, '\x00', 0x4}, {0x20, 0x9, 0x10, '\x00', 0x7}, {0x6, 0x1, 0x4, '\x00', 0xc}, {0x8, 0x5, 0xf6, '\x00', 0x2}, {0x9, 0x2, 0x1, '\x00', 0x52}, {0x10, 0x5, 0xa0}, {0xca, 0x4, 0x4, '\x00', 0xe6}, {0x50, 0x1, 0x44, '\x00', 0xc}, {0x8f, 0x5, 0x0, '\x00', 0x1}, {0x6, 0x0, 0x5, '\x00', 0x3}, {0x40, 0xe, 0xa, '\x00', 0x1}, {0x9, 0x5, 0x1, '\x00', 0x7f}]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000081dc", @ANYRES32=0x0], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.245520462s ago: executing program 0 (id=1762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.173622306s ago: executing program 2 (id=1763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1b, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108010027875397bab22d0000b420a9c81f40f05f819201177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r5, &(0x7f00000002c0), 0x0, 0x6, 0x9) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) 7.054068781s ago: executing program 1 (id=1764): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000510"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x65}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) getpid() r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x1, @rand_addr=' \x01\x00', 0x3}, 0x1c, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e24, 0x0, @private0, 0x10000001}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x240040c4) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00", 0x2) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000005400)={0x0, @in6={{0xa, 0x4e23, 0x46, @mcast1, 0x40}}}, 0x84) bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x8}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @ioapic={0x4, 0x1, 0xfffffffd, 0x7, 0x0, [{0x8, 0x7, 0x4, '\x00', 0x5}, {0x7, 0x80, 0x7, '\x00', 0x4}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x8, 0x6, 0x40, '\x00', 0xd}, {0x1, 0x4, 0x4, '\x00', 0x10}, {0x8, 0x6, 0x0, '\x00', 0x2}, {0x5, 0x7, 0x3, '\x00', 0x4}, {0xb4, 0x3, 0x7f, '\x00', 0x9}, {0x80, 0x3, 0x7, '\x00', 0x4}, {0x9, 0x3, 0xa, '\x00', 0x17}, {0x2, 0x33, 0xde, '\x00', 0x2}, {0x0, 0xa3, 0x3, '\x00', 0x4}, {0x6, 0x9, 0x6, '\x00', 0x4}, {0x20, 0x9, 0x10, '\x00', 0x7}, {0x6, 0x1, 0x4, '\x00', 0xc}, {0x8, 0x5, 0xf6, '\x00', 0x2}, {0x9, 0x2, 0x1, '\x00', 0x52}, {0x10, 0x5, 0xa0}, {0xca, 0x4, 0x4, '\x00', 0xe6}, {0x50, 0x1, 0x44, '\x00', 0xc}, {0x8f, 0x5, 0x0, '\x00', 0x1}, {0x6, 0x0, 0x5, '\x00', 0x3}, {0x40, 0xe, 0xa, '\x00', 0x1}, {0x9, 0x5, 0x1, '\x00', 0x7f}]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000081dc", @ANYRES32=0x0], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.450418771s ago: executing program 2 (id=1765): r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'batadv0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffff9, 0x0, 0x200, 0xb, 0x9, 0x3, [0x100, 0xfffffff9]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) r1 = userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d58000000000000140803006970766c616e310000000000000000001c0012800b0001006970766c616e001bff000c00761e9cc458a7f7f6"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x10}}, 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0x8}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000440)={r8, 0x3}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r8, 0x9d, "d7d3ed9c5e5daa5953de2e3af79c8999a499ebeec1f3c5f833b032de4fc15f8f5b215cb55b24dcd4fb78ef03074e2ac85d06147fd3251c8f677275bc4718e13803a7d711e667fc258cc1a254c345652d436f01e352b710d8a2bff9540977a363ab90b4cdfba799eff2de86252848441c2a898dd56203b110c8bef19ba691ab22897e517b8bf31d6b31d01d73dc152075e51009d7d76e7d51c92181fc4d"}, &(0x7f0000000100)=0xa5) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x510}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) close(r10) 5.188976275s ago: executing program 3 (id=1766): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000040)='./file1\x00', 0x80, &(0x7f0000000240)=ANY=[], 0x1, 0xc11, &(0x7f0000000d00)="$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") close(0x3) r0 = getpid() mknod$loop(0x0, 0x10, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 4.80515281s ago: executing program 1 (id=1767): r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'batadv0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffff9, 0x0, 0x200, 0xb, 0x9, 0x3, [0x100, 0xfffffff9]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) r1 = userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d58000000000000140803006970766c616e310000000000000000001c0012800b0001006970766c616e001bff000c00761e9cc458a7f7f6"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x10}}, 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000440)={r8, 0x3}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r8, 0xe4, "d7d3ed9c5e5daa5953de2e3af79c8999a499ebeec1f3c5f833b032de4fc15f8f5b215cb55b24dcd4fb78ef03074e2ac85d06147fd3251c8f677275bc4718e13803a7d711e667fc258cc1a254c345652d436f01e352b710d8a2bff9540977a363ab90b4cdfba799eff2de86252848441c2a898dd56203b110c8bef19ba691ab22897e517b8bf31d6b31d01d73dc152075e51009d7d76e7d51c92181fc4da0670f1e71796d8d0606161c4b206ab7e578b2d2c487878308f4097090c79979c426d3e9e6767be6ad624dec6696d935785c0f283409e7e4d008eee16c067076fe0b7dcde49c58"}, &(0x7f0000000100)=0xec) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x510}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) close(r10) 4.1738102s ago: executing program 0 (id=1768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3.530241498s ago: executing program 0 (id=1769): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) io_uring_enter(r1, 0x5a3a, 0x85f0, 0x16, &(0x7f0000000100)={[0x9]}, 0x8) write$sndseq(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = socket$pptp(0x18, 0x1, 0x2) getpeername(r5, 0x0, &(0x7f00000000c0)) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x100, 0xd0a6487eb0247c42) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa6c, &(0x7f0000000900)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x0) 3.499737998s ago: executing program 3 (id=1770): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000510"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x65}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) getpid() r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x1, @rand_addr=' \x01\x00', 0x3}, 0x1c, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e24, 0x0, @private0, 0x10000001}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x240040c4) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00", 0x2) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000005400)={0x0, @in6={{0xa, 0x4e23, 0x46, @mcast1, 0x40}}}, 0x84) bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x8}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @ioapic={0x4, 0x1, 0xfffffffd, 0x7, 0x0, [{0x8, 0x7, 0x4, '\x00', 0x5}, {0x7, 0x80, 0x7, '\x00', 0x4}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x8, 0x6, 0x40, '\x00', 0xd}, {0x1, 0x4, 0x4, '\x00', 0x10}, {0x8, 0x6, 0x0, '\x00', 0x2}, {0x5, 0x7, 0x3, '\x00', 0x4}, {0xb4, 0x3, 0x7f, '\x00', 0x9}, {0x80, 0x3, 0x7, '\x00', 0x4}, {0x9, 0x3, 0xa, '\x00', 0x17}, {0x2, 0x33, 0xde, '\x00', 0x2}, {0x0, 0xa3, 0x3, '\x00', 0x4}, {0x6, 0x9, 0x6, '\x00', 0x4}, {0x20, 0x9, 0x10, '\x00', 0x7}, {0x6, 0x1, 0x4, '\x00', 0xc}, {0x8, 0x5, 0xf6, '\x00', 0x2}, {0x9, 0x2, 0x1, '\x00', 0x52}, {0x10, 0x5, 0xa0}, {0xca, 0x4, 0x4, '\x00', 0xe6}, {0x50, 0x1, 0x44, '\x00', 0xc}, {0x8f, 0x5, 0x0, '\x00', 0x1}, {0x6, 0x0, 0x5, '\x00', 0x3}, {0x40, 0xe, 0xa, '\x00', 0x1}, {0x9, 0x5, 0x1, '\x00', 0x7f}]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.437275412s ago: executing program 2 (id=1771): r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'batadv0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffff9, 0x0, 0x200, 0xb, 0x9, 0x3, [0x100, 0xfffffff9]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) r1 = userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d58000000000000140803006970766c616e310000000000000000001c0012800b0001006970766c616e001bff000c00761e9cc458a7f7f6"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x10}}, 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0x8}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000440)={r8, 0x3}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r8, 0x72, "d7d3ed9c5e5daa5953de2e3af79c8999a499ebeec1f3c5f833b032de4fc15f8f5b215cb55b24dcd4fb78ef03074e2ac85d06147fd3251c8f677275bc4718e13803a7d711e667fc258cc1a254c345652d436f01e352b710d8a2bff9540977a363ab90b4cdfba799eff2de86252848441c2a89"}, &(0x7f0000000100)=0x7a) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x510}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) close(r10) 3.244119353s ago: executing program 3 (id=1772): r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'batadv0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffff9, 0x0, 0x200, 0xb, 0x9, 0x3, [0x100, 0xfffffff9]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) r1 = userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d58000000000000140803006970766c616e310000000000000000001c0012800b0001006970766c616e001bff000c00761e9cc458a7f7f6"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x10}}, 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0x8}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000440)={r8, 0x3}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r8, 0xab, "d7d3ed9c5e5daa5953de2e3af79c8999a499ebeec1f3c5f833b032de4fc15f8f5b215cb55b24dcd4fb78ef03074e2ac85d06147fd3251c8f677275bc4718e13803a7d711e667fc258cc1a254c345652d436f01e352b710d8a2bff9540977a363ab90b4cdfba799eff2de86252848441c2a898dd56203b110c8bef19ba691ab22897e517b8bf31d6b31d01d73dc152075e51009d7d76e7d51c92181fc4da0670f1e71796d8d0606161c4b20"}, &(0x7f0000000100)=0xb3) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x510}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) close(r10) 3.213958235s ago: executing program 1 (id=1773): r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'batadv0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffff9, 0x0, 0x200, 0xb, 0x9, 0x3, [0x100, 0xfffffff9]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) r1 = userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d58000000000000140803006970766c616e310000000000000000001c0012800b0001006970766c616e001bff000c00761e9cc458a7f7f6"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x10}}, 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0x8}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000440)={r8, 0x3}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x510}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) close(r10) 1.87338226s ago: executing program 3 (id=1774): umount2(&(0x7f0000000040)='.\x00', 0x2) 1.553709789s ago: executing program 2 (id=1775): r0 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'batadv0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffff9, 0x0, 0x200, 0xb, 0x9, 0x3, [0x100, 0xfffffff9]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) r1 = userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d58000000000000140803006970766c616e310000000000000000001c0012800b0001006970766c616e001bff000c00761e9cc458a7f7f6"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x10}}, 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0x8}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000440)={r8, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r8, 0xe4, "d7d3ed9c5e5daa5953de2e3af79c8999a499ebeec1f3c5f833b032de4fc15f8f5b215cb55b24dcd4fb78ef03074e2ac85d06147fd3251c8f677275bc4718e13803a7d711e667fc258cc1a254c345652d436f01e352b710d8a2bff9540977a363ab90b4cdfba799eff2de86252848441c2a898dd56203b110c8bef19ba691ab22897e517b8bf31d6b31d01d73dc152075e51009d7d76e7d51c92181fc4da0670f1e71796d8d0606161c4b206ab7e578b2d2c487878308f4097090c79979c426d3e9e6767be6ad624dec6696d935785c0f283409e7e4d008eee16c067076fe0b7dcde49c58"}, &(0x7f0000000100)=0xec) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x510}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) close(r10) 1.530494208s ago: executing program 1 (id=1776): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000280)) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") 1.455934448s ago: executing program 3 (id=1777): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) io_uring_enter(r1, 0x5a3a, 0x85f0, 0x16, &(0x7f0000000100)={[0x9]}, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = socket$pptp(0x18, 0x1, 0x2) getpeername(r5, 0x0, &(0x7f00000000c0)) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x100, 0xd0a6487eb0247c42) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa6c, &(0x7f0000000900)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x0) 238.130795ms ago: executing program 1 (id=1778): socket(0x2a, 0x2, 0x3) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r8, 0x10000000005, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r1, 0x0, 0x200000) 233.44837ms ago: executing program 2 (id=1779): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3537, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r6 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x702, &(0x7f0000001140)="$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") r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'multiq3\x00', [0x9df, 0x2566, 0xfffffffe, 0x100000, 0x15d, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x101, 0x20005, 0x344, 0x1ff, 0x4, 0x0, 0x4, 0x4, 0x9, 0xa, 0x100, 0x1005, 0x7, 0xa, 0x2, 0xffffffff, 0xb0c4, 0x7df, 0x8, 0x400007, 0xffffffff]}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xf0b, r6, 'id0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000000080)=@bpq0, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) 0s ago: executing program 3 (id=1780): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x117c, 0x0, 0x0, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000480)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x3c}) kernel console output (not intermixed with test programs): 9][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.096166][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.110394][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.132586][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.139842][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.147489][ T5786] bridge_slave_0: entered allmulticast mode [ 86.154870][ T5786] bridge_slave_0: entered promiscuous mode [ 86.164864][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.172103][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.179313][ T5786] bridge_slave_1: entered allmulticast mode [ 86.186590][ T5786] bridge_slave_1: entered promiscuous mode [ 86.194766][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.202293][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.229006][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.252386][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.282749][ T5788] team0: Port device team_slave_0 added [ 86.290563][ T5788] team0: Port device team_slave_1 added [ 86.339514][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.396128][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.409266][ T5785] team0: Port device team_slave_0 added [ 86.418359][ T5785] team0: Port device team_slave_1 added [ 86.425994][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.433873][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.460177][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.473206][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.480203][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.506348][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.576119][ T5789] hsr_slave_0: entered promiscuous mode [ 86.583986][ T5789] hsr_slave_1: entered promiscuous mode [ 86.607980][ T5786] team0: Port device team_slave_0 added [ 86.615226][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.622708][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.649009][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.662363][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.669438][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.695707][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.729022][ T5786] team0: Port device team_slave_1 added [ 86.752420][ T5798] Bluetooth: hci0: command tx timeout [ 86.752685][ T5795] Bluetooth: hci2: command tx timeout [ 86.828571][ T5785] hsr_slave_0: entered promiscuous mode [ 86.834849][ T5795] Bluetooth: hci1: command tx timeout [ 86.837137][ T5798] Bluetooth: hci3: command tx timeout [ 86.846609][ T5785] hsr_slave_1: entered promiscuous mode [ 86.854274][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.862805][ T5785] Cannot create hsr debugfs directory [ 86.869139][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.876486][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.902690][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.915322][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.922394][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.948418][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.969910][ T5788] hsr_slave_0: entered promiscuous mode [ 86.976513][ T5788] hsr_slave_1: entered promiscuous mode [ 86.985805][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.993608][ T5788] Cannot create hsr debugfs directory [ 87.212536][ T5786] hsr_slave_0: entered promiscuous mode [ 87.219356][ T5786] hsr_slave_1: entered promiscuous mode [ 87.230619][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.240113][ T5786] Cannot create hsr debugfs directory [ 87.663955][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.680954][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.708929][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.722944][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.784032][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.797150][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.807982][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.819246][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.906851][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.936328][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.947590][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.960539][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.062679][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.075064][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.088990][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.099324][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.208120][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.239265][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.293242][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.314532][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.322028][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.340093][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.373632][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.380875][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.393206][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.400436][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.419194][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.432357][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.439539][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.524349][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.550749][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.598624][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.605868][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.629039][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.636382][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.654244][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.690134][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.697386][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.736024][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.743274][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.834471][ T5798] Bluetooth: hci2: command tx timeout [ 88.839944][ T5798] Bluetooth: hci0: command tx timeout [ 88.913265][ T5798] Bluetooth: hci1: command tx timeout [ 88.913277][ T5795] Bluetooth: hci3: command tx timeout [ 89.049259][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.158003][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.192896][ T5785] veth0_vlan: entered promiscuous mode [ 89.224943][ T5785] veth1_vlan: entered promiscuous mode [ 89.336932][ T5785] veth0_macvtap: entered promiscuous mode [ 89.378173][ T5785] veth1_macvtap: entered promiscuous mode [ 89.391518][ T5789] veth0_vlan: entered promiscuous mode [ 89.410262][ T5789] veth1_vlan: entered promiscuous mode [ 89.454261][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.469628][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.496222][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.515033][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.528587][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.538406][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.548406][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.557824][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.575986][ T5789] veth0_macvtap: entered promiscuous mode [ 89.587086][ T5789] veth1_macvtap: entered promiscuous mode [ 89.677069][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.688956][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.700820][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.738483][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.749493][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.762402][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.789299][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.803188][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.813220][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.823595][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.860659][ T5786] veth0_vlan: entered promiscuous mode [ 89.862236][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.869099][ T5788] veth0_vlan: entered promiscuous mode [ 89.887889][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.910222][ T5788] veth1_vlan: entered promiscuous mode [ 89.979354][ T5786] veth1_vlan: entered promiscuous mode [ 90.000869][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.011713][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.087099][ T5788] veth0_macvtap: entered promiscuous mode [ 90.100839][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.118700][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.148482][ T5788] veth1_macvtap: entered promiscuous mode [ 90.189033][ T5786] veth0_macvtap: entered promiscuous mode [ 90.240976][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.253974][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.263883][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.285406][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.295852][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.306513][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.323037][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.348931][ T5786] veth1_macvtap: entered promiscuous mode [ 90.388132][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.408021][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.418742][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.438523][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.455562][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.484743][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.500163][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.514190][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.541534][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.598936][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.610414][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.623985][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.634801][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.645093][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.660474][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.674763][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.711967][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.724836][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.735888][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.748664][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.765342][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.786777][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.804044][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.835923][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.845183][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.855325][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.866640][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.912296][ T5798] Bluetooth: hci0: command tx timeout [ 90.913233][ T5795] Bluetooth: hci2: command tx timeout [ 90.993169][ T5795] Bluetooth: hci3: command tx timeout [ 90.995959][ T5798] Bluetooth: hci1: command tx timeout [ 91.088617][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.120108][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.218665][ T5895] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 91.230019][ T5897] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.235367][ T5895] syzkaller1: entered promiscuous mode [ 91.242615][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.255797][ T5895] syzkaller1: entered allmulticast mode [ 91.268967][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.336546][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.370432][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.440038][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.481961][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.746310][ T5905] tipc: Started in network mode [ 91.768279][ T5905] tipc: Node identity 06d179428a38, cluster identity 4711 [ 91.811570][ T5905] tipc: Enabled bearer , priority 0 [ 91.850573][ T5911] syzkaller0: entered promiscuous mode [ 91.873067][ T5911] syzkaller0: entered allmulticast mode [ 91.938356][ T5905] tipc: Resetting bearer [ 91.986889][ T5904] tipc: Resetting bearer [ 92.112805][ T5904] tipc: Disabling bearer [ 92.165433][ T5924] tipc: Started in network mode [ 92.170379][ T5924] tipc: Node identity ea5ff369fc86, cluster identity 4711 [ 92.198656][ T23] cfg80211: failed to load regulatory.db [ 92.204603][ T5924] tipc: Enabled bearer , priority 0 [ 92.224928][ T5924] syzkaller0: entered promiscuous mode [ 92.230476][ T5924] syzkaller0: entered allmulticast mode [ 92.339855][ T5924] tipc: Resetting bearer [ 92.385487][ T5923] tipc: Resetting bearer [ 92.443650][ T5923] tipc: Disabling bearer [ 92.890883][ T5950] Zero length message leads to an empty skb [ 92.991611][ T5798] Bluetooth: hci2: command tx timeout [ 92.992198][ T5795] Bluetooth: hci0: command tx timeout [ 93.072301][ T5795] Bluetooth: hci3: command tx timeout [ 93.081897][ T5795] Bluetooth: hci1: command tx timeout [ 93.392889][ T5967] netlink: 'syz.3.30': attribute type 10 has an invalid length. [ 93.400749][ T5967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.30'. [ 93.466955][ T5967] team0: Port device geneve0 added [ 94.708565][ T6015] tipc: Started in network mode [ 94.713727][ T6015] tipc: Node identity becae7ef96ae, cluster identity 4711 [ 94.721127][ T6015] tipc: Enabled bearer , priority 0 [ 94.734599][ T6015] syzkaller0: entered promiscuous mode [ 94.741022][ T6015] syzkaller0: entered allmulticast mode [ 94.763230][ T6015] tipc: Resetting bearer [ 94.779617][ T6013] tipc: Resetting bearer [ 94.830634][ T6013] tipc: Disabling bearer [ 94.869050][ T6017] netlink: 'syz.3.54': attribute type 10 has an invalid length. [ 94.880666][ T6017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.54'. [ 95.145279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.582455][ T6050] netlink: 56 bytes leftover after parsing attributes in process `syz.2.65'. [ 96.593069][ T6049] netlink: 'syz.3.67': attribute type 10 has an invalid length. [ 96.601358][ T6049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.67'. [ 96.886069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.894888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.954778][ T6054] tipc: Started in network mode [ 96.959970][ T6054] tipc: Node identity d6e2e543ca43, cluster identity 4711 [ 96.968707][ T6054] tipc: Enabled bearer , priority 0 [ 96.982284][ T6054] syzkaller0: entered promiscuous mode [ 96.989874][ T6054] syzkaller0: entered allmulticast mode [ 97.008377][ T6054] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 97.623442][ T6065] tipc: Resetting bearer [ 97.769504][ T6068] tipc: Enabled bearer , priority 0 [ 97.797512][ T6068] syzkaller0: entered promiscuous mode [ 97.809330][ T6068] syzkaller0: entered allmulticast mode [ 97.828292][ T6069] netlink: 'syz.0.76': attribute type 10 has an invalid length. [ 97.848788][ T6069] netlink: 40 bytes leftover after parsing attributes in process `syz.0.76'. [ 97.908683][ T6069] team0: Port device geneve0 added [ 97.997255][ T6053] tipc: Resetting bearer [ 98.029897][ T6053] tipc: Disabling bearer [ 98.060979][ T6067] tipc: Resetting bearer [ 98.205095][ T6067] tipc: Disabling bearer [ 100.147535][ T6104] tipc: Enabled bearer , priority 0 [ 100.157957][ T6104] syzkaller0: entered promiscuous mode [ 100.169443][ T6104] syzkaller0: entered allmulticast mode [ 100.221706][ T6103] tipc: Resetting bearer [ 100.359539][ T6103] tipc: Disabling bearer [ 100.777292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.879561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.130506][ T6118] netlink: 'syz.3.94': attribute type 10 has an invalid length. [ 102.179351][ T6118] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 102.199878][ T6133] netlink: 48 bytes leftover after parsing attributes in process `syz.1.101'. [ 102.254961][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 102.651550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.884350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.893390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.902174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.926757][ T6133] syz.1.101 (6133) used greatest stack depth: 20520 bytes left [ 103.030020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.139110][ T6145] tipc: Enabled bearer , priority 0 [ 103.173209][ T6148] syzkaller0: entered promiscuous mode [ 103.178842][ T6148] syzkaller0: entered allmulticast mode [ 103.376439][ T6142] tipc: Resetting bearer [ 103.459063][ T6142] tipc: Disabling bearer [ 103.779579][ T6164] netlink: 56 bytes leftover after parsing attributes in process `syz.3.108'. [ 104.359888][ T6172] netlink: 48 bytes leftover after parsing attributes in process `syz.1.114'. [ 104.714215][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 105.466049][ T6186] tipc: Enabled bearer , priority 0 [ 105.474630][ T6186] syzkaller0: entered promiscuous mode [ 105.480147][ T6186] syzkaller0: entered allmulticast mode [ 105.558238][ T6185] tipc: Resetting bearer [ 105.687482][ T6185] tipc: Disabling bearer [ 105.951936][ T6196] tipc: Enabled bearer , priority 0 [ 106.033688][ T6196] syzkaller0: entered promiscuous mode [ 106.106138][ T6196] syzkaller0: entered allmulticast mode [ 106.263057][ T6204] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 106.285717][ T6204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.125'. [ 106.831877][ T6204] team0: Port device geneve0 added [ 106.872251][ T6195] tipc: Resetting bearer [ 106.884015][ T6204] syz.2.125 (6204) used greatest stack depth: 20232 bytes left [ 106.972664][ T6195] tipc: Disabling bearer [ 107.406111][ T6221] tipc: Enabled bearer , priority 0 [ 107.486795][ T6226] syzkaller0: entered promiscuous mode [ 107.539745][ T6226] syzkaller0: entered allmulticast mode [ 108.103439][ T6220] tipc: Resetting bearer [ 108.613104][ T8] tipc: Node number set to 2364111170 [ 108.759919][ T6220] tipc: Disabling bearer [ 109.682228][ T6242] tipc: Enabled bearer , priority 0 [ 109.690806][ T6242] syzkaller0: entered promiscuous mode [ 109.696800][ T6242] syzkaller0: entered allmulticast mode [ 109.732831][ T6241] tipc: Resetting bearer [ 109.799001][ T6241] tipc: Disabling bearer [ 110.127573][ T6253] netlink: 'syz.2.142': attribute type 10 has an invalid length. [ 110.138732][ T6253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.142'. [ 110.188400][ T6252] syzkaller1: entered promiscuous mode [ 110.202699][ T6252] syzkaller1: entered allmulticast mode [ 110.621808][ T6266] tipc: Enabled bearer , priority 0 [ 110.645980][ T6266] syzkaller0: entered promiscuous mode [ 110.663879][ T6266] syzkaller0: entered allmulticast mode [ 110.718316][ T6265] tipc: Resetting bearer [ 110.779587][ T6265] tipc: Disabling bearer [ 111.592522][ T6285] netlink: 'syz.2.156': attribute type 10 has an invalid length. [ 111.605750][ T6285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.156'. [ 111.973403][ T6295] tipc: Enabled bearer , priority 0 [ 111.992849][ T6295] tipc: Resetting bearer [ 112.034207][ T6294] tipc: Disabling bearer [ 112.877498][ T6318] netlink: 'syz.3.171': attribute type 10 has an invalid length. [ 112.885798][ T6318] netlink: 40 bytes leftover after parsing attributes in process `syz.3.171'. [ 113.054027][ T6322] tipc: Enabled bearer , priority 0 [ 113.079821][ T6322] tipc: Resetting bearer [ 113.105138][ T6321] tipc: Disabling bearer [ 113.574038][ T6339] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.212054][ T6353] tipc: Enabled bearer , priority 0 [ 115.341684][ T6353] tipc: Resetting bearer [ 115.573056][ T6351] tipc: Disabling bearer [ 116.685851][ T6375] tipc: Enabled bearer , priority 0 [ 116.910655][ T6369] tipc: Resetting bearer [ 116.987807][ T6366] tipc: Disabling bearer [ 117.522942][ T6392] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 118.771327][ T6402] syzkaller0: entered promiscuous mode [ 118.790637][ T6402] syzkaller0: entered allmulticast mode [ 120.290397][ T6417] netlink: 'syz.1.202': attribute type 10 has an invalid length. [ 120.326692][ T6417] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 121.788206][ T6440] syzkaller0: entered promiscuous mode [ 121.795404][ T6440] syzkaller0: entered allmulticast mode [ 122.140314][ T6451] netlink: 'syz.3.217': attribute type 10 has an invalid length. [ 122.180566][ T6451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.217'. [ 122.233401][ T6453] syzkaller0: entered promiscuous mode [ 122.239047][ T6453] syzkaller0: entered allmulticast mode [ 123.620005][ T6477] syzkaller0: entered promiscuous mode [ 123.636926][ T6477] syzkaller0: entered allmulticast mode [ 123.697775][ T6481] syzkaller0: entered promiscuous mode [ 123.711514][ T6481] syzkaller0: entered allmulticast mode [ 123.799545][ T6485] netlink: 56 bytes leftover after parsing attributes in process `syz.3.233'. [ 125.212921][ T6513] syzkaller0: entered promiscuous mode [ 125.227703][ T6513] syzkaller0: entered allmulticast mode [ 125.451481][ T6521] tipc: Enabled bearer , priority 0 [ 125.469296][ T6523] syzkaller0: entered promiscuous mode [ 125.485505][ T6523] syzkaller0: entered allmulticast mode [ 125.527437][ T6521] syzkaller0: entered promiscuous mode [ 125.549991][ T6521] syzkaller0: entered allmulticast mode [ 125.588796][ T6521] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 126.303465][ T6525] tipc: Resetting bearer [ 126.574439][ T6520] tipc: Resetting bearer [ 126.626702][ T6520] tipc: Disabling bearer [ 127.163497][ T6555] syzkaller0: entered promiscuous mode [ 127.169046][ T6555] syzkaller0: entered allmulticast mode [ 127.297495][ T6561] netlink: 'syz.3.263': attribute type 10 has an invalid length. [ 127.322157][ T6564] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 127.334345][ T6561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.263'. [ 127.406907][ T6562] netlink: 56 bytes leftover after parsing attributes in process `syz.0.261'. [ 128.542858][ T6582] tipc: Enabled bearer , priority 0 [ 128.550676][ T6582] syzkaller0: entered promiscuous mode [ 128.568639][ T6582] syzkaller0: entered allmulticast mode [ 128.586606][ T6582] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 128.631030][ T6586] syzkaller0: entered promiscuous mode [ 128.640223][ T6586] syzkaller0: entered allmulticast mode [ 128.767026][ T6588] syzkaller0: entered promiscuous mode [ 128.775081][ T6588] syzkaller0: entered allmulticast mode [ 128.884851][ T6590] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 128.892768][ T6590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.274'. [ 129.176714][ T6595] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 129.408988][ T6596] tipc: Resetting bearer [ 129.599407][ T5877] tipc: Node number set to 677701615 [ 129.929745][ T6581] tipc: Resetting bearer [ 130.019079][ T6581] tipc: Disabling bearer [ 130.533537][ T6619] netlink: 'syz.0.285': attribute type 10 has an invalid length. [ 130.541473][ T6619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.285'. [ 131.235494][ T6633] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 132.158262][ T6648] netlink: 56 bytes leftover after parsing attributes in process `syz.2.293'. [ 132.393146][ T6656] netlink: 'syz.1.298': attribute type 10 has an invalid length. [ 132.401074][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.298'. [ 132.449282][ T6656] team0: Port device geneve0 added [ 133.173211][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.201294][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.023978][ T6678] syzkaller1: entered promiscuous mode [ 134.029785][ T6678] syzkaller1: entered allmulticast mode [ 134.177143][ T6686] netlink: 56 bytes leftover after parsing attributes in process `syz.2.309'. [ 134.583956][ T6698] tipc: Enabled bearer , priority 0 [ 134.614792][ T6698] syzkaller0: entered promiscuous mode [ 134.620348][ T6698] syzkaller0: entered allmulticast mode [ 134.677362][ T6698] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 134.764338][ T6706] syzkaller1: entered promiscuous mode [ 134.769888][ T6706] syzkaller1: entered allmulticast mode [ 135.444971][ T6707] tipc: Resetting bearer [ 135.627960][ T6697] tipc: Resetting bearer [ 135.658760][ T6697] tipc: Disabling bearer [ 135.687465][ T6717] tipc: Enabled bearer , priority 0 [ 135.761623][ T6717] tipc: Resetting bearer [ 135.836840][ T6716] tipc: Disabling bearer [ 135.914951][ T6723] tipc: Enabled bearer , priority 0 [ 135.964408][ T6726] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 136.267400][ T6723] tipc: Resetting bearer [ 136.328827][ T6727] netlink: 56 bytes leftover after parsing attributes in process `syz.3.323'. [ 136.456041][ T6722] tipc: Disabling bearer [ 137.922484][ T6750] tipc: Enabled bearer , priority 0 [ 138.167829][ T6749] tipc: Resetting bearer [ 138.218877][ T6756] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 138.284619][ T6747] tipc: Disabling bearer [ 138.499379][ T6760] tipc: Enabled bearer , priority 0 [ 138.693971][ T6758] tipc: Resetting bearer [ 139.042696][ T6757] tipc: Disabling bearer [ 139.300728][ T6773] netlink: 56 bytes leftover after parsing attributes in process `syz.1.341'. [ 139.488922][ T6776] tipc: Enabled bearer , priority 0 [ 139.507159][ T6776] syzkaller0: entered promiscuous mode [ 139.521086][ T6776] syzkaller0: entered allmulticast mode [ 139.541688][ T6776] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 140.162889][ T6784] tipc: Resetting bearer [ 140.204521][ T6775] tipc: Resetting bearer [ 140.226897][ T6775] tipc: Disabling bearer [ 141.221030][ T6796] tipc: Enabled bearer , priority 0 [ 141.300233][ T6796] tipc: Resetting bearer [ 141.382099][ T6794] tipc: Disabling bearer [ 141.793063][ T6812] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 142.584027][ T6815] tipc: Enabled bearer , priority 0 [ 142.634537][ T6814] tipc: Resetting bearer [ 142.680265][ T6813] tipc: Disabling bearer [ 142.895060][ T6823] tipc: Enabled bearer , priority 0 [ 143.031066][ T6824] syzkaller0: entered promiscuous mode [ 143.094635][ T6824] syzkaller0: entered allmulticast mode [ 143.308217][ T6823] tipc: Resetting bearer [ 143.331841][ T6818] tipc: Resetting bearer [ 143.385798][ T6818] tipc: Disabling bearer [ 144.136922][ T6842] tipc: Enabled bearer , priority 0 [ 144.164281][ T6842] tipc: Resetting bearer [ 144.198951][ T6841] tipc: Disabling bearer [ 144.898745][ T6853] tipc: Enabled bearer , priority 0 [ 144.943201][ T6853] tipc: Resetting bearer [ 145.132632][ T6852] tipc: Disabling bearer [ 147.002666][ T6869] tipc: Enabled bearer , priority 0 [ 147.035712][ T6869] tipc: Resetting bearer [ 147.067726][ T6867] tipc: Disabling bearer [ 147.294325][ T6872] netlink: 48 bytes leftover after parsing attributes in process `syz.0.377'. [ 147.885988][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 148.108022][ T6886] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 149.590653][ T6894] tipc: Enabled bearer , priority 0 [ 149.627697][ T6895] syzkaller0: entered promiscuous mode [ 149.684291][ T6895] syzkaller0: entered allmulticast mode [ 149.836512][ T6892] tipc: Resetting bearer [ 149.974272][ T6891] tipc: Resetting bearer [ 150.368611][ T6891] tipc: Disabling bearer [ 150.845117][ T6924] tipc: Enabling of bearer rejected, failed to enable media [ 151.691716][ T6940] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 153.912722][ T6944] syzkaller1: entered promiscuous mode [ 153.918268][ T6944] syzkaller1: entered allmulticast mode [ 154.502011][ T6952] tipc: Enabled bearer , priority 0 [ 154.522162][ T6952] syzkaller0: entered promiscuous mode [ 154.549587][ T6952] syzkaller0: entered allmulticast mode [ 154.575476][ T6957] tipc: Enabling of bearer rejected, failed to enable media [ 154.592569][ T6952] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 154.663756][ T6952] tipc: Resetting bearer [ 154.691495][ T6951] tipc: Resetting bearer [ 154.769772][ T6951] tipc: Disabling bearer [ 155.034295][ T6970] netlink: 48 bytes leftover after parsing attributes in process `syz.3.401'. [ 155.557990][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 155.910202][ T6982] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 158.731086][ T7000] tipc: Enabling of bearer rejected, failed to enable media [ 158.936247][ T7011] netlink: 'syz.2.413': attribute type 10 has an invalid length. [ 159.007380][ T7011] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 161.480061][ T7034] netlink: 48 bytes leftover after parsing attributes in process `syz.2.420'. [ 161.812207][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 162.846959][ T7054] netlink: 56 bytes leftover after parsing attributes in process `syz.1.425'. [ 162.988557][ T7057] syzkaller1: entered promiscuous mode [ 163.032529][ T7057] syzkaller1: entered allmulticast mode [ 164.283681][ T7068] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 164.885136][ T7081] netlink: 48 bytes leftover after parsing attributes in process `syz.1.435'. [ 165.579573][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 165.609240][ T7086] netlink: 56 bytes leftover after parsing attributes in process `syz.0.436'. [ 165.827723][ T7096] syzkaller1: entered promiscuous mode [ 165.833411][ T7096] syzkaller1: entered allmulticast mode [ 167.008091][ T7120] netlink: 48 bytes leftover after parsing attributes in process `syz.2.449'. [ 167.845334][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 167.879260][ T7125] netlink: 56 bytes leftover after parsing attributes in process `syz.3.450'. [ 168.166717][ T7136] syzkaller1: entered promiscuous mode [ 168.180330][ T7136] syzkaller1: entered allmulticast mode [ 168.773232][ T7152] tipc: Enabled bearer , priority 0 [ 168.781515][ T7152] syzkaller0: entered promiscuous mode [ 168.787152][ T7152] syzkaller0: entered allmulticast mode [ 168.802959][ T7152] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 168.936094][ T7155] netlink: 56 bytes leftover after parsing attributes in process `syz.2.461'. [ 169.393727][ T7158] tipc: Resetting bearer [ 169.658905][ T7151] tipc: Resetting bearer [ 169.728428][ T7151] tipc: Disabling bearer [ 169.962348][ T7165] netlink: 48 bytes leftover after parsing attributes in process `syz.0.465'. [ 170.297484][ T7171] syzkaller1: entered promiscuous mode [ 170.303157][ T7171] syzkaller1: entered allmulticast mode [ 170.452362][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 171.228769][ T7185] netlink: 56 bytes leftover after parsing attributes in process `syz.0.470'. [ 172.234809][ T7204] syzkaller1: entered promiscuous mode [ 172.240366][ T7204] syzkaller1: entered allmulticast mode [ 172.258017][ T7206] netlink: 48 bytes leftover after parsing attributes in process `syz.3.478'. [ 172.520216][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 174.126893][ T7226] netlink: 56 bytes leftover after parsing attributes in process `syz.2.483'. [ 174.514941][ T7236] syzkaller1: entered promiscuous mode [ 174.520552][ T7236] syzkaller1: entered allmulticast mode [ 174.742916][ T7239] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 176.384831][ T7252] netlink: 56 bytes leftover after parsing attributes in process `syz.1.494'. [ 177.722187][ T7265] netlink: 'syz.0.499': attribute type 10 has an invalid length. [ 177.754514][ T7265] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 178.067984][ T7275] netlink: 56 bytes leftover after parsing attributes in process `syz.0.503'. [ 178.410763][ T7281] netlink: 'syz.2.506': attribute type 10 has an invalid length. [ 178.430158][ T7281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.506'. [ 179.852124][ T7300] netlink: 56 bytes leftover after parsing attributes in process `syz.0.513'. [ 180.643401][ T7310] netlink: 48 bytes leftover after parsing attributes in process `syz.2.516'. [ 181.037906][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 181.419661][ T7321] netlink: 'syz.0.519': attribute type 10 has an invalid length. [ 181.429367][ T7321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.519'. [ 181.646351][ T7328] netlink: 56 bytes leftover after parsing attributes in process `syz.2.523'. [ 181.757064][ T7333] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 184.559718][ T7358] netlink: 'syz.3.531': attribute type 10 has an invalid length. [ 184.574687][ T7358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.531'. [ 185.071257][ T7366] netlink: 56 bytes leftover after parsing attributes in process `syz.0.534'. [ 185.757993][ T7373] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 186.658854][ T7384] netlink: 'syz.3.540': attribute type 10 has an invalid length. [ 186.667009][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.540'. [ 187.755728][ T7399] netlink: 56 bytes leftover after parsing attributes in process `syz.3.546'. [ 190.110856][ T7412] syzkaller1: entered promiscuous mode [ 190.127159][ T7412] syzkaller1: entered allmulticast mode [ 190.346139][ T7415] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 190.526282][ T7417] netlink: 'syz.0.552': attribute type 10 has an invalid length. [ 190.549081][ T7417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.552'. [ 191.150379][ T7426] netlink: 56 bytes leftover after parsing attributes in process `syz.2.556'. [ 191.609989][ T7433] tipc: Enabling of bearer rejected, failed to enable media [ 192.858664][ T7442] tipc: Enabled bearer , priority 0 [ 193.035115][ T7446] syzkaller0: entered promiscuous mode [ 193.152068][ T7446] syzkaller0: entered allmulticast mode [ 193.837891][ T7452] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 193.872347][ T5861] tipc: Node number set to 480372035 [ 194.432034][ T7446] tipc: Resetting bearer [ 194.493207][ T7462] netlink: 'syz.1.566': attribute type 10 has an invalid length. [ 194.515981][ T7462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.566'. [ 194.608881][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.615447][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.705765][ T7440] tipc: Resetting bearer [ 194.976634][ T7440] tipc: Disabling bearer [ 195.341949][ T7471] netlink: 56 bytes leftover after parsing attributes in process `syz.1.569'. [ 195.448525][ T7473] tipc: Enabled bearer , priority 0 [ 195.485182][ T7473] tipc: Resetting bearer [ 195.514239][ T7472] tipc: Disabling bearer [ 195.548355][ T7475] tipc: Enabled bearer , priority 0 [ 195.567766][ T7475] tipc: Resetting bearer [ 195.600182][ T7474] tipc: Disabling bearer [ 196.776488][ T7489] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 197.555590][ T7499] tipc: Enabling of bearer rejected, failed to enable media [ 198.657804][ T7503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.583'. [ 198.948622][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 199.756927][ T7522] tipc: Enabled bearer , priority 0 [ 199.810606][ T7522] tipc: Resetting bearer [ 199.899036][ T7520] tipc: Disabling bearer [ 200.318064][ T7527] syzkaller1: entered promiscuous mode [ 200.334540][ T7527] syzkaller1: entered allmulticast mode [ 200.442952][ T7531] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 201.100564][ T7537] syzkaller0: entered promiscuous mode [ 201.117091][ T7537] syzkaller0: entered allmulticast mode [ 202.613503][ T7547] netlink: 'syz.3.595': attribute type 10 has an invalid length. [ 202.634671][ T7547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.595'. [ 203.155861][ T7555] tipc: Enabled bearer , priority 0 [ 203.506341][ T7555] tipc: Resetting bearer [ 203.806616][ T7553] tipc: Disabling bearer [ 204.023955][ T7570] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 206.023476][ T7580] netlink: 48 bytes leftover after parsing attributes in process `syz.2.606'. [ 206.505846][ T7582] netlink: 56 bytes leftover after parsing attributes in process `syz.3.605'. [ 207.115577][ T7594] syzkaller1: entered promiscuous mode [ 207.137167][ T7594] syzkaller1: entered allmulticast mode [ 207.568658][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 207.576051][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 207.582796][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 207.588916][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 207.750857][ T7603] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 207.778757][ T7603] netlink: 40 bytes leftover after parsing attributes in process `syz.0.612'. [ 211.104582][ T7628] syzkaller0: entered promiscuous mode [ 211.110129][ T7628] syzkaller0: entered allmulticast mode [ 211.559425][ T7635] netlink: 56 bytes leftover after parsing attributes in process `syz.0.620'. [ 212.142906][ T7644] netlink: 48 bytes leftover after parsing attributes in process `syz.2.625'. [ 212.382924][ T7650] netlink: 'syz.0.627': attribute type 10 has an invalid length. [ 212.390872][ T7650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.627'. [ 213.832145][ T7665] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 214.703290][ T7674] syzkaller0: entered promiscuous mode [ 214.708837][ T7674] syzkaller0: entered allmulticast mode [ 214.716388][ T7676] netlink: 56 bytes leftover after parsing attributes in process `syz.2.636'. [ 214.767117][ T7678] netlink: 48 bytes leftover after parsing attributes in process `syz.1.637'. [ 215.070023][ T7681] tipc: Enabled bearer , priority 0 [ 215.305546][ T7685] syzkaller0: entered promiscuous mode [ 215.414789][ T7685] syzkaller0: entered allmulticast mode [ 215.591772][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 216.199073][ T7685] tipc: Resetting bearer [ 216.741401][ T7680] tipc: Resetting bearer [ 216.873914][ T7680] tipc: Disabling bearer [ 216.910061][ T7703] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 217.413712][ T7710] syzkaller0: entered promiscuous mode [ 217.419261][ T7710] syzkaller0: entered allmulticast mode [ 217.860553][ T7722] syzkaller0: entered promiscuous mode [ 217.866270][ T7722] syzkaller0: entered allmulticast mode [ 218.057873][ T7726] netlink: 48 bytes leftover after parsing attributes in process `syz.3.650'. [ 218.240800][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 218.846638][ T7729] syzkaller1: entered promiscuous mode [ 218.858599][ T7729] syzkaller1: entered allmulticast mode [ 219.102680][ T7748] tipc: Enabled bearer , priority 0 [ 219.113410][ T7748] syzkaller0: entered promiscuous mode [ 219.119938][ T7749] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 219.138503][ T7748] syzkaller0: entered allmulticast mode [ 219.499478][ T7754] syzkaller0: entered promiscuous mode [ 219.506776][ T7754] syzkaller0: entered allmulticast mode [ 219.710613][ T7756] tipc: Resetting bearer [ 219.928429][ T7746] tipc: Resetting bearer [ 219.978009][ T7746] tipc: Disabling bearer [ 220.026161][ T7762] netlink: 'syz.2.662': attribute type 10 has an invalid length. [ 220.036030][ T7762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.662'. [ 220.046636][ T7760] netlink: 56 bytes leftover after parsing attributes in process `syz.0.661'. [ 220.222586][ T7764] netlink: 48 bytes leftover after parsing attributes in process `syz.3.663'. [ 220.466182][ T7772] syzkaller1: entered promiscuous mode [ 220.471871][ T7772] syzkaller1: entered allmulticast mode [ 221.020959][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 221.433664][ T7782] syzkaller0: entered promiscuous mode [ 221.439377][ T7782] syzkaller0: entered allmulticast mode [ 222.196746][ T7791] tipc: Enabled bearer , priority 0 [ 222.209035][ T7791] syzkaller0: entered promiscuous mode [ 222.215218][ T7791] syzkaller0: entered allmulticast mode [ 222.731484][ T7799] netlink: 56 bytes leftover after parsing attributes in process `syz.1.674'. [ 222.813265][ T7800] tipc: Resetting bearer [ 223.039405][ T7788] tipc: Resetting bearer [ 223.122503][ T7788] tipc: Disabling bearer [ 224.226426][ T7810] syzkaller1: entered promiscuous mode [ 224.233282][ T7810] syzkaller1: entered allmulticast mode [ 224.475650][ T7817] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 227.491042][ T7841] netlink: 56 bytes leftover after parsing attributes in process `syz.3.688'. [ 228.092426][ T7825] netlink: 'syz.0.682': attribute type 10 has an invalid length. [ 228.759250][ T7853] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 229.994854][ T7862] syzkaller0: entered promiscuous mode [ 230.000497][ T7862] syzkaller0: entered allmulticast mode [ 230.243304][ T7866] syzkaller0: entered promiscuous mode [ 230.251371][ T7866] syzkaller0: entered allmulticast mode [ 230.258832][ T7864] netlink: 56 bytes leftover after parsing attributes in process `syz.0.697'. [ 231.484350][ T7879] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 231.538231][ T7878] tipc: Enabled bearer , priority 0 [ 231.561977][ T7878] syzkaller0: entered promiscuous mode [ 231.574596][ T7878] syzkaller0: entered allmulticast mode [ 232.402972][ T7882] tipc: Resetting bearer [ 232.539053][ T7876] tipc: Resetting bearer [ 232.715293][ T7876] tipc: Disabling bearer [ 232.736340][ T7890] netlink: 'syz.1.703': attribute type 10 has an invalid length. [ 232.941077][ T7894] syzkaller0: entered promiscuous mode [ 232.957092][ T7894] syzkaller0: entered allmulticast mode [ 232.988053][ T7896] netlink: 'syz.2.707': attribute type 10 has an invalid length. [ 232.997303][ T7896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.707'. [ 233.300462][ T7904] netlink: 56 bytes leftover after parsing attributes in process `syz.1.710'. [ 234.087134][ T7912] netlink: 48 bytes leftover after parsing attributes in process `syz.1.714'. [ 234.315943][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'. [ 234.542356][ T7922] netlink: 'syz.3.717': attribute type 10 has an invalid length. [ 234.566909][ T7922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.717'. [ 234.644867][ T7925] syzkaller1: entered promiscuous mode [ 234.650512][ T7925] syzkaller1: entered allmulticast mode [ 235.280157][ T7930] netlink: 'syz.1.719': attribute type 10 has an invalid length. [ 235.558437][ T7938] netlink: 56 bytes leftover after parsing attributes in process `syz.2.723'. [ 235.916724][ T7947] netlink: 48 bytes leftover after parsing attributes in process `syz.2.726'. [ 235.982969][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 236.099131][ T7953] netlink: 'syz.1.728': attribute type 10 has an invalid length. [ 236.107130][ T7953] netlink: 40 bytes leftover after parsing attributes in process `syz.1.728'. [ 236.456481][ T7962] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 237.248344][ T7970] netlink: 56 bytes leftover after parsing attributes in process `syz.1.734'. [ 237.711901][ T7984] syzkaller0: entered promiscuous mode [ 237.725793][ T7984] syzkaller0: entered allmulticast mode [ 237.816003][ T7975] netlink: 'syz.2.737': attribute type 10 has an invalid length. [ 238.700561][ T7997] syzkaller0: entered promiscuous mode [ 238.710245][ T7997] syzkaller0: entered allmulticast mode [ 239.180238][ T8003] __nla_validate_parse: 2 callbacks suppressed [ 239.180256][ T8003] netlink: 56 bytes leftover after parsing attributes in process `syz.2.747'. [ 239.752113][ T8009] netlink: 48 bytes leftover after parsing attributes in process `syz.2.749'. [ 239.850575][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 240.276231][ T8015] syzkaller0: entered promiscuous mode [ 240.284304][ T8015] syzkaller0: entered allmulticast mode [ 240.728966][ T8027] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 240.804034][ T8025] syzkaller1: entered promiscuous mode [ 240.813552][ T8025] syzkaller1: entered allmulticast mode [ 240.896640][ T8031] syzkaller0: entered promiscuous mode [ 240.907525][ T8031] syzkaller0: entered allmulticast mode [ 240.993086][ T8033] netlink: 56 bytes leftover after parsing attributes in process `syz.2.757'. [ 242.174767][ T8049] netlink: 48 bytes leftover after parsing attributes in process `syz.0.762'. [ 242.237818][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 242.500987][ T8054] syzkaller0: entered promiscuous mode [ 242.520469][ T8054] syzkaller0: entered allmulticast mode [ 243.942796][ T8064] syzkaller1: entered promiscuous mode [ 243.980459][ T8064] syzkaller1: entered allmulticast mode [ 244.577881][ T8078] netlink: 'syz.2.770': attribute type 10 has an invalid length. [ 244.593865][ T8078] netlink: 40 bytes leftover after parsing attributes in process `syz.2.770'. [ 244.617751][ T8082] netlink: 48 bytes leftover after parsing attributes in process `syz.3.772'. [ 245.039052][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 245.300636][ T8091] syzkaller0: entered promiscuous mode [ 245.316287][ T8091] syzkaller0: entered allmulticast mode [ 245.819241][ T8109] syzkaller1: entered promiscuous mode [ 245.825058][ T8109] syzkaller1: entered allmulticast mode [ 246.503253][ T8117] netlink: 'syz.1.782': attribute type 10 has an invalid length. [ 246.535113][ T8117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.782'. [ 246.609190][ T8111] netlink: 'syz.0.778': attribute type 10 has an invalid length. [ 247.323572][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 248.886847][ T8143] syzkaller1: entered promiscuous mode [ 248.894079][ T8143] syzkaller1: entered allmulticast mode [ 248.912245][ T8141] syzkaller0: entered promiscuous mode [ 248.917793][ T8141] syzkaller0: entered allmulticast mode [ 249.210848][ T8150] netlink: 'syz.1.792': attribute type 10 has an invalid length. [ 249.223484][ T8150] netlink: 40 bytes leftover after parsing attributes in process `syz.1.792'. [ 249.257158][ T8152] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 249.606493][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 250.951469][ T8168] netlink: 'syz.3.797': attribute type 10 has an invalid length. [ 252.692013][ T8193] syzkaller0: entered promiscuous mode [ 252.697511][ T8193] syzkaller0: entered allmulticast mode [ 254.885717][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 255.515067][ T8224] tipc: Enabled bearer , priority 0 [ 255.522839][ T8224] syzkaller0: entered promiscuous mode [ 255.528366][ T8224] syzkaller0: entered allmulticast mode [ 255.539564][ T8224] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 256.072240][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.078707][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.445358][ T8235] syzkaller0: entered promiscuous mode [ 256.499714][ T8235] syzkaller0: entered allmulticast mode [ 256.510882][ T8223] tipc: Resetting bearer [ 256.591385][ T8223] tipc: Disabling bearer [ 257.636738][ T8251] syzkaller1: entered promiscuous mode [ 257.642418][ T8251] syzkaller1: entered allmulticast mode [ 259.035529][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 259.781414][ T8266] syzkaller0: entered promiscuous mode [ 259.877147][ T8266] syzkaller0: entered allmulticast mode [ 260.096223][ T8271] tipc: Enabled bearer , priority 0 [ 260.133890][ T8271] syzkaller0: entered promiscuous mode [ 260.142609][ T8271] syzkaller0: entered allmulticast mode [ 260.235967][ T8271] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 260.691442][ T8280] syzkaller0: entered promiscuous mode [ 260.697009][ T8280] syzkaller0: entered allmulticast mode [ 260.735859][ T8273] netlink: 'syz.3.830': attribute type 10 has an invalid length. [ 260.985305][ T8267] tipc: Resetting bearer [ 261.074438][ T8267] tipc: Disabling bearer [ 261.127833][ T8284] syzkaller1: entered promiscuous mode [ 261.133669][ T8284] syzkaller1: entered allmulticast mode [ 262.141437][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 263.507608][ T8303] syzkaller0: entered promiscuous mode [ 263.531913][ T8303] syzkaller0: entered allmulticast mode [ 263.664828][ T8311] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.840' sets config #1 [ 263.790012][ T8315] syzkaller0: entered promiscuous mode [ 263.808762][ T8315] syzkaller0: entered allmulticast mode [ 264.018566][ T8317] tipc: Enabled bearer , priority 0 [ 264.034339][ T8317] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 264.271421][ T8321] netlink: 'syz.1.846': attribute type 10 has an invalid length. [ 264.291028][ T8321] netlink: 40 bytes leftover after parsing attributes in process `syz.1.846'. [ 264.606913][ T8319] tipc: Resetting bearer [ 264.856955][ T8316] tipc: Disabling bearer [ 267.418312][ T8340] syzkaller0: entered promiscuous mode [ 267.451211][ T8340] syzkaller0: entered allmulticast mode [ 268.799669][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 268.850947][ T8349] syzkaller0: entered promiscuous mode [ 268.879853][ T8349] syzkaller0: entered allmulticast mode [ 269.067558][ T8353] netlink: 'syz.2.856': attribute type 10 has an invalid length. [ 269.076237][ T8353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.856'. [ 269.437818][ T8359] tipc: Enabled bearer , priority 0 [ 269.623174][ T8359] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 270.563048][ T8364] tipc: Resetting bearer [ 270.813473][ T8358] tipc: Disabling bearer [ 271.783537][ T8385] netlink: 'syz.0.868': attribute type 10 has an invalid length. [ 271.792798][ T8385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.868'. [ 271.859526][ T8387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.867'. [ 272.021845][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 274.155012][ T8405] netlink: 'syz.3.873': attribute type 10 has an invalid length. [ 276.011759][ T8424] syzkaller1: entered promiscuous mode [ 276.017308][ T8424] syzkaller1: entered allmulticast mode [ 277.837128][ T8444] syzkaller0: entered promiscuous mode [ 277.871171][ T8444] syzkaller0: entered allmulticast mode [ 279.494520][ T8465] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.888' sets config #1 [ 280.052041][ T8472] syzkaller1: entered promiscuous mode [ 280.071991][ T8472] syzkaller1: entered allmulticast mode [ 280.243858][ T8467] netlink: 'syz.1.890': attribute type 10 has an invalid length. [ 283.619906][ T8492] syzkaller0: entered promiscuous mode [ 283.625674][ T8492] syzkaller0: entered allmulticast mode [ 283.769295][ T8495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.899'. [ 284.116275][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 284.129545][ T8500] netlink: 48 bytes leftover after parsing attributes in process `syz.1.900'. [ 284.508072][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 284.652096][ T8505] syzkaller1: entered promiscuous mode [ 284.659722][ T8505] syzkaller1: entered allmulticast mode [ 286.384001][ T8519] syzkaller0: entered promiscuous mode [ 286.389751][ T8519] syzkaller0: entered allmulticast mode [ 286.422550][ T8519] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 287.984093][ T8531] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 289.320568][ T8542] tipc: Enabling of bearer rejected, failed to enable media [ 289.341750][ T8542] syzkaller0: entered promiscuous mode [ 289.395103][ T8542] syzkaller0: entered allmulticast mode [ 290.127335][ T8550] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 290.692310][ T8553] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 291.970847][ T8562] syzkaller0: entered promiscuous mode [ 292.071900][ T8562] syzkaller0: entered allmulticast mode [ 292.172046][ T8562] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 293.602862][ T8566] sctp: [Deprecated]: syz.3.919 (pid 8566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.602862][ T8566] Use struct sctp_sack_info instead [ 293.860087][ T8582] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 293.962795][ T8578] tipc: Enabling of bearer rejected, failed to enable media [ 294.095433][ T8586] syzkaller0: entered promiscuous mode [ 294.136327][ T8586] syzkaller0: entered allmulticast mode [ 294.237017][ T8585] syzkaller0: entered promiscuous mode [ 294.334197][ T8585] syzkaller0: entered allmulticast mode [ 296.265492][ T8605] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 299.341155][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 299.521493][ T23] usb 4-1: device descriptor read/64, error -71 [ 299.851321][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 300.011336][ T23] usb 4-1: device descriptor read/64, error -71 [ 300.131680][ T23] usb usb4-port1: attempt power cycle [ 300.239790][ T8625] tipc: Enabling of bearer rejected, failed to enable media [ 300.269356][ T8625] syzkaller0: entered promiscuous mode [ 300.303887][ T8625] syzkaller0: entered allmulticast mode [ 301.133872][ T8635] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 303.793749][ T8653] syzkaller0: entered promiscuous mode [ 303.799297][ T8653] syzkaller0: entered allmulticast mode [ 305.958664][ T8671] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 307.330743][ T8680] netlink: 56 bytes leftover after parsing attributes in process `syz.1.948'. [ 308.250071][ T8683] netlink: 'syz.0.949': attribute type 10 has an invalid length. [ 309.337005][ T8701] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 310.322437][ T8705] tipc: Enabling of bearer rejected, failed to enable media [ 310.373126][ T8705] syzkaller0: entered promiscuous mode [ 310.385450][ T8705] syzkaller0: entered allmulticast mode [ 311.187900][ T8720] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 312.667271][ T8728] sctp: [Deprecated]: syz.3.961 (pid 8728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.667271][ T8728] Use struct sctp_sack_info instead [ 314.281552][ T8733] tipc: Enabling of bearer rejected, failed to enable media [ 314.292428][ T8733] syzkaller0: entered promiscuous mode [ 314.302525][ T8733] syzkaller0: entered allmulticast mode [ 314.535890][ T8736] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.963' sets config #1 [ 317.362175][ T8758] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 317.485962][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.492948][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.429163][ T966] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 320.701307][ T966] usb 3-1: device descriptor read/64, error -71 [ 321.284137][ T966] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 321.306443][ T8788] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 321.756297][ T8787] netlink: 56 bytes leftover after parsing attributes in process `syz.1.977'. [ 321.898256][ T8793] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 323.497141][ T8809] tipc: Enabling of bearer rejected, failed to enable media [ 323.512901][ T8809] syzkaller0: entered promiscuous mode [ 323.518570][ T8809] syzkaller0: entered allmulticast mode [ 324.227648][ T8818] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 328.041652][ T8842] tipc: Enabling of bearer rejected, failed to enable media [ 328.200107][ T8842] syzkaller0: entered promiscuous mode [ 328.206701][ T8842] syzkaller0: entered allmulticast mode [ 333.822970][ T8897] syzkaller0: entered promiscuous mode [ 333.833554][ T8897] syzkaller0: entered allmulticast mode [ 337.082092][ T8921] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1013'. [ 337.897717][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 340.321012][ T8961] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1021'. [ 342.032218][ T8981] netlink: 'syz.3.1024': attribute type 32 has an invalid length. [ 342.137801][ T8979] syzkaller1: entered promiscuous mode [ 342.157305][ T8979] syzkaller1: entered allmulticast mode [ 342.699079][ T8982] netlink: 'syz.1.1027': attribute type 10 has an invalid length. [ 344.363570][ T8999] syzkaller0: entered promiscuous mode [ 344.402043][ T8999] syzkaller0: entered allmulticast mode [ 344.734920][ T9006] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1034'. [ 344.802079][ T9010] syzkaller1: entered promiscuous mode [ 344.807637][ T9010] syzkaller1: entered allmulticast mode [ 346.083581][ T9028] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 347.678114][ T9039] syzkaller0: entered promiscuous mode [ 347.693464][ T9039] syzkaller0: entered allmulticast mode [ 348.977341][ T9042] netlink: 'syz.0.1046': attribute type 10 has an invalid length. [ 350.904179][ T9067] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 354.120988][ T9087] syzkaller0: entered promiscuous mode [ 354.126862][ T9087] syzkaller0: entered allmulticast mode [ 355.106446][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 355.342825][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 355.379771][ T27] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 355.389990][ T27] usb 3-1: config 0 has no interface number 0 [ 355.413861][ T27] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 355.423687][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.430212][ T9090] sctp: [Deprecated]: syz.3.1061 (pid 9090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.430212][ T9090] Use struct sctp_sack_info instead [ 355.431858][ T27] usb 3-1: Product: syz [ 355.431896][ T27] usb 3-1: Manufacturer: syz [ 355.431911][ T27] usb 3-1: SerialNumber: syz [ 355.479386][ T27] usb 3-1: config 0 descriptor?? [ 355.574519][ T27] hub 3-1:0.145: bad descriptor, ignoring hub [ 355.580925][ T27] hub: probe of 3-1:0.145 failed with error -5 [ 355.596642][ T27] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input5 [ 355.956871][ T9097] netlink: 'syz.0.1062': attribute type 10 has an invalid length. [ 356.123356][ T27] usb 3-1: USB disconnect, device number 4 [ 358.133442][ T9111] syzkaller1: entered promiscuous mode [ 358.162567][ T9111] syzkaller1: entered allmulticast mode [ 359.636326][ T9131] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 360.654898][ T9129] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 360.730960][ T9136] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1074' sets config #1 [ 363.204028][ T9157] syzkaller1: entered promiscuous mode [ 363.209715][ T9157] syzkaller1: entered allmulticast mode [ 367.245596][ T9186] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1088'. [ 367.410129][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 368.123480][ T9193] syzkaller1: entered promiscuous mode [ 368.188545][ T9193] syzkaller1: entered allmulticast mode [ 368.435697][ T9196] tipc: Enabling of bearer rejected, failed to enable media [ 372.661326][ T9234] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 373.870223][ T9230] netlink: 'syz.1.1099': attribute type 10 has an invalid length. [ 374.117142][ T5835] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 374.139768][ T9245] syzkaller1: entered promiscuous mode [ 374.145538][ T9245] syzkaller1: entered allmulticast mode [ 374.331306][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 374.358617][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 374.584039][ T5835] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 374.855466][ T5835] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 374.967405][ T5835] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 374.977382][ T5834] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 374.991420][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.002332][ T5835] usb 3-1: Product: syz [ 375.006777][ T5835] usb 3-1: Manufacturer: syz [ 375.018611][ T5835] usb 3-1: SerialNumber: syz [ 375.046335][ T5835] usb 3-1: config 0 descriptor?? [ 375.059104][ T9244] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 375.352487][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 375.425814][ T5834] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 375.437546][ T5834] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 375.456589][ T5835] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 375.465091][ T5834] usb 1-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 375.646901][ T5835] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 375.675003][ T5834] usb 1-1: config 127 has no interface number 0 [ 375.681690][ T5835] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 375.688377][ T9244] netlink: 'syz.2.1100': attribute type 5 has an invalid length. [ 375.699554][ T5834] usb 1-1: config 127 interface 171 has no altsetting 0 [ 375.707513][ T5835] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 375.727544][ T5835] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 375.748295][ T5834] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 375.761644][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.787211][ T5834] usb 1-1: Product: syz [ 375.794077][ T5834] usb 1-1: Manufacturer: syz [ 375.804933][ T9244] ip6erspan0: entered promiscuous mode [ 375.810523][ T5834] usb 1-1: SerialNumber: syz [ 376.475068][ T9267] netlink: 'syz.3.1106': attribute type 32 has an invalid length. [ 376.751390][ T5834] usb 1-1: USB disconnect, device number 2 [ 376.765066][ T9244] bridge0: port 3(macsec0) entered blocking state [ 376.791308][ T9244] bridge0: port 3(macsec0) entered disabled state [ 376.804973][ T9244] macsec0: entered allmulticast mode [ 376.830550][ T9244] veth1_macvtap: entered allmulticast mode [ 376.935840][ T9244] macsec0: entered promiscuous mode [ 376.943767][ T9244] bridge0: port 3(macsec0) entered blocking state [ 376.951299][ T9244] bridge0: port 3(macsec0) entered forwarding state [ 378.397537][ T6139] usb 3-1: USB disconnect, device number 5 [ 378.439668][ T6139] mcba_usb 3-1:0.0 can0: device disconnected [ 378.599147][ T9292] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1111'. [ 378.920448][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.921422][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 378.926997][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.448920][ T9301] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 380.582085][ T9306] syzkaller1: entered promiscuous mode [ 380.587627][ T9306] syzkaller1: entered allmulticast mode [ 382.501890][ T9330] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 383.457859][ T9336] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1121'. [ 383.583800][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'. [ 384.956323][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 385.421151][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 385.443432][ T8] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 385.466857][ T8] usb 1-1: config 0 has no interface number 0 [ 385.488936][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 385.505242][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.534674][ T8] usb 1-1: Product: syz [ 385.541329][ T8] usb 1-1: Manufacturer: syz [ 385.545981][ T8] usb 1-1: SerialNumber: syz [ 385.563545][ T8] usb 1-1: config 0 descriptor?? [ 385.577709][ T8] hub 1-1:0.145: bad descriptor, ignoring hub [ 385.596989][ T8] hub: probe of 1-1:0.145 failed with error -5 [ 385.645314][ T8] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.145/input/input6 [ 385.941857][ T9367] syzkaller1: entered promiscuous mode [ 385.949643][ T9367] syzkaller1: entered allmulticast mode [ 386.551461][ T9371] syzkaller0: entered promiscuous mode [ 386.560599][ T9371] syzkaller0: entered allmulticast mode [ 389.447339][ T9387] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1134'. [ 389.573946][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'. [ 391.539350][ T5835] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 391.677569][ T9410] syzkaller0: entered promiscuous mode [ 391.683481][ T9410] syzkaller0: entered allmulticast mode [ 391.762070][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 391.774502][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 391.784381][ T5835] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 391.800623][ T5835] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 391.855419][ T5835] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 391.903534][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.964130][ T5835] usb 4-1: Product: syz [ 391.998945][ T5835] usb 4-1: Manufacturer: syz [ 392.053387][ T5835] usb 4-1: SerialNumber: syz [ 392.102112][ T5877] usb 1-1: USB disconnect, device number 3 [ 392.158099][ T5835] usb 4-1: config 0 descriptor?? [ 392.215879][ T9403] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 393.132894][ T5835] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 393.189870][ T9403] netlink: 'syz.3.1145': attribute type 5 has an invalid length. [ 393.216637][ T5835] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 393.248064][ T9403] ip6erspan0: entered promiscuous mode [ 393.257023][ T5835] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 393.285696][ T5835] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 393.294782][ T9415] syzkaller0: entered promiscuous mode [ 393.296235][ T5835] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 393.300612][ T9415] syzkaller0: entered allmulticast mode [ 393.507023][ T9417] syzkaller1: entered promiscuous mode [ 393.514485][ T9417] syzkaller1: entered allmulticast mode [ 394.455897][ T9403] bridge0: port 3(macsec0) entered blocking state [ 394.472970][ T9403] bridge0: port 3(macsec0) entered disabled state [ 394.548157][ T9403] macsec0: entered allmulticast mode [ 394.642012][ T9403] veth1_macvtap: entered allmulticast mode [ 394.692447][ T9403] macsec0: entered promiscuous mode [ 394.704857][ T9403] bridge0: port 3(macsec0) entered blocking state [ 394.711481][ T9403] bridge0: port 3(macsec0) entered forwarding state [ 394.939309][ T9432] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1146'. [ 395.200110][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 396.677411][ T966] usb 4-1: USB disconnect, device number 5 [ 396.725300][ T966] mcba_usb 4-1:0.0 can0: device disconnected [ 397.100791][ T9464] syzkaller0: entered promiscuous mode [ 397.163055][ T9464] syzkaller0: entered allmulticast mode [ 397.193645][ T9458] sctp: [Deprecated]: syz.0.1149 (pid 9458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.193645][ T9458] Use struct sctp_sack_info instead [ 397.519465][ T9473] netlink: 'syz.2.1153': attribute type 32 has an invalid length. [ 398.080922][ T9479] syzkaller1: entered promiscuous mode [ 398.095651][ T9479] syzkaller1: entered allmulticast mode [ 398.325348][ T9483] syzkaller0: entered promiscuous mode [ 398.341636][ T9483] syzkaller0: entered allmulticast mode [ 400.297168][ T9515] sctp: [Deprecated]: syz.2.1161 (pid 9515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.297168][ T9515] Use struct sctp_sack_info instead [ 402.242474][ T9535] netlink: 'syz.1.1166': attribute type 32 has an invalid length. [ 404.398386][ T9538] sctp: [Deprecated]: syz.0.1167 (pid 9538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.398386][ T9538] Use struct sctp_sack_info instead [ 404.635214][ T9553] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 405.601866][ T9557] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1174'. [ 405.858113][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'. [ 406.098888][ T9566] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 406.693932][ T9576] tipc: Enabling of bearer rejected, failed to enable media [ 407.328954][ T9585] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1179'. [ 407.394840][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 407.854012][ T9593] tipc: Enabling of bearer rejected, failed to enable media [ 411.711966][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 412.146058][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 412.389648][ T8] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 412.421301][ T8] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 412.461346][ T8] usb 3-1: config 127 has no interface number 1 [ 412.488159][ T8] usb 3-1: config 127 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.518698][ T8] usb 3-1: config 127 interface 171 has no altsetting 0 [ 412.528807][ T8] usb 3-1: config 127 interface 0 has no altsetting 0 [ 412.578738][ T8] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 412.591522][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.601452][ T8] usb 3-1: Product: syz [ 412.610588][ T8] usb 3-1: Manufacturer: syz [ 412.627486][ T8] usb 3-1: SerialNumber: syz [ 415.508980][ T8] xr_serial 3-1:127.171: xr_serial converter detected [ 415.549094][ T8] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 415.584730][ T8] xr_serial: probe of ttyUSB0 failed with error -71 [ 415.616368][ T8] usb 3-1: USB disconnect, device number 6 [ 415.622517][ T9649] tipc: Enabling of bearer rejected, failed to enable media [ 415.637365][ T8] xr_serial 3-1:127.171: device disconnected [ 418.496070][ T9668] netlink: 'syz.0.1197': attribute type 32 has an invalid length. [ 418.992982][ T9676] sctp: [Deprecated]: syz.2.1198 (pid 9676) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.992982][ T9676] Use struct sctp_sack_info instead [ 420.084154][ T9691] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 421.586665][ T9702] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1205' sets config #1 [ 421.828672][ T9698] sctp: [Deprecated]: syz.2.1206 (pid 9698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.828672][ T9698] Use struct sctp_sack_info instead [ 423.315517][ T9721] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 424.421221][ T5877] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 424.566748][ T9732] syzkaller1: entered promiscuous mode [ 424.578151][ T9732] syzkaller1: entered allmulticast mode [ 424.631313][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 424.639922][ T5877] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 424.680524][ T5877] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 424.821124][ T5877] usb 2-1: config 127 has no interface number 1 [ 424.827537][ T5877] usb 2-1: config 127 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 424.877456][ T5877] usb 2-1: config 127 interface 171 has no altsetting 0 [ 425.202891][ T5877] usb 2-1: config 127 interface 0 has no altsetting 0 [ 425.296430][ T5877] usb 2-1: string descriptor 0 read error: -71 [ 425.321855][ T5877] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 425.356993][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.487328][ T5877] usb 2-1: can't set config #127, error -71 [ 425.664849][ T5877] usb 2-1: USB disconnect, device number 2 [ 426.935219][ T9752] atomic_op ffff88807e5ed998 conn xmit_atomic 0000000000000000 [ 430.976848][ T9771] sctp: [Deprecated]: syz.0.1225 (pid 9771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.976848][ T9771] Use struct sctp_sack_info instead [ 431.378465][ T9790] netlink: 'syz.0.1230': attribute type 32 has an invalid length. [ 433.269558][ T9807] atomic_op ffff88807a63a198 conn xmit_atomic 0000000000000000 [ 434.938241][ T9822] syzkaller1: entered promiscuous mode [ 434.958956][ T9822] syzkaller1: entered allmulticast mode [ 435.894436][ T9826] sctp: [Deprecated]: syz.2.1238 (pid 9826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.894436][ T9826] Use struct sctp_sack_info instead [ 436.259970][ T9840] atomic_op ffff88807e1d3998 conn xmit_atomic 0000000000000000 [ 436.662836][ T9843] tipc: Enabled bearer , priority 0 [ 436.713700][ T9843] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 438.005524][ T9855] tipc: Resetting bearer [ 438.072745][ T9842] tipc: Disabling bearer [ 440.387691][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.496713][ T9875] atomic_op ffff888021d9a998 conn xmit_atomic 0000000000000000 [ 440.517608][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.326624][ T9882] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1253' sets config #1 [ 443.714965][ T9888] sctp: [Deprecated]: syz.2.1256 (pid 9888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.714965][ T9888] Use struct sctp_sack_info instead [ 444.026513][ T9903] sctp: [Deprecated]: syz.0.1259 (pid 9903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.026513][ T9903] Use struct sctp_sack_info instead [ 444.325181][ T9902] tipc: Enabling of bearer rejected, failed to enable media [ 445.541508][ T9918] atomic_op ffff88805df3f198 conn xmit_atomic 0000000000000000 [ 446.776863][ T9932] atomic_op ffff88807d926998 conn xmit_atomic 0000000000000000 [ 447.570152][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1262'. [ 449.363502][ T5835] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 449.681340][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 449.914058][ T5835] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 449.955093][ T5835] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 450.011255][ T5835] usb 3-1: config 127 has no interface number 1 [ 450.090224][ T5835] usb 3-1: config 127 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.151654][ T5835] usb 3-1: config 127 interface 171 has no altsetting 0 [ 450.182889][ T5835] usb 3-1: config 127 interface 0 has no altsetting 0 [ 450.204392][ T5835] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 450.224271][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.240817][ T5835] usb 3-1: Product: syz [ 450.249510][ T5835] usb 3-1: Manufacturer: syz [ 450.269871][ T5835] usb 3-1: SerialNumber: syz [ 450.743347][ T5835] usb 3-1: can't set config #127, error -71 [ 450.754189][ T5835] usb 3-1: USB disconnect, device number 7 [ 450.886493][ T9962] syzkaller0: entered promiscuous mode [ 450.902694][ T9962] syzkaller0: entered allmulticast mode [ 451.109895][ T9966] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1271' sets config #1 [ 451.115783][ T9962] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 453.952362][ T9989] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1277'. [ 455.305170][ T9993] sctp: [Deprecated]: syz.3.1279 (pid 9993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.305170][ T9993] Use struct sctp_sack_info instead [ 456.680797][T10011] atomic_op ffff88807a677198 conn xmit_atomic 0000000000000000 [ 459.500046][T10024] syzkaller0: entered promiscuous mode [ 459.522235][T10024] syzkaller0: entered allmulticast mode [ 459.650424][T10016] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 460.942639][T10040] tipc: Enabled bearer , priority 0 [ 460.980409][T10040] syzkaller0: entered promiscuous mode [ 460.990190][T10040] syzkaller0: entered allmulticast mode [ 461.028316][T10040] tipc: Resetting bearer [ 461.063509][T10039] tipc: Resetting bearer [ 461.106628][T10039] tipc: Disabling bearer [ 462.085159][T10038] netlink: 'syz.0.1288': attribute type 72 has an invalid length. [ 462.276103][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1288'. [ 462.276976][T10042] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 463.298657][T10060] syz.1.1294[10060]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 463.525653][T10060] loop1: detected capacity change from 0 to 32768 [ 463.534346][T10060] XFS: ikeep mount option is deprecated. [ 463.582853][T10060] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 463.956696][T10060] XFS (loop1): Ending clean mount [ 463.970849][T10060] XFS (loop1): Quotacheck needed: Please wait. [ 464.056236][T10060] XFS (loop1): Quotacheck: Done. [ 465.284124][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 466.380850][T10089] syzkaller0: entered promiscuous mode [ 466.401172][T10089] syzkaller0: entered allmulticast mode [ 466.429594][T10089] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 466.459930][T10091] tipc: Enabled bearer , priority 0 [ 466.469442][T10091] syzkaller0: entered promiscuous mode [ 466.475187][T10091] syzkaller0: entered allmulticast mode [ 466.507844][T10091] tipc: Resetting bearer [ 466.518886][T10090] tipc: Resetting bearer [ 466.553714][T10090] tipc: Disabling bearer [ 468.907372][T10109] atomic_op ffff88807a638998 conn xmit_atomic 0000000000000000 [ 470.015921][T10115] loop3: detected capacity change from 0 to 32768 [ 470.023126][T10115] XFS: ikeep mount option is deprecated. [ 470.231914][T10115] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 470.679797][T10115] XFS (loop3): Ending clean mount [ 470.688551][T10115] XFS (loop3): Quotacheck needed: Please wait. [ 470.786561][T10115] XFS (loop3): Quotacheck: Done. [ 471.443278][T10114] sctp: [Deprecated]: syz.1.1307 (pid 10114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.443278][T10114] Use struct sctp_sack_info instead [ 471.661771][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 473.161242][T10149] atomic_op ffff88801c3e4198 conn xmit_atomic 0000000000000000 [ 474.403328][T10160] netlink: 'syz.3.1311': attribute type 32 has an invalid length. [ 474.881868][T10164] syzkaller0: entered promiscuous mode [ 474.947712][T10164] syzkaller0: entered allmulticast mode [ 475.157772][T10164] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 475.748485][T10172] loop0: detected capacity change from 0 to 32768 [ 475.755660][T10172] XFS: ikeep mount option is deprecated. [ 475.769588][T10173] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1317' sets config #1 [ 475.827523][T10172] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 476.267663][T10172] XFS (loop0): Ending clean mount [ 476.282125][T10172] XFS (loop0): Quotacheck needed: Please wait. [ 476.611059][T10184] netlink: 'syz.3.1320': attribute type 32 has an invalid length. [ 476.719292][T10172] XFS (loop0): Quotacheck: Done. [ 477.459299][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 478.463649][T10195] loop2: detected capacity change from 0 to 32768 [ 478.470813][T10195] XFS: ikeep mount option is deprecated. [ 478.543713][T10195] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 479.318248][T10195] XFS (loop2): Ending clean mount [ 479.326429][T10195] XFS (loop2): Quotacheck needed: Please wait. [ 479.400548][T10195] XFS (loop2): Quotacheck: Done. [ 480.844217][T10225] syzkaller0: entered promiscuous mode [ 480.855979][T10225] syzkaller0: entered allmulticast mode [ 481.027655][ T5789] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 481.041573][T10225] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 483.132063][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1331'. [ 483.650338][T10253] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 485.838296][T10262] sctp: [Deprecated]: syz.3.1339 (pid 10262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 485.838296][T10262] Use struct sctp_sack_info instead [ 486.843737][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 488.825271][T10289] tipc: Enabled bearer , priority 0 [ 488.997193][T10286] netlink: 'syz.2.1347': attribute type 32 has an invalid length. [ 489.023908][T10293] syzkaller0: entered promiscuous mode [ 489.057985][T10293] syzkaller0: entered allmulticast mode [ 489.285534][T10289] tipc: Resetting bearer [ 489.861542][T10288] tipc: Resetting bearer [ 490.004532][T10288] tipc: Disabling bearer [ 491.995106][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'. [ 492.111547][T10310] sctp: [Deprecated]: syz.3.1355 (pid 10310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.111547][T10310] Use struct sctp_sack_info instead [ 493.223689][T10329] loop0: detected capacity change from 0 to 32768 [ 493.232112][T10329] XFS: ikeep mount option is deprecated. [ 493.285540][T10329] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 493.792720][T10329] XFS (loop0): Ending clean mount [ 493.805550][T10329] XFS (loop0): Quotacheck needed: Please wait. [ 493.998586][T10329] XFS (loop0): Quotacheck: Done. [ 494.178908][T10344] loop1: detected capacity change from 0 to 2048 [ 494.319787][T10344] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.546919][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 495.571854][T10350] tipc: Enabled bearer , priority 0 [ 495.585111][T10350] syzkaller0: entered promiscuous mode [ 495.592001][T10350] syzkaller0: entered allmulticast mode [ 495.609982][T10350] tipc: Resetting bearer [ 495.619846][T10349] tipc: Resetting bearer [ 495.710855][T10349] tipc: Disabling bearer [ 495.990145][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 496.239269][T10362] netlink: 'syz.1.1367': attribute type 32 has an invalid length. [ 497.245003][T10369] atomic_op ffff88807e0c0998 conn xmit_atomic 0000000000000000 [ 497.266903][T10367] syzkaller0: entered promiscuous mode [ 497.297088][T10367] syzkaller0: entered allmulticast mode [ 497.421301][T10367] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 498.548565][T10379] loop3: detected capacity change from 0 to 2048 [ 499.454791][T10378] sched: RT throttling activated [ 499.485604][T10379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 501.143317][T10377] loop0: detected capacity change from 0 to 32768 [ 501.154865][T10377] XFS: ikeep mount option is deprecated. [ 501.206866][T10377] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 501.407070][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 501.460531][T10377] XFS (loop0): Ending clean mount [ 501.503362][T10377] XFS (loop0): Quotacheck needed: Please wait. [ 501.595027][T10377] XFS (loop0): Quotacheck: Done. [ 501.707717][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 501.796005][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.802506][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.824323][T10424] atomic_op ffff88807a63b998 conn xmit_atomic 0000000000000000 [ 506.139813][T10447] tipc: Enabled bearer , priority 0 [ 506.527323][T10447] syzkaller0: entered promiscuous mode [ 506.537474][T10447] syzkaller0: entered allmulticast mode [ 506.669387][T10447] tipc: Resetting bearer [ 506.703522][T10445] sctp: [Deprecated]: syz.1.1386 (pid 10445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.703522][T10445] Use struct sctp_sack_info instead [ 506.746374][T10446] tipc: Resetting bearer [ 506.776805][T10446] tipc: Disabling bearer [ 507.642974][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'. [ 512.729030][T10499] sctp: [Deprecated]: syz.1.1400 (pid 10499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.729030][T10499] Use struct sctp_sack_info instead [ 513.049836][T10506] loop0: detected capacity change from 0 to 2048 [ 514.490560][T10506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 516.300233][T10513] loop2: detected capacity change from 0 to 32768 [ 516.307490][T10513] XFS: ikeep mount option is deprecated. [ 516.355348][T10513] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 516.689467][T10513] XFS (loop2): Ending clean mount [ 516.703307][T10513] XFS (loop2): Quotacheck needed: Please wait. [ 517.681693][T10531] loop3: detected capacity change from 0 to 32768 [ 517.688848][T10531] XFS: ikeep mount option is deprecated. [ 517.720430][T10513] XFS (loop2): Quotacheck: Done. [ 517.786493][T10531] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 518.095898][T10538] loop1: detected capacity change from 0 to 32768 [ 518.103037][T10538] XFS: ikeep mount option is deprecated. [ 518.419865][T10538] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 518.492276][T10531] XFS (loop3): Ending clean mount [ 518.501394][T10531] XFS (loop3): Quotacheck needed: Please wait. [ 519.097532][T10531] XFS (loop3): Quotacheck: Done. [ 519.879874][ T5789] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 519.911486][T10538] XFS (loop1): Ending clean mount [ 520.068968][T10538] XFS (loop1): Quotacheck needed: Please wait. [ 520.512440][T10538] XFS (loop1): Quotacheck: Done. [ 521.271820][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 521.369544][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 525.783396][T10590] tipc: Enabled bearer , priority 0 [ 525.802844][T10590] syzkaller0: entered promiscuous mode [ 525.808474][T10590] syzkaller0: entered allmulticast mode [ 525.880553][T10590] tipc: Resetting bearer [ 525.897550][T10589] tipc: Resetting bearer [ 525.966152][T10598] loop1: detected capacity change from 0 to 2048 [ 527.617016][T10599] loop2: detected capacity change from 0 to 2048 [ 527.625738][ T5834] tipc: Node number set to 383382377 [ 528.487597][T10598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.497036][T10599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.814100][T10589] tipc: Disabling bearer [ 529.048193][T10603] sctp: [Deprecated]: syz.0.1420 (pid 10603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.048193][T10603] Use struct sctp_sack_info instead [ 533.401170][T10636] loop0: detected capacity change from 0 to 32768 [ 533.408341][T10636] XFS: ikeep mount option is deprecated. [ 533.436074][T10636] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 533.456933][T10639] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1432'. [ 533.823552][T10636] XFS (loop0): Ending clean mount [ 533.832415][T10636] XFS (loop0): Quotacheck needed: Please wait. [ 534.124346][T10636] XFS (loop0): Quotacheck: Done. [ 534.324596][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 534.976555][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 537.065545][T10672] loop0: detected capacity change from 0 to 32768 [ 537.089104][T10672] XFS: ikeep mount option is deprecated. [ 537.152346][T10672] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 537.401050][T10672] XFS (loop0): Ending clean mount [ 537.411726][T10672] XFS (loop0): Quotacheck needed: Please wait. [ 537.556130][T10672] XFS (loop0): Quotacheck: Done. [ 538.318321][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 539.977233][T10702] sctp: [Deprecated]: syz.2.1443 (pid 10702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.977233][T10702] Use struct sctp_sack_info instead [ 541.105131][T10709] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 545.972196][T10732] sctp: [Deprecated]: syz.0.1452 (pid 10732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.972196][T10732] Use struct sctp_sack_info instead [ 546.560145][T10742] sctp: [Deprecated]: syz.1.1454 (pid 10742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.560145][T10742] Use struct sctp_sack_info instead [ 546.741804][T10744] tipc: Enabled bearer , priority 0 [ 546.790178][T10744] syzkaller0: entered promiscuous mode [ 546.804427][T10744] syzkaller0: entered allmulticast mode [ 546.898376][T10744] tipc: Resetting bearer [ 546.936702][T10743] tipc: Resetting bearer [ 546.976125][T10743] tipc: Disabling bearer [ 547.102755][T10757] loop1: detected capacity change from 0 to 2048 [ 547.141596][T10757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 550.322569][T10764] netlink: 'syz.0.1460': attribute type 32 has an invalid length. [ 551.565688][T10781] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1464'. [ 551.967773][T10787] loop0: detected capacity change from 0 to 2048 [ 552.028294][T10787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.908065][T10809] atomic_op ffff8880780d0998 conn xmit_atomic 0000000000000000 [ 557.967653][T10826] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 559.247178][T10827] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1475'. [ 559.546729][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 563.204545][T10852] loop0: detected capacity change from 0 to 32768 [ 563.211892][T10852] XFS: ikeep mount option is deprecated. [ 563.244864][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.251383][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.280360][T10852] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 563.928901][T10852] XFS (loop0): Ending clean mount [ 563.937816][T10852] XFS (loop0): Quotacheck needed: Please wait. [ 564.361951][T10852] XFS (loop0): Quotacheck: Done. [ 565.364024][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 569.776698][T10905] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 570.742906][T10910] sctp: [Deprecated]: syz.1.1495 (pid 10910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 570.742906][T10910] Use struct sctp_sack_info instead [ 571.708165][T10914] netlink: 'syz.0.1496': attribute type 32 has an invalid length. [ 572.406586][T10907] sctp: [Deprecated]: syz.3.1494 (pid 10907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.406586][T10907] Use struct sctp_sack_info instead [ 574.009831][T10928] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 574.909507][T10932] loop0: detected capacity change from 0 to 32768 [ 574.916778][T10932] XFS: ikeep mount option is deprecated. [ 575.151093][T10932] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 575.717713][T10932] XFS (loop0): Ending clean mount [ 575.744426][T10932] XFS (loop0): Quotacheck needed: Please wait. [ 575.838320][T10932] XFS (loop0): Quotacheck: Done. [ 577.345532][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 578.276723][T10966] sctp: [Deprecated]: syz.3.1508 (pid 10966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 578.276723][T10966] Use struct sctp_sack_info instead [ 578.754956][T10979] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 585.689078][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 587.769666][T11025] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1523' sets config #1 [ 592.597371][T11035] loop0: detected capacity change from 0 to 32768 [ 592.604809][T11035] XFS: ikeep mount option is deprecated. [ 592.651185][T11059] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1532' sets config #1 [ 592.757347][T11035] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 592.999255][T11035] XFS (loop0): Ending clean mount [ 593.029255][T11035] XFS (loop0): Quotacheck needed: Please wait. [ 593.221169][T11035] XFS (loop0): Quotacheck: Done. [ 593.388374][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 596.997291][T11088] loop2: detected capacity change from 0 to 2048 [ 597.049521][T11088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.561667][T11086] sctp: [Deprecated]: syz.0.1537 (pid 11086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.561667][T11086] Use struct sctp_sack_info instead [ 598.398628][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.095326][T11116] loop2: detected capacity change from 0 to 2048 [ 600.133382][T11114] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1544' sets config #1 [ 600.237501][T11116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.363386][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.051428][T11160] loop1: detected capacity change from 0 to 2048 [ 607.629170][T11160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 607.764232][T11162] loop2: detected capacity change from 0 to 2048 [ 607.859290][T11162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.759105][T11170] loop1: detected capacity change from 0 to 2048 [ 610.302016][T11170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 610.399494][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.412369][T11172] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1557'. [ 610.761716][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'. [ 615.433012][T11199] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1564'. [ 616.350928][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'. [ 616.431690][T11206] loop3: detected capacity change from 0 to 2048 [ 616.520701][T11206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.520600][T11218] loop1: detected capacity change from 0 to 32768 [ 617.527905][T11218] XFS: ikeep mount option is deprecated. [ 617.632205][T11218] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 617.721143][T11221] sctp: [Deprecated]: syz.0.1566 (pid 11221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.721143][T11221] Use struct sctp_sack_info instead [ 618.050748][T11218] XFS (loop1): Ending clean mount [ 618.060672][T11218] XFS (loop1): Quotacheck needed: Please wait. [ 618.153719][T11218] XFS (loop1): Quotacheck: Done. [ 618.173284][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.620814][T11237] loop3: detected capacity change from 0 to 32768 [ 620.627998][T11237] XFS: ikeep mount option is deprecated. [ 620.645091][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 620.733181][T11237] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 621.033291][T11237] XFS (loop3): Ending clean mount [ 621.041841][T11237] XFS (loop3): Quotacheck needed: Please wait. [ 621.169380][T11237] XFS (loop3): Quotacheck: Done. [ 622.748877][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 622.821636][T11253] loop2: detected capacity change from 0 to 2048 [ 622.946968][T11253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.702262][T11258] syzkaller0: entered promiscuous mode [ 623.707808][T11258] syzkaller0: entered allmulticast mode [ 623.767254][T11258] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 623.796876][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.246522][T11265] loop0: detected capacity change from 0 to 32768 [ 624.253874][T11265] XFS: ikeep mount option is deprecated. [ 624.482797][T11265] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 624.634908][T11265] XFS (loop0): Ending clean mount [ 624.650312][T11265] XFS (loop0): Quotacheck needed: Please wait. [ 624.675934][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.682444][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.850482][T11265] XFS (loop0): Quotacheck: Done. [ 625.413993][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 628.727443][T11291] loop0: detected capacity change from 0 to 2048 [ 628.986958][T11291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.041453][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.589838][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 630.838981][T11314] loop0: detected capacity change from 0 to 2048 [ 630.892354][T11314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.729097][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.615751][T11333] loop2: detected capacity change from 0 to 32768 [ 632.622988][T11333] XFS: ikeep mount option is deprecated. [ 632.681486][T11333] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 632.791414][T11333] XFS (loop2): Ending clean mount [ 632.798609][T11333] XFS (loop2): Quotacheck needed: Please wait. [ 632.827544][T11333] XFS (loop2): Quotacheck: Done. [ 633.405745][T11347] atomic_op ffff8880248fc998 conn xmit_atomic 0000000000000000 [ 633.576294][ T5789] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 634.367923][T11349] sctp: [Deprecated]: syz.3.1592 (pid 11349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.367923][T11349] Use struct sctp_sack_info instead [ 634.912865][T11357] atomic_op ffff88805bec0198 conn xmit_atomic 0000000000000000 [ 635.932284][T11368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1597'. [ 636.336083][T11366] sctp: [Deprecated]: syz.2.1597 (pid 11366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.336083][T11366] Use struct sctp_sack_info instead [ 636.561272][T11372] atomic_op ffff88807e0c0998 conn xmit_atomic 0000000000000000 [ 636.598689][T11374] loop2: detected capacity change from 0 to 2048 [ 636.651213][T11374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.390168][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.427547][T11389] loop1: detected capacity change from 0 to 1024 [ 638.436038][T11384] loop3: detected capacity change from 0 to 2048 [ 638.695023][T11384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 639.141511][T11397] warning: `syz.1.1604' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 640.052552][T11404] loop0: detected capacity change from 0 to 1024 [ 640.859459][T11408] loop2: detected capacity change from 0 to 32768 [ 640.866706][T11408] XFS: ikeep mount option is deprecated. [ 640.923716][T11408] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 641.116149][T11408] XFS (loop2): Ending clean mount [ 641.125926][T11408] XFS (loop2): Quotacheck needed: Please wait. [ 642.029171][T11408] XFS (loop2): Quotacheck: Done. [ 642.722042][ T5789] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 646.356729][T11442] loop2: detected capacity change from 0 to 2048 [ 646.440709][T11442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.063734][T11448] loop3: detected capacity change from 0 to 2048 [ 647.113919][T11448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.923559][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.010812][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.098140][T11457] loop2: detected capacity change from 0 to 2048 [ 648.137783][T11457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.929884][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.242654][ T5893] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 649.821033][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 649.836106][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 649.848705][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 649.859135][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 649.880459][ T5893] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 649.897177][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.905766][ T5893] usb 4-1: Product: syz [ 649.910366][ T5893] usb 4-1: Manufacturer: syz [ 649.918963][ T5893] usb 4-1: SerialNumber: syz [ 649.929139][ T5893] usb 4-1: config 0 descriptor?? [ 649.939477][T11464] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 649.992658][ T5893] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 650.009718][ T5893] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 650.032102][ T5893] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 650.049763][ T5893] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 650.063455][ T5893] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 650.364164][T11464] netlink: 'syz.3.1621': attribute type 5 has an invalid length. [ 650.660466][T11482] loop0: detected capacity change from 0 to 32768 [ 650.667814][T11482] XFS: ikeep mount option is deprecated. [ 650.717934][T11482] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 650.940917][T11482] XFS (loop0): Ending clean mount [ 650.949709][T11482] XFS (loop0): Quotacheck needed: Please wait. [ 650.991323][T11482] XFS (loop0): Quotacheck: Done. [ 652.780157][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 652.847647][ T5835] usb 4-1: USB disconnect, device number 6 [ 652.946042][ T5835] mcba_usb 4-1:0.0 can0: device disconnected [ 653.303422][T11514] loop3: detected capacity change from 0 to 32768 [ 653.310580][T11514] XFS: ikeep mount option is deprecated. [ 653.346611][T11510] loop2: detected capacity change from 0 to 2048 [ 653.584317][T11514] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 653.748645][T11514] XFS (loop3): Ending clean mount [ 653.781507][T11514] XFS (loop3): Quotacheck needed: Please wait. [ 653.807259][T11510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.009304][T11514] XFS (loop3): Quotacheck: Done. [ 654.745325][T11543] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1629' sets config #1 [ 655.458795][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 655.722604][T11550] sctp: [Deprecated]: syz.1.1636 (pid 11550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.722604][T11550] Use struct sctp_sack_info instead [ 656.845712][T11558] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1637' sets config #1 [ 657.154265][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.381167][T11561] loop2: detected capacity change from 0 to 2048 [ 657.511475][T11561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.654553][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.512561][T11585] atomic_op ffff8880786bf198 conn xmit_atomic 0000000000000000 [ 661.027036][T11590] loop3: detected capacity change from 0 to 2048 [ 661.276712][T11590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 662.307763][T11601] loop0: detected capacity change from 0 to 2048 [ 662.326882][T11601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.619259][T11606] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1649'. [ 663.270560][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'. [ 663.589658][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.283945][T11622] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1651' sets config #1 [ 665.310180][T11626] loop1: detected capacity change from 0 to 2048 [ 665.643635][T11626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.247493][T11632] loop3: detected capacity change from 0 to 32768 [ 666.254728][T11632] XFS: ikeep mount option is deprecated. [ 666.522444][T11632] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 666.731369][T11632] XFS (loop3): Ending clean mount [ 666.745839][T11632] XFS (loop3): Quotacheck needed: Please wait. [ 666.796229][T11632] XFS (loop3): Quotacheck: Done. [ 666.812022][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.705599][T11644] loop1: detected capacity change from 0 to 32768 [ 667.712808][T11644] XFS: ikeep mount option is deprecated. [ 667.782841][T11644] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 667.848844][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 668.544315][T11644] XFS (loop1): Ending clean mount [ 668.557178][T11644] XFS (loop1): Quotacheck needed: Please wait. [ 668.795555][T11644] XFS (loop1): Quotacheck: Done. [ 668.889476][T11662] fuse: Bad value for 'fd' [ 670.349688][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 670.827628][T11671] loop3: detected capacity change from 0 to 2048 [ 670.850779][T11671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.094546][T11680] loop1: detected capacity change from 0 to 2048 [ 672.145270][T11680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.887114][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.330501][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.375207][T11689] loop3: detected capacity change from 0 to 2048 [ 674.412771][T11689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.047737][T11696] tipc: Enabling of bearer rejected, failed to enable media [ 675.089163][T11696] syzkaller0: entered promiscuous mode [ 675.113854][T11696] syzkaller0: entered allmulticast mode [ 675.252507][T11697] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 676.169246][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.694817][T11714] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1674' sets config #1 [ 677.983120][T11717] atomic_op ffff888025a1f198 conn xmit_atomic 0000000000000000 [ 678.027193][T11712] loop1: detected capacity change from 0 to 32768 [ 678.046017][T11712] XFS: ikeep mount option is deprecated. [ 678.052772][T11712] XFS: ikeep mount option is deprecated. [ 678.058799][T11712] XFS: noikeep mount option is deprecated. [ 679.080896][T11712] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 681.268969][T11741] loop2: detected capacity change from 0 to 512 [ 681.274441][T11712] XFS (loop1): Ending clean mount [ 681.375617][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 681.465549][T11741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 681.481507][T11741] ext4 filesystem being mounted at /464/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 682.678070][T11748] loop1: detected capacity change from 0 to 164 [ 683.588185][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 683.703156][T11752] netlink: 'syz.1.1681': attribute type 10 has an invalid length. [ 684.028339][T11755] tipc: Enabling of bearer rejected, failed to enable media [ 684.307351][T11755] syzkaller0: entered promiscuous mode [ 684.329044][T11755] syzkaller0: entered allmulticast mode [ 684.401193][T11763] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 686.117621][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.124093][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.371125][ T5893] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 688.562473][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 689.034909][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 689.051058][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 689.060773][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 689.074840][ T5893] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 689.084830][T11798] atomic_op ffff888030e1c998 conn xmit_atomic 0000000000000000 [ 689.101063][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.109130][ T5893] usb 4-1: Product: syz [ 689.113457][ T5893] usb 4-1: Manufacturer: syz [ 689.118460][ T5893] usb 4-1: SerialNumber: syz [ 689.127422][ T5893] usb 4-1: config 0 descriptor?? [ 689.451858][T11803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 689.706889][ T5893] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 689.731073][ T5893] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 689.752765][ T5893] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 689.758701][ T5893] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 689.792905][ T5893] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 689.911178][T11803] netlink: 'syz.3.1693': attribute type 5 has an invalid length. [ 689.952215][T11812] tipc: Enabling of bearer rejected, failed to enable media [ 689.978217][T11812] syzkaller0: entered promiscuous mode [ 689.991069][T11812] syzkaller0: entered allmulticast mode [ 690.901459][T11812] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 692.101823][ T27] usb 4-1: USB disconnect, device number 7 [ 692.116241][ T27] mcba_usb 4-1:0.0 can0: device disconnected [ 694.627403][T11851] loop3: detected capacity change from 0 to 512 [ 694.745197][T11851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 694.791179][T11851] ext4 filesystem being mounted at /415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 696.523501][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 698.068897][T11898] tipc: Enabling of bearer rejected, failed to enable media [ 698.082670][T11898] syzkaller0: entered promiscuous mode [ 698.088272][T11898] syzkaller0: entered allmulticast mode [ 698.104014][T11898] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 700.360444][T11911] netlink: 'syz.3.1716': attribute type 10 has an invalid length. [ 702.390855][T11941] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1724'. [ 703.857911][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'. [ 705.770318][T11965] tipc: Enabling of bearer rejected, failed to enable media [ 705.797358][T11965] syzkaller0: entered promiscuous mode [ 705.831130][T11965] syzkaller0: entered allmulticast mode [ 706.446791][T11965] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 707.562858][T11981] netlink: 'syz.3.1731': attribute type 10 has an invalid length. [ 709.011568][T11995] loop1: detected capacity change from 0 to 2048 [ 709.058473][T11995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.304029][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.005272][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1739'. [ 711.298564][T12018] loop2: detected capacity change from 0 to 164 [ 714.832472][T12029] syzkaller0: entered promiscuous mode [ 714.838016][T12029] syzkaller0: entered allmulticast mode [ 714.926199][T12031] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 715.141801][T12036] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1746'. [ 715.513075][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'. [ 718.615580][T12080] loop2: detected capacity change from 0 to 512 [ 719.845269][T12080] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1753: casefold flag without casefold feature [ 719.873936][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1752'. [ 719.905481][T12080] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1753: couldn't read orphan inode 15 (err -117) [ 719.930421][T12080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.622154][T12080] process 'syz.2.1753' launched './file0' with NULL argv: empty string added [ 720.906090][T12095] loop0: detected capacity change from 0 to 2048 [ 720.964855][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.967645][T12095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.188655][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.275373][T12114] loop1: detected capacity change from 0 to 512 [ 722.382520][T12114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 722.502294][T12114] ext4 filesystem being mounted at /438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 723.984661][T12128] atomic_op ffff88805bfc9998 conn xmit_atomic 0000000000000000 [ 724.520155][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 726.536186][T12140] atomic_op ffff88807c83d198 conn xmit_atomic 0000000000000000 [ 726.632911][T12146] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1765'. [ 727.152747][T12148] loop3: detected capacity change from 0 to 2048 [ 727.165294][T12148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 727.234724][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 727.322028][T12156] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1767'. [ 727.493772][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1767'. [ 728.074116][T12165] atomic_op ffff88807c83c198 conn xmit_atomic 0000000000000000 [ 728.252797][T12171] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1771'. [ 728.369490][T12174] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1772'. [ 728.772794][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1772'. [ 728.911933][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1771'. [ 728.963860][T12185] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1773'. [ 729.681382][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'. [ 730.828941][T12183] loop0: detected capacity change from 0 to 2048 [ 730.944401][ T9623] udevd[9623]: incorrect nilfs2 checksum on /dev/loop0 [ 731.062645][T12183] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 731.140132][ T9623] udevd[9623]: incorrect nilfs2 checksum on /dev/loop0 [ 731.385799][T12215] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 732.790259][ C1] ------------[ cut here ]------------ [ 732.796231][ C1] WARNING: CPU: 1 PID: 12219 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 732.806606][ C1] Modules linked in: [ 732.810624][ C1] CPU: 1 PID: 12219 Comm: syz.3.1780 Not tainted syzkaller #0 [ 732.818260][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 732.828561][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 732.835070][ C1] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6 [ 732.855172][ C1] RSP: 0000:ffffc9000c85f958 EFLAGS: 00010246 [ 732.861410][ C1] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffff888027bf8000 [ 732.869578][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 732.877796][ C1] RBP: 0000000000000000 R08: ffff888027bf8000 R09: 0000000000000003 [ 732.886139][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c97a3c0 [ 732.894344][ C1] R13: dffffc0000000000 R14: ffff88805c97a8b0 R15: ffff88805ccb0c24 [ 732.902526][ C1] FS: 000055556b1d5500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 732.911680][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 732.918402][ C1] CR2: 000000110c43fe46 CR3: 00000000307fe000 CR4: 00000000003506e0 [ 732.926679][ C1] Call Trace: [ 732.930050][ C1] [ 732.933168][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 732.938885][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 732.944525][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 732.951584][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 732.957278][ C1] __iterate_interfaces+0x243/0x500 [ 732.962639][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 732.969079][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 732.976485][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 732.982836][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 732.990037][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 732.995317][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 733.000592][ C1] ? hw_scan_work+0xf40/0xf40 [ 733.005342][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 733.010537][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 733.016709][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 733.021930][ C1] handle_softirqs+0x280/0x820 [ 733.026761][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 733.031605][ C1] ? do_softirq+0x180/0x180 [ 733.036165][ C1] __irq_exit_rcu+0xc7/0x190 [ 733.040815][ C1] ? irq_exit_rcu+0x20/0x20 [ 733.045394][ C1] irq_exit_rcu+0x9/0x20 [ 733.049715][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 733.055436][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 733.061543][ C1] RIP: 0033:0x7f0785867fd0 [ 733.066021][ C1] Code: 72 48 39 f0 0f 82 b9 00 00 00 48 39 f2 72 6e 41 0f 11 0c 24 48 8b 77 f8 48 89 f8 48 89 eb eb 12 66 2e 0f 1f 84 00 00 00 00 00 <48> 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 [ 733.085870][ C1] RSP: 002b:00007ffda0814560 EFLAGS: 00000297 [ 733.092034][ C1] RAX: 00007f07855328d0 RBX: 00007f0785530250 RCX: ffffffff8a5d8933 [ 733.100102][ C1] RDX: ffffffff8a5d8a27 RSI: ffffffff8a5d8a27 RDI: 00007f0785533dd0 [ 733.108178][ C1] RBP: 00007f078552d310 R08: 00007f0785530868 R09: 00007f0785bb2000 [ 733.116271][ C1] R10: 00007f07853ff008 R11: 0000000000000009 R12: 00007f078552d308 [ 733.124369][ C1] R13: 0000000000000017 R14: ffffffffffffffff R15: 00007f07853ff008 [ 733.132449][ C1] ? plist_del+0x2e3/0x3f0 [ 733.136974][ C1] ? plist_del+0x3d7/0x3f0 [ 733.141583][ C1] ? plist_del+0x3d7/0x3f0 [ 733.146082][ C1] [ 733.149159][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 733.156459][ C1] CPU: 1 PID: 12219 Comm: syz.3.1780 Not tainted syzkaller #0 [ 733.163940][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 733.174002][ C1] Call Trace: [ 733.177289][ C1] [ 733.180222][ C1] dump_stack_lvl+0x16c/0x230 [ 733.184974][ C1] ? show_regs_print_info+0x20/0x20 [ 733.190216][ C1] ? load_image+0x3b0/0x3b0 [ 733.195261][ C1] panic+0x2c0/0x710 [ 733.199322][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 733.204051][ C1] __warn+0x2e0/0x470 [ 733.208051][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 733.213805][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 733.219756][ C1] report_bug+0x2be/0x4f0 [ 733.224139][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 733.229888][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 733.235622][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 733.241354][ C1] handle_bug+0xcf/0x120 [ 733.245636][ C1] exc_invalid_op+0x1a/0x50 [ 733.250608][ C1] asm_exc_invalid_op+0x1a/0x20 [ 733.255478][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 733.261857][ C1] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6 [ 733.281480][ C1] RSP: 0000:ffffc9000c85f958 EFLAGS: 00010246 [ 733.287577][ C1] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffff888027bf8000 [ 733.295572][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 733.303556][ C1] RBP: 0000000000000000 R08: ffff888027bf8000 R09: 0000000000000003 [ 733.311531][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c97a3c0 [ 733.319530][ C1] R13: dffffc0000000000 R14: ffff88805c97a8b0 R15: ffff88805ccb0c24 [ 733.327512][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 733.333166][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 733.338919][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 733.344685][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 733.350265][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 733.355756][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 733.362547][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 733.368121][ C1] __iterate_interfaces+0x243/0x500 [ 733.373345][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 733.379590][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 733.386797][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 733.393050][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 733.400082][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 733.405301][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 733.410536][ C1] ? hw_scan_work+0xf40/0xf40 [ 733.415240][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 733.420379][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 733.426565][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 733.431699][ C1] handle_softirqs+0x280/0x820 [ 733.436474][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 733.441261][ C1] ? do_softirq+0x180/0x180 [ 733.445774][ C1] __irq_exit_rcu+0xc7/0x190 [ 733.450384][ C1] ? irq_exit_rcu+0x20/0x20 [ 733.454925][ C1] irq_exit_rcu+0x9/0x20 [ 733.459173][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 733.464831][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 733.470826][ C1] RIP: 0033:0x7f0785867fd0 [ 733.475261][ C1] Code: 72 48 39 f0 0f 82 b9 00 00 00 48 39 f2 72 6e 41 0f 11 0c 24 48 8b 77 f8 48 89 f8 48 89 eb eb 12 66 2e 0f 1f 84 00 00 00 00 00 <48> 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 [ 733.494883][ C1] RSP: 002b:00007ffda0814560 EFLAGS: 00000297 [ 733.501222][ C1] RAX: 00007f07855328d0 RBX: 00007f0785530250 RCX: ffffffff8a5d8933 [ 733.509196][ C1] RDX: ffffffff8a5d8a27 RSI: ffffffff8a5d8a27 RDI: 00007f0785533dd0 [ 733.517175][ C1] RBP: 00007f078552d310 R08: 00007f0785530868 R09: 00007f0785bb2000 [ 733.525148][ C1] R10: 00007f07853ff008 R11: 0000000000000009 R12: 00007f078552d308 [ 733.533120][ C1] R13: 0000000000000017 R14: ffffffffffffffff R15: 00007f07853ff008 [ 733.541100][ C1] ? plist_del+0x2e3/0x3f0 [ 733.545611][ C1] ? plist_del+0x3d7/0x3f0 [ 733.550031][ C1] ? plist_del+0x3d7/0x3f0 [ 733.554453][ C1] [ 733.557747][ C1] Kernel Offset: disabled [ 733.562214][ C1] Rebooting in 86400 seconds..