last executing test programs: 8m30.362776527s ago: executing program 1 (id=2): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x538, &(0x7f0000003480)="$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") mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000001040103caad1343000000000ad4d690981eb0336adda7041d000060c47bc940ffff0cfd060006400006000005000100010000000edef284f10087e3511d2f66"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4080) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 8m28.334444313s ago: executing program 1 (id=7): r0 = io_uring_setup(0x5d38, &(0x7f00000001c0)={0x0, 0xcf32, 0x2, 0x3, 0x109}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) close_range(r0, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0xfffffffb, 0x4d, 0x6, 0x7ff, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x3, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x100000, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x1, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0x3, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x5, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000007, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x4, 0xfffffffc, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x3e, 0x3], [0x7, 0xd5, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x0, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0x10ffff, 0xa620, 0x2, 0x5, 0x7fffffff, 0x2, 0x82d9, 0x60a7, 0x6, 0x16, 0x2, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x800227, 0x2002, 0x5, 0xb, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) r3 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND_TUNE_MODE(r4, 0x6f51, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) unshare(0x2c060400) socket$tipc(0x1e, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x10}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x20040040) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) 8m25.835120929s ago: executing program 1 (id=8): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fsync(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x4, 0x8, 0x0, 0x0, {0x43, 0x3, 0x5, 0xffff, 0x1000, 0x80000000400000ff, 0x0, 0x1, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) readv(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, 0x0, 0x24000000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0xa2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x1000000}, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0xfc, "8100e1c8e80b598c36ff000800"}) r7 = syz_open_pts(r4, 0x5052c2) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r3, &(0x7f00000000c0)=0x58, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000020000008510000006000000180200ff", @ANYRES32, @ANYBLOB="00000000fffffffe6600020080ffffff18000000fffffffe00000000000000049500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 8m21.461754467s ago: executing program 1 (id=11): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"}) fsopen(&(0x7f0000000740)='autofs\x00', 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) r8 = socket(0x10, 0x803, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 8m6.076122774s ago: executing program 32 (id=11): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"}) fsopen(&(0x7f0000000740)='autofs\x00', 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) r8 = socket(0x10, 0x803, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 12.720219253s ago: executing program 2 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 12.42786172s ago: executing program 2 (id=921): r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}]}, 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X1sVeUdB/BzKQWkQLs4FEMyGUNdls0gZoJOscjAUUHuwA1Jxmhl0iBBu2ZuaRdd49hwcS6Vl20sQV0iI6uNdnSDzBHFhCjE8TI0xoxXGaMZccjrwpjGpffe53LvubS9Mmd9+XxIe85zf+d57nNPzh/3e+lzbgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRFCWntzYv/t1Vm9849c7TDVe93LfvoxP+Vv+TW1cOHfu5R/5atvJP+1+aN7Jm+MTLWvcl5jbsHbskihKpfolM/7k3fWXG/Jlzpw0IA1Z/Nb2tqOjqKdNd96cb/fIe7OyX/1MTRVFpbICSzHZSWXrbJ2+A7G594YDdGjfozcWDj1a1rKkuq1368NRjhS+dTgN6ewK9JXNdHTx7LVWmfveJHZFt51x6ibxLNN0/fsG9Ly8CAHhXRidTm+zb0cxb3Gy7KV6PtStj7eZYO7xDaM5tnI/0uP26mueIeL2X5lmZjgr9u5xnrJ45/9l2Mt4/1o5FjXcxz/xDM5FmQFfzrIvVe2ueAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8kD2zd9K+bpz13eOJNT0y5bu9rs58/Oelrzy/63rED/x5+8eoD/1mz/6V5I2uGT7ysdV9ibsPesUuiqCLVL5Hunpg5cPLFX/hV1fd/39Ewdd2g5pdLMuOGbd+cg6PXws615VF0R07lYBj2H0OiKJlfSDWjlYWFBamdKaEAAADAR8klqd99su10HCzNaydSaTKR+hekw+K4QW8uHny0qmVNdVnt0oenHjv/8ZJdjFd5zvGy7YqzP4mcYBzib3y8s/VwaH3BON2LjxjP8yUdVy5Pbl/7jR2Pnn7x6r23bxtec881F97VUrv2kxdUHd/x99kF+b+i+/wfzpz8DwAAwP9C/o+P072e8v9FB8p2Ljrz6obrv/zHZ75527a7T/3mx1u+fVfHoSNNY35Qu2TzloL8PyLvKQvyf5hxyP99ovPL/wAAAPBB9v/O/5UF43Svp/xfOfrtZffcW7d26c6tZ8b/4fLWJ9reuHz1tTNGrWiN5j/bfuitgvw/urj83zd32uHBP4cJLyyPotHFn1QAAAAgT/h/97MfLYS8nv7kIJ7X77hlQvnu45d+d9Km2+7fM6zhwJ2n7xxXs3bh5gWfGX3ftMcqDxbk/8ri8n/p+/NyAQAAgCKMWrWj5q1ZV+4e88qe++qf2t06YPX0f75y/faWK5pOHF60ZeftBfk/WVz+7987LwcAAAA4h58+c82Pbm5c/K05VZvGnznx+uAH395zYX3rrgk/W7Fv2zvPrthVkP+ri8v/AzPbzMqHdKcXwl8hLCuPogGdO3XpwotR843ZAgAAAPAeCTl96aixHSvmD/3srP5TaluWr3ro0hGHP5VofnDonMbxpXs2Hrm3IP/XdX///3Cng7D+P+/+fwXr/3MK6bv+fcmNAQAAAPg4KlzPH26Pn/7mgq6+f7/Y9f+rrtv6622JG1+f3nTJvF+OWDRu8uQj+zY2nnyg+vObXh24ft0jBfm/qbj8X5K7fS+//w8AAADOw4ft+/9mF4zTvZ7u/998dePTj+2/+7kXntx8y6kLDp25of2KJ9vX33p/++HhJ6PG7acL8n9zcfk/bMtyX97GcH5+WB5Fwzp3MncT/G2Y7sJYoa00p5A+8bEeM0OPTKGtf04hpS7WY0x5FH26c6cpVvhEKDTHCkeHZAqPxwrbQyFzPWQLT8UKG8OV9vMhmenGC+tDIbPAoi2soCjLLomI9TjRVY/Owjl77Mo+OQAAwMdKCM+ZLFua34ziUbYt0dMBA3s6oE9PB5T0dEDf2AHxA7t6PKrOL4TH23+xoGb+X5bdMHRD+YxZO0u+fnDahC8uX1f9nQ1zJh8feVF5R0H+f7y4/B9ORb/0pqv1/1FY/5/5XsPs+v/qUKiIFdpCIRm/Y0AyPEc67D4UnqMimelxdFi2AAAAAB9p4XOBkl6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyXvTsPk6q6EwZ8uumFbpruNvoIar6EYNh8pGkg4hITUQwkaLSJe4wKQqNIiyiQCEE/XOJuPk38RmNmDIyJWxBxGbfRiKJohESigyOKS6IO7ga3jMsj83RXnaLqVpddCCjtvO8fXafqd9ZbS9e599a5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/w4HvTB63pQZZ6y67JUVr4ehd14+6uKSX2w3fOnSPtf98urrf/XSA88tHd973HYj+sx/tuSomc/sfHYITW3lSlLFSw6oHtlj4OWjf3rL6pn73lpz0WMV6XrT8dCt9U9p+s6ZsdUXuodwW0kIZcnAwJpUoDx9vybW9+WaELYI6wKZEs3VqRLJhsMDVSHMDesCmaruqAqhJitw4KP33XNha+KSqhD6hBAqk208XZlqoyoZ6FuRClQnAyeUpQL/WJuSCdxemgrABotvhsyLfmFTbob69ssVeP2Vb7SOfb6Sw+sSE/WF872+5ybuVJaK5ANNG/S05VXHJpH39ljk3dYJ3m152/kiT1v2F6n0N5S160KVoXRC88RxM1qmx0dKQ0NDl0I1baLneeWa2ePXJ91pXoexA/Ub5XVY3nfYQX16jj7yyhXLFz1Ut3iD/xk8kbVJs9ObWmVIv+Y6zfMYDfd50gnefnlvjF6+dIUQDt1y5ajdRx700qDD6v+1zwU7X9/wq5t/WPrKlFW7HLzbguU/O7Iqb/5f/8nz/8zHUvq2NCd3bPXD2tTcPD5SExNv1qbm5gAAANBpdIa9pv94f8sF7yy5t/n6c4a+d8OcGwYuvq9uSfWYAbcePGzfO9b0bVqRN//vVdzx/3jIvyZ7tItCGN6WOKMuhJ5tj6cC18buHF0XwtfaUk25gT0TgUUhbNOWGJCpKlGiayzRKxFYXZsODE8ElsRAUyLwuxi4KBE4MwYWJgLjY2BRIrBXDIRJuePYoTY9jqIDVTEwNrURF8azEN6uja0lttVTmaoAAAA2kvTssDz3bta5DhuaIU4vF1Z1lCGegV0wQ2WihuQMNjOtKlhDWUc1lHZUQ2bccz55+Hk1l3RUc95pGCW5GUZc++C8Pz92Vp/59b9d/fX/6vnfO15+yHHTzxy65Yw5r75z6MrVPfLm/42fPP+vbKcjJXnH/0MY0/Y35i5NR1oy8bFNORkAAACADTB7h0sefuX42of7TVn0+nn//uP/X/H7W2cdsetri3/x5DM/Kq1ZdXDe/H94cef/x30iXbIyh2VxN8TkuhAacwOpar+ZH0gd9e6WDgAAAEBnkDkenzkWPil9mzpFOzmfzs/ftJ7544H/4e3mP7Bl0ZcOm95/7KPbXvKP+7f//d3zljXsf832V+yy8poRS7b69qiP8+b/TcWd/1+de5vqxJLYi1/WhdA1K/Bg7GVroE2vGHhuj9xAevxL4gY4P1aVPjEhU9X5scTYGGhMBOYWKrE8U6JnbiD9ZGUaPyMzjknpElkBAAAA+MzF3QHxuHw8//+qv/W/eeceF2+9d/3ybd6d/MJPbnj+vv5rSpde+vZ7x5z75Qtv/Hne/H/s+p3/3zYPzju9v6VbCIPKQuiS/GHAsurUwoAxUFOSTtxdnaqrS7Kq06pD2L11YMmq/ppe/78sucbgo1WpqmKgZ+9r1vRtTVxZFcKg7MDjh8/bqTUxPRHINH5QVQhfbR1tsvF/65pqvDzZ+KVdQ/hKViBT1dFdQ2htrCJZ1X2V6esYJKu6oTKELbMCmaqGVYYwMwDQScV/pROyH5w2c9bkcS0tzSdtwkTch18VJk5qaW4Yf0LLhMoCfZqQ6HPOMkan5Y+p2CvfPJVeouij7/SuLyad+Z1gY3Zb6f34eScOpu/H70LlbeMcUp5zd2hyyP23z28iZH2TKjTk0k085OrsStY9iXn1x/wVoVvoOmNa80kNJ4+bPv2kwam/xWYfkvobDzOlttXg5Laqbq9vRbw8Cq6WlfBpt1W/7EoGTT9+6qBpM2cNnHT8uGOaj2meMnhIY+OuuwwdOqRxUOuo0n87GGq/9qpODHXtvCLHtRGHum1ZViWfxaeGhIREZ0t87YRjH5l65VtX7Fe3y1m3DPv+DTce98bBP2nceu3ZNYfvM/m1xbPy5v9TP3n+Hz914id/en2GQsf/6+Nh/tTj6w7zj42BucUe/68vdDQ/c2JAr0RgTgzMcZgfAACAL4a4OzLuzYx7pbc85Nu3r9rjr8+8stuu/+cPdx9a++FVXQ4b9f+m7fjkFo+U//Hwl/bJm//PKe73/xtp/f/M0vWjCy3zPyCWaCy0/n9ymf/M+v9zCq3/n1zmP7P+/9zPYf3/GZlAYpO8bf1/AADgi+CzW/+/w+X9kxcIyMvQ4fL+yQsE5GXocBn/Yi8QsN7r/zesOnrkhT1//dWXv3nIvj+Y8uKUBf2P/NYe1/zwvHvDNXd/Y0W/OXnz/4uKm/9buB8AAAA2HxOe/N3qwcfv+sEjD91eutdPl7/4lTeeOKbp7gfWXvzqHe9cMWKbiXnz/7nFzf8/+/X/QqHz/3sVCjQVWhjQ+n8AAAB0UoXW/3vxT996cGTlTxpPffS3f7hqp8sP3+PUh6+6d6+JV9fuc9MOo3913q558/+Fxc3/42kXpTm5Y28+rE2taReSa9q9WZv5yQAAAAB0DqWhoaG8yLw5K6Pu+enbXJleCvST0tlmXP7uqgmX7D1w3N9eHXDgf9w4+83vn/jEHac/PfvpWUsve3Pvd5blzf8XFTf/z/ldRnnfYQf16Tn6yA+vXLF80UN1iyvWHf8HAAAANp1i90sAAAAAAAAAAAAAAACfvzvXvPfro7a+b9jP77z1xj1Hvdpnu4/3ffGt58/Z7XsPz/7z1Y99sDTv9/9hTFu5Qr//j9f9i78v2Cond2y14/X/0vcP3GfBzLYlC5fVhrB9dmDy6ZO3COlr8/fLDtxzxIAerYnTkyXuemavF1sTRyUD3x34pfdaE7snAmPjIonbJAPxqorvdU8E4vKKjyUDcXssTAYq0oFzu6fGUZLcVi/XpLZVSXJbPVkTQl1WILOtbqtJtVGSHOAliUBmgCcmA3GA+6UDpcleLeiW6lUM1MSiv+mW6hUAAJut+C2wPEyc1NLcGL/Cx9tty3Jvo5wly07Lr7akyOafSi9N9tF3etcXk+6S/C667lrj5aGydQiD876uZmcpaRvlxqmlg023VYEhd7TaW2mBcknru+kqCo+oKjWihvEntEwo73DgQzvOMqSswyyD8yY72VlK2zZpEbUU0ZciRlTktimiy/F+aWho6JLItVsM1occHb0iiv29fvY6f4VeBdl56vcetcfWpTsNOXjns08cM2TJN7ZY/MrbO52y7OQXVvzTbd8be2rPvPl/fXHz/8rscb2XvhjAnHhlvW/WhTC2yBEBAADAF9/1/3f+TYeesOTliYvK/vMvf5lcuv+h5Wtn3zJ71s+evPv8756749UbGr/goVNaRk4sq7jx5t/ude3yc07ft+nQ5mGr7yx9ftmfLm3u/0b++v+9ipv/xz1Y6UPBqb0di+L1/8+oC6Ht0vr1qcC1cbhH14XwtbZUUyyRuqD+6FiiMRW4Nu4wGRBLjG3KraprDCxMBFbXpgOLEoElMZDeS3FNSO/Kubg2hJ3aUmNyS0yNJeoTgf1joFci0BADjYlA9xgYngi81j0daEoElsZAmJS7rW7unt5WAAAA6yM9zyrPvRuS87yFZR1lKOkoQ3VHGUo7ylDZUYZCo4j3b4oZyhMnr5RkZSpP1lqVqCUvQ7wY/nr3Ky9DWJ6bM1kwr+l4/kHmfIOS3AyndLvgrMe/HYYteG23h2e+Nbphu7/vd/9T90+/dPm5Kz8896DlL+TN/xuLm/9X596mWl8S5//rrv+XCjwYu/fLeOp4rxh4bo/cQHrHwJI42T0/U1VTukR60n5+LDE8BnolAlNjYHgiMHZMOjC3R24gPdPONH5GpvFJ6RJZAQAAAPjMxR0EcTdNnP8fu1/vRy+/+bqWxecMuP3da689r9eIZ2+cc9ezFxz2VGh6feWEN/Pm/8OLm//H9rplN3Zm7M0L3UO4rWRdbzKBgTWpQNyPURN/Hv/lmhC2yNrBkSnRXJ0qUZFoODxQlfqFekWyqjuqUmsMxPsHPnrfPRe2Ji6pCqFP1t6XTBtPV6baqEoG+lakAtXJwAllqUDc85MJ3F6aCsAGy+wVjC+o9KkuGfXtlyvw+vuiXBM0Oby8faDt5GvvN1ebSmXygfQ+1Yz1e9ryqmOTyHt7LPJu64zvtnrvtuwvUulvKGvXhSpD6YTmieNmtEyPj2T/kjXPJnqes3+lWkx6I7wO53z63nasMtmBxsTHR2P75dp/HZZkFtrqO+ygPj1HH3nliuWLHqpbXFF0NwqIPxQ+o+7i+ieyNu+mVhnSr7lO93nS5POkM/4b6OVpCyF0feK4poV7f/z02V23fmCbmz96aOdDV1z19rfuOXr3J7cYNeKKhT/Mm/83FTf/L0vctnk/bsxpdSH0z9q4y+LmH1GX+hzMCqQ+JbfMD6QOuT9fW/CTEwAAADa2zO6OzP6CSenb1AnhyXlyfv6m9cwf91cMbzd/sf1++eNVP3p+4bwPTq2bcdabp87d9/2xj1837u8Nu9xXd/Ir/zLvgGPz5v9jP3n+3zXRTcf/Hf9nE3H8v12b+67orskH5mzQrui86tgkHP9v1+b+bnP8v12O/zv+3x7H/zvg+H+7NvenLe9b0lRfukII83+0w13LLxt/y0tNLVefPWvk19/9ftPiU+4aPuXXD7y6ZOaf7+yXN/+fWtz83/p/7S/al1n/b2yh9f+mFlr/b471/wAAgE2qwEJzyXle3up9eRmSq/flZehwgcAOlxi0/t96r/939KpH99/jlt1/80TpvBuv2/+DytuOGLLVDdvPn3j4+688tWb+vb/Pm//PKW7+H18O3bJb7yzr//UaU6Cqi2JgqoUBAQAA2BwV2kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA56ux/48fm73ghSUf/vjIvd4+f/FFlx6wY8/5Y+5/640eB77z1iEjlz63dHzvcduN6DP/2ZKjZj6z89khTGorV5IqXnJA9cgeAy8f/dNbVs/c99aaix6rTNdbnr7dLid3bPXD2hDmZj1SExNv1rbeWRc4cJ8FM8taE8tqQ9g+OzD59MlbtCZ+VxtCv+zAPUcM6NGaOD1Z4q5n9nqxNXFUMvDdgV96rzWxezpQkuzuP3dPdbck2d0Lu4dQlxXIdPe47rlVZdoYlQ6UJtu4uibVRgzUxKKX1aTaiIGWWGJS1xAGlYXQJVnVHytTVXVJVnVnZaqqLsmqTq0MYfcQQlmyqmcqUlWVJUf+SEWqqhjo2fuaNX1bE3MrQhiUHXj88Hk7tSZOTAQyjf+gIoSvtr5kko3fVJ5qvDzZ+CXlIXwlhFCRLPFOWapERbLEX8tC2DIrkGn82LIQZga+EOKHz4TsB6fNnDV5XEtL80mbMFGRbqsqTJzU0tww/oSWCZWJPhVSkpVee9qnH/tTa2aPb7396Du964tJl6XLlbd1eUh5zt2hm3vvY7+qsytZ93zk1R/zV4RuoeuMac0nNZw8bvr0kwan/habfUjqb5d0NLWtBneWbdUvu5JB04+fOmjazFkDJx0/7pjmY5qnDB7S2LjrLkOHDmkc1Dqq9N+NMdR5n/1Qty3LquSz+ACQkJDobInSnE+3xs39gzzvi/66jpaHyrYP6LxpRXaWkrZRboxB7/kpR/xpvqd0OKLBeROHvCxDOs4yNG8ysS5LVSpL2/e6vMlhdk2lbZs03i8NDQ1dCm2H+ty72Zv39Q3YvCvTm67YNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8DztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOo2cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBLAQAA//8d6cf4") ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000002440)={{}, 0x0, 0x4, @inherit={0x0, 0x0}, @name="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"}) 9.822156899s ago: executing program 3 (id=928): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18410, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES32], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r0, 0x0, 0x4f) 9.752629881s ago: executing program 0 (id=930): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = socket$inet6(0xa, 0x0, 0x10000081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7f2cb81569"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9d5cc56b2"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4060000}, 0x1) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r5, r4}) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000), 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1}) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000180)=0x7a553352, 0x4) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') pread64(r7, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 9.519916816s ago: executing program 3 (id=931): r0 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000001c0)={0x20000000, 0xc6f, 0x101}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x78, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) keyctl$negate(0xd, 0x0, 0x7, r0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, &(0x7f0000000100)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r8 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r8, 0x110, 0x6, 0x0, 0x0) keyctl$link(0x8, r0, r0) pwritev(r7, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x4a628) 9.467829947s ago: executing program 5 (id=932): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000006800010002000000fb25ffff0000efff000000000c0002000c83208b0100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) gettid() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) acct(&(0x7f0000000180)='./file0\x00') r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) 5.808081259s ago: executing program 2 (id=935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xb6, 0x0, 0x1a000}) 5.747191511s ago: executing program 0 (id=936): ioperm(0x3, 0x4, 0x100000a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x5, 0x1, 0x6165787a) 5.485522716s ago: executing program 5 (id=937): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00080077617265677561726400000004"], 0x38}}, 0x0) 5.399584729s ago: executing program 2 (id=938): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040)="1cce1b8e", 0x0}, 0x20) 5.295971431s ago: executing program 0 (id=939): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000004c0)={{}, "daa7b81cc3ccb2b38e5ae5a3f49274d26428b5fe23fb977631a8ca25ebf771e9a4ad0a0f474a4bc6d09ab07a8526d24f18ed3b91a57044faf5a131ec343753e768862cc99c982772e72929e428084c07dc45475e8d2f00439fd9370507d0df7628844cf59c815fb53fe6af42a60f68a6b1ecc84633a0e4f843dc98255eb2de8d7eb1e5f626a58a8b38fc3d93185f587b045ae31f87740b34b03a169142b8b9ff326456e8432d33933971af42661f462db321e7cb6aab3f3eb79f107023dd2797e4cf74c2f8e1e8b7c981ce06f542a922cdd96914deabbd9203c7c96a33458d8cb09f2a931a935b3059f741fa8a0d4d1163ff7093be9c39f15cc65d59c6cd5dc62ca56dc375e1774bd598371143ba19e69c76140924ff062406aeba314e1cac3491c24f9acc4e96a40392e4e2ca43791ef2400fbac517af17f1abfd400ef27b9b244e7cf020fefc1d0f4ab91a33e1d5a625bda50792b59a514fe17fa06466097bf7e37aa4a4718f192fcdd880822d268a4d3e9ea7ba71674f2c2ccaec2de0045b42f606a491fd38b268494598eeaaca097884570d73bb79dfc5124f00be7c952f5aacd064ce277f28d679c9ee721127e23f56d2053e3093df3e7cb488135ff91e3f59d9cb0a5224e86d388f6c2f7f237150fd42d42d25c1756a68a9a7eeac4ac5c11947b9c4ac26bafb2291d33d615349cd8e41c5573ba21b3e1dfb6c101f4cd9be829735ba220b63d52bc990b45aee6398ce78b699e8e1e7bfc3759da6ece7184ca44f0d584b082618576b4c736e32628497eaa81104ebd367110dbc1bf9f170cb25ee4f307b5cf9e59e6cc3bf9a4615b324e4cc94f4c638d539f6b319f10ab04eddd969d3456829ab35857432d9386da4ace29d9f3be7c0c2f9f2c478f416ca38584ee5f1053738e9dca75012ff301c487e88ac15d6f82d54993679d04191338fa54df3a69a2d6109eef778080b837175a20a5e94cf6a1e010d7fd1be518850668b4c6e869de5d3c5edbe5a977b05aa0b08a00d6bef4a68c4065ded1f0d0da22336f3687ab7b1fa71a7fcc10747284e20a439ce2dcfe1d6f412b4d48bf76186ae237685f38bcfdb8dee60618b564d00faa54d01e1fa60c303e69bed6edbf2d3320d917098819fab698ec96adf4f0fb5f2b5b92db816dd0beee1c29e9100fae302ae2b053b6d3544cba90c98ca680b546f3bb9aceb6a6cb8c042f732911d6073bb21e85aad0b3f9cd00c4a3a6e32d7a72663e6fd68da6a6fd76666d390de0dca30f447aeec36dfeb53a6dcbd07f212090a481213fda11d29e3e71db5438e9b546bc56fa9aa11f407780db3695aa5e8b6f034ace0a841eb7d43898f5cde12877b55f047afd023e899ebda8e02fee4dcd58e053306dfeeed12ff90d9ec3b9cd648a112ad310aa4a2b2b2099e4b97ea1686267a446623f397760dc1a8ba3d9d7782fbf10808f5acf8b750bd0027e5b2d9a0dd8028b5b5866a0d58417673c184758d59d471585306e2cdfb9353ca6d914d43d075e2be965af70a141336b7172a15d0ce396f7ddadfd0d92e80b40000e54ac87144738341dd887362c6151cb81741c9d7077173cff7cd42e38ad2ac8d7f80f94234d781428ff3ff5f46aaf026564b244b75713f48700182c742b3d942c34191621b9c58b3d70947fd6162f7b6f863de2ef997438e599b02c750abdd4f8aa44e795091039d7149c9406ec1cd5b64563794ca9e8025116a97b2c9fdc23617802b28378ee6ebb8e4ab93de9e06f615af142eddeb250c1726d6efa6e1eceb6bb91fc72abec20803d1f64be8826e8d291da62b746dea015155a165043ab0c5c10eec25064f9cd760cbf9c4cf8fbf786e02402b29eeaf539b5a2ffb179c0eeec72e8195f9e1dd479e6ea6d3588072d87a33707ac4dd5c76485469b210d43eff3f78367408079c4dbbb5c4ebe3543ff7616bf9ebe8c9660e10b91662c228a07305173b6f2408526d2fbad1287f7741888053b306d3a57003e23b5c8d28b08a40360b3dda04a32a55267cf06389e144da3ca644408d21d8c5e81cd4f009f92d5fc14dd21ae7a683adfb125b44bf833cfaaffd5f6f61aa3f0edd0e1ad68ba830ff320b7c9a7bc8065b8f8041fe189c8ea043e2b11f6fe67a1ccba33751709ba6f8091eba5d40f0e8c629400abd0c5c257a86c025e436d369d3fc0a4a04ff52dd1476e00edbd855162beccf992af56118c34d3c63dc6cb620c0c0f9b6d352d18da4554391455f30ce9d40ad59c0d403d7aac510d093422bec81e95020af72a4185cef005aebbe2b01500ebf612b5acb12db76c274277d10fd4945720582eb0a3af2d1014879149e7eed781e1257d836e924e892710fe07d5c5850fdb6647b4ae4d2d5c42429e8923bcafaec4f6fc4e0c8b45606d97649827d0925ffab701889e12925041889b31162b64e5c7e9b0525b244a08b24da8b5b757b7b3ef6e5176b10bc7ba8409347e3edce01dc6d60807ccf864b5757f20bba11775c124884b1f2df51e2d544ccbcc799522612a099b468529e5be74db3f5837f41612c085a68eaabaf1ed53975753970db1dc54bb8c6ccad426aae74d879587b279584816227b797304378659b6a53a1d8a46b8d957258c8a2536a716e30843ce5c4169c00a1c1ef4263e4d7fa520434ef53e09c0832e032417a952bcf58a82c53a5af2466650b91d4e962e77a771ae85d153f36d512aa83a8f5122d7268c3f11a47a81929f3e625b15369286bf1bec4fbc7f6d00fe5ed225e06463ee8064408831e649e604402e0072c8d7be27ee6cf38beeaeb8ec5588143951ef001521a1f737064be41c4a698b75bdcfa49e2dec9a4364c66755d58f3910f2faf1338b7e6cf0a5e6a96110abc059188315b96351037f44c75d165f5cd1cf82716d2ee958d816efb03aa93e1c714ec2e02345978317b53bd70c7dda5e45bad7e459b20b4484ee9389bd761f6ccdf4ee748efa17fb30aa8d7829affb558db12f498d481e5706c7cdcbcfd301851d1c00ec7b25f184a6626ced4a95cc63b760388c90ecebbd830fa9de59c5b10f5a821887004246fd418223ed91ac77ecede114d3f543097daa857cc1389a69f4ed8ec86578ca2366131c7a169ee2dcb90eac124fc6a97dd40ae4ce8a643b3fd4a125f6031fc13089517427f8ff82b57dd56c9a0b4f8f37b3015aac46dd798ff4a5344de98049fd107989182bc9677adca8149ccecdac63f3719a1ecb1e1bf422bc955335897a57482e1bb5acd2f77d9be130c6bff7bde133f35379fbd8e5b471ff22110b0c9e3504cdbdded9609cf4526689f11088e90cef4acb949a28833ee615f04ed118d7e0d834a2a56991c53317c1737a5da54aab2f7101cf05c338dde073ab157c1549c1b38967f1c75706583b7adb90ec1bc36de59ac922f293d930876594b3cfe3f483f97f6f54656ab69085260569661ea5d9f966a9ca4a101d15fae115776e9aaa7d26f7f13e56185e16e42a2435ef58710df1c254864a10baf1c0ef4cf981f4f6fcbcd938fe8f0d924e63fc4a78b2f8aa4405b3ac667e5f403bd2bc7b9b11b2c13dbd94554e1997f821ba83f65725000c890eb4e41aaacb07c9d5f1eea7237de998b3bff1072fc96cfe2a13110931c5edcaef8a0455aba123157e0eba0874d7d61ad4cfe20232d82e6dd8ab511111203e302c3bc409c2f5aaf68fc8145995aeb6c5a732af91fbf00e12780718eb3014a4564dc8ea895edab260f370d9f6801708abaeaeb5d92c1c2295afaff62c729afe92a9da69183c608522d97a3dcbc421b356759ad6903f607e2786323d791d71ef4908d802f911db8a235e8a0489f85026a11aa3e411f3ea0b7293bc106ef4b6a8f173eeb5cd0e3929d334003b00b1054a05b4543f41c0efed2ea92117d98a7ed0b48fbc83174854ce9198e614d188f54f979587d79a082ad72d29b3c15f8054bc3ee843111676a401fd1f494c6bdfff2372ac2b3efaa98da7b0d872042e7dccebcd93987e7b6b6b09419f4009242902f6671c53b20d452e6690fadaa8c558041f991c2f6c28dfac6823131cf93a916b1d4eb9b553ffc32a6087aea464e3274212ba4731517ab017f420df1d6a4e64ba6bfc74698e876c46484e52343799ee3df83caf0218a1a211d0a484d1b1012910c0035067a94288c964e789637b4e54ad3ea291413f70c8c2af643d76711e91f562c78dbb8d7c8ad70e91f4d1f4622f42fb56121c72e9e52cc7ebe64ec18c743e786c7aebe08d141481554e0fa1172c74733fa07d8721e59a2074844de4e7cd8ef2ca23ff10e8720ee543b7ae5f7ae02ecf490e3f5211ba1530c21e4f2b2fea3ad1d336e981672ed4caf617337f2bb440fd253500a1791b548f6890257b961364c99896cc86fd88fda96d4de9c8bc2cc356fc2ac8ca305c956a394d6665ba881941dd2d717d85c0d7ce22a719642e3a9df41c039dcffecacaf436798d4b986100dac66a383881342d161e33e0169c1452855b7688cf2a389f6bb65d1c3cbc61c458dd0c81045b89c07fb94fd5e2c2216750fc3f24617c3823cff4bfadcd10fd0b62d5e540e32b70c6e5277b4661b123465bb0806834dc473d480202ded8847937fea9f4d7e5af0607b2679bec7b441762d12236e3f41cfda9376adf8bcb6548dfdaf8ca771dc69263b1a6a6c1c70269acc80ba236e832b3fc2243cdcc2857db16dfd9ece251560bb587d47e2eae1fe6932c55c1fca68f9058a7fef642342030fe46b1897442626908732899a7ff0604e429595519e3df52479f425352bb51a16c6aec83f262c25b33c293fd1ec5f60f44582a104e87f439d2c4dd7be375341d6e1090373298798c627bdcb87dabc9654cde6e6ed8a3a3ec3d6eb56e4d144faf1ac9a1bf388614589f20569105d184c0815d750c78b9e3f7f1e392c64910843d3ea60ab193243496a8bb6e992480e4530fc5ba1746bb934364f7b434d594d66b9f32c01a1eefa1228f8baa364a68c6b271749dac1d7997b0e6ac47494cfda464e7663189e0367ce66290c0de5ada200277827c39f9f7e68941c7ff2d27d068f7cc7445b72fa36319c29e1725b22e47aac66ce1f66fdc3672c3a16e234fbb125e6effa731b289ca9421adf60ea76960a4b42de73f00a6380c897cf7767e8fbc84f7be4d48760265de378b46e0b2cdab8070b5691be6141cd79bf5d0d3284ea020d1178f0391a5b6c8f4c8ec10fb1f39850a835590e8bba3ce0bcb1bf22413cf3e2ee5653af5d62ca195aabc9f26f93112f616e46a7968e2a9b2d87dcd06b059ae025e8ae679fe8acbc6149aac3a674b22215aa9a87181ef0f9aef24ebe4bce1f53dd63fe25fc7ffb059733b945b71a928f0faa948e93918308e45e8b672f6da8b1b4e712ea0690358309ffc2d2c1f2f0bb5d3a565fb5c6ea0a667406e9b6bc72b755d77bd1d2568ad7e6943459ed903af437d04adfc0bfaa051c490e5fe36a78f997061b9ec0ee24e353b3d5a9e93d2853f81269b35df8773cb8c8d71da0ca2408facf86e4cd7389bce3023c93d70e9694cf3507430a8b662008b4903090aa8c2504a925b6d3c1fd25f60740f713825335d26e98bba11461f60f3cf3e552b5037dbcc0cc9e34b14ac413454b3f13a18a357884a8f2ec5287430d7fe0f5a78aaad7dd29ae6dd3bb4166c56d58c82fcbf9df63c6ec97e6e385d80a3808e217e74a932b191ec30eb1e517b6797a287ae123ec3ac35089603b43d2f1ee178b89b10c3f292a9d1defd81b760d4d6ee9807b75be8804ae9d89460f54bc366453db04c5db1c085388a2fe3175"}) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088"], 0x0) 5.179364024s ago: executing program 2 (id=940): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = socket$inet6(0xa, 0x0, 0x10000081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7f2cb81569"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9d5cc56b2"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4060000}, 0x1) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r5, r4}) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000), 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1}) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000180)=0x7a553352, 0x4) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') pread64(r7, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 5.145158574s ago: executing program 5 (id=941): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000006800010002000000fb25ffff0000efff000000000c0002000c83208b0100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) gettid() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) acct(&(0x7f0000000180)='./file0\x00') r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) 2.994559493s ago: executing program 4 (id=942): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 1.903910467s ago: executing program 0 (id=943): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) 1.707503181s ago: executing program 4 (id=944): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) 1.616288714s ago: executing program 0 (id=945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4e310}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x8001}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.559817415s ago: executing program 2 (id=946): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x20, 0xd, 0x8, "16decd5a7e620cf1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.435986118s ago: executing program 4 (id=947): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000006800010002000000fb25ffff0000efff000000000c0002000c83208b0100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) gettid() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) acct(&(0x7f0000000180)='./file0\x00') r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) 1.419401998s ago: executing program 3 (id=948): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x0) inotify_rm_watch(r0, 0x0) 1.30613987s ago: executing program 0 (id=949): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x9, 0x19, {0x19, 0xe, "8f27246b838e7322fbcd4f08f73834b7d64ce1f781222f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.286772051s ago: executing program 5 (id=950): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x183, &(0x7f0000000500)="$eJzskrGO00AQhr+1neSA4wQS1TV3xUlAgez4ANFxZejpaLASEyISROJIkCiFEUIpKBAlT5DXQOIFoEA8QOoUETUy2t2x5YRHuP2K/TP/zs7uTPwyG2ct4O920eUCg88RP5UiAE6U9Tae1S+iv0Q/W+GH5D0R/4PocTabNyXnlJvWeJUMh+nkFPhjvMrKHr/32JhSv+XQc6AoigI8eqDTOSxztouuD4yrHDgO4JZpoqhydCM6uA2E09GbMJvN7w1GST/tp69j//xhdD+KHsThi8EwjeyqaldIK2i9C7QOxEgOzX4D+CjWVXZRtafJvrrCM8razXKGR4p9vNrZUhXfqne1KP8veHoB+llvc1Vzz0yVANNSB4UvQTuovc/edWA2wmvQW6JQ5bEVQVWjvaZRBXE9OH+Uc92WWkrJM9GO6Ep0LXqy98kEuV4/SXQnhybvkul00tZDsr8acnYSV158I68PTN/61dtt7rv332wdDofD4XA4HA6H47LxLwAA///evHHK") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/164, 0xa4) 1.129976514s ago: executing program 3 (id=951): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a40), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01200000000000000000010000000800010000000000080002000100000008000880040007802c00048005"], 0x58}}, 0x0) 1.006174897s ago: executing program 5 (id=952): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = socket$inet6(0xa, 0x0, 0x10000081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7f2cb81569"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9d5cc56b2"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4060000}, 0x1) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r5, r4}) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000), 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1}) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000180)=0x7a553352, 0x4) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') pread64(r7, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 952.677878ms ago: executing program 3 (id=953): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x7, 0x2, 0x2, 0x8000000000000001, 0x2, 0x3e, 0x7, 0x2ec, 0x38, 0x158, 0x1, 0x6a9e, 0x20, 0x1, 0x4, 0x8000, 0x7c}, [{0x6474e556, 0x9, 0x6, 0x2, 0xfffffff8, 0x82d, 0xffffffff, 0x1000}]}, 0x58) syz_usb_connect$cdc_ecm(0x5, 0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000102505a18440000000010109024000010100000309040000ff0202000005240700541d"], 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x80010, 0xffffffffffffffff, 0xe0ae0000) 526.311368ms ago: executing program 4 (id=954): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 261.070454ms ago: executing program 4 (id=955): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0) 128.344847ms ago: executing program 3 (id=956): r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf3, 0x2, 0x0, 0x181}) close_range(r0, r0, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000040)) 126.857667ms ago: executing program 5 (id=957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe73, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000000000000004920800024000000001"], 0xfea1}}, 0x800) 0s ago: executing program 4 (id=958): r0 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000001c0)={0x20000000, 0xc6f, 0x101}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x78, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) keyctl$negate(0xd, 0x0, 0x7, r0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, &(0x7f0000000100)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r8 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r8, 0x110, 0x6, 0x0, 0x0) keyctl$link(0x8, r0, r0) pwritev(r7, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x4a628) kernel console output (not intermixed with test programs): ady [ 84.706324][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.738498][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.759441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.767377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.786105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.795763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.848304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.865715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.887471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.909927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.929377][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.936525][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.959118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.979563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.999709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.031417][ T4270] device veth0_vlan entered promiscuous mode [ 85.060870][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.074696][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.087076][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.096766][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.106049][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.113223][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.129494][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.143392][ T4270] device veth1_vlan entered promiscuous mode [ 85.174864][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.191492][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.209215][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.216693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.240117][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.275403][ T4274] device veth0_vlan entered promiscuous mode [ 85.305582][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.318386][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.333112][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.343047][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.351484][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.387027][ T4274] device veth1_vlan entered promiscuous mode [ 85.395998][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.406947][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.417621][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.428041][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.437177][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.446322][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.455527][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.474463][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.490552][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.506989][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.540141][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.549857][ T4270] device veth0_macvtap entered promiscuous mode [ 85.573811][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.582698][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.591332][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.601185][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.610784][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.631236][ T4270] device veth1_macvtap entered promiscuous mode [ 85.662308][ T4274] device veth0_macvtap entered promiscuous mode [ 85.688875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.698336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.710177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.741857][ T4274] device veth1_macvtap entered promiscuous mode [ 85.752316][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.767637][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.776831][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.791748][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.806996][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.817286][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.832701][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.855329][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.881181][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.893558][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.912602][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.946030][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.957854][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.966104][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 85.970398][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 85.992743][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.005072][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.020311][ T4270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.033703][ T4270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.045696][ T4270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.050877][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 86.068927][ T4270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.090534][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.101249][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.112823][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.139552][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.165797][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.191891][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.209359][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 86.215449][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 86.231990][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.293063][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.303238][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.313022][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.322491][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.396826][ T4279] device veth0_vlan entered promiscuous mode [ 86.425529][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.450165][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.477900][ T4279] device veth1_vlan entered promiscuous mode [ 86.506028][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.535083][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.542952][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.579590][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.595453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.606178][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.614162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.637866][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.663501][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.677637][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.722961][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.734463][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.747145][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.759794][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.779202][ T4278] device veth0_vlan entered promiscuous mode [ 86.801293][ T4279] device veth0_macvtap entered promiscuous mode [ 86.822815][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.832661][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.845329][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.866221][ T4278] device veth1_vlan entered promiscuous mode [ 86.894510][ T4279] device veth1_macvtap entered promiscuous mode [ 86.903902][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.923317][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.938270][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.969031][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.980542][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.995722][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.004698][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.019452][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.027631][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.064437][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.083294][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.098878][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.115702][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.128032][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.145115][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.179740][ T4280] device veth0_vlan entered promiscuous mode [ 87.187769][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.201609][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.211333][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.221137][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.230188][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.240706][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.249257][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.257273][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.284953][ T4280] device veth1_vlan entered promiscuous mode [ 87.307245][ T4278] device veth0_macvtap entered promiscuous mode [ 87.325272][ T4278] device veth1_macvtap entered promiscuous mode [ 87.350048][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.374177][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.385770][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.397006][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.427208][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.440436][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.448315][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.451654][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.466968][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.476947][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.486872][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.496508][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.512100][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.525183][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.547502][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.568668][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.578544][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.595989][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.606909][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.623924][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.637078][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.663771][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.673257][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.685520][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.694711][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.706594][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.716428][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.726029][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.736390][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.761321][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.772631][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.787754][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.798670][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.816396][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.827606][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.844849][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.882996][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.902832][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.925074][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.934690][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.944997][ T4280] device veth0_macvtap entered promiscuous mode [ 87.963474][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.982485][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.994764][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.006034][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.039689][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 88.045793][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 88.135166][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 88.348829][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 88.355019][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 88.664054][ T4366] loop1: detected capacity change from 0 to 164 [ 89.005506][ T4366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 89.744125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.886275][ T4280] device veth1_macvtap entered promiscuous mode [ 90.207992][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.272777][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.374799][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.434738][ T4380] Zero length message leads to an empty skb [ 90.526047][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.625736][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.758004][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.861422][ T4379] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 90.874663][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.925844][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.045599][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.297663][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.331765][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.416026][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.533094][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.552821][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.615621][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.684185][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.763445][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.800643][ T126] cfg80211: failed to load regulatory.db [ 91.844179][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.913241][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.980392][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.062155][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.194920][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.325440][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.383704][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.481557][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.597265][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.651702][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.891977][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.002093][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.049236][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.058547][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.074115][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.178245][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.201596][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.246670][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.257172][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.377962][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.386198][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.058624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 94.196495][ T4390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8'. [ 94.378450][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.387229][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.398051][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.407392][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.517218][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.548912][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 94.575874][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.919589][ T4396] tipc: Started in network mode [ 96.945566][ T4396] tipc: Node identity 4, cluster identity 4711 [ 96.983691][ T4406] loop4: detected capacity change from 0 to 256 [ 97.008716][ T4396] tipc: Node number set to 4 [ 97.042021][ T4406] FAT-fs (loop4): Directory bread(block 64) failed [ 97.049137][ T4406] FAT-fs (loop4): Directory bread(block 65) failed [ 97.068063][ T4406] FAT-fs (loop4): Directory bread(block 66) failed [ 97.088450][ T4406] FAT-fs (loop4): Directory bread(block 67) failed [ 97.106812][ T4406] FAT-fs (loop4): Directory bread(block 68) failed [ 97.126246][ T4406] FAT-fs (loop4): Directory bread(block 69) failed [ 97.151761][ T4406] FAT-fs (loop4): Directory bread(block 70) failed [ 97.184186][ T4406] FAT-fs (loop4): Directory bread(block 71) failed [ 97.193220][ T4410] usb usb7: usbfs: process 4410 (syz.1.11) did not claim interface 0 before use [ 97.208080][ T4406] FAT-fs (loop4): Directory bread(block 72) failed [ 97.215073][ T4406] FAT-fs (loop4): Directory bread(block 73) failed [ 97.408637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 97.418633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 97.630775][ T4412] syz.4.5: attempt to access beyond end of device [ 97.630775][ T4412] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 97.645472][ T4412] syz.4.5: attempt to access beyond end of device [ 97.645472][ T4412] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 97.659421][ T27] audit: type=1800 audit(1783442982.727:2): pid=4412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="file0" dev="loop4" ino=1048613 res=0 errno=0 [ 97.662611][ T4413] syz.4.5: attempt to access beyond end of device [ 97.662611][ T4413] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 97.679042][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.980476][ T4413] syz.4.5: attempt to access beyond end of device [ 97.980476][ T4413] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 97.993812][ T4413] Buffer I/O error on dev loop4, logical block 290, async page read [ 98.947606][ T4406] sched: RT throttling activated [ 98.970569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.514105][ T4417] loop4: detected capacity change from 0 to 256 [ 99.577701][ T4417] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 99.763961][ T4422] input: syz0 as /devices/virtual/input/input5 [ 99.998630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.008645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 101.454025][ T4437] netlink: 'syz.4.12': attribute type 4 has an invalid length. [ 101.575967][ T4438] process 'syz.4.12' launched './file2' with NULL argv: empty string added [ 104.198601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.208622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 104.218600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 104.228599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 104.238601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 105.029355][ T4455] loop4: detected capacity change from 0 to 16 [ 105.991686][ T4455] erofs: (device loop4): mounted with root inode @ nid 36. [ 106.144131][ T4273] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 106.201238][ T4455] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 106.252885][ T27] audit: type=1800 audit(1783442991.277:3): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.17" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 106.319945][ T4455] syz.4.17 (4455) used greatest stack depth: 20576 bytes left [ 110.963570][ T4481] loop3: detected capacity change from 0 to 164 [ 112.250753][ T4482] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.386782][ T4478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'. [ 112.865259][ T4479] loop2: detected capacity change from 0 to 128 [ 112.995769][ T4479] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 113.094313][ T4371] udevd[4371]: incorrect jbd checksum on /dev/loop2 [ 113.165604][ T4479] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 113.245122][ T4488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 113.500473][ T4479] loop2: detected capacity change from 0 to 1024 [ 113.799404][ T4488] tipc: Started in network mode [ 113.804468][ T4488] tipc: Node identity 4, cluster identity 4711 [ 113.865690][ T4488] tipc: Node number set to 4 [ 114.796572][ T4402] hfsplus: b-tree write err: -5, ino 25 [ 114.807693][ T4500] loop3: detected capacity change from 0 to 256 [ 114.831687][ T4402] hfsplus: b-tree write err: -5, ino 4 [ 114.877399][ T4402] hfsplus: b-tree write err: -5, ino 2 [ 115.209485][ T4500] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 116.961670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 119.098955][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.113406][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.125818][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.148831][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.162910][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 119.174655][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 121.289395][ T4277] Bluetooth: hci5: command 0x0409 tx timeout [ 121.827097][ T27] audit: type=1326 audit(1783443006.887:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.3.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a91d9de59 code=0x7ffc0000 [ 121.850835][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.165054][ T27] audit: type=1326 audit(1783443006.887:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.3.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a91d9de59 code=0x7ffc0000 [ 122.328532][ T27] audit: type=1326 audit(1783443006.887:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.3.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f9a91d9de59 code=0x7ffc0000 [ 122.982764][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.005572][ T27] audit: type=1326 audit(1783443006.887:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.3.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a91d9de59 code=0x7ffc0000 [ 123.029283][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.038086][ T27] audit: type=1326 audit(1783443006.887:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.3.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a91d9de59 code=0x7ffc0000 [ 123.062416][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.069639][ T27] audit: type=1326 audit(1783443006.887:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.3.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f9a91d9de59 code=0x7ffc0000 [ 123.098032][ T4534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.34'. [ 123.167968][ T27] audit: type=1326 audit(1783443006.887:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.3.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a91d9de59 code=0x7ffc0000 [ 123.289425][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.318906][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 123.351222][ T27] audit: type=1326 audit(1783443006.887:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.3.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a91d9de59 code=0x7ffc0000 [ 123.487806][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'. [ 123.587465][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.644929][ T4561] loop3: detected capacity change from 0 to 512 [ 123.652564][ T4561] ======================================================= [ 123.652564][ T4561] WARNING: The mand mount option has been deprecated and [ 123.652564][ T4561] and is ignored by this kernel. Remove the mand [ 123.652564][ T4561] option from the mount to silence this warning. [ 123.652564][ T4561] ======================================================= [ 123.687770][ T4561] ext4: Unknown parameter 'context' [ 123.738790][ T27] audit: type=1326 audit(1783443006.887:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.3.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f9a91d9de59 code=0x7ffc0000 [ 123.822318][ T4371] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.165173][ T4566] input: syz0 as /devices/virtual/input/input6 [ 125.315405][ T27] audit: type=1326 audit(1783443006.887:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.3.33" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a91d9de59 code=0x7ffc0000 [ 125.388878][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.399514][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 125.547140][ T4515] chnl_net:caif_netlink_parms(): no params data found [ 127.478716][ T4277] Bluetooth: hci5: command 0x0419 tx timeout [ 128.572121][ T4581] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 129.184786][ T4515] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.291473][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.341155][ T4515] device bridge_slave_0 entered promiscuous mode [ 130.388795][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.396019][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.613744][ T4515] device bridge_slave_1 entered promiscuous mode [ 131.572155][ T4515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.748167][ T4515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.762624][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.772801][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.217084][ T4515] team0: Port device team_slave_0 added [ 134.333396][ T4515] team0: Port device team_slave_1 added [ 134.696625][ T4515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.707287][ T4515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.733560][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.739949][ T4515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.752945][ T4515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.762553][ T4515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.788599][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.797745][ T4515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.050313][ T4618] overlayfs: overlapping lowerdir path [ 135.255820][ T4620] overlayfs: unrecognized mount option "lowerd" or missing value [ 137.146268][ T4642] input: syz0 as /devices/virtual/input/input7 [ 138.697597][ T4650] loop2: detected capacity change from 0 to 128 [ 138.756339][ T4515] device hsr_slave_0 entered promiscuous mode [ 138.775242][ T4650] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4613: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 138.810315][ T4515] device hsr_slave_1 entered promiscuous mode [ 138.846676][ T4515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.879904][ T4650] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 138.890563][ T4515] Cannot create hsr debugfs directory [ 138.926622][ T46] device hsr_slave_0 left promiscuous mode [ 138.947433][ T46] device hsr_slave_1 left promiscuous mode [ 140.001517][ T4371] udevd[4371]: incorrect jbd checksum on /dev/loop2 [ 140.255245][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.317392][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.565831][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.655337][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.143552][ T4676] loop2: detected capacity change from 0 to 512 [ 141.153192][ T4676] ext4: Unknown parameter 'context' [ 141.908478][ T46] device bridge_slave_1 left promiscuous mode [ 141.916567][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.986466][ T46] device bridge_slave_0 left promiscuous mode [ 142.002992][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.107841][ T4680] MPI: mpi too large (110728 bits) [ 142.308106][ T46] device veth1_macvtap left promiscuous mode [ 142.350522][ T46] device veth0_macvtap left promiscuous mode [ 142.394965][ T46] device veth1_vlan left promiscuous mode [ 142.444981][ T46] device veth0_vlan left promiscuous mode [ 143.593163][ T46] team0 (unregistering): Port device team_slave_1 removed [ 143.633785][ T46] team0 (unregistering): Port device team_slave_0 removed [ 143.673551][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.713623][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.996975][ T46] bond0 (unregistering): Released all slaves [ 144.930822][ T4515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.626165][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 146.626179][ T27] audit: type=1326 audit(1783443031.687:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4689 comm="syz.3.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a91d9de59 code=0x0 [ 146.627436][ T4515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.662640][ T4696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.62'. [ 147.941576][ T4515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.484580][ T4515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.867432][ T4739] syz.4.69 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 149.892374][ T4739] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by " [ 150.665693][ T4740] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 151.091645][ T4748] syz.3.70 uses obsolete (PF_INET,SOCK_PACKET) [ 151.427808][ T4744] netlink: 'syz.0.68': attribute type 13 has an invalid length. [ 153.879221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.908306][ T4742] IPVS: rr: FWM 3 0x00000003 - no destination available [ 155.387184][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.456800][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.570079][ T4775] MPI: mpi too large (110728 bits) [ 155.750697][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.893357][ T4515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.983013][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.006824][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.030395][ T4515] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.114400][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.136279][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.168010][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.175240][ T4447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.397131][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.411240][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.431602][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.438827][ T4447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.980786][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.175203][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.559157][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.669695][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.684350][ T4802] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 159.694847][ T4802] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 159.704606][ T4802] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 159.719065][ T27] audit: type=1800 audit(1783443044.747:17): pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.78" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 159.913023][ T4802] syz.3.78 (4802) used greatest stack depth: 20160 bytes left [ 159.925023][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.934042][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.948452][ T4808] loop2: detected capacity change from 0 to 512 [ 159.956880][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.975838][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.990627][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.010875][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.068013][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.151955][ T4808] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.163421][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.192446][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.215277][ T4808] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.358692][ T4817] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 163.231072][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 163.586366][ T4847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 164.636902][ T4277] Bluetooth: hci3: SCO packet for unknown connection handle 3072 [ 165.503602][ T4860] MPI: mpi too large (110728 bits) [ 166.785954][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.826184][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.875057][ T4515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.282190][ T4863] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.291401][ T4863] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.300251][ T4863] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.309761][ T4863] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.423041][ T4863] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.432350][ T4863] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.441808][ T4863] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.450747][ T4863] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.611949][ T4882] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.620861][ T4882] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.629785][ T4882] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.638590][ T4882] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.776720][ T4882] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.785799][ T4882] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.794912][ T4882] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.803969][ T4882] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.237246][ T4896] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4279] was attempted by " [ 173.709118][ T4864] syz.0.88 (4864): drop_caches: 2 [ 173.797886][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.731610][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.793040][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.842530][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.207507][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.219754][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 178.229185][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.587791][ T4926] chnl_net:caif_netlink_parms(): no params data found [ 179.827712][ T4277] Bluetooth: hci0: Malformed LE Event: 0x0d [ 180.278769][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 182.358686][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 184.438784][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 185.074324][ T27] audit: type=1326 audit(1783443070.137:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4981 comm="syz.4.108" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8ab9de59 code=0x0 [ 185.457016][ T4926] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.465655][ T4926] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.474333][ T4926] device bridge_slave_0 entered promiscuous mode [ 185.638948][ T4926] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.647697][ T4926] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.705905][ T4926] device bridge_slave_1 entered promiscuous mode [ 185.941388][ T4926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.982930][ T4926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.518712][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 187.436492][ T4926] team0: Port device team_slave_0 added [ 187.449200][ T4926] team0: Port device team_slave_1 added [ 187.576431][ T4926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.596668][ T4926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.435497][ T4926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.450215][ T4926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.457241][ T4926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.484004][ T4926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.789767][ T4926] device hsr_slave_0 entered promiscuous mode [ 188.849238][ T4926] device hsr_slave_1 entered promiscuous mode [ 188.868829][ T4926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.907838][ T4926] Cannot create hsr debugfs directory [ 190.923604][ T5033] MPI: mpi too large (110728 bits) [ 191.370380][ T5056] loop3: detected capacity change from 0 to 512 [ 192.679469][ T4921] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.819759][ T5054] netlink: 104 bytes leftover after parsing attributes in process `syz.3.117'. [ 194.202528][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.209100][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.413285][ T5078] hub 8-0:1.0: USB hub found [ 199.419208][ T5078] hub 8-0:1.0: 1 port detected [ 203.390508][ T5091] Cannot find set identified by id 0 to match [ 206.520000][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 206.520433][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 206.573609][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 206.687281][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 208.222651][ T4385] device hsr_slave_0 left promiscuous mode [ 208.325096][ T4385] device hsr_slave_1 left promiscuous mode [ 208.399357][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.417792][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.439931][ T4385] device bridge_slave_1 left promiscuous mode [ 208.446244][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.731812][ T4385] device bridge_slave_0 left promiscuous mode [ 208.738139][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.882121][ T5142] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 210.406739][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 213.938914][ T4385] team0 (unregistering): Port device team_slave_1 removed [ 214.010153][ T4385] team0 (unregistering): Port device team_slave_0 removed [ 214.064883][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.121956][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.627969][ T4385] bond0 (unregistering): Released all slaves [ 214.886125][ T5124] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 214.895752][ T5124] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 214.905379][ T5124] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 214.960111][ T27] audit: type=1800 audit(1783443099.947:19): pid=5124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.131" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 215.020203][ T5142] batadv_slave_0: Caught tx_queue_len zero misconfig [ 215.768991][ T4926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 215.810034][ T4926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.811335][ T4926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.864071][ T4926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.659232][ T4926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.781093][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.805461][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.836998][ T4926] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.965954][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.999651][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.035714][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.042983][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.305347][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.680802][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 221.027663][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.036787][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.044004][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.058305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.093451][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.149589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.211374][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.094638][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.144064][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.167911][ T4926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.210910][ T5233] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 222.265836][ T4926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.291466][ T5233] dns_resolver: Unsupported server list version (0) [ 222.356574][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.581003][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.887679][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.907768][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.918430][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.984692][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.077666][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.942326][ T5256] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 224.142494][ T5263] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 224.153297][ T5263] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.758117][ T5281] UBIFS error (pid: 5281): cannot open "ubifs", error -22 [ 228.383193][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.401635][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.462184][ T4926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.042824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.165806][ T5352] binder: 5348:5352 ioctl c00c620f 2000000003c0 returned -22 [ 233.275102][ T5352] block device autoloading is deprecated and will be removed. [ 234.030095][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.041004][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.063599][ T5367] loop0: detected capacity change from 0 to 512 [ 235.207717][ T5367] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 235.909442][ T5367] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 236.514829][ T5367] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 236.598353][ T5367] System zones: 1-12 [ 236.906938][ T5367] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 237.051154][ T5367] EXT4-fs (loop0): 1 truncate cleaned up [ 237.057260][ T5367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 237.616558][ T27] audit: type=1800 audit(1783443122.677:20): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.171" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 238.031182][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.053233][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.069044][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.077666][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.086879][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 238.095034][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.601610][ T5393] chnl_net:caif_netlink_parms(): no params data found [ 238.706635][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 239.820973][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 240.198971][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 240.455420][ T5425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.266823][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.283889][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.381124][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 242.972922][ T5393] device bridge_slave_0 entered promiscuous mode [ 243.764715][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.772046][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.780534][ T5393] device bridge_slave_1 entered promiscuous mode [ 243.808195][ T5393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.820449][ T5393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.853369][ T5393] team0: Port device team_slave_0 added [ 244.026388][ T5393] team0: Port device team_slave_1 added [ 244.766054][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.423267][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.726338][ T5393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.932794][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 245.981040][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.304890][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.387076][ T5393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.690363][ T5393] device hsr_slave_0 entered promiscuous mode [ 246.713891][ T5393] device hsr_slave_1 entered promiscuous mode [ 246.757774][ T5393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.782876][ T5393] Cannot create hsr debugfs directory [ 247.444808][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.660801][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.688321][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.783136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.959215][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 248.408952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.103996][ T5471] overlayfs: failed to clone upperpath [ 249.906719][ T5483] mmap: syz.2.190 (5483) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 250.495280][ T4316] device hsr_slave_0 left promiscuous mode [ 250.999001][ T4316] device hsr_slave_1 left promiscuous mode [ 251.007077][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.083980][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.123227][ T4316] device bridge_slave_1 left promiscuous mode [ 251.189013][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.236282][ T4316] device bridge_slave_0 left promiscuous mode [ 251.284824][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.640992][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.647650][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.965493][ T4316] team0 (unregistering): Port device team_slave_1 removed [ 256.019877][ T4316] team0 (unregistering): Port device team_slave_0 removed [ 256.073672][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.125199][ T4316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.440091][ T4316] bond0 (unregistering): Released all slaves [ 256.523342][ T5489] tipc: Enabled bearer , priority 0 [ 258.246680][ T5542] device batadv_slave_0 entered promiscuous mode [ 258.436058][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 258.479434][ T5542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.722574][ T1128] block nbd2: Attempted send on invalid socket [ 259.729460][ T1128] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 259.800625][ T5550] SQUASHFS error: Failed to read block 0x0: -5 [ 259.807435][ T5550] unable to read squashfs_super_block [ 260.834491][ T5532] fscrypt: Error allocating hmac(sha512): -2 [ 260.883367][ T5542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.663687][ T5393] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 262.995310][ T5393] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.514444][ T5393] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.793354][ T5393] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.044150][ T5588] PKCS7: Unknown OID: [4] 0.0 [ 264.048991][ T5588] PKCS7: Only support pkcs7_signedData type [ 264.095286][ T5588] xt_policy: output policy not valid in PREROUTING and INPUT [ 267.081541][ T4273] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 267.091057][ T4273] Bluetooth: hci0: Injecting HCI hardware error event [ 267.102085][ T4271] Bluetooth: hci0: hardware error 0x00 [ 270.075029][ T5393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.117733][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.216038][ T5623] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 271.111655][ T4271] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 271.257373][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.274088][ T5393] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.300413][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.316186][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.419297][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.426521][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.518848][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.538129][ T5635] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 271.538129][ T5635] The task syz.3.213 (5635) triggered the difference, watch for misbehavior. [ 271.549615][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.658336][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.715991][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.723281][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.448959][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.637205][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.899690][ T5634] lo: Caught tx_queue_len zero misconfig [ 273.043025][ T5655] PKCS7: Unknown OID: [4] 0.0 [ 273.048404][ T5655] PKCS7: Only support pkcs7_signedData type [ 273.064413][ T5655] xt_policy: output policy not valid in PREROUTING and INPUT [ 274.985340][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.285368][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.419320][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.427525][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.497646][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.536736][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.597706][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.751352][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.764532][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.392595][ T5673] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 276.403012][ T5673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.488998][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.741885][ T5680] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 276.750489][ T5680] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 276.759497][ T5680] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 280.697689][ T5680] Process accounting resumed [ 281.264500][ T5692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.004101][ T5704] UBIFS error (pid: 5704): cannot open "ubifs", error -22 [ 291.795037][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.842993][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.917687][ T5393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.124789][ T5746] comedi comedi4: bad chanlist[1]=0x0000b89f chan=47263 range length=2 [ 292.900881][ T5730] syz.2.232 (5730) used greatest stack depth: 17808 bytes left [ 293.863160][ T5753] 9pnet_fd: p9_fd_create_tcp (5753): problem connecting socket to 127.0.0.1 [ 308.170332][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.181381][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.189985][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.318116][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.340349][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 308.347610][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.894538][ T4273] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 310.438683][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 312.964506][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 313.050556][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 314.998649][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 317.080569][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 317.087500][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.095722][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.158977][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.201598][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.458197][ T5826] device bridge_slave_0 entered promiscuous mode [ 319.885490][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.909023][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.917477][ T5826] device bridge_slave_1 entered promiscuous mode [ 320.053326][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.101624][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.422821][ T5826] team0: Port device team_slave_0 added [ 321.724129][ T5953] input: syz0 as /devices/virtual/input/input10 [ 322.819198][ T5826] team0: Port device team_slave_1 added [ 322.893956][ T5962] loop0: detected capacity change from 0 to 256 [ 324.089980][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.126697][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.447374][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.033454][ T5985] Malformed UNC in devname [ 325.033454][ T5985] [ 325.095727][ T5987] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 325.107713][ T5987] Cannot find add_set index 0 as target [ 325.436909][ T5985] CIFS: VFS: Malformed UNC in devname [ 326.545607][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.528725][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.821248][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.198294][ T6011] xt_TPROXY: Can be used only with -p tcp or -p udp [ 328.886461][ T6013] loop0: detected capacity change from 0 to 16 [ 328.894348][ T6013] erofs: Unknown parameter 'ip6gre0' [ 329.999275][ T5921] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.280349][ T5826] device hsr_slave_0 entered promiscuous mode [ 330.494906][ T5826] device hsr_slave_1 entered promiscuous mode [ 330.513181][ T6022] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 330.612670][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.644918][ T5826] Cannot create hsr debugfs directory [ 330.962506][ T6038] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 330.971839][ T6038] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 330.980325][ T6038] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 331.503571][ T6048] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 331.513808][ T6048] hfsplus: unable to find HFS+ superblock [ 332.259115][ T6051] loop0: detected capacity change from 0 to 256 [ 332.287126][ T6038] Process accounting resumed [ 332.317410][ T6051] exfat: Deprecated parameter 'utf8' [ 332.337396][ T6051] exFAT-fs (loop0): bogus number of FAT structure [ 332.366446][ T6051] exFAT-fs (loop0): failed to read boot sector [ 332.443622][ T6051] exFAT-fs (loop0): failed to recognize exfat type [ 334.500214][ T6053] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 334.508528][ T6053] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 334.517169][ T6053] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 335.805142][ T6068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.817833][ T4351] device hsr_slave_0 left promiscuous mode [ 335.853711][ T4351] device hsr_slave_1 left promiscuous mode [ 335.913773][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.971565][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.996956][ T4351] device bridge_slave_1 left promiscuous mode [ 336.015270][ T6076] loop2: detected capacity change from 0 to 64 [ 336.034211][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.103226][ T6076] MINIX-fs: mounting file system with errors, running fsck is recommended [ 336.173541][ T4351] device bridge_slave_0 left promiscuous mode [ 336.190896][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.223224][ T4351] team0 (unregistering): Port device team_slave_1 removed [ 341.378033][ T4351] team0 (unregistering): Port device team_slave_0 removed [ 341.501022][ T4351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.621216][ T4351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.573656][ T4351] bond0 (unregistering): Released all slaves [ 342.799509][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.294'. [ 342.907023][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 344.828336][ T6172] input: syz0 as /devices/virtual/input/input11 [ 346.657908][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.308'. [ 346.796110][ T6194] netlink: 124 bytes leftover after parsing attributes in process `syz.2.308'. [ 348.834448][ T6213] input: syz0 as /devices/virtual/input/input12 [ 349.853986][ T5826] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 349.945139][ T5826] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 350.184616][ T5826] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 350.206606][ T5826] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.381681][ T6239] device ip6erspan0 entered promiscuous mode [ 352.500646][ T6236] tipc: Started in network mode [ 352.505704][ T6236] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 352.514712][ T6236] tipc: Enabling of bearer rejected, failed to enable media [ 352.660560][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.573478][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.582135][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.594482][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.433127][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.532191][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.593976][ T5205] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.601221][ T5205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.682923][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 355.969144][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.449853][ T5205] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.457129][ T5205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.519751][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.544854][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.558820][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.652275][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.666104][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.779207][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.845887][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.930533][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 357.681522][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 357.691117][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.700819][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.711471][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 357.721377][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.730897][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.815933][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 361.473825][ T6314] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 361.547867][ T6314] hfsplus: unable to find HFS+ superblock [ 362.516646][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.105937][ T4271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.121175][ T4271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.130000][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.141058][ T4271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.150925][ T4271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 364.158579][ T4271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.332824][ T4271] Bluetooth: hci1: command 0x0409 tx timeout [ 366.590347][ T6365] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 366.605106][ T6365] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 367.748621][ T6333] chnl_net:caif_netlink_parms(): no params data found [ 368.053617][ T6398] loop0: detected capacity change from 0 to 128 [ 369.329938][ T4271] Bluetooth: hci1: command 0x041b tx timeout [ 369.433300][ T27] audit: type=1326 audit(1783443251.848:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.4.338" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8ab9de59 code=0x0 [ 369.752545][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.762255][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.785047][ T6333] device bridge_slave_0 entered promiscuous mode [ 370.091431][ T6414] netlink: 64 bytes leftover after parsing attributes in process `syz.0.340'. [ 370.715793][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.870523][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.050504][ T6333] device bridge_slave_1 entered promiscuous mode [ 371.618666][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 372.566695][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.575741][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.767032][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 374.779377][ T6461] loop0: detected capacity change from 0 to 128 [ 374.875345][ T6333] team0: Port device team_slave_0 added [ 374.897667][ T6333] team0: Port device team_slave_1 added [ 375.089110][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.119105][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.273297][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.414227][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.421262][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.736685][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.850120][ T5205] device hsr_slave_0 left promiscuous mode [ 376.887038][ T5205] device hsr_slave_1 left promiscuous mode [ 376.958082][ T5205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.971867][ T5205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.090657][ T5205] device bridge_slave_1 left promiscuous mode [ 377.107839][ T5205] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.185191][ T6486] loop0: detected capacity change from 0 to 1024 [ 377.197383][ T5205] device bridge_slave_0 left promiscuous mode [ 377.203916][ T5205] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.367093][ T6486] hfsplus: unable to parse mount options [ 380.048826][ T5205] team0 (unregistering): Port device team_slave_1 removed [ 380.344579][ T5205] team0 (unregistering): Port device team_slave_0 removed [ 380.811665][ T5205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.183397][ T5205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.976838][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.987097][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.251861][ T5205] bond0 (unregistering): Released all slaves [ 382.900223][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.353'. [ 382.946530][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 384.371265][ T6333] device hsr_slave_0 entered promiscuous mode [ 384.532959][ T6333] device hsr_slave_1 entered promiscuous mode [ 384.659768][ T6537] capability: warning: `syz.4.359' uses 32-bit capabilities (legacy support in use) [ 384.671044][ T6333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.769174][ T6333] Cannot create hsr debugfs directory [ 386.026628][ T6333] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 386.109903][ T6333] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 386.165402][ T6333] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 386.278199][ T6333] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 387.346652][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 387.362163][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.370052][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.445528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.930440][ T6597] xt_TPROXY: Can be used only with -p tcp or -p udp [ 389.092330][ T6333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.577156][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 389.603633][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 389.652327][ T6333] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.717397][ T6510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 389.767488][ T6510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 391.738722][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.745989][ T6510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.755632][ T6510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 391.913189][ T6606] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 391.924109][ T6510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 391.946373][ T6606] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 391.976411][ T6510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 392.007842][ T6606] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 392.017440][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.024646][ T6510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.079056][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 392.089642][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 392.122504][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 392.204530][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 392.252473][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 392.421097][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 392.454815][ T6615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.371'. [ 392.473161][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 392.503816][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 392.519622][ T6616] netlink: 72 bytes leftover after parsing attributes in process `syz.4.372'. [ 392.801942][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 392.811861][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 392.820761][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 393.440930][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 393.942186][ T6625] tipc: Can't bind to reserved service type 2 [ 394.022087][ T6626] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 394.213228][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.222481][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.125810][ T6640] loop2: detected capacity change from 0 to 256 [ 395.136443][ T6640] exfat: Deprecated parameter 'namecase' [ 395.142456][ T6640] exfat: Deprecated parameter 'namecase' [ 395.148257][ T6640] exfat: Deprecated parameter 'namecase' [ 395.970984][ T6640] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 396.037708][ T6635] binder: 6632:6635 ioctl c0306201 0 returned -14 [ 396.634316][ T6652] input: syz0 as /devices/virtual/input/input13 [ 397.684010][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.691594][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.741735][ T6333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.914015][ T6657] batman_adv: batadv0: Adding interface: dummy0 [ 400.941452][ T6657] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.086360][ T6657] batman_adv: batadv0: Interface activated: dummy0 [ 401.158198][ T6659] batadv0: mtu less than device minimum [ 401.185953][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 401.199046][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 401.211336][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 401.223639][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 401.236096][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 401.248563][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 401.261109][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 401.273503][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 401.286042][ T6659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 402.793893][ T6708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.384'. [ 403.209738][ T6717] loop2: detected capacity change from 0 to 1024 [ 403.245679][ T6717] hfsplus: unable to parse mount options [ 403.474553][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 404.401240][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 404.468331][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 404.521265][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 404.603611][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 404.657494][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 405.557966][ T6333] device veth0_vlan entered promiscuous mode [ 405.590138][ T6733] device veth1_macvtap left promiscuous mode [ 405.661481][ T6333] device veth1_vlan entered promiscuous mode [ 405.698249][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 405.807206][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 405.926391][ T6333] device veth0_macvtap entered promiscuous mode [ 405.976274][ T6333] device veth1_macvtap entered promiscuous mode [ 406.062708][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.116379][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.129763][ T27] audit: type=1326 audit(1783443286.183:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.3.389" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a91d9de59 code=0x0 [ 406.205204][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.237866][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.262743][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.349329][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.400128][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.422367][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 406.466510][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 406.657888][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 406.666989][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 406.678474][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.689640][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.700193][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.786076][ T6765] loop0: detected capacity change from 0 to 2048 [ 406.805920][ T6765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.222344][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.294171][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.305928][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.334338][ T6333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.345807][ T6333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.358700][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.411087][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 407.422172][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 407.511358][ T6333] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.545321][ T6333] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.314710][ T6333] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.568538][ T6333] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.865409][ T6510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.876409][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.705838][ T6510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.715988][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.763723][ T5518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.817549][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 411.893541][ T4271] Bluetooth: hci2: unexpected cc 0x0c2d length: 1 < 4 [ 414.455640][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 415.268906][ T6817] loop5: detected capacity change from 0 to 1024 [ 415.463409][ T6817] hfsplus: unable to parse mount options [ 415.583854][ T6824] binder: 6818:6824 ioctl c0306201 0 returned -14 [ 415.680873][ T6693] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 416.412257][ T6817] loop5: detected capacity change from 0 to 4096 [ 416.420688][ T6817] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 416.461253][ T6817] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 416.482461][ T6817] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 416.491283][ T6817] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 416.511586][ T6817] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 416.520320][ T6817] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 416.540501][ T6817] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 416.549319][ T6817] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 416.570130][ T6817] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 416.578993][ T6817] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 416.607029][ T6817] ntfs: volume version 3.1. [ 418.287308][ T6847] Invalid ELF header type: 3 != 1 [ 418.349966][ T6847] netlink: 64 bytes leftover after parsing attributes in process `syz.2.402'. [ 418.966020][ T6844] siw: device registration error -23 [ 419.613265][ T6851] loop0: detected capacity change from 0 to 512 [ 419.641913][ T4461] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 419.929268][ T4461] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 419.961570][ T4461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.994775][ T4461] usb 6-1: Product: syz [ 419.999032][ T4461] usb 6-1: Manufacturer: syz [ 420.015054][ T4461] usb 6-1: SerialNumber: syz [ 420.043806][ T4461] usb 6-1: config 0 descriptor?? [ 420.098560][ T4461] hub 6-1:0.0: bad descriptor, ignoring hub [ 420.121078][ T4461] hub: probe of 6-1:0.0 failed with error -5 [ 420.299137][ T4461] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 421.078891][ T4461] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 421.331420][ T4461] dib0700: firmware download failed at 7 with -22 [ 421.629453][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 421.860861][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 421.935077][ T4271] Bluetooth: hci2: Malformed Event: 0x13 [ 423.768857][ T4571] usb 6-1: USB disconnect, device number 2 [ 425.392232][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 425.455719][ T14] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 425.540366][ T14] usb 1-1: can't read configurations, error -71 [ 427.962142][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 428.660785][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 430.190186][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 430.648491][ T4461] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 430.883517][ T4461] usb 6-1: Using ep0 maxpacket: 16 [ 430.900848][ T4461] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.130768][ T4461] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 431.322578][ T4461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.507759][ T4461] usb 6-1: Product: syz [ 431.586076][ T4461] usb 6-1: Manufacturer: syz [ 431.676756][ T4461] usb 6-1: SerialNumber: syz [ 431.819073][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 431.830658][ T14] usb 1-1: string descriptor 0 read error: -71 [ 431.845132][ T14] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 431.853169][ T4461] usb 6-1: config 0 descriptor?? [ 431.859751][ T14] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 431.872207][ T14] usb 1-1: config 0 descriptor?? [ 431.879107][ T14] usb 1-1: can't set config #0, error -71 [ 431.887478][ T14] usb 1-1: USB disconnect, device number 4 [ 432.868081][ T4461] usb 6-1: USB disconnect, device number 3 [ 432.924769][ T4273] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 432.933794][ T4273] Bluetooth: hci2: Injecting HCI hardware error event [ 432.942794][ T4271] Bluetooth: hci2: hardware error 0x00 [ 434.901486][ T14] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 435.470496][ T6988] xt_TPROXY: Can be used only with -p tcp or -p udp [ 436.523842][ T4271] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 436.543373][ T14] usb 6-1: Using ep0 maxpacket: 8 [ 436.656890][ T14] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 436.827545][ T14] usb 6-1: config 0 has no interface number 0 [ 436.872705][ T14] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 436.925487][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.936174][ T14] usb 6-1: Product: syz [ 436.940407][ T14] usb 6-1: Manufacturer: syz [ 436.946162][ T14] usb 6-1: SerialNumber: syz [ 436.961771][ T14] usb 6-1: config 0 descriptor?? [ 437.882265][ T14] usb 6-1: USB disconnect, device number 4 [ 438.369317][ T7021] binder: 7018:7021 ioctl c0306201 0 returned -14 [ 440.747664][ T7029] loop2: detected capacity change from 0 to 128 [ 440.814945][ T7029] vxfs: unable to set final block size [ 441.665571][ T4314] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 441.900684][ T4314] usb 3-1: Using ep0 maxpacket: 32 [ 441.907950][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.949011][ T4314] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.038048][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.096708][ T4314] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.154620][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.232197][ T4314] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.299757][ T4314] usb 3-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 442.357787][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.385694][ T4314] usb 3-1: Product: syz [ 442.392431][ T4314] usb 3-1: Manufacturer: syz [ 442.397214][ T4314] usb 3-1: SerialNumber: syz [ 442.416722][ T4314] usb 3-1: config 0 descriptor?? [ 442.438477][ T4314] cdc_acm 3-1:0.0: Zero length descriptor references [ 442.456797][ T4314] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 446.237396][ T4310] usb 3-1: USB disconnect, device number 2 [ 447.804688][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.811239][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.376815][ T4461] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 448.686289][ T4461] usb 6-1: Using ep0 maxpacket: 8 [ 448.708262][ T4461] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.738678][ T4461] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 448.762205][ T4461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.783613][ T4461] usb 6-1: Product: syz [ 448.787961][ T4461] usb 6-1: Manufacturer: syz [ 448.807200][ T4461] usb 6-1: SerialNumber: syz [ 448.846706][ T4461] usb 6-1: config 0 descriptor?? [ 448.868090][ T4461] cdc_acm 6-1:0.0: Zero length descriptor references [ 448.972160][ T4461] cdc_acm: probe of 6-1:0.0 failed with error -22 [ 449.140763][ T4461] usb 6-1: USB disconnect, device number 5 [ 449.320959][ T4273] Bluetooth: hci4: Malformed Event: 0x2f [ 450.542531][ T4310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 450.773227][ T4310] usb 1-1: config index 0 descriptor too short (expected 48, got 36) [ 452.461752][ T4310] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.623494][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 452.829112][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 452.928747][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 452.995171][ T4310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.525918][ T4310] usb 1-1: string descriptor 0 read error: -71 [ 453.559439][ T4310] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 453.568732][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.749239][ T4310] usb 1-1: config 0 descriptor?? [ 453.764890][ T4310] usb 1-1: can't set config #0, error -71 [ 453.938569][ T4310] usb 1-1: USB disconnect, device number 5 [ 454.320600][ T7174] loop5: detected capacity change from 0 to 1024 [ 454.332241][ T7174] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 454.398014][ T7081] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 454.638502][ T4310] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 454.952041][ T4310] usb 1-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8 [ 455.001752][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.031115][ T4310] usb 1-1: Product: syz [ 455.045649][ T4310] usb 1-1: Manufacturer: syz [ 455.212083][ T4310] usb 1-1: SerialNumber: syz [ 455.220400][ T4310] usb 1-1: config 0 descriptor?? [ 455.227178][ T4310] hub 1-1:0.0: bad descriptor, ignoring hub [ 455.253242][ T4310] hub: probe of 1-1:0.0 failed with error -5 [ 455.261000][ T4310] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 456.054055][ T4310] usb 1-1: Detected SIO [ 456.066881][ T4310] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 456.115501][ T4310] usb 1-1: USB disconnect, device number 6 [ 459.035720][ T4310] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 459.050173][ T4310] ftdi_sio 1-1:0.0: device disconnected [ 459.169494][ T4271] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 459.178395][ T4271] Bluetooth: hci3: Injecting HCI hardware error event [ 459.189166][ T4273] Bluetooth: hci3: hardware error 0x00 [ 460.449840][ T7220] xt_TPROXY: Can be used only with -p tcp or -p udp [ 460.881111][ T4314] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 461.173278][ T4314] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 461.192228][ T4314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.403180][ T4273] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 461.453858][ T4314] usb 1-1: config 0 has no interface number 0 [ 461.473793][ T4314] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 462.114621][ T4314] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 462.115090][ T7225] loop2: detected capacity change from 0 to 8192 [ 462.163698][ T4314] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 462.185127][ T7225] __ntfs_error: 10 callbacks suppressed [ 462.185146][ T7225] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 462.249179][ T7225] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 462.263056][ T7225] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 462.284176][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.334924][ T4314] usb 1-1: Product: syz [ 462.371748][ T4314] usb 1-1: Manufacturer: syz [ 462.385987][ T4314] usb 1-1: SerialNumber: syz [ 462.444754][ T4314] usb 1-1: config 0 descriptor?? [ 462.527768][ T4314] usb 1-1: can't set config #0, error -71 [ 462.570725][ T4314] usb 1-1: USB disconnect, device number 7 [ 466.874513][ T7278] loop5: detected capacity change from 0 to 4096 [ 467.784862][ T7278] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 470.245799][ T7278] ntfs3: loop5: Failed to load $MFT. [ 471.040749][ T7290] loop2: detected capacity change from 0 to 4096 [ 471.685104][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 471.928668][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 471.955168][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 471.996246][ T7] usb 3-1: config 3 has an invalid interface number: 223 but max is 1 [ 472.030465][ T7] usb 3-1: config 3 has an invalid interface number: 25 but max is 1 [ 472.060660][ T7] usb 3-1: config 3 has an invalid interface number: 223 but max is 1 [ 472.099537][ T7] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 472.224247][ T7] usb 3-1: config 3 has no interface number 0 [ 472.246817][ T7] usb 3-1: config 3 has no interface number 1 [ 472.264844][ T7] usb 3-1: config 3 interface 25 altsetting 6 has an invalid endpoint with address 0x80, skipping [ 472.290634][ T7] usb 3-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 472.330409][ T7] usb 3-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 472.361841][ T7] usb 3-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 472.463446][ T7] usb 3-1: config 3 interface 223 has no altsetting 1 [ 472.472166][ T7] usb 3-1: config 3 interface 25 has no altsetting 0 [ 472.502878][ T7] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 472.534475][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.557151][ T7] usb 3-1: Product: syz [ 472.574856][ T7] usb 3-1: Manufacturer: syz [ 472.605608][ T7] usb 3-1: SerialNumber: syz [ 472.881933][ T7] usb 3-1: USB disconnect, device number 3 [ 477.638998][ T7378] loop2: detected capacity change from 0 to 512 [ 477.693932][ T7378] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 477.939018][ T7384] netlink: 'syz.3.544': attribute type 2 has an invalid length. [ 477.992211][ T7378] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.540: bg 0: block 384: padding at end of block bitmap is not set [ 478.115156][ T7378] EXT4-fs (loop2): Remounting filesystem read-only [ 478.138942][ T7378] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 478.174377][ T7378] EXT4-fs (loop2): Remounting filesystem read-only [ 478.200204][ T7378] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.540: attempt to clear invalid blocks 983260 len 1 [ 478.326394][ T7378] EXT4-fs (loop2): Remounting filesystem read-only [ 478.338209][ T7378] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.540: Invalid inode table block 0 in block_group 0 [ 478.433055][ T7378] EXT4-fs (loop2): Remounting filesystem read-only [ 478.629413][ T7378] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 478.984041][ T7378] EXT4-fs (loop2): Remounting filesystem read-only [ 479.720190][ T7378] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 479.785025][ T4271] Bluetooth: hci4: command 0x0409 tx timeout [ 479.819315][ T7378] EXT4-fs (loop2): Remounting filesystem read-only [ 479.826631][ T7378] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.540: Invalid inode table block 0 in block_group 0 [ 479.882945][ T7378] EXT4-fs (loop2): Remounting filesystem read-only [ 479.911041][ T7378] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 479.961389][ T7378] EXT4-fs (loop2): Remounting filesystem read-only [ 479.986093][ T7378] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.540: mark_inode_dirty error [ 480.025148][ T7378] EXT4-fs (loop2): Remounting filesystem read-only [ 480.071397][ T7378] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 480.125926][ T7378] EXT4-fs (loop2): Remounting filesystem read-only [ 480.190214][ T7378] EXT4-fs (loop2): 1 truncate cleaned up [ 480.195990][ T7378] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 480.228879][ T7415] loop5: detected capacity change from 0 to 512 [ 480.270407][ T7415] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 480.285217][ T7390] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 0 in block_group 0 [ 480.318622][ T7378] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.540: Invalid inode table block 0 in block_group 0 [ 480.338385][ T7390] EXT4-fs (loop2): Remounting filesystem read-only [ 480.437483][ T7415] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.553: iget: bad i_size value: 38620345925642 [ 480.657534][ T7415] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.553: couldn't read orphan inode 15 (err -117) [ 480.792330][ T7415] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 481.151354][ T7378] EXT4-fs (loop2): Remounting filesystem read-only [ 481.215624][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 481.244387][ T6333] EXT4-fs (loop5): unmounting filesystem. [ 481.534363][ T7432] loop2: detected capacity change from 0 to 764 [ 481.724584][ T7432] rock: directory entry would overflow storage [ 482.016512][ T7432] rock: sig=0x4f50, size=4, remaining=3 [ 482.043372][ T7432] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 492.255809][ T7497] loop2: detected capacity change from 0 to 64 [ 492.502458][ T7500] loop0: detected capacity change from 0 to 256 [ 492.540748][ T7502] loop5: detected capacity change from 0 to 16 [ 492.569890][ T7502] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 493.134076][ T7516] loop2: detected capacity change from 0 to 256 [ 493.179534][ T7516] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 493.252432][ T7520] loop0: detected capacity change from 0 to 64 [ 493.362706][ T7516] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 493.377445][ T7516] exFAT-fs (loop2): Filesystem has been set read-only [ 494.645926][ T7530] loop2: detected capacity change from 0 to 16 [ 495.273158][ T7530] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 496.657062][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'. [ 498.238038][ T7543] loop0: detected capacity change from 0 to 32768 [ 498.265820][ T7560] loop5: detected capacity change from 0 to 2048 [ 498.353806][ T7560] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 498.498855][ T7543] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 498.508193][ T7566] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 498.519542][ T7560] syz.5.603: attempt to access beyond end of device [ 498.519542][ T7560] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 498.726211][ T7560] syz.5.603: attempt to access beyond end of device [ 498.726211][ T7560] loop5: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 498.782967][ T7560] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=3) [ 498.922970][ T7580] loop0: detected capacity change from 0 to 64 [ 499.092767][ T4271] Bluetooth: hci1: command 0x0406 tx timeout [ 502.477546][ T7597] loop5: detected capacity change from 0 to 4096 [ 502.492567][ T7597] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 502.594924][ T7597] ntfs: volume version 3.1. [ 504.625480][ T7620] loop0: detected capacity change from 0 to 1024 [ 504.681705][ T7620] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 504.779634][ T7620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 504.881692][ T7620] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 505.029155][ T7632] netlink: 2120 bytes leftover after parsing attributes in process `syz.5.633'. [ 505.156280][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 505.337398][ T7641] loop0: detected capacity change from 0 to 64 [ 505.454265][ T7644] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 505.588826][ T7642] loop5: detected capacity change from 0 to 4096 [ 505.836505][ T7642] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 505.983224][ T7642] ntfs: volume version 3.1. [ 506.115469][ T7642] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 506.144104][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.220543][ T7642] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 506.542421][ T7642] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to map page. [ 506.851253][ T7642] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 506.862993][ T7642] ntfs: (device loop5): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 509.282395][ T6333] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 510.212929][ T7693] loop5: detected capacity change from 0 to 4096 [ 510.254186][ T7693] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 510.601744][ T6333] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 510.612888][ T6333] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 510.665916][ T6333] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 513.287926][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.297906][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 522.684219][ T7777] loop5: detected capacity change from 0 to 40427 [ 522.770947][ T7777] F2FS-fs (loop5): Invalid segment/section count (24 != 3 * 1) [ 522.816632][ T7777] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 522.947926][ T7777] F2FS-fs (loop5): invalid crc value [ 523.007332][ T7813] netlink: 'syz.2.682': attribute type 2 has an invalid length. [ 523.033844][ T7777] F2FS-fs (loop5): Found nat_bits in checkpoint [ 523.268833][ T7777] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 523.276232][ T7777] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 523.394346][ T7824] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 523.402187][ T7821] loop2: detected capacity change from 0 to 4096 [ 525.668725][ T953] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 526.193848][ T4271] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 526.320485][ T953] usb 3-1: Using ep0 maxpacket: 16 [ 526.367646][ T953] usb 3-1: unable to get BOS descriptor or descriptor too short [ 526.414648][ T953] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 526.457393][ T953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.491529][ T953] usb 3-1: Product: syz [ 526.497151][ T953] usb 3-1: Manufacturer: syz [ 526.514046][ T7872] netlink: 'syz.0.701': attribute type 10 has an invalid length. [ 526.524595][ T953] usb 3-1: SerialNumber: syz [ 526.532809][ T7872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.701'. [ 526.564595][ T7872] device ipvlan1 entered promiscuous mode [ 526.595100][ T7872] bridge0: port 3(ipvlan1) entered blocking state [ 526.606181][ T7874] loop5: detected capacity change from 0 to 1024 [ 526.642775][ T7872] bridge0: port 3(ipvlan1) entered disabled state [ 526.669606][ T7872] net_ratelimit: 10 callbacks suppressed [ 526.669626][ T7872] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 526.989176][ T953] usb 3-1: USB disconnect, device number 4 [ 527.359187][ T7858] udevd[7858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.192866][ T7884] siw: device registration error -23 [ 535.922352][ T7989] netlink: 'syz.3.735': attribute type 4 has an invalid length. [ 535.930315][ T7989] netlink: 152 bytes leftover after parsing attributes in process `syz.3.735'. [ 535.957175][ T7989] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 536.068350][ T7993] Cannot find del_set index 4 as target [ 538.214639][ T8020] loop0: detected capacity change from 0 to 64 [ 538.525746][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.750'. [ 540.498030][ T8068] netlink: 'syz.5.759': attribute type 10 has an invalid length. [ 540.577192][ T8068] netlink: 40 bytes leftover after parsing attributes in process `syz.5.759'. [ 540.632732][ T8068] device ipvlan1 entered promiscuous mode [ 540.677016][ T8068] bridge0: port 3(ipvlan1) entered blocking state [ 540.721345][ T8068] bridge0: port 3(ipvlan1) entered disabled state [ 540.749795][ T8068] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 541.152171][ T4271] Bluetooth: unknown link type 232 [ 542.943934][ T8090] loop5: detected capacity change from 0 to 32768 [ 543.017189][ T8090] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.766 (8090) [ 543.175033][ T8090] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 543.208206][ T8090] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 543.242315][ T8090] BTRFS info (device loop5): using free space tree [ 543.386435][ T4271] Bluetooth: hci1: command 0x0409 tx timeout [ 543.412869][ T8127] loop0: detected capacity change from 0 to 1024 [ 544.416404][ T8127] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 544.525604][ T8127] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.778: inode #12: comm syz.0.778: iget: illegal inode # [ 544.567347][ T8127] EXT4-fs (loop0): Remounting filesystem read-only [ 544.707895][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 545.500181][ T8090] BTRFS error (device loop5): open_ctree failed: -22 [ 546.807624][ T8172] device veth1_macvtap left promiscuous mode [ 548.209294][ T8193] loop2: detected capacity change from 0 to 16 [ 548.321876][ T8193] erofs: (device loop2): mounted with root inode @ nid 36. [ 548.492365][ T8193] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 548.544707][ T8193] syz.2.786: attempt to access beyond end of device [ 548.544707][ T8193] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 548.576926][ T8196] loop0: detected capacity change from 0 to 1764 [ 548.594833][ T8193] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 548.611963][ T8193] syz.2.786: attempt to access beyond end of device [ 548.611963][ T8193] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 548.661452][ T8193] syz.2.786: attempt to access beyond end of device [ 548.661452][ T8193] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 548.682328][ T8199] loop5: detected capacity change from 0 to 2048 [ 548.703365][ T8196] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 548.726334][ T27] audit: type=1800 audit(1783443419.628:24): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.786" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 548.792199][ T8199] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 553.185853][ T8233] netlink: 124 bytes leftover after parsing attributes in process `syz.4.796'. [ 553.241281][ T8233] netlink: 'syz.4.796': attribute type 3 has an invalid length. [ 554.826619][ T8262] openvswitch: netlink: Tunnel attr 6 has unexpected len 4 expected 0 [ 555.029150][ T8264] loop5: detected capacity change from 0 to 1024 [ 555.351230][ T8264] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 555.435663][ T8264] EXT4-fs: Ignoring sb option on remount [ 555.472279][ T8264] EXT4-fs: Cannot specify journal on remount [ 555.722173][ T6333] EXT4-fs (loop5): unmounting filesystem. [ 556.233990][ T3932] device veth1_macvtap entered promiscuous mode [ 556.300212][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 558.559391][ T8317] loop5: detected capacity change from 0 to 256 [ 558.931509][ T8290] loop2: detected capacity change from 0 to 32768 [ 560.818775][ T7858] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (7858) [ 564.735896][ T8373] loop0: detected capacity change from 0 to 32768 [ 568.536365][ T8433] netlink: 96 bytes leftover after parsing attributes in process `syz.3.849'. [ 568.605512][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.849'. [ 569.076376][ T8445] netlink: 32 bytes leftover after parsing attributes in process `syz.5.853'. [ 569.085592][ T8445] netlink: 32 bytes leftover after parsing attributes in process `syz.5.853'. [ 570.592966][ T4271] Bluetooth: hci1: hcon ffff888074996000 sent 1 < count 256 [ 573.210955][ T4271] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 573.220001][ T4271] Bluetooth: hci4: Injecting HCI hardware error event [ 573.231760][ T4273] Bluetooth: hci4: hardware error 0x00 [ 575.627283][ T4273] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 578.940885][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.947347][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.143894][ T8568] loop5: detected capacity change from 0 to 1024 [ 582.622366][ T8580] loop0: detected capacity change from 0 to 2048 [ 582.716515][ T8580] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 582.768634][ T8588] device dummy0 entered promiscuous mode [ 582.804821][ T8588] device dummy0 left promiscuous mode [ 582.901488][ T8593] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 583.659842][ T8616] loop0: detected capacity change from 0 to 256 [ 584.747821][ T8644] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 584.783189][ T8644] tipc: Enabled bearer , priority 10 [ 584.812422][ T8645] netlink: 'syz.5.909': attribute type 2 has an invalid length. [ 585.858567][ T8672] loop5: detected capacity change from 0 to 4096 [ 585.892911][ T8672] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 586.033866][ T8672] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 586.191363][ T8684] 9pnet_fd: Insufficient options for proto=fd [ 586.312001][ T6333] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 586.361421][ T6333] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 588.639845][ T8682] loop2: detected capacity change from 0 to 32768 [ 588.745027][ T8682] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.921 (8682) [ 588.823389][ T8682] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 588.861521][ T8682] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 588.962398][ T8682] BTRFS info (device loop2): enabling ssd optimizations [ 589.006986][ T8682] BTRFS info (device loop2): not using ssd optimizations [ 589.014121][ T8682] BTRFS info (device loop2): turning off barriers [ 589.122580][ T8682] BTRFS info (device loop2): use no compression [ 589.199308][ T8682] BTRFS info (device loop2): using free space tree [ 592.359476][ T8682] BTRFS error (device loop2): open_ctree failed: -12 [ 592.378964][ T7858] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by udevd (7858) [ 593.546422][ T953] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 595.865291][ T953] usb 1-1: Using ep0 maxpacket: 16 [ 596.327559][ T953] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.88 [ 596.337932][ T953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.346603][ T953] usb 1-1: Product: syz [ 596.351078][ T953] usb 1-1: Manufacturer: syz [ 596.355838][ T953] usb 1-1: SerialNumber: syz [ 596.496885][ T953] usb 1-1: USB disconnect, device number 8 [ 596.765018][ T7877] udevd[7877]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.198611][ T8794] loop5: detected capacity change from 0 to 8 [ 597.227148][ T953] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 597.425749][ T953] usb 3-1: Using ep0 maxpacket: 32 [ 597.446518][ T953] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 597.484618][ T953] usb 3-1: config 0 has no interface number 0 [ 597.500437][ T4310] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 597.508199][ T953] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.523374][ T953] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 597.535588][ T953] usb 3-1: config 0 interface 85 has no altsetting 0 [ 597.559331][ T953] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 597.569211][ T953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.585753][ T953] usb 3-1: Product: syz [ 597.590017][ T953] usb 3-1: Manufacturer: syz [ 597.650050][ T953] usb 3-1: SerialNumber: syz [ 597.677892][ T953] usb 3-1: config 0 descriptor?? [ 597.736439][ T4310] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 597.756714][ T4310] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.810220][ T4310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 597.839262][ T4310] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 597.888750][ T4310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.947615][ T4310] usb 1-1: config 0 descriptor?? [ 598.128926][ T953] appletouch 3-1:0.85: Failed to request geyser raw mode [ 598.141757][ T953] appletouch: probe of 3-1:0.85 failed with error -5 [ 598.190991][ T953] usb 3-1: USB disconnect, device number 5 [ 598.381831][ T8815] [ 598.384264][ T8815] ====================================================== [ 598.391334][ T8815] WARNING: possible circular locking dependency detected [ 598.399195][ T8815] syzkaller #0 Not tainted [ 598.403680][ T8815] ------------------------------------------------------ [ 598.410757][ T8815] syz.5.957/8815 is trying to acquire lock: [ 598.416784][ T8815] ffffffff9703a1b8 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x63/0x230 [ 598.426936][ T8815] [ 598.426936][ T8815] but task is already holding lock: [ 598.434346][ T8815] ffff88802027a8b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 598.444691][ T8815] [ 598.444691][ T8815] which lock already depends on the new lock. [ 598.444691][ T8815] [ 598.455151][ T8815] [ 598.455151][ T8815] the existing dependency chain (in reverse order) is: [ 598.464281][ T8815] [ 598.464281][ T8815] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 598.472595][ T8815] __mutex_lock+0x12d/0xae0 [ 598.477827][ T8815] nf_tables_dumpreset_obj+0x6e/0x90 [ 598.483677][ T8815] netlink_dump+0x683/0xcd0 [ 598.488758][ T8815] __netlink_dump_start+0x52c/0x6f0 [ 598.494520][ T8815] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 598.501081][ T8815] nf_tables_getobj_reset+0x1cb/0x610 [ 598.507006][ T8815] nfnetlink_rcv_msg+0x898/0x1290 [ 598.512675][ T8815] netlink_rcv_skb+0x1ef/0x440 [ 598.517993][ T8815] nfnetlink_rcv+0x2b0/0x2470 [ 598.523313][ T8815] netlink_unicast+0x7ad/0x920 [ 598.528635][ T8815] netlink_sendmsg+0x8ad/0xbd0 [ 598.533956][ T8815] ____sys_sendmsg+0x5ed/0x9a0 [ 598.539270][ T8815] ___sys_sendmsg+0x2a2/0x360 [ 598.544585][ T8815] __se_sys_sendmsg+0x1c3/0x2b0 [ 598.550092][ T8815] do_syscall_64+0x4c/0xa0 [ 598.555165][ T8815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.561619][ T8815] [ 598.561619][ T8815] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 598.569911][ T8815] __mutex_lock+0x12d/0xae0 [ 598.575337][ T8815] __netlink_dump_start+0x11e/0x6f0 [ 598.581098][ T8815] ip_set_dump+0x152/0x1e0 [ 598.586172][ T8815] nfnetlink_rcv_msg+0xcab/0x1290 [ 598.591745][ T8815] netlink_rcv_skb+0x1ef/0x440 [ 598.597071][ T8815] nfnetlink_rcv+0x2b0/0x2470 [ 598.602333][ T8815] netlink_unicast+0x7ad/0x920 [ 598.607677][ T8815] netlink_sendmsg+0x8ad/0xbd0 [ 598.613011][ T8815] ____sys_sendmsg+0x5ed/0x9a0 [ 598.618533][ T8815] ___sys_sendmsg+0x2a2/0x360 [ 598.623803][ T8815] __se_sys_sendmsg+0x1c3/0x2b0 [ 598.629233][ T8815] do_syscall_64+0x4c/0xa0 [ 598.634225][ T8815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.640702][ T8815] [ 598.640702][ T8815] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 598.648629][ T8815] __lock_acquire+0x2d18/0x7c40 [ 598.654048][ T8815] lock_acquire+0x1bb/0x4a0 [ 598.659133][ T8815] __mutex_lock+0x12d/0xae0 [ 598.664200][ T8815] ip_set_nfnl_get_byindex+0x63/0x230 [ 598.670225][ T8815] set_target_v1_checkentry+0x88/0x4f0 [ 598.676239][ T8815] xt_check_target+0x49d/0xbf0 [ 598.681554][ T8815] nft_target_init+0x678/0x9c0 [ 598.686898][ T8815] nf_tables_newrule+0x170a/0x2810 [ 598.692561][ T8815] nfnetlink_rcv+0x1119/0x2470 [ 598.697875][ T8815] netlink_unicast+0x7ad/0x920 [ 598.703218][ T8815] netlink_sendmsg+0x8ad/0xbd0 [ 598.708546][ T8815] ____sys_sendmsg+0x5ed/0x9a0 [ 598.713870][ T8815] ___sys_sendmsg+0x2a2/0x360 [ 598.719107][ T8815] __se_sys_sendmsg+0x1c3/0x2b0 [ 598.724523][ T8815] do_syscall_64+0x4c/0xa0 [ 598.729509][ T8815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.735958][ T8815] [ 598.735958][ T8815] other info that might help us debug this: [ 598.735958][ T8815] [ 598.746228][ T8815] Chain exists of: [ 598.746228][ T8815] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 598.746228][ T8815] [ 598.760791][ T8815] Possible unsafe locking scenario: [ 598.760791][ T8815] [ 598.768309][ T8815] CPU0 CPU1 [ 598.773730][ T8815] ---- ---- [ 598.779162][ T8815] lock(&nft_net->commit_mutex); [ 598.784240][ T8815] lock(nlk_cb_mutex-NETFILTER); [ 598.792004][ T8815] lock(&nft_net->commit_mutex); [ 598.799681][ T8815] lock(nfnl_subsys_ipset); [ 598.804309][ T8815] [ 598.804309][ T8815] *** DEADLOCK *** [ 598.804309][ T8815] [ 598.812479][ T8815] 1 lock held by syz.5.957/8815: [ 598.817455][ T8815] #0: ffff88802027a8b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 598.828212][ T8815] [ 598.828212][ T8815] stack backtrace: [ 598.834144][ T8815] CPU: 0 PID: 8815 Comm: syz.5.957 Not tainted syzkaller #0 [ 598.841455][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 598.851592][ T8815] Call Trace: [ 598.854909][ T8815] [ 598.857887][ T8815] dump_stack_lvl+0x188/0x24e [ 598.862806][ T8815] ? load_image+0x410/0x410 [ 598.867360][ T8815] ? show_regs_print_info+0x12/0x12 [ 598.872612][ T8815] ? print_circular_bug+0x12b/0x1a0 [ 598.877861][ T8815] check_noncircular+0x296/0x330 [ 598.883063][ T8815] ? add_chain_block+0x9b0/0x9b0 [ 598.888186][ T8815] ? lockdep_lock+0xf1/0x1f0 [ 598.893055][ T8815] ? __lock_acquire+0x1465/0x7c40 [ 598.898667][ T8815] ? _find_first_zero_bit+0xd2/0x100 [ 598.904021][ T8815] __lock_acquire+0x2d18/0x7c40 [ 598.908966][ T8815] ? mark_lock+0x94/0x320 [ 598.913706][ T8815] ? verify_lock_unused+0x140/0x140 [ 598.919164][ T8815] ? __lock_acquire+0x138a/0x7c40 [ 598.924283][ T8815] lock_acquire+0x1bb/0x4a0 [ 598.928836][ T8815] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 598.934445][ T8815] ? __might_sleep+0xd0/0xd0 [ 598.939240][ T8815] ? read_lock_is_recursive+0x10/0x10 [ 598.944655][ T8815] ? lockdep_hardirqs_on+0x94/0x140 [ 598.949991][ T8815] ? __lock_acquire+0x7c40/0x7c40 [ 598.955053][ T8815] __mutex_lock+0x12d/0xae0 [ 598.959603][ T8815] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 598.965226][ T8815] ? ip_set_pernet+0x23/0x230 [ 598.970040][ T8815] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 598.975906][ T8815] ? mutex_lock_nested+0x10/0x10 [ 598.981031][ T8815] ? ip_set_pernet+0x23/0x230 [ 598.986014][ T8815] ip_set_nfnl_get_byindex+0x63/0x230 [ 598.991739][ T8815] set_target_v1_checkentry+0x88/0x4f0 [ 598.997411][ T8815] ? set_target_v1+0x3e0/0x3e0 [ 599.002231][ T8815] xt_check_target+0x49d/0xbf0 [ 599.007328][ T8815] ? unwind_get_return_address+0x49/0x80 [ 599.013955][ T8815] ? stack_trace_save+0xf0/0xf0 [ 599.019028][ T8815] ? xt_find_jump_offset+0xe0/0xe0 [ 599.024225][ T8815] ? __stack_depot_save+0x35/0x480 [ 599.029382][ T8815] ? nft_target_init+0x1cc/0x9c0 [ 599.034359][ T8815] nft_target_init+0x678/0x9c0 [ 599.039207][ T8815] ? nft_target_release_ops+0x70/0x70 [ 599.044750][ T8815] ? __kmem_cache_alloc_node+0x19d/0x270 [ 599.050613][ T8815] ? nf_tables_newrule+0x14d9/0x2810 [ 599.056220][ T8815] ? rcu_is_watching+0x11/0xa0 [ 599.061565][ T8815] ? nf_tables_newrule+0x14d9/0x2810 [ 599.067244][ T8815] ? __kmalloc+0xe4/0x240 [ 599.071619][ T8815] nf_tables_newrule+0x170a/0x2810 [ 599.076903][ T8815] ? nf_tables_delchain+0xf00/0xf00 [ 599.082148][ T8815] ? __lock_acquire+0x7c40/0x7c40 [ 599.087392][ T8815] ? mutex_unlock+0x10/0x10 [ 599.091946][ T8815] ? __nla_parse+0x3c/0x50 [ 599.096567][ T8815] nfnetlink_rcv+0x1119/0x2470 [ 599.101412][ T8815] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 599.107009][ T8815] ? ref_tracker_free+0x682/0x830 [ 599.112153][ T8815] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.117548][ T8815] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 599.123160][ T8815] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.128402][ T8815] netlink_unicast+0x7ad/0x920 [ 599.133221][ T8815] netlink_sendmsg+0x8ad/0xbd0 [ 599.138148][ T8815] ? netlink_getsockopt+0x550/0x550 [ 599.143388][ T8815] ? apparmor_socket_sendmsg+0x8a/0x330 [ 599.148999][ T8815] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 599.154310][ T8815] ? security_socket_sendmsg+0x7c/0xa0 [ 599.159811][ T8815] ? netlink_getsockopt+0x550/0x550 [ 599.165048][ T8815] ____sys_sendmsg+0x5ed/0x9a0 [ 599.169885][ T8815] ? __sys_sendmsg_sock+0x30/0x30 [ 599.174937][ T8815] ? __import_iovec+0x306/0x510 [ 599.179826][ T8815] ? import_iovec+0x6f/0xa0 [ 599.184374][ T8815] ___sys_sendmsg+0x2a2/0x360 [ 599.189270][ T8815] ? __sys_sendmsg+0x2a0/0x2a0 [ 599.194231][ T8815] __se_sys_sendmsg+0x1c3/0x2b0 [ 599.199124][ T8815] ? __x64_sys_sendmsg+0x80/0x80 [ 599.204198][ T8815] ? lockdep_hardirqs_on+0x94/0x140 [ 599.209430][ T8815] do_syscall_64+0x4c/0xa0 [ 599.213884][ T8815] ? clear_bhb_loop+0x60/0xb0 [ 599.218600][ T8815] ? clear_bhb_loop+0x60/0xb0 [ 599.223319][ T8815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.229268][ T8815] RIP: 0033:0x7f79b439de59 [ 599.233723][ T8815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.253361][ T8815] RSP: 002b:00007f79b532a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.261832][ T8815] RAX: ffffffffffffffda RBX: 00007f79b4625fa0 RCX: 00007f79b439de59 [ 599.269833][ T8815] RDX: 0000000000000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 599.277837][ T8815] RBP: 00007f79b4433e6f R08: 0000000000000000 R09: 0000000000000000 [ 599.285924][ T8815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.293928][ T8815] R13: 00007f79b4626038 R14: 00007f79b4625fa0 R15: 00007ffce97f9ca8 [ 599.301942][ T8815] [ 599.305027][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.316955][ T8815] Cannot find add_set index 0 as target [ 599.329646][ T4310] hid-steam 0003:28DE:1102.0001: item fetching failed at offset 2/5 [ 599.349978][ T4310] hid-steam 0003:28DE:1102.0001: steam_probe:parse of hid interface failed [ 599.358745][ T4310] hid-steam: probe of 0003:28DE:1102.0001 failed with error -22 [ 599.549564][ T4310] usb 1-1: USB disconnect, device number 9