last executing test programs: 31m34.354384674s ago: executing program 32 (id=63): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000500)={0x0, 0x1, @raw_data=[0x8, 0x8, 0x9, 0x119, 0x5, 0x4, 0x6, 0x100, 0x800, 0xe9, 0x6fc4, 0x80000001, 0x3, 0x200, 0xf4a, 0x2840]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) stat(&(0x7f0000000280)='./file1\x00', &(0x7f0000000340)) mount$overlay(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) socket(0x1e, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 31m0.55889592s ago: executing program 33 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_getscheduler(0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) process_vm_writev(r0, &(0x7f0000000100)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, &(0x7f0000000400)=[{&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000002c0)=""/101, 0x65}, {0x0}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x4, 0x0) 21m43.812063236s ago: executing program 34 (id=1215): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000400000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0x23) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid={'resuid', 0x3d, r7}}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r9) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) 20m25.119607632s ago: executing program 35 (id=1360): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa8800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setreuid(0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) 16m34.597172961s ago: executing program 36 (id=1863): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0xfffff801, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) unshare(0x64000600) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ffc) 16m6.471461126s ago: executing program 37 (id=1909): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x7000000) 11m0.242156657s ago: executing program 7 (id=2554): mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x101091, 0x0) 10m59.169234163s ago: executing program 7 (id=2556): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000118110010", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000300)) 10m58.08405006s ago: executing program 7 (id=2557): truncate(&(0x7f0000000040)='./file0\x00', 0x4) r0 = socket$inet6(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) listen(0xffffffffffffffff, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty, 0x40000000}, 0x1c) 10m55.644729817s ago: executing program 7 (id=2561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r2, r5, 0xfffffffffffffc01, 0x0) tee(r2, r5, 0x60000000000, 0x0) 10m54.333873898s ago: executing program 7 (id=2566): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x80440, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 10m53.112202847s ago: executing program 7 (id=2569): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000400000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0x23) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid={'resuid', 0x3d, r6}}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 10m52.753432762s ago: executing program 6 (id=2571): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = getpgrp(0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) kcmp(r4, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 10m51.822929207s ago: executing program 6 (id=2573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e26, 0xfffff001, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='yeah\x00', 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$key(0xf, 0x3, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, 0x0) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$inet6(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='h', 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xcb44}], 0x1, 0x10101, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r7}, 0x10) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 10m50.759650593s ago: executing program 6 (id=2576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r2, r5, 0xfffffffffffffc01, 0x0) tee(r2, r5, 0x60000000000, 0x0) 10m47.899906417s ago: executing program 6 (id=2579): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)}}, 0x40) r4 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000140)={0x3, 0x1e, &(0x7f0000000400)="dc8bbc9e48c1567434697f6393365bd5eb9290bff708c711cde5699709e2"}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d0000", 0x17}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mkdir(0x0, 0x2) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 10m42.292136534s ago: executing program 6 (id=2589): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r2, r5, 0xfffffffffffffc01, 0x0) tee(r2, r5, 0x60000000000, 0x0) 10m39.95494652s ago: executing program 6 (id=2593): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000280000000000000100000000ff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0xa4, 0x3}, @ssrr={0x89, 0x3, 0xce}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 10m36.863366008s ago: executing program 38 (id=2569): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000400000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0x23) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid={'resuid', 0x3d, r6}}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 10m29.829942755s ago: executing program 2 (id=2615): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x8c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x3a, 0xb, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m28.428673646s ago: executing program 2 (id=2618): clock_adjtime(0x0, 0x0) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2a0085e, &(0x7f0000000080)=ANY=[], 0x1, 0x229, &(0x7f0000000140)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@delchain={0x2c, 0x65, 0x401, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x0, 0xffff}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b00000018000180140002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x80000001, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x2000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r6 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10m27.179088306s ago: executing program 2 (id=2621): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRESOCT], 0xb4}}, 0x0) 10m24.965467249s ago: executing program 2 (id=2623): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x0) mmap$snddsp(&(0x7f0000180000/0x1000)=nil, 0x1000, 0x2000004, 0x4010, r3, 0x10000) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="7a0a00ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x8070bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000040)='./file0\x00', 0xa20c40, &(0x7f00000002c0)={[{@nolargeio}, {@nolargeio}, {@prjquota}, {@filestreams}, {@bsdgroups}, {@gquota}, {@largeio}], [{@smackfshat={'smackfshat', 0x3d, 'gquotq'}}, {@uid_eq}, {@fowner_gt}, {@hash}]}, 0x4, 0x96d6, &(0x7f0000009640)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x3000) 10m22.117577462s ago: executing program 39 (id=2593): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000280000000000000100000000ff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0xa4, 0x3}, @ssrr={0x89, 0x3, 0xce}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 10m22.097917483s ago: executing program 2 (id=2625): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m20.872753302s ago: executing program 2 (id=2628): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000180)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 10m5.159469961s ago: executing program 40 (id=2628): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000180)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 4m58.0088552s ago: executing program 3 (id=3241): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m57.457188529s ago: executing program 3 (id=3244): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x7f687000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'veth1_to_bond\x00', 'veth0_vlan\x00', {0xff}, {}, 0x2e, 0x0, 0x1, 0x31}, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {0x0, 0x1}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {}, {}, {0xfffe, 0x0, 0x0, 0x40000}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0x700}, {0x0, 0x1, 0x0, 0x3}, {0x0, 0x32}, {}, {0xfffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x70426000) 4m56.258821987s ago: executing program 3 (id=3247): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={r5, 0x0, r3}) 4m53.465656669s ago: executing program 3 (id=3254): r0 = syz_io_uring_setup(0x952, &(0x7f0000000240), &(0x7f0000000140), &(0x7f0000000080)) r1 = eventfd2(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) 4m53.348217631s ago: executing program 3 (id=3255): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m50.185152s ago: executing program 3 (id=3259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r2, &(0x7f0000000100), 0x41000004, 0x0) 4m40.528754417s ago: executing program 5 (id=3289): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) 4m40.31265208s ago: executing program 5 (id=3292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={r6, 0x0, r4}) 4m39.104711379s ago: executing program 5 (id=3296): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 4m37.637947301s ago: executing program 5 (id=3299): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000bfff12050001c0"]) 4m37.583244761s ago: executing program 5 (id=3301): sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 4m36.265948902s ago: executing program 5 (id=3304): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) 4m34.226246453s ago: executing program 41 (id=3259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r2, &(0x7f0000000100), 0x41000004, 0x0) 4m20.414864953s ago: executing program 42 (id=3304): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) 10.896616364s ago: executing program 8 (id=3997): truncate(&(0x7f0000000040)='./file0\x00', 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[], 0x110) 9.9055821s ago: executing program 8 (id=4001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000040)="03000000000300", 0x7}, {&(0x7f0000000600)="17dbe6799e1770", 0x7}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10000000031404449839fad8f71b3f2e"], 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES8=r9, @ANYRESDEC=r6, @ANYBLOB="00020000203f00001c0012800b00010062726964676500000c000280080002000900efa26205255e6462a02e548aadf8149d000008000a00", @ANYRES16=0x0, @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40488c5}, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 9.166094241s ago: executing program 0 (id=4004): socket$inet_tcp(0x2, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 8.192549826s ago: executing program 8 (id=4005): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x200000010, &(0x7f0000000140)=0xb, 0x4) recvfrom$unix(r0, 0x0, 0x0, 0x10102, 0x0, 0x0) 7.955646449s ago: executing program 1 (id=4006): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) unshare(0x28000600) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000141) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp6\x00') preadv(r1, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/104, 0x68}], 0x1, 0x801f, 0x0) 7.827989631s ago: executing program 4 (id=4008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 7.462084537s ago: executing program 9 (id=4009): creat(&(0x7f0000000100)='./file0\x00', 0x8) userfaultfd(0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) syz_read_part_table(0x4039, &(0x7f0000000000)="$eJzszjFKxVAUBNB56teH/EawE4JBsJTYWWUX2UDWYK1gdmIZXIC7iwtQAgYR/ZzTzh3uhD+qrKbv49tFkus2U9clNcnJF2fdfXbn9Sj7JI+f42H+ub0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCBGq8yPfV52Cf1LMnLcXZ9U3KZtHerzWVZnjPMv7YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj3yrba602mvimpSXv7/fpwuu0tAAAAAAAAwAc7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHMgAAAAACPO3zqP9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwUAAP//ejcPJg==") setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000280)=ANY=[], 0x290) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x9, 0x1, 0x9a5b, 0x2b2}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000580)={0x1, 0x1000}) 7.25668184s ago: executing program 0 (id=4010): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r0}, 0xe) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 7.109173762s ago: executing program 1 (id=4011): socket(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc0046209, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESHEX=r2, @ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000010000108000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0040000080a0365d08001b0000000000"], 0x28}}, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0xa, @rand_addr=0x64010100}}, 0x1e) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18ffffff7f036a5d9a5335e8f3bab6d24c4a8b94e3867e830d00000000000000000000000000000000000000005078d9c5a38066a010abe558f78f2e9a0ee288b7c94c10c3c00502e2d9151fbaec7a7f0465033ee0659f3c2d78497d0e93ae73bf"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r7}, 0x94) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x4e21, 0x2000, 'lblc\x00', 0x10}, 0x2c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xfd) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) 6.996079824s ago: executing program 0 (id=4012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000540), 0xff, r0}, 0x38) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @local}, @address_request}}}}, 0x0) 6.953574264s ago: executing program 8 (id=4013): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x7, 0x2}, 0x10}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 6.458292252s ago: executing program 4 (id=4014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}}, 0x800) 5.28615124s ago: executing program 4 (id=4015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000040)="03000000000300", 0x7}, {&(0x7f0000000600)="17dbe6799e1770", 0x7}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10000000031404449839fad8f71b3f2e"], 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES8=r9, @ANYRESDEC=r6, @ANYBLOB="00020000203f00001c0012800b00010062726964676500000c000280080002000900efa26205255e6462a02e548aadf8149d000008000a00", @ANYRES16=0x0, @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40488c5}, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.26812057s ago: executing program 9 (id=4016): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31c5, &(0x7f0000000340)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x6d27, 0x0, 0x0, 0x0) 5.082063523s ago: executing program 8 (id=4017): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000) 4.979482935s ago: executing program 9 (id=4018): mount$fuse(0x0, 0x0, 0x0, 0x280449c, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 4.075932689s ago: executing program 4 (id=4019): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r1 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000100)={0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000280)={0x1, 0x3}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.019745849s ago: executing program 8 (id=4020): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x10000, @private0, 0x5}, 0x1c) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f00000047c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002140)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x1dd8a0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffb96}}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r9, @ANYBLOB="d0b2ef8a29c687e8524c22c65cf6955184db8a1f0a6e57f655e51a990de41c3de9efd10bcce8a8f4dd91a1c5"], 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) 3.636176325s ago: executing program 9 (id=4021): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.606022776s ago: executing program 4 (id=4022): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r0}, 0xe) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3.592279646s ago: executing program 1 (id=4023): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) 3.30872941s ago: executing program 4 (id=4024): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) write$P9_RSTATu(r4, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) syz_open_dev$sg(&(0x7f00000060c0), 0x8, 0x505040) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840) r8 = syz_io_uring_setup(0x4fae, 0x0, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1, 0x0, r8}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) 2.884137297s ago: executing program 9 (id=4025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}}, 0x800) 2.849857817s ago: executing program 0 (id=4026): creat(&(0x7f0000000100)='./file0\x00', 0x8) userfaultfd(0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) syz_read_part_table(0x4039, &(0x7f0000000000)="$eJzszjFKxVAUBNB56teH/EawE4JBsJTYWWUX2UDWYK1gdmIZXIC7iwtQAgYR/ZzTzh3uhD+qrKbv49tFkus2U9clNcnJF2fdfXbn9Sj7JI+f42H+ub0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCBGq8yPfV52Cf1LMnLcXZ9U3KZtHerzWVZnjPMv7YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj3yrba602mvimpSXv7/fpwuu0tAAAAAAAAwAc7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHMgAAAAACPO3zqP9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwUAAP//ejcPJg==") setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000280)=ANY=[], 0x290) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x9, 0x1, 0x9a5b, 0x2b2}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000580)={0x1, 0x1000}) 1.767938913s ago: executing program 9 (id=4027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000d47a49c79a94dacb02002020207b1af8ff0000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') lseek(r2, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000bfff12050001c0"]) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x32) socket(0x11, 0xa, 0x0) syz_usb_control_io(r5, 0x0, 0x0) 1.655173546s ago: executing program 1 (id=4028): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31c5, &(0x7f0000000340)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x6d27, 0x0, 0x0, 0x0) 1.402238839s ago: executing program 0 (id=4029): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010308000009210000000122020009058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_open(&(0x7f0000000200)='.\x00', 0x1, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r2}, 0x38) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x3) chdir(&(0x7f00000000c0)='./file1\x00') 1.36237697s ago: executing program 1 (id=4030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000040)="03000000000300", 0x7}, {&(0x7f0000000600)="17dbe6799e1770", 0x7}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10000000031404449839fad8f71b3f2e"], 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES8=r9, @ANYRESDEC=r6, @ANYBLOB="00020000203f00001c0012800b00010062726964676500000c000280080002000900efa26205255e6462a02e548aadf8149d000008000a00", @ANYRES16=0x0, @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40488c5}, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 119.000428ms ago: executing program 1 (id=4031): truncate(&(0x7f0000000040)='./file0\x00', 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[], 0x110) 0s ago: executing program 0 (id=4032): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@alg={0xe0, 0x10, 0x1, 0x70bd26, 0x25dfdbff, {{'sha3-256\x00'}, '\x00', '\x00', 0x2000, 0x4000}}, 0xe0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000480)=0xffffffffffffff40, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019380)=""/102400, 0x19000) syz_open_dev$sndctrl(0x0, 0x0, 0x883) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r6, 0x0, 0x201f00) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x8010) syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x40000) sendmsg$kcm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 01C: failed retrieving pen parameters: -71 [ 1453.627783][T11714] uclogic 0003:5543:0047.001C: failed probing pen v2 parameters: -71 [ 1453.637019][T11714] uclogic 0003:5543:0047.001C: failed probing parameters: -71 [ 1453.646448][T11714] uclogic: probe of 0003:5543:0047.001C failed with error -71 [ 1453.667744][T11714] usb 2-1: USB disconnect, device number 10 [ 1453.685414][T15307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1453.705675][T15307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1453.735375][T15307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1453.747403][T15307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1453.827486][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1453.840414][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.851194][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1453.870299][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.880897][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1453.893689][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.911694][T16184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1453.935353][T16184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.947562][T16184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1453.971756][T16301] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1453.993522][T15307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1454.019059][T15307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1454.111707][T16184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.125616][T16184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.141236][T16184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.150738][T16184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.174430][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1456.189974][ T4267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1456.200930][ T4267] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1456.211964][ T4267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1456.219914][ T4267] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1456.227313][ T4267] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1456.469668][T16679] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1456.786885][T16301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.991769][T15306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1457.012154][T15306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1457.817099][T16301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.126379][T15268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1458.153056][T15268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1458.169316][T15268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.176565][T15268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.185085][T15268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1458.208983][T16707] tipc: Started in network mode [ 1458.213953][T16707] tipc: Node identity c666c0b08b96, cluster identity 4711 [ 1458.233755][T16707] tipc: Enabled bearer , priority 0 [ 1458.265399][T16710] device syzkaller0 entered promiscuous mode [ 1458.318542][ T4267] Bluetooth: hci1: command 0x0409 tx timeout [ 1458.353833][T16704] tipc: Resetting bearer [ 1458.370074][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1458.402547][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1458.442541][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.449820][ T4620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1458.524092][T16696] tipc: Resetting bearer [ 1458.552161][T16696] tipc: Disabling bearer [ 1458.661947][T15306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1458.749263][T15306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1458.776315][T15306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1458.811022][T15306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1458.829011][T15306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1458.846816][T15306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1458.856582][T15306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1458.874293][T16721] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2696'. [ 1458.932799][T15286] device hsr_slave_0 left promiscuous mode [ 1458.952488][T15286] device hsr_slave_1 left promiscuous mode [ 1458.979084][T15286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1458.986638][T15286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1459.014738][T15286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1459.023637][T15286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1459.033429][T15286] device bridge_slave_1 left promiscuous mode [ 1459.070782][T15286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.087414][T15286] device bridge_slave_0 left promiscuous mode [ 1459.094070][T15286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.166811][T15286] device veth1_macvtap left promiscuous mode [ 1459.176234][T15286] device veth0_macvtap left promiscuous mode [ 1459.192680][T15286] device veth1_vlan left promiscuous mode [ 1459.206120][T15286] device veth0_vlan left promiscuous mode [ 1459.348150][ T2120] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 1459.470916][T15286] bond8 (unregistering): Released all slaves [ 1459.496120][T15286] bond7 (unregistering): Released all slaves [ 1459.515170][T15286] bond6 (unregistering): Released all slaves [ 1459.553876][T15286] bond5 (unregistering): Released all slaves [ 1459.560182][ T2120] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1459.570193][T15286] bond4 (unregistering): Released all slaves [ 1459.585718][ T2120] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1459.603818][ T2120] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1459.621835][ T2120] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1459.625546][T15286] bond3 (unregistering): Released all slaves [ 1459.646198][ T2120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.664680][ T2120] usb 2-1: config 0 descriptor?? [ 1459.679773][T16728] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1459.681243][T15286] bond2 (unregistering): Released all slaves [ 1459.714869][T15286] bond1 (unregistering): Released all slaves [ 1460.111350][ T2120] logitech 0003:046D:C286.001D: unknown main item tag 0x0 [ 1460.135143][ T2120] logitech 0003:046D:C286.001D: unknown main item tag 0x0 [ 1460.149176][ T2120] logitech 0003:046D:C286.001D: unknown main item tag 0x0 [ 1460.168019][ T2120] logitech 0003:046D:C286.001D: unknown main item tag 0x0 [ 1460.175255][ T2120] logitech 0003:046D:C286.001D: unknown main item tag 0x0 [ 1460.198011][ T2120] logitech 0003:046D:C286.001D: unknown main item tag 0x0 [ 1460.205402][ T2120] logitech 0003:046D:C286.001D: unknown main item tag 0x0 [ 1460.221850][ T2120] logitech 0003:046D:C286.001D: unknown main item tag 0x0 [ 1460.241109][ T2120] logitech 0003:046D:C286.001D: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.1-1/input0 [ 1460.274307][ T2120] logitech 0003:046D:C286.001D: no inputs found [ 1460.322584][ T2120] usb 2-1: USB disconnect, device number 11 [ 1460.398626][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 1460.486730][T16731] fido_id[16731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1460.623548][T15286] team0 (unregistering): Port device team_slave_1 removed [ 1460.687145][T15286] team0 (unregistering): Port device team_slave_0 removed [ 1460.754031][T15286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1460.820732][T15286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.353846][T15286] bond0 (unregistering): Released all slaves [ 1462.468291][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1462.477509][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1462.488444][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 1462.499850][T16676] chnl_net:caif_netlink_parms(): no params data found [ 1463.266539][T16730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.274139][T16730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.862956][T16730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1463.910790][T16730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1464.431668][T16730] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.440791][T16730] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.450459][T16730] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.460159][T16730] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.558154][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 1464.604548][T16730] device vlan2 left promiscuous mode [ 1464.610161][T16730] device bridge0 left promiscuous mode [ 1464.640627][T16730] device vlan4 left promiscuous mode [ 1464.646081][T16730] device ip6gretap0 left promiscuous mode [ 1464.674466][T16414] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1464.690583][T16414] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1464.713523][T16414] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1464.875073][T15277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1464.898672][T15277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1464.914029][T16414] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1464.947535][T16301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1465.156391][T16676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.165757][T16676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.174265][T16676] device bridge_slave_0 entered promiscuous mode [ 1465.851818][T16414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.881771][T16414] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.951208][T16414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1466.035988][T16414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1466.084544][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1466.107664][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1466.136924][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1466.174506][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1466.183728][T15308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.190963][T15308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1466.200656][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1466.211454][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1466.221073][T15308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.228295][T15308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.237047][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1466.248609][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1466.258689][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1466.272875][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1466.282484][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1466.294705][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1466.313731][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1466.333807][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1466.343377][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1466.352876][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1466.362277][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1466.371046][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1466.380499][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1466.397203][T16676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.405585][T16676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.414969][T16676] device bridge_slave_1 entered promiscuous mode [ 1466.448229][T16676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.511195][T16676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1467.434161][T16676] team0: Port device team_slave_0 added [ 1467.490128][T16676] team0: Port device team_slave_1 added [ 1467.637277][T16301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.677275][T16676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1467.696311][T16676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.118125][T16676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.949694][T15268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1469.025681][T15268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1469.359086][T16676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1469.453894][T16676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1469.629297][T16676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.576765][T16676] device hsr_slave_0 entered promiscuous mode [ 1470.594121][T16676] device hsr_slave_1 entered promiscuous mode [ 1470.625977][T16676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1470.662195][T16676] Cannot create hsr debugfs directory [ 1471.314019][ T4267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1471.331003][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1471.345512][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1471.403939][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1471.413450][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1471.422424][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1471.431534][T15286] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.464626][T15263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1472.533648][T15263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1472.604036][T15286] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.762077][T16414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.036476][T15286] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.508318][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 1473.706825][T15286] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.939317][T16414] device veth0_vlan entered promiscuous mode [ 1474.999469][T16414] device veth1_vlan entered promiscuous mode [ 1475.087027][T16414] device veth0_macvtap entered promiscuous mode [ 1475.111400][T16856] capability: warning: `syz.1.2715' uses deprecated v2 capabilities in a way that may be insecure [ 1475.131647][T16414] device veth1_macvtap entered promiscuous mode [ 1475.189001][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1475.225845][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.246286][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1475.275499][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.318141][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1475.346706][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.359041][T16414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1475.369331][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.379909][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.390488][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.401024][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.613397][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.626360][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.642202][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 1475.662940][T16414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1475.681625][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1475.704815][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1475.723456][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1475.739471][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1475.757836][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1475.768958][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1475.777508][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1475.796978][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1475.807635][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1475.823729][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1475.839905][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1475.857072][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1475.868480][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1475.899751][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1475.931904][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1475.953171][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1476.059455][T16414] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.071357][T16414] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.080933][T16414] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.090076][T16414] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.102739][T16827] chnl_net:caif_netlink_parms(): no params data found [ 1477.258227][T16827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.268297][T16827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.277294][T16827] device bridge_slave_0 entered promiscuous mode [ 1477.284198][T15305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.298178][T15305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.300797][T16827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.332916][T16827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.369520][T16827] device bridge_slave_1 entered promiscuous mode [ 1477.611889][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1477.678079][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 1477.755394][T15263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.770990][T16827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.787228][T15263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.859729][T16827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.887182][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1478.064890][T16827] team0: Port device team_slave_0 added [ 1478.078805][T16827] team0: Port device team_slave_1 added [ 1478.146581][T16827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.164429][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1478.198846][T16827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.489448][T16827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.120300][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.169897][T12951] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1479.183703][T16827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.338513][T16827] device hsr_slave_0 entered promiscuous mode [ 1479.359914][T12951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.372036][T16827] device hsr_slave_1 entered promiscuous mode [ 1479.378634][T12951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1479.398150][T12951] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1479.407288][T12951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.429060][T16827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1479.436698][T16827] Cannot create hsr debugfs directory [ 1479.449664][T12951] usb 4-1: config 0 descriptor?? [ 1479.457261][T16889] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1479.758318][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 1479.781709][T15286] device hsr_slave_0 left promiscuous mode [ 1479.801380][T15286] device hsr_slave_1 left promiscuous mode [ 1479.828282][T15286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1479.835812][T15286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.876409][T15286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1479.907010][T15286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1479.926109][T15286] device bridge_slave_1 left promiscuous mode [ 1479.953971][T15286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.975102][T12951] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0 [ 1479.986742][T15286] device bridge_slave_0 left promiscuous mode [ 1479.988073][T12951] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0 [ 1479.999054][T15286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.001801][T12951] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0 [ 1480.014886][T12951] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0 [ 1480.105259][T15286] device veth1_macvtap left promiscuous mode [ 1480.117410][T15286] device veth0_macvtap left promiscuous mode [ 1480.127728][T15286] device veth1_vlan left promiscuous mode [ 1480.141494][T15286] device veth0_vlan left promiscuous mode [ 1480.203693][T12951] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0 [ 1480.226263][T12951] playstation 0003:054C:0DF2.001E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 1481.212271][T12951] playstation 0003:054C:0DF2.001E: Invalid byte count transferred, expected 20 got 0 [ 1481.295491][T12951] playstation 0003:054C:0DF2.001E: Failed to retrieve DualSense pairing info: -22 [ 1481.379935][T12951] playstation 0003:054C:0DF2.001E: Failed to get MAC address from DualSense [ 1481.461487][T12951] playstation 0003:054C:0DF2.001E: Failed to create dualsense. [ 1481.561474][T12951] playstation: probe of 0003:054C:0DF2.001E failed with error -22 [ 1482.451533][ T14] usb 4-1: USB disconnect, device number 14 [ 1482.543565][T16904] fido_id[16904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1482.586002][T16906] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1483.887488][T15286] team0 (unregistering): Port device team_slave_1 removed [ 1483.954161][T15286] team0 (unregistering): Port device team_slave_0 removed [ 1484.013280][T15286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.077421][T15286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.714523][T15286] bond0 (unregistering): Released all slaves [ 1484.850287][T16676] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1484.870450][T16676] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1484.881379][T16676] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1484.964502][T16676] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1485.117205][T16913] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2731'. [ 1485.135931][T16913] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2731'. [ 1485.145734][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2731'. [ 1485.672154][T16836] udevd[16836]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1489.205365][T16676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1489.303570][T15268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1489.326688][T15268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1489.384722][T16676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1489.443513][T11000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1489.469177][T11000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1489.498228][ T4267] Bluetooth: hci2: command 0x0405 tx timeout [ 1489.520670][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.527865][T11000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.629442][T11000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1489.769187][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.776791][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.801105][T15307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1489.846021][T15307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1489.911804][T15307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.919125][T15307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1490.238447][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1490.259746][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1490.408487][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1490.464162][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1490.502636][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1490.549556][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1490.587106][T16676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1490.628260][T16676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1490.719708][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1490.752465][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1490.783938][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1490.810554][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1490.820434][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1490.829190][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1490.848347][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2739'. [ 1491.993450][T16968] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2742'. [ 1492.054774][T16968] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2742'. [ 1492.110904][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2742'. [ 1493.420337][T11000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1493.486107][T11000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1493.496421][T16827] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1494.981242][T16996] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2745'. [ 1496.204168][T17000] binder: 16999:17000 ioctl c0046209 0 returned -22 [ 1496.577569][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1496.751830][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1496.816435][T17004] 9pnet_virtio: no channels available for device syz [ 1496.875591][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1496.987619][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1497.080815][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1497.132995][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1497.143770][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1497.254159][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1497.387404][T17003] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1497.859844][T16996] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1497.869305][T16996] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1497.879104][T16996] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1497.960233][T16676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1497.978344][T16827] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1498.108263][T16827] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1498.149532][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1498.187451][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1498.238667][T16827] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1498.651414][T16676] device veth0_vlan entered promiscuous mode [ 1499.294931][T15305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1499.308446][T15305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1499.490716][T16676] device veth1_vlan entered promiscuous mode [ 1499.504041][T15305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1499.526830][T15305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1499.732552][T16676] device veth0_macvtap entered promiscuous mode [ 1499.756466][T15303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1499.780396][T15303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1499.880043][T15303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1499.917667][T16676] device veth1_macvtap entered promiscuous mode [ 1500.307825][T17040] netlink: 'syz.3.2751': attribute type 1 has an invalid length. [ 1500.344725][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1500.570786][T16827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1501.027568][T16827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1501.122456][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1501.164271][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1501.191255][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1501.367162][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1501.442733][T10981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.449996][T10981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1503.643422][T15286] device hsr_slave_0 left promiscuous mode [ 1504.126735][T15286] device hsr_slave_1 left promiscuous mode [ 1504.168119][T15286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.196446][T15286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.418673][T15286] device bridge_slave_1 left promiscuous mode [ 1504.425013][T15286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.668927][T15286] device bridge_slave_0 left promiscuous mode [ 1504.706143][T15286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.158971][T15286] team0 (unregistering): Port device team_slave_1 removed [ 1507.220067][T15286] team0 (unregistering): Port device team_slave_0 removed [ 1507.284805][T15286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1507.344043][T15286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.003819][T15286] bond0 (unregistering): Released all slaves [ 1508.103286][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1508.114188][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.124857][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1508.135459][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.145424][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1508.157529][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.169516][T16676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1508.192427][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1508.201365][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1508.210578][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1508.220297][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1508.231990][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1508.243111][T10981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.250315][T10981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1508.259408][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1508.270090][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1508.407216][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1508.418722][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.439779][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1508.453715][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.454812][T17091] binder: 17090:17091 ioctl c0046209 0 returned -22 [ 1508.475243][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1508.516041][T17092] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1508.560857][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.602795][T16676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1508.734219][T16676] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.743407][T16676] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.752304][T16676] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.770132][T16676] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.899366][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1508.917802][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1508.976622][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1509.099864][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1509.220295][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1509.346150][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1509.445479][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1509.538845][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1509.570987][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1509.585214][T17101] 9pnet_virtio: no channels available for device syz [ 1509.605703][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1509.875770][T17098] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1509.896470][T17098] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1509.925790][T17098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1509.941852][T17098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1509.951073][T17098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1509.959916][T17098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1509.995963][T11002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1510.260151][T15285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.288903][T15285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.344223][T15307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1510.440330][T15285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.478007][T15285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.525495][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1511.994566][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1512.008269][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1512.209594][T16827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1512.433894][T17135] netlink: 'syz.0.2768': attribute type 1 has an invalid length. [ 1517.266898][T15271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1517.287497][T15271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1519.229884][T15268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1519.800643][T15268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1519.859182][T15268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1519.918269][T15268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1519.941851][T16827] device veth0_vlan entered promiscuous mode [ 1519.978692][T17198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2780'. [ 1520.007767][T16827] device veth1_vlan entered promiscuous mode [ 1520.057617][T15268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1520.087277][T15268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1520.131041][T16827] device veth0_macvtap entered promiscuous mode [ 1520.173381][T16827] device veth1_macvtap entered promiscuous mode [ 1520.242735][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1520.255144][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1520.287017][T16827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1520.304642][T16827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.407977][T16827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1520.541026][T16827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.238173][T16827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1521.267396][T16827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.313491][T16827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1521.384935][T16827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1521.420000][T16827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1521.429954][T17212] netlink: 'syz.3.2782': attribute type 1 has an invalid length. [ 1521.439256][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1521.459408][T17211] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1521.472767][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1522.362019][T16827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.399110][ T26] audit: type=1326 audit(1751140142.635:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1522.444114][T16827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.488491][T16827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.527109][T16827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.554386][ T26] audit: type=1326 audit(1751140142.655:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1522.636587][T16827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.650168][ T26] audit: type=1326 audit(1751140142.655:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1522.673133][ T26] audit: type=1326 audit(1751140142.655:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1522.708268][T16827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.734625][ T26] audit: type=1326 audit(1751140142.655:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1522.734678][ T26] audit: type=1326 audit(1751140142.655:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1522.734715][ T26] audit: type=1326 audit(1751140142.655:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1522.734756][ T26] audit: type=1326 audit(1751140142.655:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1522.734792][ T26] audit: type=1326 audit(1751140142.665:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1522.734828][ T26] audit: type=1326 audit(1751140142.665:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.3.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1522.740886][T16827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.740910][T16827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.745489][T16827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1522.787378][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1522.940637][T17240] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1522.942196][T17240] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1523.611040][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1523.616093][T16827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.616133][T16827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.616164][T16827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.616193][T16827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.718316][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.879322][T15308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.879412][T15308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.889385][T15271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1523.978700][T15285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.978787][T15285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.984161][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1524.240782][T17257] xt_hashlimit: size too large, truncated to 1048576 [ 1524.406560][T17258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2793'. [ 1524.411137][T17258] device vlan2 entered promiscuous mode [ 1524.411155][T17258] device ip6gretap0 entered promiscuous mode [ 1524.549621][ T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1524.748124][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 1524.750369][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.750404][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1524.750439][ T14] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 1524.750465][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.756266][ T14] usb 2-1: config 0 descriptor?? [ 1526.143857][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 1526.168261][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 1526.195558][ T14] usb 2-1: USB disconnect, device number 12 [ 1528.237965][T16744] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 1528.438152][T16744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1528.475808][T16744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1528.705041][T16744] usb 2-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 1528.714849][T16744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.776372][T16744] usb 2-1: config 0 descriptor?? [ 1529.035737][T17294] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1529.134288][ T4663] Bluetooth: hci5: Frame reassembly failed (-84) [ 1529.369308][T17294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2799'. [ 1530.129183][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 1530.129200][ T26] audit: type=1326 audit(1751140150.365:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1530.227435][ T26] audit: type=1326 audit(1751140150.395:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1530.401375][ T26] audit: type=1326 audit(1751140150.395:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1530.578041][ T26] audit: type=1326 audit(1751140150.395:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1530.684245][ T26] audit: type=1326 audit(1751140150.395:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1530.718287][ T26] audit: type=1326 audit(1751140150.405:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1530.753748][ T26] audit: type=1326 audit(1751140150.405:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1530.808017][ T26] audit: type=1326 audit(1751140150.405:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1530.828954][T17341] xt_hashlimit: size too large, truncated to 1048576 [ 1530.897409][ T26] audit: type=1326 audit(1751140150.405:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1531.014935][ T26] audit: type=1326 audit(1751140150.405:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1531.118216][ T4267] Bluetooth: hci5: command 0x1003 tx timeout [ 1531.127667][ T4262] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1531.169273][T16744] usbhid 2-1:0.0: can't add hid device: -71 [ 1531.175976][T16744] usbhid: probe of 2-1:0.0 failed with error -71 [ 1531.234561][T16744] usb 2-1: USB disconnect, device number 13 [ 1531.940125][T17364] netlink: 'syz.0.2813': attribute type 1 has an invalid length. [ 1533.174327][T17372] netlink: 'syz.0.2814': attribute type 4 has an invalid length. [ 1535.134867][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2819'. [ 1535.207432][T17400] device bridge_slave_1 left promiscuous mode [ 1535.237005][T17400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.126574][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 1536.126590][ T26] audit: type=1326 audit(1751140156.355:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17398 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1536.217959][ T26] audit: type=1326 audit(1751140156.395:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17398 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1536.286106][ T26] audit: type=1326 audit(1751140156.395:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17398 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1536.334331][ T26] audit: type=1326 audit(1751140156.395:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17398 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1536.361588][ T26] audit: type=1326 audit(1751140156.395:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17398 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1536.385782][ T26] audit: type=1326 audit(1751140156.395:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17398 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1536.411601][ T26] audit: type=1326 audit(1751140156.395:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17398 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1536.441295][ T26] audit: type=1326 audit(1751140156.395:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17398 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1536.492057][ T26] audit: type=1326 audit(1751140156.395:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17398 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1536.550973][ T26] audit: type=1326 audit(1751140156.395:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17398 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1537.672592][T17400] device bridge_slave_0 left promiscuous mode [ 1537.699366][T17400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.042651][T17422] bridge: RTM_NEWNEIGH with invalid ether address [ 1540.900641][T17496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'. [ 1540.928001][T17496] device bridge_slave_1 left promiscuous mode [ 1540.934347][T17496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.004803][T17496] device bridge_slave_0 left promiscuous mode [ 1541.058121][T17496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.332681][T17502] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1542.524201][T17492] 9pnet_fd: Insufficient options for proto=fd [ 1543.071755][T17531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2846'. [ 1543.081017][T17531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2846'. [ 1544.318871][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 1544.318888][ T26] audit: type=1326 audit(1751140164.555:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17543 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1544.401670][ T26] audit: type=1326 audit(1751140164.585:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17543 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1544.491413][ T26] audit: type=1326 audit(1751140164.585:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17543 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1544.567550][ T26] audit: type=1326 audit(1751140164.585:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17543 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1544.656629][ T26] audit: type=1326 audit(1751140164.585:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17543 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1544.752342][ T26] audit: type=1326 audit(1751140164.585:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17543 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1544.820954][ T26] audit: type=1326 audit(1751140164.585:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17543 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1544.900682][ T26] audit: type=1326 audit(1751140164.585:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17543 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1545.002310][ T26] audit: type=1326 audit(1751140164.585:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17543 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1545.009991][T17557] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1545.090474][ T26] audit: type=1326 audit(1751140164.585:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17543 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1546.391892][ T4337] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 1546.620359][ T4337] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1546.667047][ T4337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.762966][ T4337] usb 4-1: config 0 descriptor?? [ 1547.557160][ T4337] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1547.592499][ T4337] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1547.688246][ T4337] asix: probe of 4-1:0.0 failed with error -61 [ 1548.235825][T17618] tipc: Enabling of bearer rejected, failed to enable media [ 1549.232040][T16746] usb 4-1: USB disconnect, device number 15 [ 1549.580386][T17639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1549.589487][T17639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1549.601877][T17639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1549.609926][T17639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1549.619188][T17639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1549.627090][T17639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1549.673647][T17639] 9pnet_virtio: no channels available for device syz [ 1550.835319][T17659] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1550.862448][T17659] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1551.143255][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.152360][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.507385][T17659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1551.841198][T17668] tipc: Started in network mode [ 1551.880063][T17668] tipc: Node identity 4a5ae501f961, cluster identity 4711 [ 1552.109514][T17668] tipc: Enabled bearer , priority 0 [ 1553.347975][ T4337] tipc: Node number set to 3007046913 [ 1553.378863][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 1553.386314][T17673] device syzkaller0 entered promiscuous mode [ 1553.569237][T17667] tipc: Resetting bearer [ 1553.857569][T17667] tipc: Disabling bearer [ 1555.806111][T17696] udevd[17696]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1556.428059][T17707] binder: 17706:17707 ioctl c0046209 0 returned -22 [ 1556.733617][T17712] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1556.746207][T17712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1556.756124][T17712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1556.764782][T17712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1556.774044][T17712] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1556.804077][T17712] 9pnet_virtio: no channels available for device syz [ 1559.690808][T17745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2889'. [ 1559.704613][T17745] device vlan2 entered promiscuous mode [ 1559.710517][T17745] device ip6gretap0 entered promiscuous mode [ 1565.668708][T17794] binder_alloc: 17793: pid 17793 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1565.824936][T17797] binder_alloc: 17793: pid 17793 spamming oneway? 3 buffers allocated for a total size of 5128 [ 1566.217765][T12951] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1567.227997][T12951] usb 2-1: Using ep0 maxpacket: 32 [ 1567.235301][T12951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1567.267544][T12951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1567.452934][T12951] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1567.463508][T12951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.498883][T12951] usb 2-1: config 0 descriptor?? [ 1567.505916][T12951] hub 2-1:0.0: USB hub found [ 1567.514801][T17813] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1567.908216][T12951] hub 2-1:0.0: 1 port detected [ 1568.204306][T12951] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1568.257906][T12951] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1568.377674][T12951] usbhid 2-1:0.0: can't add hid device: -71 [ 1568.394557][T12951] usbhid: probe of 2-1:0.0 failed with error -71 [ 1568.468949][T12951] usb 2-1: USB disconnect, device number 14 [ 1570.114385][T17836] kvm: emulating exchange as write [ 1570.419658][T17847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2908'. [ 1570.453871][T17847] device vlan3 entered promiscuous mode [ 1570.459623][T17847] device syz_tun entered promiscuous mode [ 1573.648060][ T4298] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1573.876914][ T4298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.905327][ T4298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1573.936700][ T4298] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1573.960843][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.003923][ T4298] usb 4-1: config 0 descriptor?? [ 1574.226584][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2913'. [ 1574.258213][T17860] device bridge_slave_1 left promiscuous mode [ 1574.264650][T17860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.470772][T17860] device bridge_slave_0 left promiscuous mode [ 1576.500015][T17860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.469815][ T4298] usbhid 4-1:0.0: can't add hid device: -71 [ 1577.479585][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 1577.479601][ T26] audit: type=1326 audit(1751140709.712:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17890 comm="syz.5.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7fc00000 [ 1577.508989][ T4298] usbhid: probe of 4-1:0.0 failed with error -71 [ 1577.609134][T17906] tipc: Enabled bearer , priority 0 [ 1577.627303][ T4298] usb 4-1: USB disconnect, device number 16 [ 1577.658792][T17906] device syzkaller0 entered promiscuous mode [ 1577.670591][ T26] audit: type=1326 audit(1751140709.712:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17890 comm="syz.5.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7048d8e929 code=0x7fc00000 [ 1577.698389][T17904] tipc: Resetting bearer [ 1577.769876][ T26] audit: type=1326 audit(1751140709.712:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17890 comm="syz.5.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7fc00000 [ 1577.828142][ T26] audit: type=1326 audit(1751140709.712:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17890 comm="syz.5.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7fc00000 [ 1577.883194][T17904] tipc: Disabling bearer [ 1577.993451][ T26] audit: type=1326 audit(1751140709.712:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17890 comm="syz.5.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7fc00000 [ 1579.070754][ T9900] Bluetooth: hci1: command 0x0406 tx timeout [ 1586.695010][ T26] audit: type=1326 audit(1751140718.922:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17965 comm="syz.9.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1586.724620][T17978] serio: Serial port ptm0 [ 1586.794678][ T26] audit: type=1326 audit(1751140718.922:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17965 comm="syz.9.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1586.841266][T17981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2937'. [ 1586.860287][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2937'. [ 1586.885584][ T26] audit: type=1326 audit(1751140718.922:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17965 comm="syz.9.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1586.922121][ T26] audit: type=1326 audit(1751140718.922:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17965 comm="syz.9.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1586.950789][T17985] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2938'. [ 1587.179015][ T127] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 1587.389998][ T127] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1587.409995][ T127] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.448820][ T127] usb 10-1: config 0 descriptor?? [ 1590.170018][ T127] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1590.234145][ T127] asix: probe of 10-1:0.0 failed with error -61 [ 1592.100840][T18027] netlink: 'syz.5.2946': attribute type 1 has an invalid length. [ 1592.230160][ T127] usb 10-1: USB disconnect, device number 5 [ 1593.709568][T18050] syz.1.2950[18050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1593.711480][T18050] syz.1.2950[18050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1595.636431][ T9900] Bluetooth: hci2: command 0x0406 tx timeout [ 1595.640408][ T26] audit: type=1326 audit(1751140726.102:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18034 comm="syz.5.2949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7fc00000 [ 1597.896745][T18065] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2953'. [ 1597.911275][T18065] device vlan2 entered promiscuous mode [ 1597.916932][T18065] device ip6gretap0 entered promiscuous mode [ 1598.238431][T18067] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1599.770625][ T127] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 1600.018631][ T127] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1600.225325][ T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.280814][ T127] usb 6-1: config 0 descriptor?? [ 1600.575668][T18097] tipc: Started in network mode [ 1600.614446][T18097] tipc: Node identity 76266842c2f3, cluster identity 4711 [ 1600.654440][T18097] tipc: Enabled bearer , priority 0 [ 1600.678621][T18101] device syzkaller0 entered promiscuous mode [ 1600.783369][T18096] tipc: Resetting bearer [ 1601.093998][ T127] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1601.214991][ T127] asix: probe of 6-1:0.0 failed with error -61 [ 1601.438048][ T26] audit: type=1326 audit(1751140733.622:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18098 comm="syz.9.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1601.532010][T18096] tipc: Disabling bearer [ 1603.878267][ T127] usb 6-1: USB disconnect, device number 18 [ 1604.049064][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2968'. [ 1604.448962][T18140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2970'. [ 1608.298302][T18167] tipc: Enabled bearer , priority 0 [ 1608.400399][T18167] tipc: Resetting bearer [ 1608.473437][T18166] tipc: Disabling bearer [ 1608.928387][ T26] audit: type=1326 audit(1751140741.052:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18160 comm="syz.1.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7fc00000 [ 1610.716769][T18185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2983'. [ 1612.574524][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.608926][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.619732][T18229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2989'. [ 1614.512370][T18234] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2994'. [ 1615.140558][T18240] udevd[18240]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1617.799037][ T26] audit: type=1326 audit(1751141006.024:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1617.862604][ T26] audit: type=1326 audit(1751141006.074:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1617.905329][ T26] audit: type=1326 audit(1751141006.074:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1617.982671][ T26] audit: type=1326 audit(1751141006.074:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1618.085271][ T26] audit: type=1326 audit(1751141006.074:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1618.317933][ T26] audit: type=1326 audit(1751141006.074:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1619.167973][ T26] audit: type=1326 audit(1751141006.074:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1620.269196][ T26] audit: type=1326 audit(1751141006.074:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1620.318691][ T26] audit: type=1326 audit(1751141006.074:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1620.467799][ T26] audit: type=1326 audit(1751141006.074:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18257 comm="syz.3.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1620.519226][T18285] binder: 18284:18285 ioctl c0046209 0 returned -22 [ 1621.957390][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3006'. [ 1623.101463][T18309] netlink: 'syz.0.3007': attribute type 1 has an invalid length. [ 1623.691000][T18301] 9pnet_virtio: no channels available for device syz [ 1627.717084][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1627.717100][ T26] audit: type=1326 audit(1751141271.944:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1627.792611][T18352] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3017'. [ 1627.822919][ T26] audit: type=1326 audit(1751141271.984:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1628.023757][ T26] audit: type=1326 audit(1751141271.984:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1628.900831][ T26] audit: type=1326 audit(1751141271.984:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1628.987278][ T26] audit: type=1326 audit(1751141271.984:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1629.044115][ T26] audit: type=1326 audit(1751141271.984:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1629.075269][ T26] audit: type=1326 audit(1751141271.984:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1629.157778][ T26] audit: type=1326 audit(1751141271.984:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1630.387991][T18368] netlink: 'syz.5.3020': attribute type 1 has an invalid length. [ 1630.932240][ T26] audit: type=1326 audit(1751141271.984:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1631.137917][ T26] audit: type=1326 audit(1751141271.984:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18333 comm="syz.3.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7ffc0000 [ 1633.539338][T18387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3025'. [ 1633.561436][T18382] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1636.113335][T18417] binder: 18416:18417 ioctl c0046209 0 returned -22 [ 1636.448125][ T4298] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1636.655150][ T4298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1636.697135][ T4298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1636.733439][ T4298] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1636.795475][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.526274][T18434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1637.566328][ T4298] usb 4-1: config 0 descriptor?? [ 1637.599180][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 1637.599197][ T26] audit: type=1326 audit(1751141537.831:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.9.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1637.651044][T18440] 9pnet_virtio: no channels available for device syz [ 1637.675869][T18434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1637.688068][ T26] audit: type=1326 audit(1751141537.861:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.9.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1637.755200][ T26] audit: type=1326 audit(1751141537.861:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.9.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1637.813642][T18434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1637.825962][ T26] audit: type=1326 audit(1751141537.861:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.9.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1637.898041][ T26] audit: type=1326 audit(1751141537.861:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.9.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1637.920468][ C0] vkms_vblank_simulate: vblank timer overrun [ 1637.947592][T18434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1637.995825][ T26] audit: type=1326 audit(1751141537.861:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.9.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1637.998950][ T4298] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 1638.048436][T18434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1638.076289][ T26] audit: type=1326 audit(1751141537.861:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.9.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1638.077913][ T4298] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 1638.103215][T18434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1638.150244][ T26] audit: type=1326 audit(1751141537.861:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.9.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1638.154331][ T4298] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 1638.234113][ T26] audit: type=1326 audit(1751141537.861:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.9.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1638.369911][ T4298] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 1638.378843][ T4298] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 1638.389951][ T26] audit: type=1326 audit(1751141537.861:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.9.3034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1638.413831][ T4298] playstation 0003:054C:0DF2.001F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 1638.419898][T18435] netlink: 'syz.0.3035': attribute type 1 has an invalid length. [ 1638.641491][T18419] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3033'. [ 1638.662698][ T4298] playstation 0003:054C:0DF2.001F: Invalid byte count transferred, expected 20 got 0 [ 1638.698033][ T4298] playstation 0003:054C:0DF2.001F: Failed to retrieve DualSense pairing info: -22 [ 1638.744430][ T4298] playstation 0003:054C:0DF2.001F: Failed to get MAC address from DualSense [ 1638.773933][ T4298] playstation 0003:054C:0DF2.001F: Failed to create dualsense. [ 1638.805910][ T4298] playstation: probe of 0003:054C:0DF2.001F failed with error -22 [ 1638.901000][ T4298] usb 4-1: USB disconnect, device number 17 [ 1640.549917][T18461] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1640.954642][T18457] fido_id[18457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1645.745070][T18511] netlink: 'syz.0.3048': attribute type 1 has an invalid length. [ 1647.107776][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 1647.146543][ T26] audit: type=1326 audit(1751141803.062:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18507 comm="syz.9.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1647.538438][ T26] audit: type=1326 audit(1751141803.062:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18507 comm="syz.9.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1647.677999][ T26] audit: type=1326 audit(1751141803.072:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18507 comm="syz.9.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1647.721820][ T26] audit: type=1326 audit(1751141803.072:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18507 comm="syz.9.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1647.746121][ T26] audit: type=1326 audit(1751141803.072:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18507 comm="syz.9.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1647.806624][ T26] audit: type=1326 audit(1751141803.072:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18507 comm="syz.9.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1647.876180][T16763] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1647.946633][ T26] audit: type=1326 audit(1751141803.072:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18507 comm="syz.9.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1648.018105][ T26] audit: type=1326 audit(1751141803.072:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18507 comm="syz.9.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1648.080436][T16763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.087353][ T26] audit: type=1326 audit(1751141803.072:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18507 comm="syz.9.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1648.123849][T16763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.134745][T18540] binder: 18538:18540 ioctl c0046209 0 returned -22 [ 1648.165265][T16763] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1648.184842][ T26] audit: type=1326 audit(1751141803.072:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18507 comm="syz.9.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1648.205282][T16763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.275612][T16763] usb 6-1: config 0 descriptor?? [ 1648.726972][T16763] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 1648.757408][T16763] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 1648.773989][T16763] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 1648.790542][T16763] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 1648.805891][T16763] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 1649.165874][T16763] playstation 0003:054C:0DF2.0020: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 1649.191074][T18555] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3053'. [ 1649.443345][T16763] playstation 0003:054C:0DF2.0020: Invalid byte count transferred, expected 20 got 0 [ 1649.592765][T16763] playstation 0003:054C:0DF2.0020: Failed to retrieve DualSense pairing info: -22 [ 1649.775585][T16763] playstation 0003:054C:0DF2.0020: Failed to get MAC address from DualSense [ 1649.941931][T16763] playstation 0003:054C:0DF2.0020: Failed to create dualsense. [ 1650.171276][T16763] playstation: probe of 0003:054C:0DF2.0020 failed with error -22 [ 1650.969993][ T2120] usb 6-1: USB disconnect, device number 19 [ 1651.044764][T18556] fido_id[18556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1651.423639][T18572] 9pnet_virtio: no channels available for device syz [ 1651.646505][T18569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1651.657321][T18569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1651.666055][T18569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1653.884468][T18595] netlink: 'syz.5.3062': attribute type 1 has an invalid length. [ 1654.922669][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1654.922686][ T26] audit: type=1326 audit(1751142067.155:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18597 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1654.954934][ T26] audit: type=1326 audit(1751142067.185:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18597 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1656.681174][T18605] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3066'. [ 1656.708020][ T26] audit: type=1326 audit(1751142067.185:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18597 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1656.761545][ T26] audit: type=1326 audit(1751142067.185:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18597 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1656.964910][ T26] audit: type=1326 audit(1751142067.185:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18597 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1657.049061][ T26] audit: type=1326 audit(1751142067.185:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18597 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1657.141195][ T26] audit: type=1326 audit(1751142067.185:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18597 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1657.209262][ T26] audit: type=1326 audit(1751142067.185:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18597 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1657.233118][ T26] audit: type=1326 audit(1751142067.185:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18597 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1657.255485][ C1] vkms_vblank_simulate: vblank timer overrun [ 1657.293399][ T26] audit: type=1326 audit(1751142067.185:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18597 comm="syz.0.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1660.906400][T18650] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1662.462312][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1662.462348][ T26] audit: type=1326 audit(1751142330.688:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18662 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7ffc0000 [ 1662.809604][ T26] audit: type=1326 audit(1751142330.748:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18662 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7ffc0000 [ 1662.884066][ T26] audit: type=1326 audit(1751142330.878:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18662 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7048d8e929 code=0x7ffc0000 [ 1662.936714][ T26] audit: type=1326 audit(1751142330.878:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18662 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7ffc0000 [ 1662.985519][ T26] audit: type=1326 audit(1751142330.878:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18662 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7ffc0000 [ 1663.126018][ T26] audit: type=1326 audit(1751142330.878:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18662 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7048d8e929 code=0x7ffc0000 [ 1663.345493][T18680] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3080'. [ 1663.949194][T18682] binder: 18681:18682 ioctl c0046209 0 returned -22 [ 1663.959485][ T26] audit: type=1326 audit(1751142330.878:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18662 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7ffc0000 [ 1664.000239][ T26] audit: type=1326 audit(1751142330.878:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18662 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7ffc0000 [ 1664.027999][ T26] audit: type=1326 audit(1751142330.878:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18662 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7048d8e929 code=0x7ffc0000 [ 1664.123251][ T26] audit: type=1326 audit(1751142330.878:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18662 comm="syz.5.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7ffc0000 [ 1664.327112][T18691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3083'. [ 1665.346710][T18677] netlink: 'syz.1.3081': attribute type 1 has an invalid length. [ 1667.772999][T18715] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1668.734764][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3092'. [ 1669.322931][T18735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3094'. [ 1670.458586][T18753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3096'. [ 1671.046831][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3098'. [ 1672.206522][T18774] netlink: 'syz.9.3100': attribute type 1 has an invalid length. [ 1673.229227][T18785] binder: 18780:18785 ioctl c0046209 0 returned -22 [ 1673.829767][T18794] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1673.883497][T18794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1673.896076][T18794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1674.913435][T18794] 9pnet_virtio: no channels available for device syz [ 1674.936898][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.959367][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.318179][T18784] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1677.777081][T18825] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3111'. [ 1677.848418][T18825] device bridge_slave_1 left promiscuous mode [ 1678.459708][T18825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.496095][T18825] device bridge_slave_0 left promiscuous mode [ 1679.216846][T18825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.563747][T18838] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3109'. [ 1679.573647][T18843] netlink: 'syz.1.3113': attribute type 1 has an invalid length. [ 1679.755140][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 1681.004471][T18867] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1682.935896][T18892] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3125'. [ 1683.750445][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3128'. [ 1683.873235][T18906] netlink: 'syz.5.3127': attribute type 1 has an invalid length. [ 1684.595653][T18909] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3129'. [ 1688.062399][T18965] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3139'. [ 1688.858058][ T4298] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1688.962026][T18970] netlink: 'syz.0.3142': attribute type 1 has an invalid length. [ 1689.819940][ T4298] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1689.840930][ T4298] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1689.870764][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.903683][ T4298] usb 4-1: Product: syz [ 1689.916461][ T4298] usb 4-1: Manufacturer: syz [ 1689.952961][ T4298] usb 4-1: SerialNumber: syz [ 1690.662244][ T4298] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1691.125162][T16344] usb 4-1: USB disconnect, device number 18 [ 1691.171069][T16344] usblp0: removed [ 1694.151133][T19035] netlink: 'syz.3.3157': attribute type 1 has an invalid length. [ 1696.379303][T19054] xt_hashlimit: size too large, truncated to 1048576 [ 1703.410891][T19119] netlink: 'syz.3.3170': attribute type 1 has an invalid length. [ 1704.404424][T19126] device pim6reg1 entered promiscuous mode [ 1707.550580][T19171] netlink: 'syz.5.3181': attribute type 1 has an invalid length. [ 1711.037512][T19209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3188'. [ 1715.774799][T19261] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1716.561517][T19261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1717.330518][T19273] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 1717.753750][T19282] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1718.067878][ T4298] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 1718.269749][ T4298] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1718.302337][ T4298] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1718.333077][ T4298] usb 10-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 1718.381135][ T4298] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.420827][ T4298] usb 10-1: config 0 descriptor?? [ 1718.685083][T19286] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1719.187898][T16744] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1719.395083][T16744] usb 6-1: not running at top speed; connect to a high speed hub [ 1719.410962][T16744] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 1719.617860][T16744] usb 6-1: config 95 has no interface number 0 [ 1719.628224][T16744] usb 6-1: config 95 interface 1 has no altsetting 0 [ 1719.641144][T16744] usb 6-1: string descriptor 0 read error: -22 [ 1719.647474][T16744] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1719.654341][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 1719.654362][ T26] audit: type=1326 audit(1751143411.876:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1719.680117][T16744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.745734][T19329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3213'. [ 1720.355352][ T26] audit: type=1326 audit(1751143411.876:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1720.507601][T16744] usb 6-1: USB disconnect, device number 20 [ 1720.540811][ T26] audit: type=1326 audit(1751143411.876:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1720.563727][ T26] audit: type=1326 audit(1751143411.876:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1720.607573][ T26] audit: type=1326 audit(1751143411.876:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1720.661009][ T26] audit: type=1326 audit(1751143411.876:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1720.718007][ T9900] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1720.721020][ T26] audit: type=1326 audit(1751143411.876:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1720.782980][ T4298] usbhid 10-1:0.0: can't add hid device: -71 [ 1720.798613][ T4298] usbhid: probe of 10-1:0.0 failed with error -71 [ 1720.812744][ T26] audit: type=1326 audit(1751143411.876:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1720.860992][ T26] audit: type=1326 audit(1751143411.876:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1720.861712][ T4298] usb 10-1: USB disconnect, device number 6 [ 1720.951760][ T26] audit: type=1326 audit(1751143411.876:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19314 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1724.679157][T19378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3224'. [ 1728.327464][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 1728.327480][ T26] audit: type=1326 audit(1751143420.556:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19388 comm="syz.9.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1728.401169][ T26] audit: type=1326 audit(1751143420.556:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19388 comm="syz.9.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1728.445291][ T26] audit: type=1326 audit(1751143420.556:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19388 comm="syz.9.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1728.503843][ T26] audit: type=1326 audit(1751143420.556:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19388 comm="syz.9.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1728.600317][ T26] audit: type=1326 audit(1751143420.556:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19388 comm="syz.9.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1728.687517][ T26] audit: type=1326 audit(1751143420.556:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19388 comm="syz.9.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1728.743735][ T26] audit: type=1326 audit(1751143420.556:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19388 comm="syz.9.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1728.795360][ T26] audit: type=1326 audit(1751143420.556:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19388 comm="syz.9.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1728.849811][ T26] audit: type=1326 audit(1751143420.556:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19388 comm="syz.9.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1728.914619][ T26] audit: type=1326 audit(1751143420.556:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19388 comm="syz.9.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1731.794060][T19449] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3238'. [ 1732.960045][T19459] netlink: 'syz.0.3239': attribute type 27 has an invalid length. [ 1736.158166][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.164561][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.325311][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 1736.325678][ T26] audit: type=1326 audit(1751143428.516:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19485 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7fc00000 [ 1736.758220][ T26] audit: type=1326 audit(1751143428.516:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19485 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd45f8e929 code=0x7fc00000 [ 1736.812234][ T26] audit: type=1326 audit(1751143428.516:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19485 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7fc00000 [ 1736.835424][ T26] audit: type=1326 audit(1751143428.516:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19485 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7fc00000 [ 1736.858554][ T26] audit: type=1326 audit(1751143428.516:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19485 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7fc00000 [ 1736.902318][ T26] audit: type=1326 audit(1751143428.516:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19485 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7fc00000 [ 1736.967987][ T26] audit: type=1326 audit(1751143428.516:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19485 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7fc00000 [ 1737.003337][ T26] audit: type=1326 audit(1751143428.516:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19485 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7fc00000 [ 1737.026416][ T26] audit: type=1326 audit(1751143428.516:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19485 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7fc00000 [ 1737.050181][ T26] audit: type=1326 audit(1751143428.516:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19485 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd45f8e929 code=0x7fc00000 [ 1737.507109][T19459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1737.624428][T19459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1740.171127][T19459] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.184920][T19459] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.197178][T19459] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.213456][T19459] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.520880][T19459] device vlan2 left promiscuous mode [ 1740.526319][T19459] device ip6gretap0 left promiscuous mode [ 1740.566057][T19459] device vlan3 left promiscuous mode [ 1740.574343][T19459] device syz_tun left promiscuous mode [ 1740.655467][T19465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1740.665658][T19465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1740.675477][T19465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1740.688748][T19465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1743.218145][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 1743.218166][ T26] audit: type=1326 audit(1751143435.366:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19544 comm="syz.1.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7fc00000 [ 1748.358330][ T26] audit: type=1326 audit(1751143440.586:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19599 comm="syz.9.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1748.441934][ T26] audit: type=1326 audit(1751143440.586:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19599 comm="syz.9.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1748.612356][ T26] audit: type=1326 audit(1751143440.586:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19599 comm="syz.9.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1748.672062][ T26] audit: type=1326 audit(1751143440.586:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19599 comm="syz.9.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1748.772243][ T26] audit: type=1326 audit(1751143440.586:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19599 comm="syz.9.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1748.932346][ T26] audit: type=1326 audit(1751143440.586:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19599 comm="syz.9.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1749.912372][ T26] audit: type=1326 audit(1751143440.586:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19599 comm="syz.9.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1749.969140][T19634] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1751.547978][ T26] audit: type=1326 audit(1751143443.586:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19657 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7fc00000 [ 1751.681618][ T26] audit: type=1326 audit(1751143443.586:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19657 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7048d8e929 code=0x7fc00000 [ 1751.873777][ T26] audit: type=1326 audit(1751143443.586:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19657 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7048d8e929 code=0x7fc00000 [ 1761.716530][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1761.732012][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1761.742138][ T4262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1761.761207][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1761.770295][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1761.778382][ T4262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1761.789407][T15268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.067713][T15268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.218934][T15268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.348224][T15268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.288007][T19783] block device autoloading is deprecated and will be removed. [ 1765.088064][T19785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3315'. [ 1766.601173][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1766.601192][ T26] audit: type=1326 audit(1751143455.306:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.9.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1766.726221][T15268] tipc: Left network mode [ 1766.752290][T19760] chnl_net:caif_netlink_parms(): no params data found [ 1766.847841][ T26] audit: type=1326 audit(1751143455.306:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.9.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1766.957974][ T26] audit: type=1326 audit(1751143455.326:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.9.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1767.078098][ T26] audit: type=1326 audit(1751143455.326:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.9.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1767.193412][T19760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.211328][ T26] audit: type=1326 audit(1751143455.326:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.9.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1767.244911][T19760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.286775][T19760] device bridge_slave_0 entered promiscuous mode [ 1767.315966][ T26] audit: type=1326 audit(1751143455.336:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.9.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1767.350657][T19760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.380392][T19760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.414538][T19760] device bridge_slave_1 entered promiscuous mode [ 1767.441598][ T26] audit: type=1326 audit(1751143455.526:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.9.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1767.470649][ T4262] Bluetooth: hci4: command 0x0409 tx timeout [ 1767.495858][ T26] audit: type=1326 audit(1751143455.526:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19779 comm="syz.9.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1769.926493][ T4262] Bluetooth: hci4: command 0x041b tx timeout [ 1770.193433][T19760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1770.290225][T19760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1770.649795][T19760] team0: Port device team_slave_0 added [ 1770.814112][T19760] team0: Port device team_slave_1 added [ 1771.592081][T19760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1771.647935][T19760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1771.847053][T19760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1771.928148][T19760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1771.996322][T19760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1772.023641][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 1772.217808][T19760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1772.490560][ T9900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1772.505936][ T9900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1772.585222][ T9900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1772.593540][ T9900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1772.601352][ T9900] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1772.608888][ T9900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1772.721857][T19760] device hsr_slave_0 entered promiscuous mode [ 1772.736128][T19760] device hsr_slave_1 entered promiscuous mode [ 1772.749876][T19760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1772.759981][T19760] Cannot create hsr debugfs directory [ 1774.086225][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 1774.448631][ T26] audit: type=1326 audit(1751143466.676:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19828 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7fc00000 [ 1774.648490][ T4267] Bluetooth: hci5: command 0x0409 tx timeout [ 1776.769793][ T4267] Bluetooth: hci5: command 0x041b tx timeout [ 1777.987017][T19830] chnl_net:caif_netlink_parms(): no params data found [ 1778.803041][T15268] device hsr_slave_0 left promiscuous mode [ 1778.818653][T15268] device hsr_slave_1 left promiscuous mode [ 1778.841268][T15268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1778.861190][T15268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1778.889415][ T9900] Bluetooth: hci5: command 0x040f tx timeout [ 1778.915859][T15268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1779.042179][T15268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1779.951442][T15268] device veth1_macvtap left promiscuous mode [ 1779.986756][T15268] device veth0_macvtap left promiscuous mode [ 1780.007678][T15268] device veth1_vlan left promiscuous mode [ 1780.417606][T15268] bond1 (unregistering): Released all slaves [ 1781.009235][ T4267] Bluetooth: hci5: command 0x0419 tx timeout [ 1782.122603][T15268] team0 (unregistering): Port device team_slave_1 removed [ 1782.191067][T15268] team0 (unregistering): Port device team_slave_0 removed [ 1782.256905][T15268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1782.384622][T15268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1783.526703][T15268] bond0 (unregistering): Released all slaves [ 1784.040015][T19830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.056877][T19830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.066573][T19830] device bridge_slave_0 entered promiscuous mode [ 1784.096869][T19830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.104624][T19830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.127205][T19830] device bridge_slave_1 entered promiscuous mode [ 1784.134143][T16744] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1784.381730][T19830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1784.476686][T19830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1784.561051][T16744] usb 10-1: Using ep0 maxpacket: 8 [ 1784.575986][T16744] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1784.597163][T16744] usb 10-1: config 179 has an invalid descriptor of length 94, skipping remainder of the config [ 1784.979043][T19961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3352'. [ 1785.081353][T16744] usb 10-1: config 179 has no interface number 0 [ 1785.298073][T16744] usb 10-1: too many endpoints for config 179 interface 65 altsetting 12: 197, using maximum allowed: 30 [ 1785.309800][T16744] usb 10-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 197 [ 1785.347701][T19830] team0: Port device team_slave_0 added [ 1785.348012][T16744] usb 10-1: config 179 interface 65 has no altsetting 0 [ 1785.397898][T16744] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1785.400515][T19830] team0: Port device team_slave_1 added [ 1785.407184][T16744] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.442999][T19760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1785.559207][T19760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1785.606956][T19830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1785.631486][T19830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1785.672637][T19830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1785.692628][T19760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1785.858783][T19830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1785.865948][T19830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1785.912416][T19830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1785.943752][T16744] usb 10-1: string descriptor 0 read error: -71 [ 1785.953211][T19760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1785.974006][T16744] usb 10-1: USB disconnect, device number 7 [ 1786.130772][T19830] device hsr_slave_0 entered promiscuous mode [ 1786.153356][T19830] device hsr_slave_1 entered promiscuous mode [ 1786.177843][ T26] audit: type=1326 audit(1751143478.406:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19956 comm="syz.0.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1786.200565][T19830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1786.228861][T19830] Cannot create hsr debugfs directory [ 1786.257279][ T26] audit: type=1326 audit(1751143478.406:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19956 comm="syz.0.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1786.381657][ T26] audit: type=1326 audit(1751143478.406:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19956 comm="syz.0.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1786.485969][ T26] audit: type=1326 audit(1751143478.406:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19956 comm="syz.0.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1786.520492][ T26] audit: type=1326 audit(1751143478.406:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19956 comm="syz.0.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1786.566461][T19760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.611106][ T26] audit: type=1326 audit(1751143478.406:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19956 comm="syz.0.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1786.718208][T15268] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.951506][T15268] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.213975][T15278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1787.225805][T15278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1787.551275][T19997] binder: 19995:19997 ioctl c0046209 0 returned -22 [ 1787.966237][T15268] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.143177][T19760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1788.946842][T20007] 9pnet_virtio: no channels available for device syz [ 1789.325321][T15298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1789.341347][T15298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1789.350232][T15298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.357419][T15298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1789.366170][T15298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1789.594166][T15268] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.659913][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1789.680684][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1789.716147][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.723494][ T4663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1789.746376][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1789.786406][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1789.895837][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1789.939232][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1789.968856][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1789.999192][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1790.094010][T19760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1790.140553][T19760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1790.189447][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1790.207546][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1790.247058][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1790.279229][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1790.308607][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1790.327945][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1791.178145][T20038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3366'. [ 1791.645049][T15268] tipc: Left network mode [ 1792.050592][T15278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1792.069958][T15278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1792.093033][T19760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1792.133594][ T26] audit: type=1326 audit(1751143484.366:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20027 comm="syz.9.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1792.217257][ T26] audit: type=1326 audit(1751143484.366:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20027 comm="syz.9.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1792.300982][ T26] audit: type=1326 audit(1751143484.366:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20027 comm="syz.9.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1792.394254][ T26] audit: type=1326 audit(1751143484.366:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20027 comm="syz.9.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1792.463109][T19830] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1792.471146][ T26] audit: type=1326 audit(1751143484.366:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20027 comm="syz.9.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1792.758830][T19830] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1793.548140][T20074] 9pnet_virtio: no channels available for device syz [ 1794.084148][T19830] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1794.104124][T19830] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1794.810960][T19830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1794.826794][T15278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1794.852304][T15278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1795.567516][T19830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1795.666067][T20107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3376'. [ 1795.797225][T19760] device veth0_vlan entered promiscuous mode [ 1795.826514][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1795.846931][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1795.864109][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.871395][ T4663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1795.891909][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1795.911251][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1795.923170][T20120] binder: 20118:20120 ioctl c0046209 0 returned -22 [ 1795.929898][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.929967][ T4663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1795.931212][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1795.997156][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1796.026560][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1796.056896][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1796.101842][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1796.136556][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1796.169543][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1796.195997][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1796.366794][T20126] 9pnet_virtio: no channels available for device syz [ 1796.600712][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1796.848839][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1796.880407][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.886778][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.889066][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1796.933816][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1796.943106][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1796.953540][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1796.969947][T19760] device veth1_vlan entered promiscuous mode [ 1797.498029][ T26] audit: type=1326 audit(1751143489.676:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1797.897920][ T26] audit: type=1326 audit(1751143489.676:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1797.955989][T19830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1797.997664][ T26] audit: type=1326 audit(1751143489.676:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1798.021383][T20125] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1798.022032][ T26] audit: type=1326 audit(1751143489.686:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1798.034724][T20125] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1798.051525][ T26] audit: type=1326 audit(1751143489.686:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1798.061692][T20125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1798.088831][ T26] audit: type=1326 audit(1751143489.686:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1798.088875][ T26] audit: type=1326 audit(1751143489.686:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1798.088910][ T26] audit: type=1326 audit(1751143489.686:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1798.088943][ T26] audit: type=1326 audit(1751143489.686:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1798.088978][ T26] audit: type=1326 audit(1751143489.686:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20110 comm="syz.0.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1798.203501][T20125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1798.212418][T20125] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1798.618038][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1798.626233][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1798.697365][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1798.726689][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1798.759087][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1798.788854][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1798.806975][T19760] device veth0_macvtap entered promiscuous mode [ 1798.854275][T19760] device veth1_macvtap entered promiscuous mode [ 1799.264741][T19760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1799.288167][T19760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.298365][T19760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1799.375556][T20169] xt_connbytes: Forcing CT accounting to be enabled [ 1799.382779][T20169] Cannot find set identified by id 0 to match [ 1800.013661][T19760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.024392][T19760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.035271][T19760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.054491][T19760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1800.079746][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1800.090215][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1800.099546][T10981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1800.125141][T19760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.179615][T19760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.437839][T19760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.449915][T19760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.460623][T19760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.505687][T19760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.577437][T19760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1800.648664][T15286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1800.714455][T15286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1800.921228][T15268] device hsr_slave_0 left promiscuous mode [ 1802.737621][T15268] device hsr_slave_1 left promiscuous mode [ 1802.813132][T15268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1802.830220][T15268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.852440][T15268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1802.863528][T15268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.957587][T15268] device veth1_macvtap left promiscuous mode [ 1802.965199][T15268] device veth0_macvtap left promiscuous mode [ 1802.979879][T15268] device veth1_vlan left promiscuous mode [ 1802.986121][T15268] device veth0_vlan left promiscuous mode [ 1804.111026][T15268] bond1 (unregistering): Released all slaves [ 1805.247540][T15268] team0 (unregistering): Port device team_slave_1 removed [ 1805.315430][T15268] team0 (unregistering): Port device team_slave_0 removed [ 1805.381909][T15268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.459437][T15268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1806.337232][T15268] bond0 (unregistering): Released all slaves [ 1806.387208][T19760] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.396411][T19760] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.405286][T19760] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.414593][T19760] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.424989][T20193] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3396'. [ 1806.800494][T15278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.905947][T15278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.939041][T15285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.969565][T15285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1807.210701][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1807.489431][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1807.742807][T19830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1807.844708][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1807.861591][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1809.089816][T20255] trusted_key: encrypted_key: insufficient parameters specified [ 1809.909567][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1809.909583][ T26] audit: type=1326 audit(1751143502.056:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20277 comm="syz.0.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1810.030136][ T26] audit: type=1326 audit(1751143502.056:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20277 comm="syz.0.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1810.119484][ T26] audit: type=1326 audit(1751143502.056:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20277 comm="syz.0.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1810.224183][ T26] audit: type=1326 audit(1751143502.056:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20277 comm="syz.0.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1810.316222][ T26] audit: type=1326 audit(1751143502.056:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20277 comm="syz.0.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1810.411467][ T26] audit: type=1326 audit(1751143502.056:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20277 comm="syz.0.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1810.466495][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1810.486373][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1810.827983][ T26] audit: type=1326 audit(1751143502.056:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20277 comm="syz.0.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1810.921425][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1811.039368][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1811.261250][T19830] device veth0_vlan entered promiscuous mode [ 1811.289177][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1811.326928][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1811.340944][ T26] audit: type=1326 audit(1751143502.056:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20277 comm="syz.0.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1811.422793][T19830] device veth1_vlan entered promiscuous mode [ 1811.466051][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1811.467289][ T26] audit: type=1326 audit(1751143502.056:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20277 comm="syz.0.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1811.497686][ T26] audit: type=1326 audit(1751143502.056:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20277 comm="syz.0.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1811.531659][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1811.541087][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1811.551033][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1811.563796][T19830] device veth0_macvtap entered promiscuous mode [ 1811.585611][T19830] device veth1_macvtap entered promiscuous mode [ 1811.672893][T19830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.745805][T19830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.000306][T19830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1812.392501][T19830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.447050][T19830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1812.537795][T19830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.622501][T19830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1812.827068][T15295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1812.865639][T15295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1813.154826][T15295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1813.241712][T19830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1813.252517][T19830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.262572][T19830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1813.273362][T19830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.297853][T19830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1813.330798][T19830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1813.466558][T19830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1813.533613][T15305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1813.553070][T15305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1813.597148][T19830] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.627545][T19830] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.646579][T19830] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.658496][T19830] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.443426][T15305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1814.503829][T15305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.627100][T15305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1814.657381][ T4620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1814.668938][ T4620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.719145][T15298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1815.481695][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1815.481716][ T26] audit: type=1326 audit(1751143507.616:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.1.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7fc00000 [ 1815.772860][ T26] audit: type=1326 audit(1751143508.006:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20342 comm="syz.4.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1816.023223][T20366] xt_connbytes: Forcing CT accounting to be enabled [ 1816.030060][T20366] Cannot find set identified by id 0 to match [ 1817.027805][ T26] audit: type=1326 audit(1751143508.026:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20342 comm="syz.4.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1817.098647][T20371] binder: 20369:20371 ioctl c0046209 0 returned -22 [ 1817.281799][ T26] audit: type=1326 audit(1751143508.026:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20342 comm="syz.4.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1817.304413][ T26] audit: type=1326 audit(1751143508.036:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20342 comm="syz.4.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1817.345719][ T26] audit: type=1326 audit(1751143508.036:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20342 comm="syz.4.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1817.593156][ T26] audit: type=1326 audit(1751143508.036:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20342 comm="syz.4.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1817.625703][T20378] input: syz0 as /devices/virtual/input/input14 [ 1817.632520][ T26] audit: type=1326 audit(1751143508.036:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20342 comm="syz.4.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1817.730773][T20383] netlink: 'syz.0.3432': attribute type 152 has an invalid length. [ 1818.116572][ T26] audit: type=1326 audit(1751143508.036:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20342 comm="syz.4.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1818.277794][ T26] audit: type=1326 audit(1751143508.036:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20342 comm="syz.4.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1821.971041][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1821.971064][ T26] audit: type=1326 audit(1751143512.856:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20396 comm="syz.0.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1823.498114][T20423] xt_connbytes: Forcing CT accounting to be enabled [ 1823.528062][T20423] Cannot find set identified by id 0 to match [ 1826.737901][T20463] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3451'. [ 1827.435656][ T26] audit: type=1326 audit(1751143519.666:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20444 comm="syz.1.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 1827.533078][ T26] audit: type=1326 audit(1751143519.716:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20444 comm="syz.1.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 1828.949761][T20481] binder: 20480:20481 ioctl c0046209 0 returned -22 [ 1829.093575][T20491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1829.102151][T20491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1829.123756][T20491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1829.132193][T20491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1829.141422][T20491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1829.150974][T20491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1829.347993][T20491] 9pnet_virtio: no channels available for device syz [ 1829.941997][T20490] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1831.000425][T20511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3463'. [ 1833.937890][ T26] audit: type=1326 audit(1751143526.136:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20522 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1834.023647][ T26] audit: type=1326 audit(1751143526.136:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20522 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1834.056507][ T26] audit: type=1326 audit(1751143526.146:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20522 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1834.114980][ T26] audit: type=1326 audit(1751143526.146:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20522 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1834.182470][ T26] audit: type=1326 audit(1751143526.146:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20522 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1834.297500][ T26] audit: type=1326 audit(1751143526.206:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20522 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1834.397931][T16744] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1834.402379][ T26] audit: type=1326 audit(1751143526.256:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20522 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1834.460458][ T26] audit: type=1326 audit(1751143526.256:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20522 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1834.726768][T20557] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1834.798002][T16744] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.817970][T16744] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1834.834405][T16744] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1834.867844][T16744] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1834.940950][T20567] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3475'. [ 1834.956655][T16744] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.178602][T16744] usb 10-1: config 0 descriptor?? [ 1836.068085][T16763] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1836.125374][T16744] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xd [ 1836.160044][T16744] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 1837.990338][T16744] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1838.014245][T16763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1838.044887][T16744] usb 10-1: USB disconnect, device number 8 [ 1838.128151][T16763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1838.201502][T16763] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1838.245501][T16763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.324681][T16763] usb 5-1: config 0 descriptor?? [ 1838.363556][T16763] usb 5-1: can't set config #0, error -71 [ 1838.410226][T16763] usb 5-1: USB disconnect, device number 15 [ 1838.486271][T20596] fido_id[20596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1838.536671][T20610] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1838.669469][ T26] audit: type=1326 audit(1751143530.906:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1838.716118][ T26] audit: type=1326 audit(1751143530.906:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1839.037338][T20626] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3489'. [ 1840.257912][T16344] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1841.247969][T16344] usb 10-1: Using ep0 maxpacket: 16 [ 1841.257052][T16344] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1841.287594][T16344] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1841.333815][T16344] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1841.375787][T16344] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1841.507816][T16344] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.516021][T16344] usb 10-1: Product: syz [ 1841.520471][T16344] usb 10-1: Manufacturer: syz [ 1841.525237][T16344] usb 10-1: SerialNumber: syz [ 1841.808033][T20660] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1841.910819][T16344] usb 10-1: 0:2 : does not exist [ 1841.955387][T16344] usb 10-1: USB disconnect, device number 9 [ 1842.040068][T20674] usb usb8: usbfs: process 20674 (syz.4.3502) did not claim interface 0 before use [ 1842.116679][T20674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3502'. [ 1843.669844][T20595] udevd[20595]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1843.895948][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3503'. [ 1845.467388][T20678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1845.589056][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1845.589073][ T26] audit: type=1326 audit(1751143537.826:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20691 comm="syz.8.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1845.692741][ T26] audit: type=1326 audit(1751143537.826:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20691 comm="syz.8.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1845.815154][ T26] audit: type=1326 audit(1751143537.826:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20691 comm="syz.8.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1845.898230][ T26] audit: type=1326 audit(1751143537.826:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20691 comm="syz.8.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1845.964794][ T26] audit: type=1326 audit(1751143537.826:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20691 comm="syz.8.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1846.073711][ T26] audit: type=1326 audit(1751143537.826:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20691 comm="syz.8.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1846.096342][ C1] vkms_vblank_simulate: vblank timer overrun [ 1846.171102][T20723] futex_wake_op: syz.4.3515 tries to shift op by -1; fix this program [ 1846.197915][ T26] audit: type=1326 audit(1751143537.826:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20691 comm="syz.8.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1846.263713][T20731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'. [ 1846.291151][ T26] audit: type=1326 audit(1751143537.826:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20691 comm="syz.8.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1846.313534][ C1] vkms_vblank_simulate: vblank timer overrun [ 1846.579989][ T26] audit: type=1326 audit(1751143537.826:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20691 comm="syz.8.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1846.626387][T20738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3517'. [ 1847.265784][ T26] audit: type=1326 audit(1751143537.826:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20691 comm="syz.8.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1847.513599][T20748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3520'. [ 1849.232048][T20772] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1850.077868][ T14] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1850.263538][T20796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3530'. [ 1851.018588][ T14] usb 10-1: no configurations [ 1851.023451][ T14] usb 10-1: can't read configurations, error -22 [ 1851.178077][ T14] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1851.384962][ T14] usb 10-1: no configurations [ 1851.394804][ T14] usb 10-1: can't read configurations, error -22 [ 1851.422652][ T14] usb usb10-port1: attempt power cycle [ 1852.687854][ T14] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1852.979290][ T14] usb 10-1: device descriptor read/8, error -71 [ 1854.007920][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 1854.007936][ T26] audit: type=1326 audit(1751143546.236:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1854.198394][T20846] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3543'. [ 1854.997859][ T26] audit: type=1326 audit(1751143546.236:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1855.068111][ T26] audit: type=1326 audit(1751143546.236:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1855.185252][ T26] audit: type=1326 audit(1751143546.236:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1855.275164][ T26] audit: type=1326 audit(1751143546.236:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1855.371495][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1855.406978][T20858] 9pnet_virtio: no channels available for device syz [ 1855.861610][ T26] audit: type=1326 audit(1751143546.236:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1855.884254][ C1] vkms_vblank_simulate: vblank timer overrun [ 1856.036895][ T26] audit: type=1326 audit(1751143546.236:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1856.062914][ T26] audit: type=1326 audit(1751143546.236:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1856.086966][ T26] audit: type=1326 audit(1751143546.236:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1856.127879][ T26] audit: type=1326 audit(1751143546.236:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20830 comm="syz.4.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378898e929 code=0x7ffc0000 [ 1856.718949][T20871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3548'. [ 1858.330825][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.337209][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.705689][T20892] random: crng reseeded on system resumption [ 1860.283607][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3557'. [ 1861.412451][T20918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1861.446333][T20918] 9pnet_virtio: no channels available for device syz [ 1862.190136][T20925] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3563'. [ 1862.898706][T20233] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1863.089419][T20233] usb 10-1: Using ep0 maxpacket: 8 [ 1863.101196][T20233] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1863.111298][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 1863.111313][ T26] audit: type=1326 audit(1751143555.346:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20927 comm="syz.0.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1863.140096][ C1] vkms_vblank_simulate: vblank timer overrun [ 1863.823850][T20233] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.832449][T20233] usb 10-1: Product: syz [ 1863.837116][T20233] usb 10-1: Manufacturer: syz [ 1863.842336][T20233] usb 10-1: SerialNumber: syz [ 1863.862645][T20233] usb 10-1: config 0 descriptor?? [ 1864.076499][T20233] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1864.715345][T20975] binder: 20974:20975 ioctl c0046209 0 returned -22 [ 1865.074885][T20979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1865.083328][T20979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1865.104655][T20979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1865.113026][T20979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1865.122037][T20979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1865.130344][T20979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1865.312002][T20979] 9pnet_virtio: no channels available for device syz [ 1866.013677][T20233] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 1866.037110][T20233] usb 10-1: USB disconnect, device number 14 [ 1866.837919][ T26] audit: type=1326 audit(1751143559.026:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20988 comm="syz.0.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1868.300385][T21018] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1868.332136][T21016] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1869.017932][T16744] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1869.072151][T21040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3594'. [ 1869.117928][T21040] device bridge_slave_1 left promiscuous mode [ 1869.128158][T21040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.160854][T21040] device bridge_slave_0 left promiscuous mode [ 1869.181383][T21040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.207977][T16744] usb 2-1: Using ep0 maxpacket: 16 [ 1869.215160][T16744] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1869.439991][T16744] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1869.457824][T16744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.465913][T16744] usb 2-1: Product: syz [ 1869.512110][T16744] usb 2-1: Manufacturer: syz [ 1869.757189][ T26] audit: type=1326 audit(1751143561.746:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21031 comm="syz.9.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1869.979884][T16744] usb 2-1: SerialNumber: syz [ 1870.199850][T16744] usb 2-1: config 0 descriptor?? [ 1871.325527][T21074] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1871.924226][T12951] usb 2-1: USB disconnect, device number 15 [ 1872.234913][T21095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3608'. [ 1872.485344][T21100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3605'. [ 1873.102747][ T26] audit: type=1326 audit(1751143565.126:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21085 comm="syz.8.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7fc00000 [ 1873.567074][ T26] audit: type=1326 audit(1751143565.126:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21085 comm="syz.8.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa59e18e929 code=0x7fc00000 [ 1873.748693][ T26] audit: type=1326 audit(1751143565.126:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21085 comm="syz.8.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7fc00000 [ 1873.841411][ T26] audit: type=1326 audit(1751143565.126:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21085 comm="syz.8.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7fc00000 [ 1874.921800][T21120] netlink: 'syz.4.3614': attribute type 1 has an invalid length. [ 1874.983035][T21120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1875.079744][ T93] block nbd1: Attempted send on invalid socket [ 1875.086379][ T93] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1875.098520][T21126] vxfs: unable to read disk superblock at 1 [ 1875.105530][ T52] block nbd1: Attempted send on invalid socket [ 1875.111920][ T52] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1875.123040][T21123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1875.144464][T21126] vxfs: unable to read disk superblock at 8 [ 1875.151046][T21123] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 1875.350227][T21123] bond1: (slave ipip0): Error -95 calling set_mac_address [ 1876.071162][T21126] vxfs: can't find superblock. [ 1876.135563][T21131] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3615'. [ 1876.149535][T21131] device vlan0 entered promiscuous mode [ 1876.155167][T21131] device bridge0 entered promiscuous mode [ 1877.841412][T21161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3622'. [ 1877.997549][T21168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3621'. [ 1878.245746][T21172] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3624'. [ 1878.448000][ T26] audit: type=1326 audit(1751143570.546:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21149 comm="syz.0.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1879.219413][T21183] device syzkaller0 entered promiscuous mode [ 1881.340222][T21189] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3628'. [ 1882.496235][ T26] audit: type=1326 audit(1751143574.726:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21220 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7fc00000 [ 1882.518723][ C1] vkms_vblank_simulate: vblank timer overrun [ 1882.728670][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3637'. [ 1882.754340][T21234] binder: 21233:21234 ioctl c0046209 0 returned -22 [ 1883.094595][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1883.128805][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1883.146558][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1883.155700][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1883.169394][T21246] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1883.343524][T21246] 9pnet_virtio: no channels available for device syz [ 1884.248716][T21262] device syzkaller0 entered promiscuous mode [ 1885.345025][T21278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3646'. [ 1885.470743][T21243] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3641'. [ 1886.007852][ T9900] Bluetooth: hci4: command 0x0406 tx timeout [ 1886.143568][ T26] audit: type=1326 audit(1751143578.376:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21274 comm="syz.8.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7fc00000 [ 1886.166390][ C1] vkms_vblank_simulate: vblank timer overrun [ 1886.693574][T21305] binder: 21303:21305 ioctl c0046209 0 returned -22 [ 1887.362323][T21310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1887.373124][T21310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1887.382420][T21310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1888.077283][T21310] 9pnet_virtio: no channels available for device syz [ 1890.895906][T21332] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1893.238322][ T26] audit: type=1326 audit(1751143585.406:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21343 comm="syz.9.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1893.273886][ T4298] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1893.398278][T21372] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1893.435901][T21372] 9pnet_virtio: no channels available for device syz [ 1894.176751][T16763] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1894.213466][T16763] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1894.390165][ T4298] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1894.405118][ T4298] usb 2-1: config 66 interface 0 has no altsetting 0 [ 1894.834056][ T4298] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1895.022691][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.123937][ T4298] usb 2-1: Product: syz [ 1895.158239][ T4298] usb 2-1: Manufacturer: syz [ 1895.187833][ T4298] usb 2-1: SerialNumber: syz [ 1896.515697][ T9900] Bluetooth: hci5: command 0x0406 tx timeout [ 1896.712400][T21391] fido_id[21391]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1896.906692][T21403] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1896.932810][ T4298] ati_remote2 2-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1896.987924][ T4298] usb 2-1: USB disconnect, device number 16 [ 1898.167968][ T26] audit: type=1326 audit(1751143590.266:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21408 comm="syz.9.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1898.556348][ T26] audit: type=1326 audit(1751143590.266:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21408 comm="syz.9.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1898.672688][ T26] audit: type=1326 audit(1751143590.266:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21408 comm="syz.9.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1898.719020][T21433] binder: 21432:21433 ioctl c0046209 0 returned -22 [ 1898.774570][ T26] audit: type=1326 audit(1751143590.276:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21408 comm="syz.9.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1899.127819][T21440] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1899.145987][T21440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1899.154929][T21440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1899.645216][T21440] 9pnet_virtio: no channels available for device syz [ 1900.560531][T21446] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3686'. [ 1901.999842][T21466] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1902.407472][T21485] overlayfs: failed to resolve './file0': -2 [ 1902.728281][T16744] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1902.978245][T16744] usb 2-1: Using ep0 maxpacket: 16 [ 1902.999045][T16744] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1903.037370][ T26] audit: type=1326 audit(1751143595.266:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21475 comm="syz.0.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1903.421632][ T26] audit: type=1326 audit(1751143595.266:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21475 comm="syz.0.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1903.444412][ T26] audit: type=1326 audit(1751143595.266:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21475 comm="syz.0.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1903.447578][T16744] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1903.467096][ T26] audit: type=1326 audit(1751143595.266:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21475 comm="syz.0.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1903.467141][ T26] audit: type=1326 audit(1751143595.266:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21475 comm="syz.0.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1903.467176][ T26] audit: type=1326 audit(1751143595.266:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21475 comm="syz.0.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7fc00000 [ 1903.705020][T21504] binder: 21503:21504 ioctl c0046209 0 returned -22 [ 1903.983200][T16744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.964366][T21514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1905.981791][T21514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1905.990549][T21514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1906.118854][T21514] 9pnet_virtio: no channels available for device syz [ 1906.333142][T16744] usb 2-1: Product: syz [ 1906.337469][T16744] usb 2-1: Manufacturer: syz [ 1906.395712][T16744] usb 2-1: SerialNumber: syz [ 1906.674524][T16744] usb 2-1: config 0 descriptor?? [ 1907.407881][T16744] usb 2-1: can't set config #0, error -71 [ 1907.461379][T16744] usb 2-1: USB disconnect, device number 17 [ 1909.610348][T21538] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1909.858530][T21556] binder: 21555:21556 ioctl c0046209 0 returned -22 [ 1909.877939][T16344] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1911.173719][T16344] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1911.216159][T16344] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1911.289935][T16744] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1911.336621][T16344] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1911.356401][T16344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.470559][T16344] usb 5-1: Product: syz [ 1911.475519][T16344] usb 5-1: Manufacturer: syz [ 1911.480685][T16344] usb 5-1: SerialNumber: syz [ 1911.488373][T16744] usb 10-1: Using ep0 maxpacket: 16 [ 1911.499936][T16744] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1911.543348][T16744] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1911.582725][T16744] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1911.614750][T16744] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1911.644712][T16744] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.839712][T16744] usb 10-1: Product: syz [ 1911.844170][T16744] usb 10-1: Manufacturer: syz [ 1911.849473][T16744] usb 10-1: SerialNumber: syz [ 1912.612221][T21584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1912.621845][T21584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1912.629457][T21584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1912.677253][T21584] 9pnet_virtio: no channels available for device syz [ 1912.968158][T16744] usb 10-1: 0:2 : does not exist [ 1913.026935][T16744] usb 10-1: USB disconnect, device number 15 [ 1913.242274][T16344] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1913.249614][T16344] cdc_ncm 5-1:1.0: bind() failure [ 1913.286897][T16344] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1913.337847][T16344] cdc_ncm 5-1:1.1: bind() failure [ 1913.398053][T16344] usb 5-1: USB disconnect, device number 16 [ 1913.833709][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3723'. [ 1914.496824][T21587] udevd[21587]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1914.850159][T21607] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1916.239089][T21627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3729'. [ 1917.711221][T21638] binder: 21635:21638 ioctl c0046209 0 returned -22 [ 1918.285461][T21650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1918.294436][T21650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1918.470765][T21650] 9pnet_virtio: no channels available for device syz [ 1919.534931][T21662] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1919.544509][T16744] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 1919.763630][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.770459][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.918534][T16744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1921.526524][T16744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.537070][T16744] usb 5-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 1921.546228][T16744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.603415][T16744] usb 5-1: config 0 descriptor?? [ 1921.886240][T21654] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1923.663543][T15292] Bluetooth: hci2: Frame reassembly failed (-84) [ 1925.678011][ T9900] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1925.685082][ T4267] Bluetooth: hci2: command 0x1003 tx timeout [ 1927.478948][T16744] usbhid 5-1:0.0: can't add hid device: -71 [ 1927.485317][T16744] usbhid: probe of 5-1:0.0 failed with error -71 [ 1927.768781][T16744] usb 5-1: USB disconnect, device number 17 [ 1929.999090][T21757] netlink: 'syz.1.3755': attribute type 1 has an invalid length. [ 1930.058488][T21758] overlayfs: failed to clone upperpath [ 1933.914708][T21821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3769'. [ 1934.659617][ T26] audit: type=1326 audit(1751143626.206:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21800 comm="syz.4.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378898e929 code=0x7fc00000 [ 1937.509196][T21839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3772'. [ 1939.291071][T21852] binder: 21850:21852 ioctl c0046209 0 returned -22 [ 1939.422660][ T26] audit: type=1326 audit(1751143631.626:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21841 comm="syz.9.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1939.552524][ T26] audit: type=1326 audit(1751143631.626:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21841 comm="syz.9.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1940.848005][T21865] 9pnet_virtio: no channels available for device syz [ 1943.139128][T21875] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1944.008392][T21891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3784'. [ 1944.395237][ T26] audit: type=1326 audit(1751143636.256:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21876 comm="syz.9.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7fc00000 [ 1947.462086][T21918] binder: 21917:21918 ioctl c0046209 0 returned -22 [ 1949.365318][ T26] audit: type=1326 audit(1751143641.596:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.9.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1949.490056][ T26] audit: type=1326 audit(1751143641.636:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.9.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1949.617421][ T26] audit: type=1326 audit(1751143641.636:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.9.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1949.677752][ T26] audit: type=1326 audit(1751143641.636:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.9.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1949.727890][ T26] audit: type=1326 audit(1751143641.636:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.9.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1949.812917][ T26] audit: type=1326 audit(1751143641.636:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.9.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1949.898162][ T26] audit: type=1326 audit(1751143641.636:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.9.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1950.140103][T21942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3791'. [ 1950.541429][ T26] audit: type=1326 audit(1751143641.636:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.9.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1950.650120][ T26] audit: type=1326 audit(1751143641.636:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.9.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1950.692885][T21943] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1950.693334][ T26] audit: type=1326 audit(1751143641.636:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.9.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1950.764395][ T26] audit: type=1326 audit(1751143641.636:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21919 comm="syz.9.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 1951.415271][T21965] IPVS: Error connecting to the multicast addr [ 1951.748064][T11714] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 1952.010286][T11714] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1952.163044][T11714] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1952.173554][T11714] usb 10-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 1952.183106][T11714] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.202643][T11714] usb 10-1: config 0 descriptor?? [ 1952.371543][T21974] netlink: 'syz.4.3802': attribute type 1 has an invalid length. [ 1953.185079][T15295] Bluetooth: hci2: Frame reassembly failed (-84) [ 1953.266687][T21957] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1955.522435][ T4267] Bluetooth: hci2: command 0x1003 tx timeout [ 1955.538149][ T9900] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1955.603370][T11714] usbhid 10-1:0.0: can't add hid device: -71 [ 1955.635413][T11714] usbhid: probe of 10-1:0.0 failed with error -71 [ 1955.656110][T11714] usb 10-1: USB disconnect, device number 16 [ 1957.445901][T22028] netlink: 'syz.0.3815': attribute type 1 has an invalid length. [ 1958.503413][T22045] binder: 22044:22045 ioctl c0046209 0 returned -22 [ 1958.674008][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 1958.674026][ T26] audit: type=1326 audit(1751143650.896:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1958.773820][ T26] audit: type=1326 audit(1751143650.936:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1958.797502][ T26] audit: type=1326 audit(1751143650.936:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1958.880483][T22050] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1958.913407][T22050] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1958.931105][T22050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1958.940221][T22050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1958.953296][T22050] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1959.077773][T22050] 9pnet_virtio: no channels available for device syz [ 1959.455534][T22051] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1959.549212][ T26] audit: type=1326 audit(1751143650.936:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1959.673379][ T26] audit: type=1326 audit(1751143650.936:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1959.778268][ T26] audit: type=1326 audit(1751143650.936:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1959.807877][ T26] audit: type=1326 audit(1751143650.936:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1960.729136][ T26] audit: type=1326 audit(1751143650.956:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1960.751982][ T26] audit: type=1326 audit(1751143650.956:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1961.354288][T22065] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3816'. [ 1961.787610][ T26] audit: type=1326 audit(1751143650.956:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22038 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1963.358984][T22104] netlink: 'syz.9.3828': attribute type 1 has an invalid length. [ 1963.804455][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 1963.804477][ T26] audit: type=1326 audit(1751143655.986:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22109 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1963.971259][ T26] audit: type=1326 audit(1751143655.986:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22109 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1964.674450][ T26] audit: type=1326 audit(1751143655.986:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22109 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1964.797273][ T26] audit: type=1326 audit(1751143655.986:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22109 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1964.867790][ T26] audit: type=1326 audit(1751143655.986:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22109 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1965.034561][ T26] audit: type=1326 audit(1751143655.996:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22109 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1965.286852][T22130] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1965.294772][ T26] audit: type=1326 audit(1751143655.996:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22109 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1965.306688][T22133] netlink: 'syz.8.3835': attribute type 152 has an invalid length. [ 1965.398119][ T26] audit: type=1326 audit(1751143655.996:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22109 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1965.477909][ T26] audit: type=1326 audit(1751143655.996:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22109 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1965.587326][ T26] audit: type=1326 audit(1751143655.996:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22109 comm="syz.0.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 1966.598140][T22150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3839'. [ 1969.643731][T22173] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1969.653570][T22173] ubi: mtd0 is already attached to ubi31 [ 1970.117359][T22185] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1970.660480][T22202] binder: 22201:22202 ioctl c0046209 0 returned -22 [ 1971.276364][T22205] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1971.306005][T22205] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1971.322578][T22205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1971.331676][T22205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1971.344711][T22205] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1972.023248][T22204] 9pnet_virtio: no channels available for device syz [ 1972.097811][ T14] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1972.539816][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1972.708082][ T14] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1972.752748][ T14] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1972.782816][ T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.830860][ T14] usb 10-1: Product: syz [ 1972.842763][ T14] usb 10-1: Manufacturer: syz [ 1972.850855][ T14] usb 10-1: SerialNumber: syz [ 1972.862377][ T14] usb 10-1: config 0 descriptor?? [ 1972.868991][T22196] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1972.886607][T22196] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1972.969097][ T14] usb 10-1: ucan: probing device on interface #0 [ 1972.976358][ T14] usb 10-1: ucan: invalid EP count (1) [ 1972.982472][ T14] usb 10-1: ucan: probe failed; try to update the device firmware [ 1974.186698][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 1974.186716][ T26] audit: type=1326 audit(1751143666.416:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22228 comm="syz.8.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1974.476973][ T26] audit: type=1326 audit(1751143666.416:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22228 comm="syz.8.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa59e18d3df code=0x7ffc0000 [ 1974.534222][ T26] audit: type=1326 audit(1751143666.416:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22228 comm="syz.8.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1974.628606][T11714] usb 10-1: USB disconnect, device number 17 [ 1974.670134][T22239] @: renamed from vlan0 [ 1974.828912][T22237] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1974.836774][ T26] audit: type=1326 audit(1751143666.416:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22228 comm="syz.8.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1974.946400][ T26] audit: type=1326 audit(1751143666.416:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22228 comm="syz.8.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1974.964457][T22229] sctp: [Deprecated]: syz.8.3861 (pid 22229) Use of int in maxseg socket option. [ 1974.964457][T22229] Use struct sctp_assoc_value instead [ 1975.011431][ T26] audit: type=1326 audit(1751143666.416:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22228 comm="syz.8.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1975.322636][ T26] audit: type=1326 audit(1751143666.416:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22228 comm="syz.8.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1975.424400][ T26] audit: type=1326 audit(1751143666.416:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22228 comm="syz.8.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1975.551590][ T26] audit: type=1326 audit(1751143666.416:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22228 comm="syz.8.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1975.967259][ T26] audit: type=1326 audit(1751143666.416:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22228 comm="syz.8.3861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa59e18e929 code=0x7ffc0000 [ 1976.456428][T22257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3862'. [ 1976.738958][T11714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1978.112455][T22272] xt_connbytes: Forcing CT accounting to be enabled [ 1978.119451][T22272] Cannot find set identified by id 0 to match [ 1981.210784][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.217248][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1982.542637][T22298] netlink: 'syz.9.3879': attribute type 152 has an invalid length. [ 1982.787998][T22302] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1983.788252][T22317] Cannot find set identified by id 0 to match [ 1984.657694][ C0] hrtimer: interrupt took 71499 ns [ 1985.274384][T22344] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3892'. [ 1985.479324][T22352] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1985.781955][T22356] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1986.007007][T22366] device veth0_to_team entered promiscuous mode [ 1986.754831][T16344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1986.958348][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1988.969114][T22369] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3899'. [ 1989.887262][T22410] netlink: 'syz.9.3908': attribute type 10 has an invalid length. [ 1990.168050][T22410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1990.197815][T22410] team0: Port device bond0 added [ 1990.750979][T22415] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1995.311788][T22470] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 1996.240486][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1997.082350][T22486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3918'. [ 1998.066855][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 1998.066970][ T26] audit: type=1326 audit(1751143690.196:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22487 comm="syz.8.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7fc00000 [ 1998.371051][ T26] audit: type=1326 audit(1751143690.196:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22487 comm="syz.8.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa59e18e929 code=0x7fc00000 [ 1998.547918][ T26] audit: type=1326 audit(1751143690.196:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22487 comm="syz.8.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59e18e929 code=0x7fc00000 [ 1998.897792][T22516] netlink: 'syz.0.3934': attribute type 8 has an invalid length. [ 1998.905603][T22516] netlink: 'syz.0.3934': attribute type 1 has an invalid length. [ 1999.866369][T22518] netlink: 'syz.4.3933': attribute type 152 has an invalid length. [ 2001.704977][T22534] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2001.732524][T22534] 9pnet_virtio: no channels available for device syz [ 2006.000689][T11714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2006.568534][T11714] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 2006.666288][T16344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2006.810261][T11714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2006.841926][T11714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2006.872908][T11714] usb 5-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 2007.969385][T11714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.272356][T11714] usb 5-1: config 0 descriptor?? [ 2008.417879][T11714] usb 5-1: can't set config #0, error -71 [ 2008.449790][T11714] usb 5-1: USB disconnect, device number 18 [ 2008.591597][T22616] xt_NFQUEUE: number of queues (256) out of range (got 65538) [ 2009.420843][T22628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3958'. [ 2009.640149][ T26] audit: type=1326 audit(1751143701.876:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22629 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2009.705073][ T26] audit: type=1326 audit(1751143701.876:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22629 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2009.799950][ T26] audit: type=1326 audit(1751143701.906:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22629 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2009.955719][ T26] audit: type=1326 audit(1751143701.906:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22629 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2010.535762][ T26] audit: type=1326 audit(1751143701.906:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22629 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2010.665315][ T26] audit: type=1326 audit(1751143701.906:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22629 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2010.807391][ T26] audit: type=1326 audit(1751143701.906:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22629 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2011.134834][T22650] xt_connbytes: Forcing CT accounting to be enabled [ 2011.142065][T22650] set match dimension is over the limit! [ 2011.150963][ T26] audit: type=1326 audit(1751143701.916:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22629 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2011.800106][ T26] audit: type=1326 audit(1751143701.916:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22629 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f827ad2ab19 code=0x7ffc0000 [ 2011.919476][ T26] audit: type=1326 audit(1751143701.916:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22629 comm="syz.1.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f827ad2ab19 code=0x7ffc0000 [ 2015.167387][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2015.291920][T22704] Cannot find set identified by id 0 to match [ 2018.718640][T22752] ptrace attach of "./syz-executor exec"[19830] was attempted by "./syz-executor exec"[22752] [ 2018.869178][ T26] kauditd_printk_skb: 648 callbacks suppressed [ 2018.869247][ T26] audit: type=1326 audit(1751143710.986:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2019.471842][ T26] audit: type=1326 audit(1751143710.986:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2019.513968][ T26] audit: type=1326 audit(1751143710.996:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2019.691343][ T26] audit: type=1326 audit(1751143710.996:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2019.787830][ T26] audit: type=1326 audit(1751143710.996:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2019.990105][ T26] audit: type=1326 audit(1751143710.996:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2020.178637][ T26] audit: type=1326 audit(1751143711.006:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2020.346792][ T26] audit: type=1326 audit(1751143711.006:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2020.433986][ T26] audit: type=1326 audit(1751143711.006:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2020.463947][ T26] audit: type=1326 audit(1751143711.016:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22735 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f827ad8e929 code=0x7ffc0000 [ 2023.461080][T22801] tipc: Started in network mode [ 2023.479790][T22801] tipc: Node identity 4a5299f824b, cluster identity 4711 [ 2023.517222][T22801] tipc: Enabled bearer , priority 0 [ 2023.563302][T22807] device syzkaller0 entered promiscuous mode [ 2023.604678][T22811] binder: 22810:22811 ioctl c0046209 0 returned -22 [ 2023.649006][T22801] syzkaller0: MTU too low for tipc bearer [ 2023.665105][T22801] tipc: Disabling bearer [ 2023.988597][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 2023.988613][ T26] audit: type=1326 audit(1751143716.226:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22802 comm="syz.9.4009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 2024.017212][ C1] vkms_vblank_simulate: vblank timer overrun [ 2024.106866][ T26] audit: type=1326 audit(1751143716.266:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22802 comm="syz.9.4009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c518e929 code=0x7ffc0000 [ 2025.218531][T22835] 9pnet_virtio: no channels available for device syz [ 2025.327394][T11714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2025.363881][T22833] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2025.430547][T22833] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2025.471033][T22833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2025.534826][T22833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2025.584877][T22833] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 2025.835653][T22847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4015'. [ 2026.411078][T11714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2028.871317][ T26] audit: type=1326 audit(1751143721.106:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.0.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 2028.971929][ T26] audit: type=1326 audit(1751143721.136:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.0.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 2029.098668][ T26] audit: type=1326 audit(1751143721.136:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.0.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 2029.200794][ T26] audit: type=1326 audit(1751143721.136:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.0.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 2029.284968][T22888] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4020'. [ 2029.295147][ T26] audit: type=1326 audit(1751143721.136:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.0.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 2029.317816][ C1] vkms_vblank_simulate: vblank timer overrun [ 2029.357834][ T14] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 2029.365801][ T26] audit: type=1326 audit(1751143721.136:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.0.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 2029.424319][T22910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4024'. [ 2029.429649][ T26] audit: type=1326 audit(1751143721.136:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.0.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 2029.582836][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2029.617894][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2029.660642][ T26] audit: type=1326 audit(1751143721.136:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.0.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 2029.673458][ T14] usb 10-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 2029.683564][ C1] vkms_vblank_simulate: vblank timer overrun [ 2029.772995][T22913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4030'. [ 2030.390676][ T26] audit: type=1326 audit(1751143721.136:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.0.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 2030.496439][ T14] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.517398][ T14] usb 10-1: config 0 descriptor?? [ 2030.532181][ T26] audit: type=1326 audit(1751143721.136:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.0.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 2030.587781][ T26] audit: type=1326 audit(1751143721.136:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.0.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 2030.665726][ T26] audit: type=1326 audit(1751143721.136:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.0.4026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f71eed8e929 code=0x7ffc0000 [ 2030.803733][T22895] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2030.814961][T15295] Bluetooth: hci2: Frame reassembly failed (-84) [ 2032.797975][ T4267] Bluetooth: hci2: command 0x1003 tx timeout [ 2032.807757][ T9900] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 2032.835764][ T14] usbhid 10-1:0.0: can't add hid device: -71 [ 2032.848058][ T14] usbhid: probe of 10-1:0.0 failed with error -71 [ 2032.863664][ T14] usb 10-1: USB disconnect, device number 18 [ 2034.668891][T22970] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4041'. [ 2035.243928][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2035.804212][T22955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4040'. [ 2042.649972][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.656359][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2044.559177][ T4298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2045.838040][T16344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2054.158130][ T4298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2063.758142][T16344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2065.038352][T16344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2073.358815][T16344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2073.373741][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2078.479227][T16344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2078.479811][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2083.600161][T16344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2083.600718][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2089.368662][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2095.121255][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2098.958549][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2100.878442][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2104.080202][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.086842][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.718248][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2106.008500][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2110.480289][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2111.758513][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2116.238489][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2117.518325][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2121.998449][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2122.638816][T15308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2127.759239][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2128.399492][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2133.438261][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2133.518362][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2138.638073][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2139.278499][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2144.318467][T15308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2144.398318][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2149.358343][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2149.438485][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2154.648279][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2155.278247][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2160.318759][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2160.398411][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2165.521537][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.528187][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.157969][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2166.169149][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2171.278424][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2171.918381][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2177.038486][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2177.678965][T15308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2182.719695][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2182.798243][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2187.918286][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2188.558458][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2193.678081][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2194.319263][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2199.448543][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2203.278910][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2205.198465][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2208.398251][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2213.518256][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2219.288227][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2224.398169][T15308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2224.398169][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2226.961484][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2226.968075][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2229.438259][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2230.168291][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2234.558416][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2235.918563][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2240.398608][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2241.038183][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2246.158043][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2246.169183][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2251.918374][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2251.926409][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2257.038269][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2257.678204][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2262.798110][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2262.798729][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2267.930028][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2268.558470][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2273.678567][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2273.680351][T15308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2278.798155][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2279.438236][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2284.558107][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2284.558107][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2288.399999][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.406565][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2290.318228][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2290.328927][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2296.078200][T15263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2296.088746][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2301.838632][T15308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2301.838645][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2306.888149][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2306.959806][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2311.999113][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2313.999866][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2317.038453][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2319.758374][T15303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2322.318724][T15290] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2325.521234][T15298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2328.078199][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2331.278222][T15295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration