last executing test programs: 14.898715032s ago: executing program 2 (id=715): syz_open_dev$vcsu(&(0x7f0000000100), 0xd, 0x412002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x22012, r6, 0x6bcf8000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x6c0}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 13.59021442s ago: executing program 2 (id=718): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f00000000c0)=""/189, 0x0, 0xbd, 0x1}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r3, 0x3) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) fallocate(r3, 0x0, 0x2dc2, 0xfffb) 11.830980745s ago: executing program 1 (id=728): syz_open_dev$vcsu(&(0x7f0000000100), 0xd, 0x412002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x22012, r6, 0x6bcf8000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x6c0}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 10.584919155s ago: executing program 1 (id=730): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x2, 0x4, "9e8d2745585f6400d1de4d18f5127e7a79a91a95161c79fb72b118bbcca20a4f", 0x34565559}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000180)=ANY=[], 0xfe, 0xa7f, &(0x7f0000000b40)="$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") syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x181102, 0x8c) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000500)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x8, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$rose(r0, 0x104, 0x3, 0x0, &(0x7f0000000140)) recvfrom(r2, &(0x7f0000000240)=""/121, 0x79, 0x12002, 0x0, 0x0) 10.290537481s ago: executing program 3 (id=731): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x50b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) vmsplice(r2, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)=@newtaction={0x18, 0x5a, 0x5, 0x70bd29, 0x25dfdbfb, {0x2}, [{0x4, 0x3}]}, 0x18}}, 0x8080) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) pwritev2(r1, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x5) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000001, 0x4) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x3dc0, 0x8001, 0x802, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x1009f, 0xfffffff7, 0xcd6, 0xb, 0x1db, 0x2, 0x7, 0xfe, 0x10002, 0xf, 0x0, 0x0, 0x2, 0x7, 0xf21, 0x0, 0xb, 0xc00, 0x3f, 0x9, 0x6, 0x1, 0xfffffffc]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000000)=0x7, 0x4) 8.669717881s ago: executing program 3 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) rseq(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(0x0) lstat(&(0x7f0000000080)='./file0\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x13, {0x11, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0) 7.238638857s ago: executing program 3 (id=734): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x7, 0x0, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 7.066921676s ago: executing program 2 (id=736): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) 4.805524308s ago: executing program 4 (id=737): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000102c"], 0x0) 4.803057428s ago: executing program 1 (id=738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffc}, 0x14}}, 0x0) 4.800737187s ago: executing program 2 (id=739): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180)="d70582685ec92928", 0xfdef, 0x800, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) 4.457414384s ago: executing program 3 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001480)=0x7) syz_io_uring_setup(0x49c, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4.194700905s ago: executing program 4 (id=742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, 0x0, 0x6) 4.019599883s ago: executing program 1 (id=743): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x50b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) vmsplice(r2, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)=@newtaction={0x18, 0x5a, 0x5, 0x70bd29, 0x25dfdbfb, {0x2}, [{0x4, 0x3}]}, 0x18}}, 0x8080) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) pwritev2(r1, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x5) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000001, 0x4) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x3dc0, 0x8001, 0x802, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x1009f, 0xfffffff7, 0xcd6, 0xb, 0x1db, 0x2, 0x7, 0xfe, 0x10002, 0xf, 0x0, 0x0, 0x2, 0x7, 0xf21, 0x0, 0xb, 0xc00, 0x3f, 0x9, 0x6, 0x1, 0xfffffffc]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000000)=0x7, 0x4) 2.703015539s ago: executing program 0 (id=744): pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.701305159s ago: executing program 3 (id=745): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b5, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 2.700758049s ago: executing program 4 (id=746): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xf, 0x8041) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f0000000340)}) 2.589862039s ago: executing program 0 (id=747): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000200)={0x18, 0x0, {0x4008, @multicast, 'vcan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000078c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)='<', 0x1}], 0x1}}], 0x1, 0x8010) 2.430610409s ago: executing program 1 (id=748): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x2, 0x4, "9e8d2745585f6400d1de4d18f5127e7a79a91a95161c79fb72b118bbcca20a4f", 0x34565559}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000180)=ANY=[], 0xfe, 0xa7f, &(0x7f0000000b40)="$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") syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x181102, 0x8c) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000500)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x8, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$rose(r0, 0x104, 0x3, 0x0, &(0x7f0000000140)) recvfrom(r2, &(0x7f0000000240)=""/121, 0x79, 0x12002, 0x0, 0x0) 2.410892526s ago: executing program 4 (id=749): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xf8, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d04", 0xc2}], 0x1}}], 0x3, 0x2090) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.337439992s ago: executing program 0 (id=750): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = getpid() syz_pidfd_open(r1, 0x0) pidfd_getfd(r0, r0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r2, 0x0, r2) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 1.493275516s ago: executing program 1 (id=751): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x2, 0x2e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r3, 0x663e, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0xc000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000280)={{0x1, 0xeeee8000, 0xc, 0x6, 0x4, 0xa, 0x3, 0xa, 0x0, 0x1, 0xc, 0x3}, {0x2, 0x80a0000, 0xe, 0x13, 0x1, 0x8, 0x3, 0xa, 0xff, 0x46, 0x2}, {0x5000, 0x54000, 0x4, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x5, 0x3}, {0x3000, 0x0, 0x16, 0x4, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x9000, 0x30000, 0xb, 0xd, 0x5b, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0x9}, {0x3000, 0x8092000, 0x8, 0xbd, 0x6, 0x10, 0x10, 0x1, 0xbf, 0x18, 0x9, 0x4}, {0x10000, 0x8000000, 0xc, 0x1, 0x0, 0xf, 0x10, 0x3, 0x8, 0x0, 0x2, 0x8}, {0xdddd0000, 0xffff, 0x10, 0x4, 0x7, 0x3, 0x4, 0xf9, 0x1, 0x8, 0x0, 0xfa}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x5, 0x0, 0x2, 0x0, 0x100400002, 0x18000, 0xdddd1000, [0x8, 0x5, 0x400000000000000d, 0x7]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) close(r1) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace(0x10, r10) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000200)=r10) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r6, &(0x7f00000001c0)={0x10000000}) 1.466856832s ago: executing program 0 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x28, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000081}, 0x20004800) 1.397920278s ago: executing program 0 (id=753): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) 1.397620309s ago: executing program 4 (id=754): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b5, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x851, 0x400000000000000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) 1.263575024s ago: executing program 0 (id=755): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.232611648s ago: executing program 2 (id=756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 241.219655ms ago: executing program 4 (id=757): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r4 = dup2(0xffffffffffffffff, r2) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) r5 = userfaultfd(0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 60.116042ms ago: executing program 2 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="2f00032a", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf25030000003000018014000400ff010000000000000000000000000001060001000a00000008000700", @ANYRESDEC, @ANYRES64=r0], 0x44}}, 0x40440d0) setregid(0xee00, 0xee00) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x49, 0x100, 0xffffffff, 0x401, 0x0, 0x1, 0x0, 0x0, 0xd, 0xff, 0x0, 0x8000001f, 0x2, 0x47}}) socket$isdn(0x22, 0x3, 0x25) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x602, @mcast1, 0x2}}, 0x0, 0x0, 0x1b, 0x0, "1d4503208023b4addb05d45d9563363a0f0b24c0a25e2ab7ff45188fca8d6a029352626da0650c5f7f556e2bb7039b9808029089fa04834b5faabce9ab00000000000000125d231bf74f4500"}, 0xd8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000240)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r2, &(0x7f0000000300), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4, 0x8000000, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="1400000010000100000a01010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800c00010062697477697365001c0002800800034000000004080001400000001408000240000000120900010073797a3000000000140000001100010000000000000000000700000a"], 0xac}}, 0x0) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f00000003c0)=@ethtool_eee={0x44, 0x800, 0x4000b, 0xcb, 0x3, 0x5, 0x5, 0x5, [0x9, 0xad05]}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000100000000030000002800d904091153cf8553ef07c80e2497762901800e0001006574683a766c616e3000000014000280080001000300000000000400ff0300006dac9e53105a92399411d4f9c8144dc0afe5f0bef9492cc60c3cb1b78be31d272fca93b467c1dcf780ccd7e70f98eedeba1264a3a39a2757b42709bcd6b0b83f9172bb9cf48a5f300c9bbc2a13504443b4504fbb0420c0e90122be824d474f8db58d3d6a597dabf7540fe1bb4eaf4570852851137a0bb9c55de5070fc2aa87ef"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=759): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000001940)=""/4111, 0x100f}, {&(0x7f0000000700)=""/192, 0xc0}, {&(0x7f0000003cc0)=""/204, 0xcc}], 0x5}, 0x9}], 0x7, 0x10122, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 49.955111][ T4172] cgroup: Unknown subsys name 'net' [ 50.062563][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.319225][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.653946][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.697580][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 52.753631][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 52.808855][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.816351][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.824382][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.838982][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.846286][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.854207][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.920188][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 52.941934][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.951622][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.959213][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.968625][ T4188] device bridge_slave_0 entered promiscuous mode [ 52.980521][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.988233][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.996791][ T4188] device bridge_slave_1 entered promiscuous mode [ 53.022794][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.045356][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 53.055584][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.062971][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.072409][ T4195] device bridge_slave_0 entered promiscuous mode [ 53.097432][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.113404][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.123892][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.131349][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.139488][ T4195] device bridge_slave_1 entered promiscuous mode [ 53.185593][ T4184] team0: Port device team_slave_0 added [ 53.210359][ T4188] team0: Port device team_slave_0 added [ 53.224478][ T4184] team0: Port device team_slave_1 added [ 53.240578][ T4188] team0: Port device team_slave_1 added [ 53.255656][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.273816][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.288542][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.296280][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.304632][ T4197] device bridge_slave_0 entered promiscuous mode [ 53.324636][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.331672][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.358112][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.378735][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.387185][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.396269][ T4197] device bridge_slave_1 entered promiscuous mode [ 53.404943][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.412173][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.438703][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.450260][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.457926][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.485094][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.520918][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.528488][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.555928][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.574932][ T4195] team0: Port device team_slave_0 added [ 53.595415][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.603212][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.611953][ T4190] device bridge_slave_0 entered promiscuous mode [ 53.620141][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.627369][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.635904][ T4190] device bridge_slave_1 entered promiscuous mode [ 53.644698][ T4195] team0: Port device team_slave_1 added [ 53.662258][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.689601][ T4188] device hsr_slave_0 entered promiscuous mode [ 53.696959][ T4188] device hsr_slave_1 entered promiscuous mode [ 53.725345][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.752353][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.771138][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.782718][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.790727][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.798383][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.807025][ T4184] Cannot create hsr debugfs directory [ 53.816733][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.823711][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.852734][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.872261][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.879643][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.907690][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.946147][ T4197] team0: Port device team_slave_0 added [ 53.957710][ T4190] team0: Port device team_slave_0 added [ 53.975424][ T4197] team0: Port device team_slave_1 added [ 53.991090][ T4190] team0: Port device team_slave_1 added [ 54.032998][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.040607][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.067606][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.086222][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.094296][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.123306][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.149295][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.156638][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.186604][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.202101][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.210136][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.237739][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.261393][ T4195] device hsr_slave_0 entered promiscuous mode [ 54.268642][ T4195] device hsr_slave_1 entered promiscuous mode [ 54.275534][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.283224][ T4195] Cannot create hsr debugfs directory [ 54.355181][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 54.367866][ T4190] device hsr_slave_0 entered promiscuous mode [ 54.368501][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 54.380530][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 54.380823][ T4190] device hsr_slave_1 entered promiscuous mode [ 54.394446][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.403492][ T4190] Cannot create hsr debugfs directory [ 54.432326][ T4197] device hsr_slave_0 entered promiscuous mode [ 54.435056][ T4193] Bluetooth: hci2: command 0x0409 tx timeout [ 54.438893][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 54.452237][ T4197] device hsr_slave_1 entered promiscuous mode [ 54.459011][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.466788][ T4197] Cannot create hsr debugfs directory [ 54.657359][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.670206][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.693999][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.714519][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.757317][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.767236][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.790363][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.807825][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.859489][ T4197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.870129][ T4197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.895957][ T4197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.910194][ T4197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.936138][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.976355][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.989548][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.000363][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.009882][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.023358][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.032927][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.057568][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.110134][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.120071][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.130447][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.138319][ T1418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.147983][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.159226][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.168117][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.175221][ T1418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.183274][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.205485][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.227824][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.246876][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.268570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.279071][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.293644][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.309933][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.321191][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.331065][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.341679][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.351422][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.369713][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.386210][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.396966][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.408590][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.418770][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.428341][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.437398][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.454486][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.466667][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.486837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.497262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.508229][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.517020][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.525930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.538382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.548050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.557953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.567136][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.575227][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.583315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.591562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.613231][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.620888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.637400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.653274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.663834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.674286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.682868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.711394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.721120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.730575][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.738074][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.769075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.778867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.789758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.799211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.809841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.820572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.831845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.842223][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.850025][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.867779][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.877428][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.897603][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.920594][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.931649][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.941411][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.950899][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.958905][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.973251][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.990503][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.000361][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.039734][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.054735][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.062672][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.071840][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.080651][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.092491][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.105013][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.132110][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.152001][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.165612][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.175971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.187492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.209927][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.226751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.237200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.247068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.257310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.267976][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.276083][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.284541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.324333][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.333883][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.343269][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.351544][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.360388][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.370168][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.380786][ T892] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.387975][ T892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.400521][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.414587][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.449080][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 56.457477][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 56.469433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.478320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.487292][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 56.491743][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.501376][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.511940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.521637][ T4225] Bluetooth: hci2: command 0x041b tx timeout [ 56.522940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.538537][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 56.546306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.557413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.569161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.577758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.601137][ T4188] device veth0_vlan entered promiscuous mode [ 56.620639][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.630655][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.641474][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.650821][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.661541][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.670158][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.678671][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.688662][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.698037][ T892] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.706156][ T892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.719399][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.729723][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.743355][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.753415][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.775822][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.786785][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.804726][ T4188] device veth1_vlan entered promiscuous mode [ 56.824832][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.839923][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.850030][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.864193][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.873086][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.885345][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.899576][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.912406][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.930784][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.939176][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.973771][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.988199][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.005442][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.020346][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.029732][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.039125][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.049025][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.057860][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.068837][ T4184] device veth0_vlan entered promiscuous mode [ 57.086103][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.107897][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.116550][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.127482][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.136099][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.147472][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.165905][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.179659][ T4184] device veth1_vlan entered promiscuous mode [ 57.206304][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.222529][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.251944][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.291745][ T4188] device veth0_macvtap entered promiscuous mode [ 57.339794][ T4184] device veth0_macvtap entered promiscuous mode [ 57.356087][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.372389][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.385578][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.403445][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.413725][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.424656][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.434834][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.449868][ T4188] device veth1_macvtap entered promiscuous mode [ 57.459825][ T4184] device veth1_macvtap entered promiscuous mode [ 57.476199][ T4197] device veth0_vlan entered promiscuous mode [ 57.489191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.502424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.516297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.530920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.548100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.557987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.574945][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.582734][ T1418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.608123][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.623295][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.651065][ T4197] device veth1_vlan entered promiscuous mode [ 57.663705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.673175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.683434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.693633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.705614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.738858][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.748118][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.760755][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.779126][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.793923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.806691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.816317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.826955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.848183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.858299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.871417][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.881576][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.893996][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.904599][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.917701][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.929102][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.941774][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.978904][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.989948][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.015298][ T4195] device veth0_vlan entered promiscuous mode [ 58.031689][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.045109][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.053782][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.062932][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.073125][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.083365][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.094850][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.103146][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.123841][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.133669][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.142788][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.153614][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.180301][ T4195] device veth1_vlan entered promiscuous mode [ 58.208900][ T4190] device veth0_vlan entered promiscuous mode [ 58.239554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.249478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.258516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.268321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.281840][ T4197] device veth0_macvtap entered promiscuous mode [ 58.328047][ T4197] device veth1_macvtap entered promiscuous mode [ 58.357244][ T4190] device veth1_vlan entered promiscuous mode [ 58.384353][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.392633][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.406923][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.418103][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.431093][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.450109][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.462349][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.471159][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.480630][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.489195][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.497873][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.506998][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.516288][ T2856] Bluetooth: hci3: command 0x040f tx timeout [ 58.518876][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.523703][ T2856] Bluetooth: hci1: command 0x040f tx timeout [ 58.538928][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.539648][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.548630][ T2856] Bluetooth: hci0: command 0x040f tx timeout [ 58.565257][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.578201][ T4195] device veth0_macvtap entered promiscuous mode [ 58.606068][ T4226] Bluetooth: hci4: command 0x040f tx timeout [ 58.612629][ T4226] Bluetooth: hci2: command 0x040f tx timeout [ 58.627471][ T4195] device veth1_macvtap entered promiscuous mode [ 58.635582][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.642116][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.648742][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.666050][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.677893][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.689544][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.701464][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.716758][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.728068][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.738096][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.747188][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.759704][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.768250][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.778159][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.789481][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.802692][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.811497][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.821546][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.833915][ T4190] device veth0_macvtap entered promiscuous mode [ 58.867852][ T4190] device veth1_macvtap entered promiscuous mode [ 58.878604][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.892387][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.907761][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.921069][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.931360][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.946744][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.960708][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.987695][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.989277][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.015419][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.016694][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.032392][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.039443][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.054728][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.068127][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.082953][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.096919][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.107898][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.119936][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.130195][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.144137][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.157442][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.168726][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.179017][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.189005][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.199500][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.225201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.239976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.265842][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.283252][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.302379][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.321736][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.332538][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.345734][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.358027][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.368868][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.385770][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.412816][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.428945][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.458434][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.471866][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.493010][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.504499][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.508462][ T4266] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.515538][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.515565][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.515578][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.515588][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.517270][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.630618][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.656940][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.675945][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.692358][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.705442][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.717942][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.903180][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.918696][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.951655][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.966845][ T1418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.997852][ T1418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.024300][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.030599][ T892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.095772][ T892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.133117][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.157081][ T892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.179404][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.204761][ T892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.215278][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.255899][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.273999][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.473965][ T1418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.506354][ T1418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.567568][ T4282] zonefs (nullb0) ERROR: Not a zoned block device [ 61.158108][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 61.209242][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 61.269390][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 61.305101][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 61.352187][ T4192] Bluetooth: unknown link type 40 [ 61.516760][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 61.541010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.503019][ T4303] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 62.509758][ T4303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.554970][ T4303] vhci_hcd vhci_hcd.0: Device attached [ 62.605548][ T4303] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 62.612180][ T4303] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 62.645684][ T4303] vhci_hcd vhci_hcd.0: Device attached [ 62.687018][ T4303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 62.704349][ T4314] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 62.710887][ T4314] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.722125][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.838860][ T4314] vhci_hcd vhci_hcd.0: Device attached [ 62.887981][ T4303] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(12) [ 62.894603][ T4303] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.074105][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.083149][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.092281][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.101926][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.111115][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.120311][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.130122][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.140363][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.149932][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.159925][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.239320][ T4303] vhci_hcd vhci_hcd.0: Device attached [ 63.246583][ T2856] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 63.303706][ T4314] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(9) [ 63.310295][ T4314] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.326091][ T4314] vhci_hcd vhci_hcd.0: Device attached [ 63.421371][ T4303] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(14) [ 63.428382][ T4303] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.499157][ T4303] vhci_hcd vhci_hcd.0: Device attached [ 63.508275][ T3520] Bluetooth: hci1: command 0x0409 tx timeout [ 63.518373][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 63.533559][ T4323] vhci_hcd: connection closed [ 63.534106][ T4319] vhci_hcd: connection closed [ 63.534632][ T4315] vhci_hcd: connection closed [ 63.544165][ T4305] vhci_hcd: connection reset by peer [ 63.544438][ T4311] vhci_hcd: connection closed [ 63.558442][ T144] vhci_hcd: stop threads [ 63.569363][ T4327] vhci_hcd: connection closed [ 63.653632][ T21] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 63.715702][ T21] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.759881][ T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.791940][ T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.815100][ T144] vhci_hcd: release socket [ 63.835540][ T21] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.857258][ T144] vhci_hcd: disconnect device [ 63.934799][ T144] vhci_hcd: stop threads [ 63.939084][ T144] vhci_hcd: release socket [ 63.956485][ T21] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 63.972240][ T144] vhci_hcd: disconnect device [ 63.982526][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.993761][ T144] vhci_hcd: stop threads [ 64.027404][ T144] vhci_hcd: release socket [ 64.044585][ T144] vhci_hcd: disconnect device [ 64.064126][ T144] vhci_hcd: stop threads [ 64.074285][ T144] vhci_hcd: release socket [ 64.081877][ T144] vhci_hcd: disconnect device [ 64.105776][ T144] vhci_hcd: stop threads [ 64.110149][ T144] vhci_hcd: release socket [ 64.134681][ T144] vhci_hcd: disconnect device [ 64.150711][ T144] vhci_hcd: stop threads [ 64.168123][ T144] vhci_hcd: release socket [ 64.184616][ T144] vhci_hcd: disconnect device [ 64.822779][ T21] usb 3-1: usb_control_msg returned -32 [ 64.828829][ T21] usbtmc 3-1:16.0: can't read capabilities [ 65.518570][ T4363] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 65.588314][ T4373] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 65.685315][ T21] usb 3-1: USB disconnect, device number 2 [ 67.524454][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.650386][ T4407] loop3: detected capacity change from 0 to 512 [ 67.795267][ T4407] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.44: invalid indirect mapped block 256 (level 2) [ 67.814225][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 67.832653][ T4407] EXT4-fs (loop3): 2 truncates cleaned up [ 67.852199][ T4407] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 67.983943][ T26] audit: type=1800 audit(1773286819.312:2): pid=4407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.44" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 68.174713][ T25] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 68.278656][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.438774][ T25] usb 1-1: Product: syz [ 68.444731][ T2856] vhci_hcd: vhci_device speed not set [ 68.523132][ T25] usb 1-1: Manufacturer: syz [ 68.605759][ T25] usb 1-1: SerialNumber: syz [ 68.768891][ T25] usb 1-1: config 0 descriptor?? [ 68.885585][ T25] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 68.906545][ T4417] netlink: 80 bytes leftover after parsing attributes in process `syz.4.48'. [ 69.172745][ T4231] usb 1-1: USB disconnect, device number 2 [ 69.508717][ T4426] loop3: detected capacity change from 0 to 256 [ 69.524437][ T4226] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.934277][ T4226] usb 5-1: Using ep0 maxpacket: 8 [ 70.064430][ T4226] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 70.144575][ T4226] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 70.292758][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.379272][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.385946][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.894439][ T4438] usb 5-1: USB disconnect, device number 2 [ 72.908260][ T4472] autofs4:pid:4472:autofs_fill_super: called with bogus options [ 73.570428][ T4493] loop0: detected capacity change from 0 to 1024 [ 73.914426][ T26] audit: type=1326 audit(1773286825.142:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 73.937016][ C0] vkms_vblank_simulate: vblank timer overrun [ 74.013955][ T26] audit: type=1326 audit(1773286825.162:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 74.071214][ T26] audit: type=1326 audit(1773286825.162:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 74.119402][ T26] audit: type=1326 audit(1773286825.162:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 74.334205][ T26] audit: type=1326 audit(1773286825.162:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 74.510119][ T26] audit: type=1326 audit(1773286825.162:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 74.564543][ T26] audit: type=1326 audit(1773286825.172:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 74.894206][ T26] audit: type=1326 audit(1773286825.162:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 74.921689][ T26] audit: type=1326 audit(1773286825.172:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 75.296371][ T4524] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 75.303274][ T4524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 75.366801][ T4524] vhci_hcd vhci_hcd.0: Device attached [ 75.644679][ T4226] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 76.437508][ T7] cfg80211: failed to load regulatory.db [ 77.054185][ T4534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.83'. [ 77.144484][ T2856] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 77.194334][ T4226] usb 4-1: config 0 has no interfaces? [ 77.274277][ T4226] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 77.320064][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.347821][ T4226] usb 4-1: config 0 descriptor?? [ 77.350362][ T4536] loop0: detected capacity change from 0 to 64 [ 77.669458][ T4536] Trying to free block not in datazone [ 77.689671][ T4526] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 77.710595][ T25] usb 4-1: USB disconnect, device number 2 [ 77.723608][ T9] vhci_hcd: stop threads [ 77.730928][ T9] vhci_hcd: release socket [ 77.775576][ T9] vhci_hcd: disconnect device [ 79.971369][ T4558] loop0: detected capacity change from 0 to 4096 [ 80.357257][ T4574] loop4: detected capacity change from 0 to 128 [ 80.464930][ T4579] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.666389][ T4574] ======================================================= [ 80.666389][ T4574] WARNING: The mand mount option has been deprecated and [ 80.666389][ T4574] and is ignored by this kernel. Remove the mand [ 80.666389][ T4574] option from the mount to silence this warning. [ 80.666389][ T4574] ======================================================= [ 80.714803][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.004375][ T4574] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 82.053845][ T4574] hpfs: filesystem error: improperly stopped [ 82.112618][ T4574] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 82.188272][ T4574] hpfs: You really don't want any checks? You are crazy... [ 82.243542][ T4574] hpfs: hpfs_map_sector(): read error [ 82.270360][ T4574] hpfs: code page support is disabled [ 82.334114][ T4574] hpfs: hpfs_map_4sectors(): unaligned read [ 82.361805][ T4574] hpfs: hpfs_map_4sectors(): unaligned read [ 82.374661][ T2856] vhci_hcd: vhci_device speed not set [ 82.392372][ T4599] loop0: detected capacity change from 0 to 512 [ 82.414191][ T4574] hpfs: filesystem error: unable to find root dir [ 83.284934][ T4574] hpfs: hpfs_map_4sectors(): unaligned read [ 83.291811][ T4574] hpfs: hpfs_map_sector(): read error [ 83.378896][ T4607] loop1: detected capacity change from 0 to 1024 [ 83.848141][ T4617] loop1: detected capacity change from 0 to 16 [ 83.921016][ T4617] erofs: (device loop1): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 84.787557][ T4631] loop0: detected capacity change from 0 to 16 [ 84.798845][ T4621] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 84.857815][ T4631] erofs: (device loop0): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 84.981369][ T4634] IPVS: length: 8 != 3390824 [ 85.015991][ T4631] loop0: detected capacity change from 0 to 512 [ 88.124192][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.352654][ T4675] loop1: detected capacity change from 0 to 512 [ 88.539084][ T4675] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.564318][ T4675] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.805521][ T21] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 88.834212][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.840639][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.892934][ T21] usb 3-1: Product: syz [ 88.912002][ T21] usb 3-1: Manufacturer: syz [ 88.949414][ T21] usb 3-1: SerialNumber: syz [ 88.982696][ T21] usb 3-1: config 0 descriptor?? [ 89.047062][ T21] ch341 3-1:0.0: ch341-uart converter detected [ 89.119796][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 89.254397][ T21] usb 3-1: failed to receive control message: -71 [ 89.263077][ T21] ch341-uart: probe of ttyUSB0 failed with error -71 [ 89.275748][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.305233][ T21] usb 3-1: USB disconnect, device number 3 [ 89.313799][ T7] usb 5-1: config 0 has no interfaces? [ 89.346580][ T21] ch341 3-1:0.0: device disconnected [ 89.529836][ T7] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 89.561646][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.592137][ T7] usb 5-1: Product: syz [ 89.602301][ T7] usb 5-1: Manufacturer: syz [ 89.629684][ T7] usb 5-1: SerialNumber: syz [ 89.648169][ T7] usb 5-1: config 0 descriptor?? [ 89.848866][ T26] audit: type=1326 audit(1773286841.182:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4694 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc5ef1799 code=0x7ffc0000 [ 89.928655][ T26] audit: type=1326 audit(1773286841.222:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4694 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc5ef1799 code=0x7ffc0000 [ 90.064113][ T26] audit: type=1326 audit(1773286841.232:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4694 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc5ef1799 code=0x7ffc0000 [ 90.171992][ T26] audit: type=1326 audit(1773286841.232:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4694 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc5ef1799 code=0x7ffc0000 [ 90.279414][ T26] audit: type=1326 audit(1773286841.232:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4694 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f3cc5ef1799 code=0x7ffc0000 [ 90.315866][ T21] usb 5-1: USB disconnect, device number 3 [ 90.396003][ T26] audit: type=1326 audit(1773286841.232:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4694 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc5ef1799 code=0x7ffc0000 [ 90.520342][ T26] audit: type=1326 audit(1773286841.232:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4694 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc5ef1799 code=0x7ffc0000 [ 90.558358][ T26] audit: type=1326 audit(1773286841.232:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4694 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3cc5ef1799 code=0x7ffc0000 [ 90.585995][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.608322][ T26] audit: type=1326 audit(1773286841.232:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4694 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3cc5ef1799 code=0x7ffc0000 [ 90.637992][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.865674][ T4708] zonefs (nullb0) ERROR: Not a zoned block device [ 91.688020][ T4713] netlink: 'syz.3.136': attribute type 39 has an invalid length. [ 91.801986][ T4719] loop2: detected capacity change from 0 to 16 [ 91.938365][ T4719] erofs: (device loop2): mounted with root inode @ nid 36. [ 92.013362][ T4719] attempt to access beyond end of device [ 92.013362][ T4719] loop2: rw=524288, want=32, limit=16 [ 92.080937][ T4719] erofs: (device loop2): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 92.100224][ T4722] loop0: detected capacity change from 0 to 2048 [ 92.124928][ T4719] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 92.136143][ T4719] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 92.178100][ T4726] loop3: detected capacity change from 0 to 512 [ 92.183018][ T4719] attempt to access beyond end of device [ 92.183018][ T4719] loop2: rw=524288, want=56, limit=16 [ 92.241913][ T4722] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000000400,. Quota mode: writeback. [ 92.251225][ T4719] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 92.291056][ T4722] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.299449][ T26] audit: type=1800 audit(1773286843.622:21): pid=4719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.139" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 92.368157][ T4726] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.384509][ T4726] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.415862][ T4719] syz.2.139 (4719) used greatest stack depth: 20176 bytes left [ 93.725064][ T4746] loop2: detected capacity change from 0 to 32768 [ 93.864817][ T4746] jfs_mount: Failed to read AGGREGATE_I [ 93.871167][ T4746] Mount JFS Failure: -5 [ 94.602627][ T4766] loop3: detected capacity change from 0 to 1024 [ 94.693195][ T4766] EXT4-fs (loop3): Ignoring removed bh option [ 94.747637][ T4766] EXT4-fs (loop3): Ignoring removed oldalloc option [ 94.790248][ T4770] loop4: detected capacity change from 0 to 8 [ 94.818405][ T4766] EXT4-fs (loop3): Ignoring removed nobh option [ 94.831995][ T4766] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.894221][ T4438] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 94.948780][ T4766] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none. [ 95.031372][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 95.031389][ T26] audit: type=1804 audit(1773286846.362:23): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.152" name="/newroot/31/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 95.444408][ T4438] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 95.532370][ T4438] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.497989][ T4438] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 96.604437][ T4438] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 96.641040][ T4438] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.665515][ T4781] device bridge0 entered promiscuous mode [ 96.673167][ T4438] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 96.696721][ T4781] device bridge0 left promiscuous mode [ 96.774335][ T4438] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 96.782101][ T4438] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 96.800334][ T4438] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 97.080768][ T4438] usb 1-1: string descriptor 0 read error: -22 [ 97.094532][ T4438] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.114256][ T4438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.246048][ T4438] adutux 1-1:168.0: interrupt endpoints not found [ 98.002589][ T4765] udc-core: couldn't find an available UDC or it's busy [ 98.042650][ T4765] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.092693][ T4796] syz.1.162 uses obsolete (PF_INET,SOCK_PACKET) [ 98.140550][ T4652] usb 1-1: USB disconnect, device number 3 [ 98.184518][ T4793] loop3: detected capacity change from 0 to 32768 [ 98.272621][ T4793] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.161 (4793) [ 98.303404][ T4793] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 98.313092][ T4793] BTRFS info (device loop3): setting nodatacow, compression disabled [ 98.321878][ T4793] BTRFS info (device loop3): force clearing of disk cache [ 98.329139][ T4793] BTRFS info (device loop3): turning off barriers [ 98.335928][ T4793] BTRFS info (device loop3): use no compression [ 98.343490][ T4793] BTRFS info (device loop3): disabling free space tree [ 98.350809][ T4793] BTRFS info (device loop3): enabling ssd optimizations [ 98.358095][ T4793] BTRFS info (device loop3): using spread ssd allocation scheme [ 98.367107][ T4793] BTRFS info (device loop3): not using ssd optimizations [ 98.374534][ T4793] BTRFS info (device loop3): not using spread ssd allocation scheme [ 98.383185][ T4793] BTRFS info (device loop3): has skinny extents [ 98.651069][ T4814] loop1: detected capacity change from 0 to 2048 [ 99.959177][ T4815] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.289162][ T4814] NILFS (loop1): unrecognized mount option "18446744073709551615@LqE: 艞t}0$" [ 100.369332][ T4814] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 100.385049][ T4814] Remounting filesystem read-only [ 100.870275][ T4793] BTRFS error (device loop3): open_ctree failed: -12 [ 102.596099][ T4846] loop1: detected capacity change from 0 to 64 [ 104.486161][ T4869] loop2: detected capacity change from 0 to 128 [ 104.583815][ T4869] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 104.665412][ T4869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.154379][ T151] block nbd1: Attempted send on invalid socket [ 106.161723][ T151] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 106.179001][ T151] gfs2: error 10 reading superblock [ 106.185898][ T4192] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 106.195800][ T4192] CPU: 1 PID: 4192 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 106.203362][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.213573][ T4192] Workqueue: hci1 hci_rx_work [ 106.218445][ T4192] Call Trace: [ 106.221747][ T4192] [ 106.224681][ T4192] dump_stack_lvl+0x188/0x250 [ 106.229376][ T4192] ? show_regs_print_info+0x20/0x20 [ 106.234590][ T4192] ? load_image+0x400/0x400 [ 106.239131][ T4192] sysfs_create_dir_ns+0x26a/0x290 [ 106.244466][ T4192] ? sysfs_warn_dup+0xa0/0xa0 [ 106.249267][ T4192] ? process_one_work+0x85f/0x1010 [ 106.254407][ T4192] ? do_raw_spin_unlock+0x11d/0x230 [ 106.259707][ T4192] kobject_add_internal+0x6e0/0xd90 [ 106.264928][ T4192] kobject_add+0x160/0x230 [ 106.269371][ T4192] ? kobject_init+0x1d0/0x1d0 [ 106.274063][ T4192] ? klist_children_get+0x50/0x50 [ 106.279185][ T4192] ? get_device_parent+0x121/0x3f0 [ 106.284320][ T4192] device_add+0x483/0xfb0 [ 106.288759][ T4192] hci_conn_add_sysfs+0xd1/0x1e0 [ 106.293715][ T4192] le_conn_complete_evt+0xc48/0x15c0 [ 106.299025][ T4192] ? cs_le_create_conn+0x5e0/0x5e0 [ 106.304158][ T4192] ? __mutex_trylock_common+0x155/0x260 [ 106.309849][ T4192] hci_le_meta_evt+0x285/0x3c90 [ 106.314800][ T4192] ? hci_event_packet+0x37b/0x1370 [ 106.319927][ T4192] ? __lock_acquire+0x7d10/0x7d10 [ 106.324977][ T4192] ? hci_remote_host_features_evt+0x280/0x280 [ 106.331060][ T4192] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 106.336704][ T4192] ? mark_lock+0x94/0x320 [ 106.341038][ T4192] ? mutex_unlock+0x10/0x10 [ 106.345555][ T4192] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 106.351550][ T4192] ? lock_chain_count+0x20/0x20 [ 106.356413][ T4192] ? __rwlock_init+0x140/0x140 [ 106.361190][ T4192] hci_event_packet+0xe48/0x1370 [ 106.366137][ T4192] ? lockdep_hardirqs_on+0x94/0x140 [ 106.371352][ T4192] ? rcu_lock_release+0x20/0x20 [ 106.376217][ T4192] ? hci_send_to_monitor+0x9c/0x4a0 [ 106.381438][ T4192] hci_rx_work+0x255/0xa10 [ 106.385893][ T4192] process_one_work+0x85f/0x1010 [ 106.390885][ T4192] ? worker_detach_from_pool+0x240/0x240 [ 106.396545][ T4192] ? lockdep_hardirqs_off+0x70/0x100 [ 106.401847][ T4192] ? _raw_spin_lock_irq+0xb7/0xf0 [ 106.406884][ T4192] ? _raw_spin_lock_irqsave+0x100/0x100 [ 106.412442][ T4192] ? wq_worker_running+0x97/0x170 [ 106.417564][ T4192] worker_thread+0xaa6/0x1290 [ 106.422270][ T4192] ? lockdep_hardirqs_on+0x94/0x140 [ 106.427575][ T4192] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 106.433490][ T4192] kthread+0x436/0x520 [ 106.437571][ T4192] ? rcu_lock_release+0x20/0x20 [ 106.442425][ T4192] ? kthread_blkcg+0xd0/0xd0 [ 106.447027][ T4192] ret_from_fork+0x1f/0x30 [ 106.451603][ T4192] [ 106.460475][ T4192] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 106.473824][ T4192] Bluetooth: hci1: failed to register connection device [ 106.609597][ T4891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 110.385587][ T4916] loop0: detected capacity change from 0 to 8 [ 110.640521][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.715906][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.740077][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.830873][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.876845][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.902873][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.940632][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.971752][ T4924] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 110.983561][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.002657][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.023062][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.034181][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.070012][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.301173][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.311794][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.324250][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.334431][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.360278][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.388785][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.432070][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.852492][ T4919] Zero length message leads to an empty skb [ 113.164864][ T4231] Bluetooth: hci1: command 0x0406 tx timeout [ 113.207195][ T4951] process 'syz.4.200' launched './file0' with NULL argv: empty string added [ 114.308373][ T4965] loop1: detected capacity change from 0 to 1024 [ 114.404459][ T4965] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 114.450779][ T4965] EXT4-fs (loop1): invalid journal inode [ 114.484179][ T4965] EXT4-fs (loop1): can't get journal size [ 114.517657][ T4965] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback. [ 114.696239][ T4973] netlink: 'syz.2.211': attribute type 3 has an invalid length. [ 115.309145][ T4978] loop0: detected capacity change from 0 to 8 [ 117.255727][ T4994] netlink: 'syz.2.219': attribute type 3 has an invalid length. [ 117.280895][ T4994] netlink: 'syz.2.219': attribute type 3 has an invalid length. [ 118.284238][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.624079][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 118.715344][ T5015] netlink: 'syz.0.226': attribute type 3 has an invalid length. [ 119.134351][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.204909][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.231813][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.251713][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.278174][ T7] usb 4-1: config 0 descriptor?? [ 119.325502][ T7] hub 4-1:0.0: USB hub found [ 119.384555][ T4191] Bluetooth: hci4: unknown advertising packet type: 0x6c [ 119.384611][ T4191] Bluetooth: hci4: Dropping invalid advertising data [ 119.408869][ T4191] Bluetooth: hci4: Malicious advertising data. [ 119.664148][ T5022] team0: Port device syz_tun added [ 119.724313][ T7] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 120.525291][ T5030] device dummy0 entered promiscuous mode [ 120.607539][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 120.626205][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 120.655895][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 120.695938][ T7] usb 4-1: USB disconnect, device number 3 [ 120.987769][ T5041] device syzkaller0 entered promiscuous mode [ 122.060093][ T5053] loop1: detected capacity change from 0 to 16 [ 122.430765][ T5053] erofs: (device loop1): mounted with root inode @ nid 36. [ 122.861911][ T26] audit: type=1800 audit(1773286874.192:24): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.241" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 124.212320][ T5073] loop3: detected capacity change from 0 to 4096 [ 126.325188][ T4190] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 126.332322][ T4190] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 126.527234][ T5086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.252'. [ 126.766862][ T5088] loop3: detected capacity change from 0 to 32768 [ 126.822144][ T5088] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.251 (5088) [ 126.844403][ T4226] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.872972][ T5088] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 126.884771][ T5088] BTRFS info (device loop3): enabling disk space caching [ 126.895241][ T5088] BTRFS info (device loop3): force clearing of disk cache [ 126.903305][ T5088] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 126.913837][ T5088] BTRFS info (device loop3): use zstd compression, level 3 [ 126.922269][ T5088] BTRFS info (device loop3): disk space caching is enabled [ 126.930795][ T5088] BTRFS info (device loop3): has skinny extents [ 127.058549][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 127.093214][ T5088] BTRFS info (device loop3): enabling ssd optimizations [ 127.115994][ T5088] BTRFS info (device loop3): clearing free space tree [ 127.124372][ T5088] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.136855][ T5088] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.214704][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 127.239805][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 127.406211][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 127.565113][ T4226] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 128.022770][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.036772][ T4226] usb 2-1: Product: syz [ 128.041854][ T4226] usb 2-1: Manufacturer: syz [ 128.047710][ T4226] usb 2-1: SerialNumber: syz [ 128.055810][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 128.059443][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 128.128507][ T4226] usb 2-1: config 0 descriptor?? [ 128.282917][ T4226] ch341 2-1:0.0: ch341-uart converter detected [ 128.363346][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 128.455180][ T4226] usb 2-1: failed to receive control message: -71 [ 128.511433][ T4226] ch341-uart: probe of ttyUSB0 failed with error -71 [ 128.581542][ T4226] usb 2-1: USB disconnect, device number 2 [ 128.611007][ T4226] ch341 2-1:0.0: device disconnected [ 128.730187][ T5128] netlink: 'syz.2.256': attribute type 3 has an invalid length. [ 129.759151][ T26] audit: type=1326 audit(1773286881.092:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5135 comm="syz.1.260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60e7f4a799 code=0x0 [ 131.441414][ T5167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 132.756556][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.762933][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.774668][ T5200] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 134.577917][ T5202] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 135.852743][ T5218] loop2: detected capacity change from 0 to 256 [ 136.179055][ T5222] vivid-000: kernel_thread() failed [ 136.510601][ T5227] loop3: detected capacity change from 0 to 8 [ 137.182565][ T5232] netlink: 32 bytes leftover after parsing attributes in process `syz.4.284'. [ 137.209937][ T5230] loop0: detected capacity change from 0 to 8 [ 137.216404][ T5232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.284'. [ 137.241653][ T5232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.284'. [ 137.271389][ T5232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.284'. [ 143.286158][ T5311] loop0: detected capacity change from 0 to 8 [ 144.965522][ T5317] loop4: detected capacity change from 0 to 16 [ 145.056992][ T5317] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 147.281526][ T5351] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 147.432115][ T5356] loop1: detected capacity change from 0 to 8 [ 151.310056][ T5401] loop4: detected capacity change from 0 to 736 [ 151.458175][ T5403] loop3: detected capacity change from 0 to 8 [ 153.904197][ T4831] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.283360][ T5448] netlink: 36 bytes leftover after parsing attributes in process `syz.2.355'. [ 154.294086][ T4831] usb 4-1: Using ep0 maxpacket: 8 [ 154.905779][ T4831] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 155.013928][ T4831] usb 4-1: config 0 has no interface number 0 [ 155.053023][ T4831] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 155.070592][ T5454] loop0: detected capacity change from 0 to 8 [ 155.128333][ T4831] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 155.174183][ T4831] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.188263][ T4831] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 155.197739][ T4831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.450160][ T4831] usb 4-1: config 0 descriptor?? [ 155.503524][ T4831] ldusb 4-1:0.55: Interrupt in endpoint not found [ 156.085561][ T1108] usb 4-1: USB disconnect, device number 4 [ 157.180919][ T5483] loop2: detected capacity change from 0 to 8 [ 157.268181][ T5486] loop4: detected capacity change from 0 to 8 [ 159.004136][ T5144] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 160.024369][ T5144] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.055613][ T5144] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.097044][ T5144] usb 1-1: config 0 interface 0 has no altsetting 0 [ 160.120739][ T5144] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 160.181637][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.310098][ T5144] usb 1-1: config 0 descriptor?? [ 160.354874][ T5519] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 160.930457][ T5144] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 160.966619][ T5144] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 161.011632][ T5144] hid-steam 0003:28DE:1102.0001: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 161.158371][ T5144] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 161.237511][ T5144] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 161.558753][ T5144] hid-steam 0003:28DE:1102.0002: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 161.844774][ T5144] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' connected [ 161.988343][ T5144] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0001/input/input6 [ 162.783582][ T5144] usb 1-1: USB disconnect, device number 4 [ 163.834538][ T5543] loop1: detected capacity change from 0 to 8 [ 163.853955][ T5144] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' disconnected [ 163.892414][ T5538] fido_id[5538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 165.232884][ T5568] netlink: 'syz.3.392': attribute type 3 has an invalid length. [ 168.084088][ T5143] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 168.374290][ T5143] usb 2-1: Using ep0 maxpacket: 16 [ 169.037432][ T5143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.064816][ T5143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.084117][ T5143] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.107240][ T5143] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 169.137555][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.177024][ T5143] usb 2-1: config 0 descriptor?? [ 169.699968][ T5143] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input7 [ 169.841252][ T5143] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 171.834260][ T5143] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 172.191646][ T1108] usb 2-1: USB disconnect, device number 3 [ 173.366087][ T5143] usb 1-1: string descriptor 0 read error: -71 [ 173.372369][ T5143] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 173.436454][ T5143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.512796][ T5143] usb 1-1: config 0 descriptor?? [ 173.694117][ T4831] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 173.716960][ T5143] usb 1-1: can't set config #0, error -71 [ 173.731006][ T5143] usb 1-1: USB disconnect, device number 5 [ 174.714159][ T4831] usb 4-1: Using ep0 maxpacket: 16 [ 174.974526][ T4831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.053450][ T4831] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.168803][ T4831] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.244942][ T4831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.354429][ T4831] usb 4-1: config 0 descriptor?? [ 175.794738][ T4832] Bluetooth: hci2: command 0x0406 tx timeout [ 175.801333][ T4832] Bluetooth: hci1: command 0x0406 tx timeout [ 175.851532][ T4832] Bluetooth: hci0: command 0x0406 tx timeout [ 176.014065][ T4832] Bluetooth: hci3: command 0x0406 tx timeout [ 176.314074][ T5144] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.584194][ T4831] usbhid 4-1:0.0: can't add hid device: -71 [ 177.590336][ T4831] usbhid: probe of 4-1:0.0 failed with error -71 [ 177.641374][ T4831] usb 4-1: USB disconnect, device number 5 [ 177.684099][ T5144] usb 1-1: Using ep0 maxpacket: 16 [ 177.804151][ T5144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.815131][ T5143] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 179.019771][ T5143] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 179.049214][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.089696][ T5143] usb 3-1: Product: syz [ 179.093887][ T5143] usb 3-1: Manufacturer: syz [ 179.138420][ T5143] usb 3-1: SerialNumber: syz [ 179.171908][ T5143] usb 3-1: config 0 descriptor?? [ 179.236039][ T5143] ch341 3-1:0.0: ch341-uart converter detected [ 179.356495][ T5145] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.467459][ T5143] usb 3-1: failed to receive control message: -71 [ 179.484159][ T5143] ch341-uart: probe of ttyUSB0 failed with error -71 [ 179.524984][ T5143] usb 3-1: USB disconnect, device number 4 [ 179.550762][ T5143] ch341 3-1:0.0: device disconnected [ 179.738599][ T5144] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 179.853003][ T5144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.868221][ T5144] usb 1-1: Product: syz [ 179.875871][ T5144] usb 1-1: Manufacturer: syz [ 179.885983][ T5144] usb 1-1: config 0 descriptor?? [ 179.914282][ T5144] usb 1-1: can't set config #0, error -71 [ 179.936609][ T5144] usb 1-1: USB disconnect, device number 6 [ 179.984268][ T5145] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 179.994162][ T5145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.011283][ T5145] usb 4-1: Product: syz [ 180.024160][ T5145] usb 4-1: Manufacturer: syz [ 180.028871][ T5145] usb 4-1: SerialNumber: syz [ 181.524200][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 182.454279][ T5145] (unnamed net_device) (uninitialized): Assigned a random MAC address: 96:e4:1c:3c:87:86 [ 183.488072][ T5736] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 183.538130][ T5145] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 183.604217][ T5145] usb 4-1: USB disconnect, device number 6 [ 187.226377][ T5780] batman_adv: batadv0: Adding interface: dummy0 [ 187.245074][ T5781] loop4: detected capacity change from 0 to 8 [ 187.251181][ T5780] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.324331][ T5780] batman_adv: batadv0: Interface activated: dummy0 [ 188.001988][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b850400: rx timeout, send abort [ 188.014083][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b850400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 188.534094][ T4832] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 191.114137][ T4832] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 191.224509][ T4832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.277071][ T4832] usb 2-1: Product: syz [ 191.320939][ T4832] usb 2-1: Manufacturer: syz [ 191.333228][ T4832] usb 2-1: SerialNumber: syz [ 191.373249][ T4832] usb 2-1: config 0 descriptor?? [ 191.394219][ T4832] usb 2-1: can't set config #0, error -71 [ 191.474216][ T4832] usb 2-1: USB disconnect, device number 4 [ 191.674425][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.917255][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 192.804139][ T21] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 193.350782][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.360812][ T21] usb 1-1: config 0 descriptor?? [ 194.197652][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.205304][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.224147][ T21] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 194.334071][ T4827] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 194.338170][ T5861] team0: Device ipip0 is up. Set it down before adding it as a team port [ 194.345591][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.384619][ T21] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 194.413715][ T21] usb 1-1: media controller created [ 194.466940][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.584176][ T21] az6027: usb out operation failed. (-71) [ 194.604225][ T21] az6027: usb out operation failed. (-71) [ 194.623483][ T21] stb0899_attach: Driver disabled by Kconfig [ 194.647640][ T21] az6027: no front-end attached [ 194.647640][ T21] [ 194.687297][ T21] az6027: usb out operation failed. (-71) [ 194.693033][ T21] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 194.749003][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 194.794390][ T21] dvb-usb: schedule remote query interval to 400 msecs. [ 194.834601][ T21] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 194.854421][ T4827] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 194.866243][ T4827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.875508][ T4827] usb 3-1: Product: syz [ 194.881764][ T21] usb 1-1: USB disconnect, device number 7 [ 194.888135][ T4827] usb 3-1: Manufacturer: syz [ 194.897479][ T4827] usb 3-1: SerialNumber: syz [ 194.922953][ T4827] usb 3-1: config 0 descriptor?? [ 195.020243][ T21] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 195.029979][ T4827] ch341 3-1:0.0: ch341-uart converter detected [ 195.484106][ T4827] usb 3-1: failed to receive control message: -71 [ 195.490591][ T4827] ch341-uart: probe of ttyUSB0 failed with error -71 [ 195.538516][ T4827] usb 3-1: USB disconnect, device number 5 [ 195.576149][ T4827] ch341 3-1:0.0: device disconnected [ 195.914156][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 196.345176][ T21] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 196.432975][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 196.602979][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 196.732229][ T5895] sctp: failed to load transform for md5: -2 [ 197.176145][ T21] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.234110][ T21] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.273278][ T21] usb 2-1: Product: syz [ 197.292912][ T21] usb 2-1: Manufacturer: syz [ 197.308601][ T21] usb 2-1: SerialNumber: syz [ 197.335646][ T21] usb 2-1: config 0 descriptor?? [ 197.562153][ T26] audit: type=1326 audit(1773286948.732:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9934a91799 code=0x7ffc0000 [ 197.594152][ T26] audit: type=1326 audit(1773286948.732:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.3.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9934a91799 code=0x7ffc0000 [ 197.616840][ T5884] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 197.731086][ T21] usb 2-1: selecting invalid altsetting 0 [ 198.441460][ T5144] usb 2-1: USB disconnect, device number 5 [ 198.664460][ T5145] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 199.606469][ T5145] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 199.617569][ T5145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.628446][ T5145] usb 4-1: Product: syz [ 199.632711][ T5145] usb 4-1: Manufacturer: syz [ 199.638641][ T5145] usb 4-1: SerialNumber: syz [ 199.649741][ T5145] usb 4-1: config 0 descriptor?? [ 199.698238][ T5145] ch341 4-1:0.0: ch341-uart converter detected [ 199.904265][ T5145] usb 4-1: failed to receive control message: -71 [ 199.911185][ T5145] ch341-uart: probe of ttyUSB0 failed with error -71 [ 199.945053][ T5145] usb 4-1: USB disconnect, device number 7 [ 199.962684][ T5145] ch341 4-1:0.0: device disconnected [ 200.188535][ T5971] netlink: 'syz.2.520': attribute type 1 has an invalid length. [ 200.227379][ T26] audit: type=1326 audit(1773286951.562:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.2.520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cc5ef1799 code=0x0 [ 203.044255][ T5145] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.374209][ T5145] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 204.393790][ T5145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.431538][ T5145] usb 4-1: Product: syz [ 204.462500][ T5145] usb 4-1: Manufacturer: syz [ 204.477564][ T5145] usb 4-1: SerialNumber: syz [ 204.523731][ T5145] usb 4-1: config 0 descriptor?? [ 204.585311][ T5145] ch341 4-1:0.0: ch341-uart converter detected [ 204.846346][ T5145] usb 4-1: failed to receive control message: -71 [ 204.864453][ T5145] ch341-uart: probe of ttyUSB0 failed with error -71 [ 204.911021][ T5145] usb 4-1: USB disconnect, device number 8 [ 204.965270][ T5145] ch341 4-1:0.0: device disconnected [ 205.031503][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.542'. [ 205.101407][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.542'. [ 205.170639][ T6052] device team0 entered promiscuous mode [ 205.227068][ T6052] device team_slave_0 entered promiscuous mode [ 205.249366][ T6052] device team_slave_1 entered promiscuous mode [ 205.324120][ T6052] device bond0 entered promiscuous mode [ 205.333485][ T6052] device bond_slave_0 entered promiscuous mode [ 205.358966][ T6052] device bond_slave_1 entered promiscuous mode [ 205.396976][ T6052] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 205.431472][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 209.346095][ T6140] loop0: detected capacity change from 0 to 8 [ 209.614060][ T5144] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 210.309313][ T5144] usb 2-1: Using ep0 maxpacket: 16 [ 210.434151][ T5144] usb 2-1: config 0 has no interfaces? [ 210.440015][ T5144] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 210.475674][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.522124][ T5144] usb 2-1: config 0 descriptor?? [ 210.893900][ T5145] usb 2-1: USB disconnect, device number 6 [ 211.104071][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 211.364116][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 211.504461][ T21] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 211.539111][ T21] usb 4-1: config 0 has no interface number 0 [ 211.639029][ T21] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 211.659196][ T21] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 211.974243][ T21] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 211.989253][ T21] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 212.011246][ T21] usb 4-1: Product: syz [ 212.019355][ T21] usb 4-1: SerialNumber: syz [ 212.042367][ T21] usb 4-1: config 0 descriptor?? [ 212.080032][ T6177] loop2: detected capacity change from 0 to 8 [ 212.106749][ T21] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 212.223738][ T21] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input9 [ 213.088011][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.583'. [ 213.107736][ T21] usb 4-1: USB disconnect, device number 9 [ 213.114238][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 213.121879][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 213.149282][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.583'. [ 213.926035][ T6182] device gretap0 entered promiscuous mode [ 213.954094][ T6182] device gretap0 left promiscuous mode [ 213.964262][ T21] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 215.114356][ T4827] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 215.414200][ T4827] usb 5-1: Using ep0 maxpacket: 16 [ 215.564471][ T4827] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 215.609640][ T4827] usb 5-1: config 0 has no interface number 0 [ 215.731201][ T4827] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 215.924493][ T4827] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 215.930041][ T6216] loop0: detected capacity change from 0 to 8 [ 215.940489][ T4827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.956910][ T4827] usb 5-1: Product: syz [ 215.961345][ T4827] usb 5-1: Manufacturer: syz [ 215.968510][ T4827] usb 5-1: SerialNumber: syz [ 215.975487][ T4827] usb 5-1: config 0 descriptor?? [ 216.024527][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.033106][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.305858][ T4827] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 217.053295][ T4827] keyspan 5-1:0.133: unsupported endpoint type 0 [ 217.161034][ T4827] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 217.171018][ T4827] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 217.180438][ T4827] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 217.192673][ T4827] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 217.548224][ T4827] usb 5-1: USB disconnect, device number 4 [ 217.574659][ T4827] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 217.591244][ T4827] keyspan 5-1:0.133: device disconnected [ 218.238213][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.308390][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.687541][ T6194] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.697210][ T6194] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.706158][ T6194] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.715978][ T6194] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.214102][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 220.404093][ T21] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 220.466239][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.598'. [ 220.484071][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 220.489424][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.598'. [ 220.528455][ T6267] loop1: detected capacity change from 0 to 8 [ 220.530831][ T6243] device gretap0 entered promiscuous mode [ 220.542497][ T6243] device gretap0 left promiscuous mode [ 220.797464][ T6271] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967280. macoff=96 [ 221.759827][ T13] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 221.779651][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.807621][ T13] usb 3-1: Product: syz [ 221.843618][ T13] usb 3-1: Manufacturer: syz [ 221.863796][ T13] usb 3-1: SerialNumber: syz [ 221.880900][ T13] usb 3-1: config 0 descriptor?? [ 221.967986][ T13] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 222.454194][ T21] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 222.463265][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.502161][ T21] usb 4-1: Product: syz [ 222.506704][ T21] usb 4-1: Manufacturer: syz [ 222.544532][ T21] usb 4-1: SerialNumber: syz [ 222.568425][ T21] usb 4-1: config 0 descriptor?? [ 222.613624][ T21] ch341 4-1:0.0: ch341-uart converter detected [ 222.896489][ T21] usb 4-1: failed to receive control message: -71 [ 222.903301][ T21] ch341-uart: probe of ttyUSB0 failed with error -71 [ 222.921581][ T21] usb 4-1: USB disconnect, device number 10 [ 222.932220][ T21] ch341 4-1:0.0: device disconnected [ 222.941170][ T6258] udc-core: couldn't find an available UDC or it's busy [ 222.967782][ T6258] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 222.975564][ T13] ssu100: probe of 3-1:0.0 failed with error -110 [ 223.253413][ T6295] crypto_alloc_aead failed rc=-2 [ 223.294145][ T6258] udc-core: couldn't find an available UDC or it's busy [ 223.479755][ T6258] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 223.549285][ T21] usb 3-1: USB disconnect, device number 6 [ 223.584393][ T6321] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 223.773201][ T6329] loop0: detected capacity change from 0 to 8 [ 224.983767][ T6353] vcan0: tx drop: invalid da for name 0x0000000000100003 [ 225.524147][ T5145] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 226.328080][ T6365] loop1: detected capacity change from 0 to 32768 [ 226.457713][ T6365] jfs_mount: Failed to read AGGREGATE_I [ 226.463286][ T6365] Mount JFS Failure: -5 [ 226.989494][ T5145] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 227.008018][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.054246][ T5145] usb 5-1: Product: syz [ 227.058437][ T5145] usb 5-1: Manufacturer: syz [ 227.083331][ T5145] usb 5-1: SerialNumber: syz [ 227.103090][ T5145] usb 5-1: config 0 descriptor?? [ 227.174079][ T4830] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 227.185128][ T5145] ch341 5-1:0.0: ch341-uart converter detected [ 227.245301][ T6374] loop3: detected capacity change from 0 to 8 [ 227.434170][ T5145] usb 5-1: failed to receive control message: -71 [ 227.440655][ T5145] ch341-uart: probe of ttyUSB0 failed with error -71 [ 227.494148][ T4830] usb 2-1: Using ep0 maxpacket: 16 [ 227.504527][ T5145] usb 5-1: USB disconnect, device number 5 [ 227.525473][ T5145] ch341 5-1:0.0: device disconnected [ 227.614224][ T4830] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 227.634506][ T4830] usb 2-1: config 1 has no interface number 1 [ 227.654220][ T4830] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 227.699307][ T4830] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 227.738197][ T4830] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.924175][ T4830] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.933657][ T4830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.942661][ T4830] usb 2-1: Product: syz [ 227.947102][ T4830] usb 2-1: Manufacturer: syz [ 227.951797][ T4830] usb 2-1: SerialNumber: syz [ 228.159878][ T5145] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 228.450035][ T4830] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 228.480816][ T4830] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 228.570433][ T6408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.661'. [ 228.703568][ T26] audit: type=1326 audit(1773286980.032:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 228.725832][ T26] audit: type=1326 audit(1773286980.032:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 228.725869][ T26] audit: type=1326 audit(1773286980.032:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 228.725897][ T26] audit: type=1326 audit(1773286980.032:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 228.725926][ T26] audit: type=1326 audit(1773286980.032:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.0.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2a80b799 code=0x7ffc0000 [ 228.844457][ T1108] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 228.864360][ T5145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.884328][ T5145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.899402][ T5145] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 228.909810][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.930601][ T5145] usb 3-1: config 0 descriptor?? [ 229.134057][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 229.254444][ T1108] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 229.259470][ T4830] usb 2-1: USB disconnect, device number 7 [ 229.274217][ T5145] usbhid 3-1:0.0: can't add hid device: -71 [ 229.293365][ T5145] usbhid: probe of 3-1:0.0 failed with error -71 [ 229.302620][ T1108] usb 5-1: config 0 has no interface number 0 [ 229.328106][ T1108] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.341348][ T5145] usb 3-1: USB disconnect, device number 7 [ 229.355433][ T1108] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 229.484185][ T1108] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 229.497553][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 229.508325][ T1108] usb 5-1: Product: syz [ 229.512567][ T1108] usb 5-1: SerialNumber: syz [ 229.518518][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 229.533566][ T1108] usb 5-1: config 0 descriptor?? [ 229.542361][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.587575][ T1108] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 229.607862][ T1108] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input10 [ 229.820711][ T6434] netlink: 'syz.0.659': attribute type 3 has an invalid length. [ 229.859354][ T6434] netlink: 'syz.0.659': attribute type 3 has an invalid length. [ 229.882389][ T4830] usb 5-1: USB disconnect, device number 6 [ 229.932180][ T5145] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 229.940159][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 229.947404][ T4830] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 230.266673][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.663'. [ 230.474167][ T13] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 230.483237][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.513993][ T13] usb 4-1: Product: syz [ 230.518397][ T13] usb 4-1: Manufacturer: syz [ 230.528558][ T13] usb 4-1: SerialNumber: syz [ 230.589495][ T5145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.605924][ T13] usb 4-1: config 0 descriptor?? [ 230.614342][ T1108] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 230.655288][ T13] ch341 4-1:0.0: ch341-uart converter detected [ 230.662886][ T5145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.458114][ T13] usb 4-1: failed to receive control message: -71 [ 231.464940][ T13] ch341-uart: probe of ttyUSB0 failed with error -71 [ 231.479054][ T5145] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.491264][ T13] usb 4-1: USB disconnect, device number 11 [ 231.499591][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.511304][ T13] ch341 4-1:0.0: device disconnected [ 231.523783][ T5145] usb 3-1: config 0 descriptor?? [ 231.554185][ T5145] usb 3-1: can't set config #0, error -71 [ 231.564215][ T5145] usb 3-1: USB disconnect, device number 8 [ 231.839841][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 232.676303][ T1108] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 232.686160][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.694503][ T1108] usb 2-1: Product: syz [ 232.698668][ T1108] usb 2-1: Manufacturer: syz [ 232.703262][ T1108] usb 2-1: SerialNumber: syz [ 232.752477][ T1108] usb 2-1: config 0 descriptor?? [ 232.844913][ T1108] hub 2-1:0.0: bad descriptor, ignoring hub [ 232.852844][ T1108] hub: probe of 2-1:0.0 failed with error -5 [ 232.885435][ T1108] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 233.182792][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.676'. [ 233.621219][ T6478] netlink: 'syz.3.677': attribute type 3 has an invalid length. [ 233.667831][ T6478] netlink: 'syz.3.677': attribute type 3 has an invalid length. [ 235.374646][ T4832] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 235.419693][ T6514] netlink: 'syz.4.688': attribute type 3 has an invalid length. [ 235.844167][ T4832] usb 1-1: Using ep0 maxpacket: 16 [ 236.004207][ T4832] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 236.012438][ T4832] usb 1-1: config 0 has no interface number 0 [ 236.028993][ T4832] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 236.264140][ T4832] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 236.280848][ T6529] device syzkaller0 entered promiscuous mode [ 236.287137][ T4832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.297136][ T4832] usb 1-1: Product: syz [ 236.303200][ T4832] usb 1-1: Manufacturer: syz [ 236.309017][ T4832] usb 1-1: SerialNumber: syz [ 236.319348][ T4832] usb 1-1: config 0 descriptor?? [ 236.624387][ T6536] loop1: detected capacity change from 0 to 32768 [ 236.689166][ T6536] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.695 (6536) [ 236.703568][ T4832] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 236.732178][ T4832] keyspan 1-1:0.133: unsupported endpoint type 0 [ 236.799845][ T4832] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 236.906676][ T4832] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 236.938057][ T4832] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 236.969312][ T6536] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 236.978205][ T6536] BTRFS info (device loop1): enabling disk space caching [ 236.985520][ T6536] BTRFS info (device loop1): force clearing of disk cache [ 236.992646][ T6536] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 237.002102][ T6536] BTRFS info (device loop1): use zstd compression, level 3 [ 237.009563][ T6536] BTRFS info (device loop1): disk space caching is enabled [ 237.016787][ T6536] BTRFS info (device loop1): has skinny extents [ 237.030324][ T4832] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 237.041631][ T4832] usb 1-1: USB disconnect, device number 8 [ 237.121189][ T4832] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 237.155664][ T4832] keyspan 1-1:0.133: device disconnected [ 237.300325][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 237.324211][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 237.575586][ T6571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.698'. [ 237.619009][ T6536] BTRFS info (device loop1): enabling ssd optimizations [ 237.628370][ T6536] BTRFS info (device loop1): clearing free space tree [ 237.635722][ T6536] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 237.645520][ T6536] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 237.697232][ T6571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.698'. [ 238.618120][ T6586] netlink: 'syz.0.700': attribute type 3 has an invalid length. [ 239.534079][ T4832] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 239.873020][ T6611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.710'. [ 239.890653][ T6611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.710'. [ 240.269374][ T4830] usb 2-1: USB disconnect, device number 8 [ 240.276884][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 240.354398][ T4832] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 240.382127][ T4832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.420827][ T4832] usb 3-1: Product: syz [ 240.426057][ T4832] usb 3-1: Manufacturer: syz [ 240.438287][ T4832] usb 3-1: SerialNumber: syz [ 240.454249][ T4832] usb 3-1: config 0 descriptor?? [ 240.524045][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 240.570857][ T4832] ch341 3-1:0.0: ch341-uart converter detected [ 240.615159][ T4827] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 240.664366][ T7] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 240.677837][ T7] usb 4-1: config 0 has no interface number 0 [ 240.701598][ T7] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 240.914681][ T7] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 240.932004][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.965659][ T7] usb 4-1: Product: syz [ 240.981212][ T7] usb 4-1: Manufacturer: syz [ 240.998661][ T7] usb 4-1: SerialNumber: syz [ 241.042125][ T7] usb 4-1: config 0 descriptor?? [ 241.339080][ T4832] usb 3-1: failed to receive control message: -71 [ 241.385658][ T7] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 241.438753][ T7] keyspan 4-1:0.133: unsupported endpoint type 0 [ 241.500088][ T4832] ch341-uart: probe of ttyUSB0 failed with error -71 [ 241.503879][ T7] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 241.508318][ T4832] usb 3-1: USB disconnect, device number 9 [ 241.525157][ T4832] ch341 3-1:0.0: device disconnected [ 241.576654][ T7] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 241.714516][ T7] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 241.738879][ T7] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 241.893500][ T7] usb 4-1: USB disconnect, device number 12 [ 241.989989][ T6631] netlink: 'syz.0.716': attribute type 3 has an invalid length. [ 242.306077][ T7] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 242.581907][ T7] keyspan 4-1:0.133: device disconnected [ 242.884313][ T4827] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.901207][ T4827] usb 5-1: config 0 has no interface number 0 [ 243.104239][ T4827] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 243.136417][ T4827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.185275][ T6637] loop2: detected capacity change from 0 to 32768 [ 243.195136][ T4827] usb 5-1: Product: syz [ 243.364969][ T4827] usb 5-1: Manufacturer: syz [ 243.387873][ T6637] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.718 (6637) [ 243.531869][ T4827] usb 5-1: SerialNumber: syz [ 243.776008][ T4827] usb 5-1: config 0 descriptor?? [ 243.962698][ T6637] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 243.971474][ T6637] BTRFS info (device loop2): enabling disk space caching [ 243.978607][ T6637] BTRFS info (device loop2): force clearing of disk cache [ 243.985761][ T6637] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 243.995217][ T6637] BTRFS info (device loop2): use zstd compression, level 3 [ 244.002437][ T6637] BTRFS info (device loop2): disk space caching is enabled [ 244.010035][ T6637] BTRFS info (device loop2): has skinny extents [ 244.021246][ T4827] usb 5-1: can't set config #0, error -71 [ 244.070898][ T4827] usb 5-1: USB disconnect, device number 7 [ 245.714021][ T6598] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 245.929093][ T6694] loop4: detected capacity change from 0 to 8 [ 246.049716][ T6637] BTRFS error (device loop2): open_ctree failed: -22 [ 246.160140][ T6697] loop1: detected capacity change from 0 to 2048 [ 246.268602][ T6699] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.574329][ T6598] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 247.332028][ T6598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.437577][ T6697] NILFS (loop1): unrecognized mount option "18446744073709551615@LqE: 艞t}0$" [ 247.464956][ T6698] netlink: 'syz.3.731': attribute type 3 has an invalid length. [ 247.489935][ T6697] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 247.502893][ T6697] Remounting filesystem read-only [ 247.561956][ T6598] usb 1-1: Product: syz [ 247.611720][ T6598] usb 1-1: Manufacturer: syz [ 247.667580][ T6598] usb 1-1: SerialNumber: syz [ 247.806217][ T6598] usb 1-1: config 0 descriptor?? [ 247.907338][ T6598] usb 1-1: can't set config #0, error -71 [ 248.015527][ T6598] usb 1-1: USB disconnect, device number 9 [ 249.052086][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.733'. [ 249.159188][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.733'. [ 249.223383][ T4176] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by udevd (4176) [ 253.749851][ T6745] loop3: detected capacity change from 0 to 8 [ 253.772650][ T6737] netlink: 'syz.1.743': attribute type 3 has an invalid length. [ 254.095310][ T6751] loop1: detected capacity change from 0 to 2048 [ 254.233523][ T6753] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.460612][ T6751] NILFS (loop1): unrecognized mount option "18446744073709551615@LqE: 艞t}0$" [ 254.509008][ T6751] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 254.520200][ T6751] Remounting filesystem read-only [ 254.665495][ T6755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.750'. [ 254.823454][ T6755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.750'. [ 254.950665][ T6761] loop4: detected capacity change from 0 to 8 [ 255.678950][ T6774] trusted_key: encrypted_key: insufficient parameters specified [ 255.695899][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.702272][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.829794][ T4830] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 256.304063][ T4830] usb 2-1: Using ep0 maxpacket: 8 [ 256.347035][ T6782] [ 256.349397][ T6782] ====================================================== [ 256.356405][ T6782] WARNING: possible circular locking dependency detected [ 256.363426][ T6782] syzkaller #0 Not tainted [ 256.367836][ T6782] ------------------------------------------------------ [ 256.374845][ T6782] syz.2.758/6782 is trying to acquire lock: [ 256.380756][ T6782] ffff88802aa18b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 256.391234][ T6782] [ 256.391234][ T6782] but task is already holding lock: [ 256.398587][ T6782] ffff88802aa18ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 256.407902][ T6782] [ 256.407902][ T6782] which lock already depends on the new lock. [ 256.407902][ T6782] [ 256.418296][ T6782] [ 256.418296][ T6782] the existing dependency chain (in reverse order) is: [ 256.427302][ T6782] [ 256.427302][ T6782] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 256.434950][ T6782] __mutex_lock_common+0x1e3/0x2400 [ 256.440674][ T6782] mutex_lock_nested+0x17/0x20 [ 256.445960][ T6782] hci_dev_do_close+0x5f/0x1030 [ 256.451334][ T6782] hci_rfkill_set_block+0x10a/0x190 [ 256.457052][ T6782] rfkill_set_block+0x1c6/0x420 [ 256.462424][ T6782] rfkill_fop_write+0x452/0x560 [ 256.467800][ T6782] vfs_write+0x30b/0xd60 [ 256.472585][ T6782] ksys_write+0x152/0x260 [ 256.477431][ T6782] do_syscall_64+0x4c/0xa0 [ 256.482363][ T6782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.488778][ T6782] [ 256.488778][ T6782] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 256.496778][ T6782] __mutex_lock_common+0x1e3/0x2400 [ 256.502503][ T6782] mutex_lock_nested+0x17/0x20 [ 256.507789][ T6782] rfkill_register+0x33/0x8a0 [ 256.512994][ T6782] hci_register_dev+0x452/0x970 [ 256.518366][ T6782] vhci_create_device+0x32c/0x5c0 [ 256.523913][ T6782] vhci_write+0x391/0x450 [ 256.528758][ T6782] vfs_write+0x745/0xd60 [ 256.533524][ T6782] ksys_write+0x152/0x260 [ 256.538366][ T6782] do_syscall_64+0x4c/0xa0 [ 256.543303][ T6782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.549717][ T6782] [ 256.549717][ T6782] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 256.557536][ T6782] __mutex_lock_common+0x1e3/0x2400 [ 256.563262][ T6782] mutex_lock_nested+0x17/0x20 [ 256.568546][ T6782] vhci_send_frame+0x88/0x100 [ 256.573725][ T6782] hci_send_frame+0x1a9/0x2e0 [ 256.578900][ T6782] hci_tx_work+0x9f9/0x1710 [ 256.583993][ T6782] process_one_work+0x85f/0x1010 [ 256.589444][ T6782] worker_thread+0xaa6/0x1290 [ 256.594625][ T6782] kthread+0x436/0x520 [ 256.599194][ T6782] ret_from_fork+0x1f/0x30 [ 256.604109][ T6782] [ 256.604109][ T6782] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 256.613286][ T6782] __lock_acquire+0x2c42/0x7d10 [ 256.618637][ T6782] lock_acquire+0x19e/0x400 [ 256.623637][ T6782] __flush_work+0x116/0x210 [ 256.628635][ T6782] hci_dev_do_close+0x1e7/0x1030 [ 256.634067][ T6782] hci_rfkill_set_block+0x10a/0x190 [ 256.639765][ T6782] rfkill_set_block+0x1c6/0x420 [ 256.645117][ T6782] rfkill_fop_write+0x452/0x560 [ 256.650465][ T6782] vfs_write+0x30b/0xd60 [ 256.655204][ T6782] ksys_write+0x152/0x260 [ 256.660031][ T6782] do_syscall_64+0x4c/0xa0 [ 256.664952][ T6782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.671345][ T6782] [ 256.671345][ T6782] other info that might help us debug this: [ 256.671345][ T6782] [ 256.681546][ T6782] Chain exists of: [ 256.681546][ T6782] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 256.681546][ T6782] [ 256.696463][ T6782] Possible unsafe locking scenario: [ 256.696463][ T6782] [ 256.703901][ T6782] CPU0 CPU1 [ 256.709253][ T6782] ---- ---- [ 256.714594][ T6782] lock(&hdev->req_lock); [ 256.718983][ T6782] lock(rfkill_global_mutex); [ 256.726236][ T6782] lock(&hdev->req_lock); [ 256.733156][ T6782] lock((work_completion)(&hdev->tx_work)); [ 256.739118][ T6782] [ 256.739118][ T6782] *** DEADLOCK *** [ 256.739118][ T6782] [ 256.747241][ T6782] 2 locks held by syz.2.758/6782: [ 256.752240][ T6782] #0: ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 256.762328][ T6782] #1: ffff88802aa18ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 256.772042][ T6782] [ 256.772042][ T6782] stack backtrace: [ 256.777913][ T6782] CPU: 1 PID: 6782 Comm: syz.2.758 Not tainted syzkaller #0 [ 256.785174][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.795307][ T6782] Call Trace: [ 256.798591][ T6782] [ 256.801501][ T6782] dump_stack_lvl+0x188/0x250 [ 256.806157][ T6782] ? load_image+0x400/0x400 [ 256.810643][ T6782] ? show_regs_print_info+0x20/0x20 [ 256.815833][ T6782] ? print_circular_bug+0x12b/0x1a0 [ 256.821008][ T6782] check_noncircular+0x296/0x330 [ 256.825924][ T6782] ? look_up_lock_class+0x71/0x110 [ 256.831021][ T6782] ? add_chain_block+0x940/0x940 [ 256.835939][ T6782] ? lockdep_lock+0xf1/0x1f0 [ 256.840514][ T6782] ? mark_lock+0x94/0x320 [ 256.844830][ T6782] ? _find_first_zero_bit+0xce/0xf0 [ 256.850009][ T6782] __lock_acquire+0x2c42/0x7d10 [ 256.854845][ T6782] ? lockdep_unlock+0x143/0x2e0 [ 256.859674][ T6782] ? mark_lock+0x94/0x320 [ 256.863984][ T6782] ? verify_lock_unused+0x140/0x140 [ 256.869177][ T6782] ? __lock_acquire+0x12e8/0x7d10 [ 256.874184][ T6782] lock_acquire+0x19e/0x400 [ 256.878666][ T6782] ? __flush_work+0xfa/0x210 [ 256.883235][ T6782] ? verify_lock_unused+0x140/0x140 [ 256.888412][ T6782] ? __mutex_trylock_common+0x155/0x260 [ 256.893935][ T6782] ? read_lock_is_recursive+0x10/0x10 [ 256.899301][ T6782] __flush_work+0x116/0x210 [ 256.903784][ T6782] ? __flush_work+0xfa/0x210 [ 256.908355][ T6782] ? flush_work+0x20/0x20 [ 256.912681][ T6782] ? hci_leds_update_powered+0x148/0x160 [ 256.918294][ T6782] ? rcu_lock_release+0x5/0x20 [ 256.923035][ T6782] ? __lock_acquire+0x7d10/0x7d10 [ 256.928041][ T6782] hci_dev_do_close+0x1e7/0x1030 [ 256.932959][ T6782] ? _raw_spin_unlock+0x40/0x40 [ 256.937793][ T6782] hci_rfkill_set_block+0x10a/0x190 [ 256.942968][ T6782] ? rcu_lock_release+0x20/0x20 [ 256.947794][ T6782] rfkill_set_block+0x1c6/0x420 [ 256.952626][ T6782] rfkill_fop_write+0x452/0x560 [ 256.957457][ T6782] ? rfkill_fop_read+0x4d0/0x4d0 [ 256.962369][ T6782] ? common_file_perm+0x110/0x1c0 [ 256.967371][ T6782] ? fsnotify_perm+0x5d/0x560 [ 256.972024][ T6782] ? security_file_permission+0x75/0xa0 [ 256.977548][ T6782] ? rfkill_fop_read+0x4d0/0x4d0 [ 256.982469][ T6782] vfs_write+0x30b/0xd60 [ 256.986691][ T6782] ? file_end_write+0x250/0x250 [ 256.991515][ T6782] ? __fget_files+0x40f/0x480 [ 256.996179][ T6782] ? __fdget_pos+0x1e2/0x370 [ 257.000759][ T6782] ? ksys_write+0x71/0x260 [ 257.005155][ T6782] ksys_write+0x152/0x260 [ 257.009461][ T6782] ? __ia32_sys_read+0x80/0x80 [ 257.014225][ T6782] ? lockdep_hardirqs_on+0x94/0x140 [ 257.019421][ T6782] do_syscall_64+0x4c/0xa0 [ 257.023812][ T6782] ? clear_bhb_loop+0x30/0x80 [ 257.028475][ T6782] ? clear_bhb_loop+0x30/0x80 [ 257.033131][ T6782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 257.039012][ T6782] RIP: 0033:0x7f3cc5ef1799 [ 257.043401][ T6782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.062989][ T6782] RSP: 002b:00007f3cc414b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 257.071379][ T6782] RAX: ffffffffffffffda RBX: 00007f3cc616afa0 RCX: 00007f3cc5ef1799 [ 257.079329][ T6782] RDX: 0000000000000008 RSI: 0000200000000240 RDI: 0000000000000007 [ 257.087278][ T6782] RBP: 00007f3cc5f87c99 R08: 0000000000000000 R09: 0000000000000000 [ 257.095229][ T6782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.103179][ T6782] R13: 00007f3cc616b038 R14: 00007f3cc616afa0 R15: 00007ffc41db5fc8 [ 257.111138][ T6782] [ 257.192831][ T6787] device syzkaller0 entered promiscuous mode [ 257.374147][ T4830] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 257.383199][ T4830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.391219][ T4830] usb 2-1: Product: syz [ 257.395573][ T4830] usb 2-1: Manufacturer: syz [ 257.400275][ T4830] usb 2-1: SerialNumber: syz [ 257.415016][ T4830] usb 2-1: config 0 descriptor?? [ 257.475939][ T4830] gspca_main: se401-2.14.0 probing 047d:5003 [ 257.924136][ T4830] gspca_se401: Bayer format not supported! [ 258.139762][ T6767] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.