last executing test programs: 3m14.183771107s ago: executing program 4 (id=828): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000080), 0x1, 0x4f4, &(0x7f0000000540)="$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") timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0xa, 0xc}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) 3m14.102237724s ago: executing program 3 (id=829): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="b98700000000000000000b000000"], 0x18}}, 0x0) 3m13.981748424s ago: executing program 3 (id=830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f00000001c0)="26262e0f01ca360f23e90f20e06635000040000f22e064660f388153020f2114660fae740e0f011a0f01546866b9800000c00f320f30670f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m12.987920764s ago: executing program 4 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000080)=""/96, 0x60}], 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) socket$inet(0x2, 0x3, 0x5) 3m12.960284937s ago: executing program 3 (id=833): sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f0700000000000000fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32=r3], 0x3c}}, 0x0) 3m12.736697275s ago: executing program 3 (id=835): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x408440, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x500, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x4010640a, &(0x7f0000000e40)={0x0, 0x0}) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ed806abf77aaaaaaaaaabb08004500004c00611000002190780a0101000000000005009078ac1e03014c000000fffe000000000000ac1414bbe0000001075300ac1414aafffffffeac1414bbffffffff89072de00000020000"], 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000200)={0x10, 0x2, 0x0, "11010100001400000100b64c0000005c4b7c1500"}) readv(r1, &(0x7f0000002740)=[{&(0x7f0000000180)=""/29, 0x1b}], 0x2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000300)="c70f1c13", 0x4}], 0x1, 0x7ffffd, 0x0) fallocate(r5, 0x3, 0x80000, 0x80000001) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) gettid() r9 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRES16=r8, @ANYBLOB="010000000000000000", @ANYRES64=r9, @ANYBLOB="c523339da09c66caaed1fbcdf9529c2cd8880f601306c6f7dd95a1ff9a10fb81fc94323c5167e6695eaa076982c67becb7394e1b710a2b926fd6eda172a9d8cd34945e70f79219543186c1"], 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x20000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582"], 0x0) 3m11.829272669s ago: executing program 4 (id=836): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0000ef000020000004000100000000000000218a5e37ea2b0000a81ffd3077d81ad405349215ff001971bf38058443a86f88a9c90fdcb35c284169d7e6651e6fc252fefffdf19e19200cec22cb0edf7861031b04574a80505991"], 0x18}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x10000) 3m9.871288099s ago: executing program 3 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000080)=""/96, 0x60}], 0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) socket$inet(0x2, 0x3, 0x5) 3m8.373734492s ago: executing program 4 (id=847): sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f0700000000000000fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32=r3], 0x3c}}, 0x0) 3m7.493513054s ago: executing program 4 (id=848): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x40286608, &(0x7f0000000180)={@id={0x40011, 0x0, @b}}) 3m5.443066462s ago: executing program 3 (id=850): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ec", 0xbb}, {&(0x7f0000000180)="316f825a3d29f96a2093", 0xa}], 0x2}}], 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde9", 0x43}, {&(0x7f0000000b80)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26f", 0x21}, {&(0x7f0000000700)="8534f65f698d0200a3ee30459376efe5001dc546f93c6540e7a5215fa1f9469576e94b77cfaf3f76956c4c840f3a15c387327e6f6ef21a796847e2803e33335fa28b755829ea0000406333941d8989b0b8e304f307090026", 0x58}], 0x3}, 0xc0) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 3m5.425987743s ago: executing program 4 (id=851): socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000001a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r3}, [@IFLA_MTU={0x8, 0x4, 0x100}]}, 0x28}}, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x20, 0x0, 0x400, 0x264, 0x0, 0x1, 0x6838, '\x00', 0x0, r4, 0x8004, 0x3, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x0, 0xd, &(0x7f00000004c0)=@raw=[@jmp={0x5, 0x0, 0x7, 0x1, 0x3, 0xfffffffffffffff4, 0xfffffffffffffff0}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1070509}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000001400)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000040000040341d0a00000000000001090224000100000000090400000103000000092100000001220500090581030000000000"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "18797792"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r7, 0x0, 0xa, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=@bridge_getlink={0xb4, 0x12, 0x100, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x48080, 0x85}, [@IFLA_VF_PORTS={0x2c, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}, {0x4}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x7f}]}]}, @IFLA_PHYS_PORT_ID={0x1d, 0x22, "831a48bcdc0f24c679f6780d0ef333252269311b8f04ab3e13"}, @IFLA_CARRIER={0x5, 0x21, 0xd}, @IFLA_IFNAME={0x14, 0x3, 'lo\x00'}, @IFLA_EVENT={0x8, 0x2c, 0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0xffffffff}, @IFLA_ALT_IFNAME={0x14, 0x35, 'rose0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 1m59.385364161s ago: executing program 1 (id=895): open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x12, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000000c0), 0x496, 0x0, &(0x7f0000000140)="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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_usb_connect$cdc_ncm(0x0, 0xcc, &(0x7f0000000d00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x2, 0x1, 0x5, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x77, 0x40, 0x0, 0xff}, {0x6, 0x24, 0x1a, 0x311, 0x8}, [@country_functional={0x10, 0x24, 0x7, 0x4, 0xfc00, [0x9, 0x1, 0x7ff, 0x7f, 0x6]}, @country_functional={0xc, 0x24, 0x7, 0xd9, 0x0, [0x3, 0x17c, 0x543]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @mdlm_detail={0x27, 0x24, 0x13, 0x7f, "d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682cf3d"}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0xbf, 0xf3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x80, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1f, 0x4d}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7f, 0x4, 0x0, 0x10, 0x40}, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="050f34000510100a012100000000ff01010000ff000a1003020600070003000710021232090003100b0b10010c100008050400e9"], 0x1, [{0x101, &(0x7f0000000700)=@string={0x101, 0x3, "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"}}]}) r4 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000009c0)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000a00)={0x40, 0x9, 0x18, "39629046a25102e9b18ba51e183aa0291da28610314dd76c"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000ac0)={0x20, 0x80, 0x1c, {0x9, 0x1, 0x1, 0x4, 0x0, 0x1000, 0x4, 0x0, 0x4a8c, 0x3ff, 0x8, 0xfff}}, &(0x7f0000000b00)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000b40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b80)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000bc0)={0x20, 0x89, 0x2, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='veth1_to_batadv\x00', 0x10) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'}) prctl$PR_SET_NAME(0xf, &(0x7f0000000c80)='-}.&!:-(\\@^*\x00') setresuid(0x0, 0x0, 0x0) setresuid(r7, 0x0, 0xffffffffffffffff) 1m56.192508412s ago: executing program 1 (id=897): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000080)='./file1\x00', 0x810, &(0x7f00000000c0), 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m52.196305829s ago: executing program 1 (id=898): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff97, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000240001000000000000000000000000000600030000200000"], 0x1c}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syzkaller0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005000000000002004e21ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x0) r4 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv2(0xffffffffffffffff, &(0x7f0000004140)=[{&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/241, 0xf1}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f00000004c0)}, {&(0x7f0000003f40)=""/66, 0x42}, {&(0x7f0000003fc0)=""/162, 0xa2}, {&(0x7f0000004080)=""/152, 0x98}], 0x7, 0xfffffff8, 0x5, 0x10) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000001e00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)={0x1690, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_CSA_IES={0x1650, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x4, 0x6, 0xf, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x4, 0x1, 0x2, 0x3, 0x7, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0xfff]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xd, 0xf, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd0}}]}, @NL80211_ATTR_PROBE_RESP={0x5e3, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x1012, 0x80, [@measure_req={0x26, 0x1003, {0x55, 0x0, 0x4e, "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"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x4, 0xfffa, 0x1400, 0x0, 0xf69, 0x0, 0x8d]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x5, 0x1, 0xa, 0x10]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12b}], @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x7ff, 0x3, 0x7, 0x8000]}]}]}, 0x1690}, 0x1, 0x0, 0x0, 0x8000}, 0x24000001) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) syz_usb_connect$uac1(0x0, 0x81, &(0x7f00000041c0)=ANY=[@ANYBLOB="12010003000000006b1d010163000102030109026f00030100000d000400630000010104000b2401000000020102090401000001020000090401010101020000072401fd03000f09240201100000002a0905010900000000000725010000000009040200000102000009047ac11e7380f153080582090000000001072501000000e35ca4a74222af0b16cdce94d4c34b5471ae9d0bd413dc23e65a"], 0x0) syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m44.634493157s ago: executing program 1 (id=902): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[], 0x28}, 0x0) 1m43.436357785s ago: executing program 1 (id=903): open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x7fffffff, 0xc}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) 1m40.119873126s ago: executing program 1 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) io_setup(0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1m11.764319803s ago: executing program 2 (id=915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r4, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) 1m8.551510877s ago: executing program 2 (id=916): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff97, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000240001000000000000000000000000000600030000200000"], 0x1c}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syzkaller0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005000000000002004e21ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x0) r4 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv2(0xffffffffffffffff, &(0x7f0000004140)=[{&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/241, 0xf1}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f00000004c0)}, {&(0x7f0000003f40)=""/66, 0x42}, {&(0x7f0000003fc0)=""/162, 0xa2}, {&(0x7f0000004080)=""/152, 0x98}], 0x7, 0xfffffff8, 0x5, 0x10) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000001e00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)={0x1690, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_CSA_IES={0x1650, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x4, 0x6, 0xf, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x4, 0x1, 0x2, 0x3, 0x7, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0xfff]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xd, 0xf, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd0}}]}, @NL80211_ATTR_PROBE_RESP={0x5e3, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x1012, 0x80, [@measure_req={0x26, 0x1003, {0x55, 0x0, 0x4e, "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"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x4, 0xfffa, 0x1400, 0x0, 0xf69, 0x0, 0x8d]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x5, 0x1, 0xa, 0x10]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12b}], @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x7ff, 0x3, 0x7, 0x8000]}]}]}, 0x1690}, 0x1, 0x0, 0x0, 0x8000}, 0x24000001) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) syz_usb_connect$uac1(0x0, 0x81, &(0x7f00000041c0)=ANY=[@ANYBLOB="12010003000000006b1d010163000102030109026f00030100000d000400630000010104000b2401000000020102090401000001020000090401010101020000072401fd03000f09240201100000002a0905010900000000000725010000000009040200000102000009047ac11e7380f153080582090000000001072501000000e35ca4a74222af0b16cdce94d4c34b5471ae9d0bd413dc23e65a"], 0x0) syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m4.646181956s ago: executing program 2 (id=917): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0x4, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.371339998s ago: executing program 2 (id=918): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x40286608, &(0x7f0000000180)={@id={0x40011, 0x0, @b}}) 59.967771788s ago: executing program 2 (id=919): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000002680)='./control\x00', 0x0) lseek(r0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001a40)=ANY=[], 0xfd14) fallocate(r0, 0x0, 0x80000, 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="0f08420f01f80f01dfc4227d585a17c44169769a00000000b9fa0900000f32660f388111b805000000b9c10000000f01c1c4c1bd6601c48225acf6", 0x3b}], 0x1, 0xc, &(0x7f0000000100), 0x0) getdents64(r0, &(0x7f0000000000)=""/66, 0x42) lseek(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffe) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)=""/165, 0xa5}, {0x0}], 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00'}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh={0x0, 0x8, 0x4, 0x4, 0x0, 0x0, 0x0, [@empty, @rand_addr=' \x01\x00', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010100, {[@timestamp={0x44, 0x4, 0x34, 0x0, 0xf}]}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x18, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x2e}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lgetxattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x25, 0x3c, 0xf3, 0x40, 0x499, 0x1038, 0x5b36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xcc, 0x93, 0xa7, 0x0, [], [{{0x9, 0x5, 0x0, 0x2, 0x10}}]}}]}}]}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x706, 0x0, 0x2, 0xc63, 0x0, "acc83f3e1f72d6d0fc601889a7c1aa448345d2"}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 56.310880577s ago: executing program 2 (id=920): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001a940)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) chmod(&(0x7f0000000140)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r4, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 17.203826864s ago: executing program 0 (id=922): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0000ef000020000004000100000000000000218a5e37ea2b0000a81ffd3077d81ad405349215ff001971bf38058443a86f88a9c90fdcb35c284169d7e6651e6fc252fefffdf19e19200cec22cb0edf7861031b04574a80505991"], 0x18}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x10000) 13.052585713s ago: executing program 0 (id=923): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff97, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000240001000000000000000000000000000600030000200000"], 0x1c}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syzkaller0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005000000000002004e21ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x0) r4 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv2(0xffffffffffffffff, &(0x7f0000004140)=[{&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/241, 0xf1}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f00000004c0)}, {&(0x7f0000003f40)=""/66, 0x42}, {&(0x7f0000003fc0)=""/162, 0xa2}, {&(0x7f0000004080)=""/152, 0x98}], 0x7, 0xfffffff8, 0x5, 0x10) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000001e00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)={0x1690, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_CSA_IES={0x1650, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x4, 0x6, 0xf, 0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x4, 0x1, 0x2, 0x3, 0x7, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0xfff]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xd, 0xf, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd0}}]}, @NL80211_ATTR_PROBE_RESP={0x5e3, 0x91, "a828437d9f066e3f80295e093bffc69c8e785130842c3a319b1590ce9c35db63de3ba48c34de4aa89646308bd95bf6d8ff2d232015460496185fdcc39c20ed6565b793235d18a6f70fb190e43e5443cfa4fe7ce4cac6ec0dfe718c96098c23a910af1e7ca46098449facf031e76990bf30bc5f7e27333c0619e7d4e2fcde989db35fa223ffe5deec67a91bbd2d9b107af826801b0087f208a7126ecb1402ca5c547499f46df90d532d134633ca6493a158a9941db9b436bf62057ec3489b6af89897cdf1acd8f99a551684b5fa2cfa616b65d2f5e8bdaad33052b046408a450338f093d890d85a4dbcc140982d6f27902fd5a85b71881270530cf7b04ddc4c11b950b82e3490a7b09f13f12d067ed2f6d2951a0156bfc6de269300db55a3cc2d2eacf673e8fb4624a6714dee42617c3a4bbff3622e467cc8aa078aed059f84f0182b7b3096930f146d53c1f9a2445178adef20ad4755f193a7b66ca4af103ac930cb136354500125b8c85cb93af9b7913be17417066ee5da1d429d875bea2c78127f6d91b9e8d66d5475fec9b6123761b0e6a35f2546c6497cde1ed9aa5e29960cb1bd0c555613cc81aafa936205013e816a09034b92e9d30671dc5234050c6c3fc3d8b0b39b78a3ac53ff3eba25f7c8e44d95b4ce40f4e500a94eaa8b21cd9775f775e577bc8b915d3764803a70387f77783cc10f33667f32d7036088a3ddde9b86667a703f66abef99a302660f71878d442eff682fc77c455538f62910a7ae218dc9d19a150f026c1b5a86e809ae9aad141855680d3d1cc2dc9404c89a47efc986580f829e3870ce8d1a123396ed18dbe53c0d1b4168c880b1af7133c7cdf9a0f16dc0b4b59472bc06c0a8a475adc84281fc978f8f829c3a4896f9ef165d95cddf6da8f650167c214dcd76e351c32ba635a083d8be7fefcd30389beaa3789d19440a0178cb3ed6fb0cc35d2dee2dcd95899588d34163113d0e40031f86ae12ee9fe7ae64e3d7887ff7a2c3bcc4c43c299f4200e3efa2928b8136fc1c53c2ab2886709599ad2c5c8e1b667c459b9cc6bef612766c69c433a3cc02788304cc8df4106daabb1d869393780bcec51b4535882fa3202ea7ffc9b06e5dec9dd1080a1e5a35dad761c91c93ca0b322224721214f482b28f45e93f541d629b112e0de68b40eda92ec25bf9dd0375c274ef2a76c472e1ca97940f8b7cc63e67ee7fa8a7689314709ec2f107dc72deb5f005bd9f8fbaf3c37f7a94ba05bde1154b70a3db7538f4e493d6b3290e8737d95b6c50a855c0419cee7218c083ab3bd2156742db5722663617e7d3ec428e29dadf3b1c268d3af25257695fe68d68b0726e68b85e99a8ece9d9d4671cd99ac87bfdd618eaf462b6ed1c4abef4ca1c7ffeade83dd7bc9631fbe9ba5df7078a4aec0f54b57392cce695dc60f6a83aadf511da6e31a9777c0268cd7f3646de9e5f657e84424df7fd13b93da4f08d046fcb3fd3d28885f960df57bca74bac1db0ac1811959aec57b40e031acb47cac6e1749654efbce70a8ad9fa6e1ad64677b99d9c0b49ad845fc802fddc94428dd1e163fd6551cec6fd2bec5209fe3ffe2520c8a577600735eb97927ca0653f375c146808c698b4df2c588c8dd98f7d01d66044c91ef90b50f08d8d5cf2d0f27505a28cff73a25b1a2eaed0c33a26e3e74e9dbd6e6903801dc1942f81787faf539ef2005da2ad35bc17fafaa608ebdb1cec4d1054e81c31fadf96407c785b71a2647094b7915a6ce5c9620aad3d32c6df429793624f7114e40c5d1909ba68a92a283f25359087f1cfb79ccd5e611b36f2b5fe0b2300083cc6320c04d6a9319074551fa27eec2c9730eddeac789d142c7085a7328803970eb1243b61c3475e3ad62d53adc96bd441c273c749a8b14728d6e62c5dba31f1b57add1d004564334e7a13793120a1d8d6a294cc72bd1a6327d506dcaf2919ab8756f5a04b1bf909c8f06c830c6676806a269021716ade6a82d20267478b2d38aac8d4af0b1bd2c3ced21e38fb55f72bdf9691de36bb1f4dcad0787b6400ef9e19208d107868584ab260ae8c05abee11aae9b0d604ce446a878bc57ca8f162604dc4770abe7a219ca6e1dace625bc58bf8"}, @NL80211_ATTR_IE_ASSOC_RESP={0x1012, 0x80, [@measure_req={0x26, 0x1003, {0x55, 0x0, 0x4e, "4c6c06729330f18d54ecb9511a0570acae7f09a9ee24c8c101c35b65717a8bb866d56f1ef6deab114d690e1d9a9f5404168b92a4ccc8c25b08f78d04a5e071416eca4856374a7da4554161783fbc1e2147d38e5a5d2608a7f06284db3e3829639a2df6e085cdc59a7a2d1872dfafa5e426cea0a886af610bf12c44d21b82fba13080b7d5f707c345b5e5a1199b1efc106cc2da9e248c36253448b476fe9b7bea20b552ada97a36a90a468bbcd5069ea5af3e5e93db135061da9bb1dc79ca52bd64164b7a6382669849d78077317c0bf54796804353a43483a1e3a02e856e8917407a1d049897099e9e7c421e988155d0dbe934c0306da345a18a22b69bbc927ffc317176cf391f023e42e747edd3ac4aaf0e0036f40cb0a0e1f3deb9afbcb2a669c579034ff610a4ddee106bba5996bdb2466caf9b6f391cb3b1daa3d52bfac1e9e0ee9d510afb893b4b8f2066f55185257b286160f1b326ce7e8186add04410f0fe6f5cb9be413e9aa5618ffe3e41662acc39fbb72ffe550ecf4cbaf0cbdc3d1413ad4c2024c48e7b76d4775a1f1a0a5254bb18993e66fd1ce2394ee307f23dd3e08a2446d6d45efc1b751231308c3164fed253f30dae85231dbfbddc76de7448440bd151f6767737e17861069275d9145ab797955c8b2f88b65b8ddda8fc761bd7b7f2ad310fb756a44be7b9b3a734df142928206b5bd871bcb53d7390ac34676cc76a7c50ba6d151a0686b78a5bac9f8942e9de2783d162ecceecf3dbe4573460e405043876372ba77087ab121dff6ae1d0377d7093b686b8bd73c780e48f64e51ae682ed9bbe9bdd4c2392f80dfc8390ebec967161eed3c5c9f9c930879ef22bedbb92517e071387cf9b8c1d7cf38ff9a75e81827f4201f50bd20a8af6a83c99eb30d962404cbf1dede65945cff3c9a7b87914e37fcc85087a7957cb6189d59babf26316e3bc3e7d5b790b01283910623be74a4e7dc4c180f7b44b5b93275e5bde5820b8a828b23b8f9f6d825a0443e8ec9181b30168a47cb393e30233a55acb30af9f58a2411529cff7acd9b96938f675dc7fe45744000b1a4a83349dc7e932c1d3a35714651efc788a4312365c73c600a27eccb19509c7f77f510a47c0c2eb03a56c45c0cca9e3630069fed12cedb4a437aa38bc181bccd5f5f534295d7987e569cf860f3233c8d655f41c51c07898a64b5425333d49bd94e7e025780a2ef506bb25b5749f30ba0cb6cc767b37acf361e2c843f15ffbf1417f583ec4e5b908fcf75592265d311261c62ba147a9eea848869f137ef3fd99c0c2125306b9d3b7450a83106dba181429e16fa9518604fdfc0be3163db13ac00408495011193780bff5a68b8d1869220ff6f28cc1bef3975695871f0eb6f8fef67f6b49c06f18f0340db546417cde78f30db3fe0c86fa15e3c9ee0556be234e78b2fe9e178c4ac21bbcb25342535f761d4c7a106502c5bc85b4e151dc3882deba550122867ea07e985199f444e9778128fd11c6e35b1b7a829902f8744982047141a96675ec03a4a75169b9ef12bc67b38fa99c690971a3b006d42a5e80eee8054ae5a151b82c3f03239b0f9348574f444c723bd1189371dfe5e3a886d78cffa60092b1cdaf9791f8661a3e7a1d076b78ed91753e2ec689407a67e948ac15ee8528460f30ab8f098fca743ad11ad14abc53bb20508a49bfa3db7be4fe4080e10ef211f64743b2f2b98f5c621e50390a5b9026c543a012dfde417725ce8f0d75f41a81e935fd58dec730f8c76bced4e6e550c53b3d8917d06949f13512c78559f24bd91488e221a50846e0d1c1943c7fc883b427d727ef86aa650b2f1703d3572a69a70e37c45da414a66d897a8f73127d27d85c27ca668d101a049a5ce8652a150c00456c3d274c2921f2a539897252fb1d1b62d0ade379802636c1fdf01dd7b137c34664523b3376545de9907c7d6773495c1bfdc47f2de281f04da59d104fce9556bafb940397174b2aa3752fbbef000ffe63ddba643bc8a29ed65795e9dc616e21bad3b8b6acf31001761b7b74ec43794597cfa8443654e3f0a7771ad766329c78332a7f80507ac990f0842ffb8d98da688d2df33714d481d24ec219427b89b4cfeaabfca90fd633d39d8300a16f3b1fbbc89324a5a065674376bb696794a8f7a4ccf410415cdaed595ef02bdcae3a61f42a9b8ddf1eb1ec5d1d83fb55408711d3c5400fa7ae7b50f198488125e34d1cf668cc2a5bb43a9bc57b40738d6a92e97198cb40ba9b9ac56046173b615838c80b0ccb66530b16172748635dd8eb05fabc32ef1a70fe35327978155d663b232b472948290fc1e858a53921135b37bc746ce39a9e42177f7b7634361c1e384cdf5c3a16170f863119439fecf7342d31aa767450e15f0b8d325c8ee913fd9d6c0a0b8bc4455b67b2c73a60f709647a37291a9750fce74759f0f284f0cf691cb2a5d84a4cbef15f355d7216c7102fa18d2a8c363cc5842f7aefc04d6cc984ba681a2a0e197286e9893d1c1b4a98ee2798812feb74222d346bd9a215908db424e76417f5563ed0e43756d1589f710ceaa14c573b6e4d7f98ae0e4e7b6ebd05b0d1add7166653ee86eff276bf2856f61afece062b66240923e532633149155973ba5724ae22e31023e48cfb730d9c9553a411dd93eeed0c5b52f6e9e8dd9fdca06eb9229459dfa01b644162917be9b490a5cb3a7eeda6ce236755e220c99525d85f95d093ad002b52318315d31d9c4634454c25c8783d6338a823bf7c285f4a2f4b4c0d4622335adf32c3f3597e07eaaed430506fdd0078d2bb0fb0cbdd7470d7c39345185bcf29cac9493e9821001e38b1085fd4df4f5608aa5f01e746820030b18c8e6af1a0014dd219c617e356a6e5298ad5fdc6cf1e79f98bb43797bf8532a1dd19ff93b95882185c80192f68f3e7c160984174d78e4aaec84656889bfea5c50ad9852fa561541a815d1194b0388f65a19883130f62c5b9c390f9bfcac53139b997994f0bc56e8b28a81e9bb1a9016a5e2318bf633feb103debec9eea4bcfb4983b7820ce0bbe48af146ce432e063b2427f63a3018e1b6b55d9aa12a1cd02ad9b3407a9495b08be2dd0229357ffb7c1d02e9cd3679bc61891ca2c0f7ef47ffc5059f02ecb487950cf6b22d9014a4f2a077efc6093329012ac3c08b7e5430ed91c599999edc1602a6149d2de38ac2d4b2f77dfb69ee7a945407e74b440396b180e4375ebeed58722eefeeddf7aaf31da2700de4c50ac8e7f2ea8b02ae0f412ef341599422237d04034ebac41fb39bc5bbc746afb7b01b2720be070e99985a68c9aabe4ff6636c3a820de0d66b73c8bcf5140164ab4d4dc44dacec9db186ba1a98fafb1f599f9ec03d6deda92aef15db369a50cbb7d4031472d3d39ab4fd6916682537a568f487742e2958a5daad4ec1c0cd4a9c5a067bacc962a8229eae2b1118a59e6b692877e0ee115020108bbcbd1b3c69a2cb26d403a225f1a37eccab90ee67f507fe48b80521404d8c9a4d29890d9e448de3b279b7039b848c2b6a2b9084c9bd8dc01ae96d1753db7f26c75e8da149a4740671029b50d81126704110bc21cc324e0e2f1182c5b139c11fb747eb83dd6bbb24e267eaae16a274d29aafa7ee76e2212a630de52738827b7158ec84240a4f399bbf4f2e0f1ffc820b2d2fc50a0d4d0392546cafbb0a3027008d237afeb6e8a33556ee023a908259067e8ee185dbc31b64b01a7f50bf1b12082fd942c7f8d75811312f278b80e769917e0933bcd6839c514ff588dc8476da29f3698f2fec3c851e5daf73f88391d255b4f99f6f691034f27f5813b29a8be3262794853aa0d6cf5195741419edad5ccc63af585694d16a6f120f869e340facce1ee341832fe3eb4bfd09cbd3d00a2c214748631cc520417e9f96f4a84a69c7aa31954fc88af3ed96a1d19ebab1f4f59bf6f22830e1b44919c6fcf56862f146966bbd3dbf0b8978c7ca80aaaf788221a057a71cf122e0587fbc8774e150444299878d502fce4ceb54436438b8e7c400cfa2468e59cda3de05b1b1f5329c3de00cddf1e2cc7808b6e21cf8b0a7a255743aa74ea45f260597809dd91ce2197e7a04099c316183c088263da81d59dbb1c921494edc94119d098b8e4532763645072d2d43c4fb03764b5c6c671636e3830072745c2329de2c32e87a882171e969fd562e71feb370cdcb724033a5c09f383d79e0322d8025b0206ef065b1820786c83be23ed5e2a760893e7226825a71dec49a37354b66bac55cefd36127f53c85e4d97019092057618a57ea3c6067507d0865d552bdf556e66d160e82bfa01ad2058158a41d64aa947f6fedcaaf1b5a167003320cab95b41377b18fcfa1eaecf52c7ed9e0b4bb35a0c40af9738b1065ec6facb5181229dd4c1d063db07b8c8466eac81e3fe7c7fe41aa4f185d02cd43c2be212d8a23aefec606e6039fbe71e163652b8282c271bad13a89f8887723949e4114b3b17aa843b4fafb3412df55ec4723120ddd72d6d35b38b8caac545272c850244cf24dd2480718afb91c2220670a939d95ef4aea12716199d68cb2c1f442707be51ff7da869c327b9cbf9454dbb1305d53230a26578dc1618e27e132696128464515fbac7633b1d9240b0306c15bf8c803b65537a33fe3aa8f4769bb871eeba9d30f8872309c53f9b00dfefaf333932ffa5a8d5ecc2648029a22ac9d5d679e7920a0faa23604f3817f7468e32b06d49ef6838fdb799f5f64cb4b9381f5192673b73d0d79eb872f63a1fe1bc58a2d96914204e09d1dcae2bed7dc7b3d818a02d1ba4660d97c475b614c0db575ce8a5929ee5b492f28779dc166ae3f37041313ccd29f83e5620340f7116d69d767d727c89203d148f53f194e5f6cdbb719ed06d5689c27408aa160ea7acfeee08052c52e163fbeb5db0ef9259879b3c485eb353adc3a3e70efba020f62e36edc307e467a0816818bab0eb26023aa19600694e279ac2fb72bb361094fa6b09e1777609e458a1a00ff22c1902e304a31e699d1ce7d2436e02363e6285e32b0b9531584751a1bc1c2f93ffc0e943d55ce8e2330bd836227eaa30eec8538684ba4a41425a380b806939212cf4365b801cedab1ffa10bc431fa4a90d67f22d5f340d007d9f2968cc06d54db65ef099002656c4282936bf3fffa37838ad0f141878c860f970b5b85d7ab1b6deba7493beb291f8c4e9d9b2699e0fd32a0391d8118992c3c2081edbd875ac996261e4a6a9c8dcfb3d783ece0b42dbe95123556fedae9502e04b525054064259224f079378d9d22b34e83e2a839debd8be1e4fcc556fba527fb16c7cd9ebbe9422a43fa87ea07037a8182fa3b82ced5409609f682f30ff5b739b6e0472f069a76ec29d3fbfb1300dfc794db47d7ec58f64b71493a627aa8f13d6f545c6f10f2a4d58ffedaf572bd9595f05a2a13ac49857277ab43c1aa9a4f638e00a66c4e3230d04e1350497e1e154c7be896a3b319d5c4987760cb089026bab7a4c21979ad7a74810e6a3faec7eee383c5a61532ade12f5f9f178f0d58afe5b29dc6714ec66dcb8d6b13fe14d9fdae003bfc7079d120617d26bd94de442660dd841eb6656a8c9214f46924aa8e455294492abaf13640b589b038866207fd4a78c5f1c1514b7977c10d336a087ada20e67f6b7619d06ced963c86fcf36bbd0c68723de169072519a35b9b049dffb84bc7e95741841dfc93115567f1c17eeaa25a250e0ccbc40469d469535eba19e2be1f1f8c6e7f813be7d694a3daeb9363a4e5bb0b068dc757ff6109c"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x4, 0xfffa, 0x1400, 0x0, 0xf69, 0x0, 0x8d]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x5, 0x1, 0xa, 0x10]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12b}], @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x7ff, 0x3, 0x7, 0x8000]}]}]}, 0x1690}, 0x1, 0x0, 0x0, 0x8000}, 0x24000001) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) syz_usb_connect$uac1(0x0, 0x81, &(0x7f00000041c0)=ANY=[@ANYBLOB="12010003000000006b1d010163000102030109026f00030100000d000400630000010104000b2401000000020102090401000001020000090401010101020000072401fd03000f09240201100000002a0905010900000000000725010000000009040200000102000009047ac11e7380f153080582090000000001072501000000e35ca4a74222af0b16cdce94d4c34b5471ae9d0bd413dc23e65a"], 0x0) syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.876670493s ago: executing program 0 (id=924): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) 4.662764369s ago: executing program 0 (id=925): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ec", 0xbb}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde9", 0x43}, {&(0x7f0000000b80)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26f", 0x21}, {&(0x7f0000000700)="8534f65f698d0200a3ee30459376efe5001dc546f93c6540e7a5215fa1f9469576e94b77cfaf3f76956c4c840f3a15c387327e6f6ef21a796847e2803e33335fa28b755829ea0000406333941d8989b0b8e304f307090026", 0x58}], 0x3}, 0xc0) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 4.662243549s ago: executing program 0 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = io_uring_setup(0x6477, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x43}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)=""/162, 0xa2}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES8=r3]) syz_read_part_table(0x593, &(0x7f0000000b80)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) getpid() fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) 0s ago: executing program 0 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) getpid() r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r5}, 0x10) sendmsg$can_raw(r4, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) kernel console output (not intermixed with test programs): e strings: Mfr=0, Product=0, SerialNumber=0 [ 159.741005][ T7] usb 2-1: config 0 descriptor?? [ 160.143650][ T3647] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 160.834980][ T3647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.853725][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 160.859892][ T3647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.859979][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 160.887410][ T3647] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 160.903088][ T3647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.908622][ T7] usb 2-1: USB disconnect, device number 11 [ 160.924101][ T3647] usb 5-1: config 0 descriptor?? [ 161.097434][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.105483][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.140533][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.148175][ T5394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.157856][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.166200][ T5394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.266486][ T5394] team0: Port device bridge0 added [ 161.283436][ T5394] syz.3.535 (5394) used greatest stack depth: 19320 bytes left [ 161.416451][ T5399] loop3: detected capacity change from 0 to 512 [ 161.437109][ T5399] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 161.495819][ T5399] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 161.513686][ T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 161.585026][ T5399] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.538: bg 0: block 18: invalid block bitmap [ 161.648991][ T5399] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 161.700357][ T5399] EXT4-fs (loop3): 1 truncate cleaned up [ 161.741076][ T5399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.809650][ T5399] ext2 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 161.893935][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.987413][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.026414][ T5000] EXT4-fs (loop3): unmounting filesystem. [ 162.071507][ T26] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 162.083882][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 162.118633][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.254970][ T5404] device team0 entered promiscuous mode [ 162.280303][ T26] usb 3-1: config 0 descriptor?? [ 162.283621][ T5404] device team_slave_0 entered promiscuous mode [ 162.313441][ T5404] device team_slave_1 entered promiscuous mode [ 163.312492][ T5406] team0: Port device team_slave_0 removed [ 163.333956][ T3647] usbhid 5-1:0.0: can't add hid device: -71 [ 163.340020][ T3647] usbhid: probe of 5-1:0.0 failed with error -71 [ 163.408011][ T3647] usb 5-1: USB disconnect, device number 12 [ 163.431145][ T5403] device team0 left promiscuous mode [ 163.447737][ T5403] device team_slave_1 left promiscuous mode [ 163.554100][ T5410] loop1: detected capacity change from 0 to 2048 [ 163.744695][ T26] hid-led 0003:1D34:000A.000A: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 163.761892][ T5410] loop1: p2 p3 p7 [ 163.778665][ T26] hid-led 0003:1D34:000A.000A: Dream Cheeky Webmail Notifier initialized [ 164.341591][ T5413] loop3: detected capacity change from 0 to 32768 [ 164.403013][ T5413] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.542 (5413) [ 164.413671][ T3615] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 164.466848][ T5413] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 164.493811][ T5413] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 164.510635][ T5413] BTRFS info (device loop3): force zlib compression, level 3 [ 164.522098][ T5413] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 164.537148][ T5413] BTRFS info (device loop3): use zstd compression, level 3 [ 164.545540][ T5413] BTRFS info (device loop3): enabling ssd optimizations [ 164.553348][ T5413] BTRFS info (device loop3): using free space tree [ 164.803938][ T3615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.815234][ T3615] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.824491][ T5448] loop1: detected capacity change from 0 to 512 [ 164.829786][ T3615] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.846913][ T3615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.862175][ T3615] usb 5-1: config 0 descriptor?? [ 164.899275][ T5448] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 164.968437][ T5448] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 165.025910][ T27] kauditd_printk_skb: 315 callbacks suppressed [ 165.026005][ T27] audit: type=1800 audit(1720573915.273:1132): pid=5413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.542" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 165.055481][ T5448] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.549: bg 0: block 18: invalid block bitmap [ 165.071445][ T5448] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 165.084178][ T5448] EXT4-fs (loop1): 1 truncate cleaned up [ 165.100234][ T5448] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 165.139079][ T5448] ext2 filesystem being mounted at /115/file0 supports timestamps until 2038 (0x7fffffff) [ 165.166824][ T27] audit: type=1804 audit(1720573915.373:1133): pid=5453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.542" name="/newroot/18/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 165.214168][ T3593] usb 3-1: USB disconnect, device number 5 [ 165.311786][ T3545] EXT4-fs (loop1): unmounting filesystem. [ 165.585523][ T5000] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 165.715862][ T3615] usbhid 5-1:0.0: can't add hid device: -71 [ 165.722295][ T3615] usbhid: probe of 5-1:0.0 failed with error -71 [ 166.275289][ T3615] usb 5-1: USB disconnect, device number 13 [ 166.463110][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 166.553657][ T26] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 166.567880][ T5470] device team0 entered promiscuous mode [ 166.573456][ T5470] device team_slave_0 entered promiscuous mode [ 166.617577][ T5470] device team_slave_1 entered promiscuous mode [ 166.709781][ T5470] team0: Port device team_slave_0 removed [ 166.743888][ T5469] device team0 left promiscuous mode [ 166.768719][ T5469] device team_slave_1 left promiscuous mode [ 166.913868][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.099262][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.109537][ T26] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 167.120123][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.141129][ T26] usb 2-1: config 0 descriptor?? [ 168.543970][ T26] usb 2-1: can't set config #0, error -71 [ 168.552773][ T26] usb 2-1: USB disconnect, device number 12 [ 169.232305][ T5476] loop2: detected capacity change from 0 to 32768 [ 169.290894][ T5499] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 169.577188][ T5476] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 169.617657][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 169.640612][ T5476] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 169.743802][ T5501] loop4: detected capacity change from 0 to 2048 [ 169.760471][ T5476] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 169.827430][ T3615] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 169.845617][ T3615] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 169.977978][ T3615] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 132ms [ 169.986173][ T3615] gfs2: fsid=syz:syz.0: jid=0: Done [ 169.994160][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.007166][ T5476] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 170.028843][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.042984][ T5476] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 170.060805][ T26] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 170.064114][ T5501] loop4: p2 p3 p7 [ 170.088161][ T5467] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 170.103924][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.116192][ T26] usb 1-1: config 0 descriptor?? [ 170.543734][ T5467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.572795][ T5467] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.651167][ T5467] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.700691][ T5467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.731694][ T5467] usb 4-1: config 0 descriptor?? [ 170.815731][ T26] hid-led 0003:1D34:000A.000B: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 170.859463][ T26] hid-led 0003:1D34:000A.000B: Dream Cheeky Webmail Notifier initialized [ 170.961272][ T5519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 170.975305][ T5519] device team0 entered promiscuous mode [ 170.980899][ T5519] device team_slave_1 entered promiscuous mode [ 171.028293][ T5517] device team0 left promiscuous mode [ 171.064826][ T5517] device team_slave_1 left promiscuous mode [ 171.392677][ T5527] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 262161 (only 8 groups) [ 171.535046][ T5467] usbhid 4-1:0.0: can't add hid device: -71 [ 171.625271][ T5467] usbhid: probe of 4-1:0.0 failed with error -71 [ 172.014527][ T5467] usb 4-1: USB disconnect, device number 8 [ 172.341510][ T5534] loop4: detected capacity change from 0 to 512 [ 172.373053][ T26] usb 1-1: USB disconnect, device number 6 [ 172.380453][ T5534] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 172.398747][ T5537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.575'. [ 172.424952][ T5534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 172.432979][ T5534] System zones: 1-12 [ 172.484780][ T5534] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.491179][ T5534] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.573: Inode bitmap for bg 0 marked uninitialized [ 172.542461][ T5534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 172.753883][ T5467] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 172.769051][ T5549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.855114][ T4372] EXT4-fs (loop4): unmounting filesystem. [ 173.003822][ T5467] usb 2-1: Using ep0 maxpacket: 32 [ 173.846603][ T5467] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 173.857751][ T5467] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 173.893819][ T5467] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 173.902835][ T5467] usb 2-1: config 1 has no interface number 0 [ 173.946876][ T5467] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.005640][ T5467] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 174.090475][ T5467] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 174.100050][ T26] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 174.163830][ T5467] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.246028][ T5467] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 174.473805][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.493688][ T3588] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.512651][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.556418][ T26] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.602497][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.640481][ T26] usb 5-1: config 0 descriptor?? [ 174.730934][ T5578] loop2: detected capacity change from 0 to 2048 [ 174.824583][ T5467] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 174.910647][ T5578] loop2: p2 p3 p7 [ 174.914872][ T3588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.950792][ T3588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.987616][ T3588] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 175.023668][ T3588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.100218][ T3588] usb 4-1: config 0 descriptor?? [ 175.393986][ T26] usbhid 5-1:0.0: can't add hid device: -71 [ 175.400757][ T26] usbhid: probe of 5-1:0.0 failed with error -71 [ 175.432377][ T26] usb 5-1: USB disconnect, device number 14 [ 175.532795][ T5583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 175.814705][ T3588] hid-led 0003:1D34:000A.000C: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 175.842949][ T3588] hid-led 0003:1D34:000A.000C: Dream Cheeky Webmail Notifier initialized [ 175.864199][ T3561] Bluetooth: hci1: command 0x0406 tx timeout [ 175.864230][ T3550] Bluetooth: hci3: command 0x0406 tx timeout [ 175.887991][ T5587] device hsr0 entered promiscuous mode [ 175.918862][ T3588] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 175.933075][ T5586] device hsr0 left promiscuous mode [ 176.184208][ T3615] usb 2-1: USB disconnect, device number 13 [ 176.197483][ T3615] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 176.883323][ T5467] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 177.748162][ T5619] loop2: detected capacity change from 0 to 1024 [ 177.756672][ T26] usb 4-1: USB disconnect, device number 9 [ 177.794499][ T5619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.804197][ T5619] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.831462][ T5619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 177.874207][ T5619] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 177.889098][ T5619] System zones: 0-1, 3-36 [ 177.905854][ T5619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.923741][ T5467] usb 5-1: Using ep0 maxpacket: 32 [ 177.957316][ T3552] EXT4-fs (loop2): unmounting filesystem. [ 178.007868][ T3592] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 178.033796][ T3589] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 178.036633][ T5629] tipc: Enabling of bearer rejected, already enabled [ 178.053938][ T5467] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 178.074300][ T5467] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 178.100896][ T5467] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 178.112550][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.119832][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.163945][ T5467] usb 5-1: string descriptor 0 read error: -22 [ 178.173208][ T5467] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.182402][ T5467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.264139][ T3592] usb 1-1: Using ep0 maxpacket: 16 [ 178.870507][ T27] audit: type=1326 audit(1720573929.113:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468375bd9 code=0x7fc00000 [ 178.999771][ T3592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 54, changing to 9 [ 179.031825][ T27] audit: type=1326 audit(1720573929.143:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4468375bd9 code=0x7fc00000 [ 179.060022][ T27] audit: type=1326 audit(1720573929.143:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468375bd9 code=0x7fc00000 [ 179.088522][ T3589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.098845][ T3589] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 179.102982][ T27] audit: type=1326 audit(1720573929.143:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468375bd9 code=0x7fc00000 [ 179.108065][ T5467] cdc_ncm 5-1:1.0: bind() failure [ 179.111396][ T3592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 57395, setting to 1024 [ 179.147167][ T5467] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 179.152990][ T27] audit: type=1326 audit(1720573929.143:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468375bd9 code=0x7fc00000 [ 179.159610][ T3589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.176399][ T27] audit: type=1326 audit(1720573929.143:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468375bd9 code=0x7fc00000 [ 179.190655][ T3589] usb 2-1: config 0 descriptor?? [ 179.211491][ T27] audit: type=1326 audit(1720573929.143:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468375bd9 code=0x7fc00000 [ 179.211515][ T3592] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 179.243615][ T27] audit: type=1326 audit(1720573929.143:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468375bd9 code=0x7fc00000 [ 179.243628][ T5467] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 179.245273][ T3592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.271857][ T27] audit: type=1326 audit(1720573929.143:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468375bd9 code=0x7fc00000 [ 179.272589][ T5467] usbtest: probe of 5-1:1.1 failed with error -71 [ 179.280792][ T27] audit: type=1326 audit(1720573929.143:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468375bd9 code=0x7fc00000 [ 179.305579][ T3592] usb 1-1: config 0 descriptor?? [ 179.340086][ T5467] usb 5-1: USB disconnect, device number 15 [ 179.413629][ T26] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 179.615112][ T3589] ath6kl: Failed to submit usb control message: -71 [ 179.680480][ T3589] ath6kl: unable to send the bmi data to the device: -71 [ 179.693543][ T3589] ath6kl: Unable to send get target info: -71 [ 179.705863][ T3589] ath6kl: Failed to init ath6kl core: -71 [ 179.738245][ T3589] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 179.756116][ T3589] usb 2-1: USB disconnect, device number 14 [ 179.815063][ T5611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.832297][ T5611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.843797][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.858761][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.859277][ T5611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.890492][ T5611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.898455][ T26] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.910650][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.928125][ T3592] hid (null): unknown global tag 0xd [ 179.935930][ T3592] hid (null): invalid report_count 25008 [ 179.943618][ T3647] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 179.956358][ T26] usb 4-1: config 0 descriptor?? [ 179.958168][ T3592] hid (null): unknown global tag 0xe [ 179.967259][ T3592] hid (null): global environment stack underflow [ 179.983731][ T3592] hid (null): unknown global tag 0xe [ 179.990175][ T3592] hid (null): unknown global tag 0xd [ 180.010650][ T3592] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1 [ 180.021127][ T3592] hid-generic 0003:0158:0100.000D: unexpected long global item [ 180.031590][ T3592] hid-generic: probe of 0003:0158:0100.000D failed with error -22 [ 180.128876][ T3592] usb 1-1: USB disconnect, device number 7 [ 180.185705][ T3647] usb 3-1: Using ep0 maxpacket: 32 [ 180.305758][ T3647] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 180.327045][ T3647] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 180.346152][ T3647] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 180.358584][ T3647] usb 3-1: config 1 has no interface number 0 [ 180.369152][ T3647] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.398656][ T3647] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 180.430022][ T3647] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 180.444051][ T26] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 180.460188][ T3647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.475667][ T26] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 180.527183][ T3647] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 180.645283][ T26] usb 4-1: USB disconnect, device number 10 [ 180.741541][ T5661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.618'. [ 180.803616][ T3591] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 181.095837][ T3647] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 181.179183][ T3591] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.201966][ T3591] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.411323][ T3591] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 181.439872][ T3591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.453726][ T26] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 181.457004][ T3591] usb 2-1: config 0 descriptor?? [ 181.522044][ T5677] loop0: detected capacity change from 0 to 2048 [ 181.619201][ T5677] loop0: p2 p3 p7 [ 181.713722][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 181.834687][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 181.861422][ T26] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 181.877543][ T26] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 181.895587][ T3647] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 181.924147][ T26] usb 5-1: string descriptor 0 read error: -22 [ 181.930549][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.940104][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.104987][ T22] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 182.174719][ T3591] hid-led 0003:1D34:000A.000F: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 182.198296][ T3591] hid-led 0003:1D34:000A.000F: Dream Cheeky Webmail Notifier initialized [ 182.273907][ T3647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.285959][ T3647] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 182.295595][ T3647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.315826][ T3647] usb 4-1: config 0 descriptor?? [ 182.420507][ T5690] loop0: detected capacity change from 0 to 512 [ 182.437688][ T5690] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 182.453419][ T5690] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 182.463055][ T26] cdc_ncm 5-1:1.0: bind() failure [ 182.477445][ T5690] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.627: bg 0: block 18: invalid block bitmap [ 182.492748][ T26] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 182.502642][ T5690] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 182.513759][ T26] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 182.522408][ T5690] EXT4-fs (loop0): 1 truncate cleaned up [ 182.530688][ T5690] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 182.543457][ T5690] ext2 filesystem being mounted at /69/file0 supports timestamps until 2038 (0x7fffffff) [ 182.553778][ T26] usbtest: probe of 5-1:1.1 failed with error -71 [ 182.581909][ T3591] usb 3-1: USB disconnect, device number 6 [ 182.590119][ T26] usb 5-1: USB disconnect, device number 16 [ 182.601529][ T3647] ath6kl: Failed to submit usb control message: -71 [ 182.609132][ T3647] ath6kl: unable to send the bmi data to the device: -71 [ 182.609356][ T3591] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 182.625392][ T3647] ath6kl: Unable to send get target info: -71 [ 182.633166][ T3647] ath6kl: Failed to init ath6kl core: -71 [ 182.700018][ T4530] EXT4-fs (loop0): unmounting filesystem. [ 182.708535][ T3647] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 182.734920][ T3647] usb 4-1: USB disconnect, device number 11 [ 183.053661][ T5468] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.176715][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.221732][ T5699] device batadv_slave_1 entered promiscuous mode [ 183.276070][ T5699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.630'. [ 183.323607][ T5468] usb 1-1: Using ep0 maxpacket: 16 [ 183.453891][ T5468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 54, changing to 9 [ 183.575118][ T5468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 57395, setting to 1024 [ 183.588069][ T5468] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 183.597723][ T5468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.617596][ T5468] usb 1-1: config 0 descriptor?? [ 183.698460][ T3592] usb 2-1: USB disconnect, device number 15 [ 183.992509][ T5720] loop2: detected capacity change from 0 to 512 [ 184.008873][ T5720] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 184.057933][ T5720] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 184.076189][ T5694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.088385][ T5720] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.639: bg 0: block 18: invalid block bitmap [ 184.101066][ T5694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.121292][ T5694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.137389][ T5720] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 184.152786][ T5720] EXT4-fs (loop2): 1 truncate cleaned up [ 184.189304][ T5720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.203808][ T5694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.263392][ T5720] ext2 filesystem being mounted at /148/file0 supports timestamps until 2038 (0x7fffffff) [ 184.319065][ T5468] hid (null): unknown global tag 0xd [ 184.325485][ T5468] hid (null): invalid report_count 25008 [ 184.331211][ T5468] hid (null): unknown global tag 0xe [ 184.342215][ T5468] hid (null): global environment stack underflow [ 184.348945][ T5468] hid (null): unknown global tag 0xe [ 184.354355][ T5468] hid (null): unknown global tag 0xd [ 184.361774][ T5468] hid-generic 0003:0158:0100.0010: unknown main item tag 0x1 [ 184.377312][ T5468] hid-generic 0003:0158:0100.0010: unexpected long global item [ 184.389705][ T3552] EXT4-fs (loop2): unmounting filesystem. [ 184.404122][ T5468] hid-generic: probe of 0003:0158:0100.0010 failed with error -22 [ 184.528656][ T5468] usb 1-1: USB disconnect, device number 8 [ 184.590839][ T5725] loop1: detected capacity change from 0 to 2048 [ 184.668561][ T5725] loop1: p2 p3 p7 [ 184.677712][ T3647] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 184.763605][ T3644] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.853625][ T3592] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 184.923626][ T3647] usb 4-1: Using ep0 maxpacket: 32 [ 185.044276][ T3647] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 185.059454][ T3647] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.091022][ T3647] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 185.103828][ T3592] usb 5-1: Using ep0 maxpacket: 32 [ 185.116482][ T5738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'. [ 185.123805][ T3644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.135892][ T3647] usb 4-1: string descriptor 0 read error: -22 [ 185.142315][ T3647] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.162875][ T3644] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 185.172154][ T3647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.180403][ T3644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.198986][ T3644] usb 3-1: config 0 descriptor?? [ 185.234124][ T3592] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 185.242532][ T3592] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 185.273391][ T3592] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 185.292018][ T3592] usb 5-1: config 1 has no interface number 0 [ 185.302454][ T3592] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.323595][ T3592] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 185.343007][ T3592] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 185.468025][ T3644] ath6kl: Failed to submit usb control message: -71 [ 185.479163][ T3592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.479365][ T3644] ath6kl: unable to send the bmi data to the device: -71 [ 185.497404][ T3644] ath6kl: Unable to send get target info: -71 [ 185.509908][ T3644] ath6kl: Failed to init ath6kl core: -71 [ 185.548101][ T3644] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 185.556838][ T3592] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 185.568142][ T3644] usb 3-1: USB disconnect, device number 7 [ 185.603625][ T26] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 185.713843][ T3647] cdc_ncm 4-1:1.0: bind() failure [ 185.753764][ T3647] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 185.786565][ T3647] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 185.816023][ T3647] usbtest: probe of 4-1:1.1 failed with error -71 [ 185.831749][ T3647] usb 4-1: USB disconnect, device number 12 [ 185.973779][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.059803][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.084258][ T26] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 186.101199][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.114704][ T3592] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 186.174575][ T26] usb 2-1: config 0 descriptor?? [ 186.299983][ T5758] loop0: detected capacity change from 0 to 512 [ 186.340461][ T5758] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 186.407877][ T5758] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 186.436712][ T5758] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.652: bg 0: block 18: invalid block bitmap [ 186.496977][ T5758] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 186.533783][ T5758] EXT4-fs (loop0): 1 truncate cleaned up [ 186.558641][ T5758] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 186.601625][ T5758] ext2 filesystem being mounted at /75/file0 supports timestamps until 2038 (0x7fffffff) [ 186.702072][ T4530] EXT4-fs (loop0): unmounting filesystem. [ 186.793247][ T5772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.658'. [ 186.896593][ T5770] loop3: detected capacity change from 0 to 2048 [ 186.934995][ T26] hid-led 0003:1D34:000A.0011: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 186.958055][ T26] hid-led 0003:1D34:000A.0011: Dream Cheeky Webmail Notifier initialized [ 187.032482][ T5770] loop3: p2 p3 p7 [ 187.133689][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 187.143694][ T5468] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 187.396956][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 187.513951][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 54, changing to 9 [ 187.538395][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 57395, setting to 1024 [ 187.557095][ T26] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 187.566739][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.580084][ T26] usb 1-1: config 0 descriptor?? [ 187.593663][ T3647] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 187.617858][ T3592] usb 5-1: USB disconnect, device number 17 [ 187.630229][ T3592] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 188.033999][ T3647] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.044918][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.053790][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.062642][ T3647] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 188.078916][ T3647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.087342][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.101311][ T3647] usb 3-1: config 0 descriptor?? [ 188.106542][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.127364][ T26] hid (null): unknown global tag 0xd [ 188.133167][ T26] hid (null): invalid report_count 25008 [ 188.139234][ T26] hid (null): unknown global tag 0xe [ 188.144690][ T26] hid (null): global environment stack underflow [ 188.151215][ T26] hid (null): unknown global tag 0xe [ 188.159110][ T26] hid (null): unknown global tag 0xd [ 188.171021][ T26] hid-generic 0003:0158:0100.0012: unknown main item tag 0x1 [ 188.179323][ T26] hid-generic 0003:0158:0100.0012: unexpected long global item [ 188.190496][ T26] hid-generic: probe of 0003:0158:0100.0012 failed with error -22 [ 188.242657][ T3592] usb 2-1: USB disconnect, device number 16 [ 188.243710][ T3615] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 188.318726][ T5798] loop1: detected capacity change from 0 to 512 [ 188.326506][ T5798] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 188.340878][ T26] usb 1-1: USB disconnect, device number 9 [ 188.347735][ T5798] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 188.369278][ T3647] ath6kl: Failed to submit usb control message: -71 [ 188.376761][ T3647] ath6kl: unable to send the bmi data to the device: -71 [ 188.384944][ T3647] ath6kl: Unable to send get target info: -71 [ 188.395626][ T3647] ath6kl: Failed to init ath6kl core: -71 [ 188.395862][ T5798] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.667: bg 0: block 18: invalid block bitmap [ 188.417927][ T3647] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 188.418368][ T5798] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 188.427803][ T3647] usb 3-1: USB disconnect, device number 8 [ 188.439887][ T5798] EXT4-fs (loop1): 1 truncate cleaned up [ 188.447259][ T5798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 188.459119][ T5798] ext2 filesystem being mounted at /136/file0 supports timestamps until 2038 (0x7fffffff) [ 188.492585][ T3545] EXT4-fs (loop1): unmounting filesystem. [ 188.493725][ T3615] usb 4-1: Using ep0 maxpacket: 32 [ 188.609630][ T5804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.669'. [ 188.627864][ T3615] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 188.655843][ T3615] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.669713][ T3615] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 188.713850][ T3615] usb 4-1: string descriptor 0 read error: -22 [ 188.720130][ T3615] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.732470][ T3615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.243717][ T3615] cdc_ncm 4-1:1.0: bind() failure [ 189.273763][ T3615] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 189.307831][ T3615] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 189.333814][ T3615] usbtest: probe of 4-1:1.1 failed with error -71 [ 189.372197][ T3615] usb 4-1: USB disconnect, device number 13 [ 189.403695][ T26] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 189.510672][ T5830] loop1: detected capacity change from 0 to 2048 [ 189.671459][ T5830] loop1: p2 p3 p7 [ 189.773867][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.793919][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.811725][ T26] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 189.822106][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.837508][ T26] usb 3-1: config 0 descriptor?? [ 189.914181][ T5834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.681'. [ 190.569966][ T26] hid-led 0003:1D34:000A.0013: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 190.607723][ T26] hid-led 0003:1D34:000A.0013: Dream Cheeky Webmail Notifier initialized [ 191.093658][ T5468] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 191.151121][ T5859] device hsr0 entered promiscuous mode [ 191.159609][ T5858] device hsr0 left promiscuous mode [ 191.409436][ T5868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.695'. [ 191.494222][ T5468] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.543476][ T5468] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 191.583200][ T5468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.599357][ T5468] usb 1-1: config 0 descriptor?? [ 191.863675][ T5468] ath6kl: Failed to submit usb control message: -71 [ 191.872381][ T5468] ath6kl: unable to send the bmi data to the device: -71 [ 191.893226][ T5468] ath6kl: Unable to send get target info: -71 [ 191.908545][ T5468] ath6kl: Failed to init ath6kl core: -71 [ 191.947261][ T5468] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 191.973609][ T5468] usb 1-1: USB disconnect, device number 10 [ 192.003422][ T3592] usb 3-1: USB disconnect, device number 9 [ 192.391535][ T5897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.706'. [ 192.678014][ T5901] loop3: detected capacity change from 0 to 2048 [ 192.752868][ T5901] loop3: p2 p3 p7 [ 193.604368][ T26] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 194.014043][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.055945][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.093759][ T26] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 194.103007][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.116098][ T26] usb 3-1: config 0 descriptor?? [ 194.152940][ T5931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.718'. [ 194.177080][ T5933] device hsr0 entered promiscuous mode [ 194.187709][ T5932] device hsr0 left promiscuous mode [ 194.267060][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273567][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.273650][ T5468] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 194.687985][ T5468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.904976][ T26] hid-led 0003:1D34:000A.0014: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 194.919708][ T5468] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 194.921299][ T26] hid-led 0003:1D34:000A.0014: Dream Cheeky Webmail Notifier initialized [ 194.942840][ T5468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.972383][ T5468] usb 5-1: config 0 descriptor?? [ 195.243676][ T5468] ath6kl: Failed to submit usb control message: -71 [ 195.252059][ T5468] ath6kl: unable to send the bmi data to the device: -71 [ 195.259675][ T5468] ath6kl: Unable to send get target info: -71 [ 195.286476][ T5468] ath6kl: Failed to init ath6kl core: -71 [ 195.330901][ T5468] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 195.348404][ T5468] usb 5-1: USB disconnect, device number 18 [ 195.673704][ T5960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.731'. [ 195.799181][ T5965] device hsr0 entered promiscuous mode [ 195.826932][ T5963] device hsr0 left promiscuous mode [ 196.340001][ T3591] usb 3-1: USB disconnect, device number 10 [ 196.796524][ T5983] loop1: detected capacity change from 0 to 2048 [ 197.068878][ T5983] loop1: p2 p3 p7 [ 197.583165][ T5995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.744'. [ 197.649968][ T5998] device hsr0 entered promiscuous mode [ 197.657119][ T5997] device hsr0 left promiscuous mode [ 198.067473][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 198.097514][ T6009] device team0 entered promiscuous mode [ 198.103102][ T6009] device team_slave_1 entered promiscuous mode [ 198.172975][ T6008] device team0 left promiscuous mode [ 198.178870][ T6008] device team_slave_1 left promiscuous mode [ 198.423670][ T3591] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 198.823707][ T3591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.834726][ T3591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.845554][ T3591] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 198.854775][ T3591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.864191][ T3591] usb 1-1: config 0 descriptor?? [ 199.564647][ T3591] hid-led 0003:1D34:000A.0015: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 199.584927][ T3591] hid-led 0003:1D34:000A.0015: Dream Cheeky Webmail Notifier initialized [ 201.018897][ T3591] usb 1-1: USB disconnect, device number 11 [ 221.943595][ T3546] Bluetooth: hci0: command 0x0406 tx timeout [ 232.183653][ T3561] Bluetooth: hci4: command 0x0406 tx timeout [ 239.073649][ T6018] device hsr0 entered promiscuous mode [ 239.092831][ T6022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.755'. [ 239.113227][ T6014] device hsr0 left promiscuous mode [ 239.474500][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'. [ 239.522142][ T6038] device team0 entered promiscuous mode [ 239.545772][ T6038] device team_slave_1 entered promiscuous mode [ 239.593298][ T6037] device team0 left promiscuous mode [ 239.601168][ T6037] device team_slave_1 left promiscuous mode [ 240.003637][ T26] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 240.550295][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.576580][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.587219][ T26] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 240.607776][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.685561][ T26] usb 4-1: config 0 descriptor?? [ 241.005829][ T6053] loop2: detected capacity change from 0 to 2048 [ 241.390616][ T6062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.771'. [ 241.404624][ T26] hid-led 0003:1D34:000A.0016: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 241.446075][ T26] hid-led 0003:1D34:000A.0016: Dream Cheeky Webmail Notifier initialized [ 241.571580][ T6066] device hsr0 entered promiscuous mode [ 241.605423][ T6065] device hsr0 left promiscuous mode [ 241.780163][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 241.942214][ T6071] device team0 entered promiscuous mode [ 241.972052][ T6071] device team_slave_1 entered promiscuous mode [ 242.002850][ T6070] device team0 left promiscuous mode [ 242.015367][ T6070] device team_slave_1 left promiscuous mode [ 242.792279][ T3593] usb 4-1: USB disconnect, device number 14 [ 243.091871][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.783'. [ 243.113626][ T22] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 243.386901][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 243.398124][ T6109] device team0 entered promiscuous mode [ 243.403867][ T6109] device team_slave_1 entered promiscuous mode [ 243.414043][ T6108] device team0 left promiscuous mode [ 243.419642][ T6108] device team_slave_1 left promiscuous mode [ 243.626721][ T6113] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 262161 (only 8 groups) [ 244.003969][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 244.336473][ T22] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 244.354418][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.370391][ T22] usb 2-1: config 0 descriptor?? [ 244.624968][ T22] ath6kl: Failed to submit usb control message: -71 [ 244.644744][ T22] ath6kl: unable to send the bmi data to the device: -71 [ 244.654952][ T22] ath6kl: Unable to send get target info: -71 [ 244.676479][ T22] ath6kl: Failed to init ath6kl core: -71 [ 244.701780][ T22] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 244.711931][ T22] usb 2-1: USB disconnect, device number 17 [ 245.023575][ T3647] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 245.172462][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.796'. [ 245.270732][ T6136] device hsr0 entered promiscuous mode [ 245.298916][ T6135] device hsr0 left promiscuous mode [ 245.483831][ T3647] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.509519][ T3647] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.540156][ T3647] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 245.573260][ T3647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.613666][ T3647] usb 3-1: config 0 descriptor?? [ 245.847301][ T6144] loop0: detected capacity change from 0 to 2048 [ 246.505081][ T3647] hid-led 0003:1D34:000A.0017: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 246.523448][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.803'. [ 246.608728][ T3647] hid-led 0003:1D34:000A.0017: Dream Cheeky Webmail Notifier initialized [ 246.869082][ T3592] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 247.213647][ T3592] usb 2-1: Using ep0 maxpacket: 32 [ 247.304366][ T6167] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 262161 (only 8 groups) [ 247.353902][ T3592] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 247.959861][ T3592] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 247.977816][ T6174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.809'. [ 247.998628][ T3592] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 248.010393][ T3592] usb 2-1: config 1 has no interface number 0 [ 248.016575][ T3592] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.048112][ T3592] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 248.070572][ T3592] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 248.078129][ T6176] device hsr0 entered promiscuous mode [ 248.081226][ T3592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.086495][ T6175] device hsr0 left promiscuous mode [ 248.112072][ T3593] usb 3-1: USB disconnect, device number 11 [ 248.157049][ T3592] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 248.203595][ T3647] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 248.230786][ T6185] loop4: detected capacity change from 0 to 512 [ 248.240256][ T6185] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 248.281799][ T6185] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 248.296733][ T6185] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.814: bg 0: block 18: invalid block bitmap [ 248.316308][ T6185] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 248.325709][ T6185] EXT4-fs (loop4): 1 truncate cleaned up [ 248.331384][ T6185] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 248.340879][ T6185] ext2 filesystem being mounted at /95/file0 supports timestamps until 2038 (0x7fffffff) [ 248.376838][ T4372] EXT4-fs (loop4): unmounting filesystem. [ 248.618825][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.820'. [ 248.734745][ T3592] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 248.833679][ T3647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 248.847096][ T3647] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 248.921986][ T6206] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 262161 (only 8 groups) [ 249.521872][ T3647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.531678][ T3647] usb 4-1: config 0 descriptor?? [ 249.783789][ T3592] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 249.816205][ T3647] ath6kl: Failed to submit usb control message: -71 [ 249.825055][ T3647] ath6kl: unable to send the bmi data to the device: -71 [ 249.845974][ T3647] ath6kl: Unable to send get target info: -71 [ 249.864716][ T3647] ath6kl: Failed to init ath6kl core: -71 [ 249.908252][ T3647] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 249.934917][ T3647] usb 4-1: USB disconnect, device number 15 [ 250.263544][ T3615] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 250.356635][ T6216] loop0: detected capacity change from 0 to 2048 [ 250.430501][ T6218] device hsr0 entered promiscuous mode [ 250.472659][ T6217] device hsr0 left promiscuous mode [ 250.491284][ T6216] loop0: p2 p3 p7 [ 250.643670][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.680389][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.713151][ T3615] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 250.732585][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.761586][ T3615] usb 3-1: config 0 descriptor?? [ 250.775375][ T26] usb 2-1: USB disconnect, device number 18 [ 250.805960][ T26] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 251.006400][ T6227] loop4: detected capacity change from 0 to 512 [ 251.069767][ T6227] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 251.089809][ T6227] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 251.115793][ T6227] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.828: bg 0: block 18: invalid block bitmap [ 251.131042][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 251.202754][ T6227] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 251.231129][ T6227] EXT4-fs (loop4): 1 truncate cleaned up [ 251.243252][ T6227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 251.273760][ T6227] ext2 filesystem being mounted at /98/file0 supports timestamps until 2038 (0x7fffffff) [ 252.106989][ T26] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 252.130069][ T3615] hid-led 0003:1D34:000A.0018: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 252.147384][ T4372] EXT4-fs (loop4): unmounting filesystem. [ 252.178465][ T3615] hid-led 0003:1D34:000A.0018: Dream Cheeky Webmail Notifier initialized [ 252.329352][ T6242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.833'. [ 252.484380][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.514002][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.577722][ T26] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 252.587503][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.602906][ T26] usb 2-1: config 0 descriptor?? [ 252.674910][ T6252] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 262161 (only 8 groups) [ 253.405845][ T3593] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 253.611781][ T3592] usb 3-1: USB disconnect, device number 12 [ 253.661910][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.841'. [ 253.805154][ T3593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 253.836630][ T3593] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 253.853944][ T3593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.871218][ T3593] usb 4-1: config 0 descriptor?? [ 253.878904][ T6270] loop0: detected capacity change from 0 to 512 [ 254.036653][ T6270] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 254.126013][ T6270] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 254.293954][ T6270] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.842: bg 0: block 18: invalid block bitmap [ 254.460821][ T6270] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 254.494181][ T6270] EXT4-fs (loop0): 1 truncate cleaned up [ 254.499937][ T6270] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 254.512575][ T3593] ath6kl: Failed to submit usb control message: -71 [ 254.519301][ T3593] ath6kl: unable to send the bmi data to the device: -71 [ 254.526723][ T6270] ext2 filesystem being mounted at /123/file0 supports timestamps until 2038 (0x7fffffff) [ 254.536884][ T3593] ath6kl: Unable to send get target info: -71 [ 254.603807][ T3593] ath6kl: Failed to init ath6kl core: -71 [ 254.706265][ C0] hrtimer: interrupt took 8995794 ns [ 254.733685][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 254.739711][ T26] usbhid: probe of 2-1:0.0 failed with error -71 [ 254.766160][ T26] usb 2-1: USB disconnect, device number 19 [ 254.783502][ T3593] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 254.795579][ T4530] EXT4-fs (loop0): unmounting filesystem. [ 254.808382][ T3593] usb 4-1: USB disconnect, device number 16 [ 256.042493][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.049398][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.237406][ T6281] loop1: detected capacity change from 0 to 2048 [ 256.752508][ T6289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.847'. [ 257.451189][ T6292] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 262161 (only 8 groups) [ 259.628801][ T3561] Bluetooth: hci5: command 0x0406 tx timeout [ 261.925723][ T935] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 262.296977][ T935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.318219][ T935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.340441][ T935] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 262.365889][ T935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.398362][ T935] usb 5-1: config 0 descriptor?? [ 263.098946][ T935] hid-led 0003:1D34:000A.0019: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 263.122486][ T935] hid-led 0003:1D34:000A.0019: Dream Cheeky Webmail Notifier initialized [ 264.471537][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 270.614104][ T3546] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.624725][ T3561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.649596][ T3546] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.659992][ T3561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.667734][ T3561] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.675024][ T3546] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.333091][ T6320] chnl_net:caif_netlink_parms(): no params data found [ 272.484615][ T3546] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.503655][ T3546] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.511736][ T3546] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.519559][ T3546] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.527209][ T3546] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.534643][ T3546] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.743656][ T3550] Bluetooth: hci2: command tx timeout [ 274.154240][ T3546] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.162229][ T3546] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.170005][ T3546] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.178608][ T3546] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.187448][ T3546] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.194707][ T3546] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.676381][ T3546] Bluetooth: hci2: command tx timeout [ 275.681925][ T3550] Bluetooth: hci6: command tx timeout [ 276.491206][ T3561] Bluetooth: hci7: command tx timeout [ 276.666428][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.859'. [ 277.713670][ T3561] Bluetooth: hci6: command tx timeout [ 277.713676][ T3550] Bluetooth: hci2: command tx timeout [ 277.804947][ T6345] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 262161 (only 8 groups) [ 278.376280][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 278.553574][ T3546] Bluetooth: hci7: command tx timeout [ 278.639174][ T6344] device team0 entered promiscuous mode [ 278.674633][ T6344] device team_slave_1 entered promiscuous mode [ 278.681107][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.688188][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.695901][ T6320] device bridge_slave_0 entered promiscuous mode [ 278.991631][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.999276][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.007347][ T6320] device bridge_slave_1 entered promiscuous mode [ 279.685420][ T6320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.697030][ T6320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.716316][ T6343] device team0 left promiscuous mode [ 279.721632][ T6343] device team_slave_1 left promiscuous mode [ 279.783706][ T3546] Bluetooth: hci2: command tx timeout [ 279.934996][ T6356] loop2: detected capacity change from 0 to 2048 [ 280.550341][ T3546] Bluetooth: hci6: command tx timeout [ 280.590120][ T3550] Bluetooth: hci7: command tx timeout [ 280.616701][ T6320] team0: Port device team_slave_0 added [ 280.625271][ T6320] team0: Port device team_slave_1 added [ 282.583649][ T3330] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 283.084139][ T3550] Bluetooth: hci6: command tx timeout [ 283.084173][ T3546] Bluetooth: hci7: command tx timeout [ 283.873766][ T3330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.893527][ T3330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.903323][ T3330] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 284.127618][ T3330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.156226][ T3330] usb 2-1: config 0 descriptor?? [ 284.692535][ T3779] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.709114][ T3615] usb 5-1: USB disconnect, device number 19 [ 284.738107][ T6333] chnl_net:caif_netlink_parms(): no params data found [ 284.762977][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.770047][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.802592][ T6320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.426082][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.433094][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.887657][ T6320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.953615][ T3330] usbhid 2-1:0.0: can't add hid device: -71 [ 285.959611][ T3330] usbhid: probe of 2-1:0.0 failed with error -71 [ 285.976386][ T3330] usb 2-1: USB disconnect, device number 20 [ 286.588806][ T3779] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.607108][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.614220][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.622322][ T6333] device bridge_slave_0 entered promiscuous mode [ 288.263432][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.281001][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.296237][ T6333] device bridge_slave_1 entered promiscuous mode [ 288.328200][ T6320] device hsr_slave_0 entered promiscuous mode [ 288.335840][ T6320] device hsr_slave_1 entered promiscuous mode [ 288.342572][ T6320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.350141][ T6320] Cannot create hsr debugfs directory [ 289.046672][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.868'. [ 289.057946][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.083100][ T6328] chnl_net:caif_netlink_parms(): no params data found [ 289.107767][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.840680][ T6333] team0: Port device team_slave_0 added [ 289.878290][ T3779] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.892024][ T6333] team0: Port device team_slave_1 added [ 290.810586][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 291.519691][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.533503][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.579209][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.601768][ T6393] device team0 entered promiscuous mode [ 291.610675][ T6393] device team_slave_1 entered promiscuous mode [ 291.617684][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.634563][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.674835][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.396848][ T6390] device team0 left promiscuous mode [ 292.402177][ T6390] device team_slave_1 left promiscuous mode [ 292.447326][ T3779] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.442824][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.458474][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.475348][ T6328] device bridge_slave_0 entered promiscuous mode [ 295.485128][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.492281][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.500426][ T6328] device bridge_slave_1 entered promiscuous mode [ 296.518860][ T6328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.534712][ T6328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.587039][ T6333] device hsr_slave_0 entered promiscuous mode [ 296.597227][ T6333] device hsr_slave_1 entered promiscuous mode [ 297.601015][ T3615] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 297.624971][ T6333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.632579][ T6333] Cannot create hsr debugfs directory [ 297.643197][ T6328] team0: Port device team_slave_0 added [ 297.657390][ T6328] team0: Port device team_slave_1 added [ 298.696040][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.703013][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.728904][ T6328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.761873][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.833568][ T3615] usb 3-1: device not accepting address 13, error -71 [ 299.835207][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.866880][ T6328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.886238][ T6411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.877'. [ 302.875568][ T6328] device hsr_slave_0 entered promiscuous mode [ 302.897949][ T6328] device hsr_slave_1 entered promiscuous mode [ 302.904676][ T6328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.913339][ T6328] Cannot create hsr debugfs directory [ 302.975983][ T6414] loop1: detected capacity change from 0 to 32768 [ 308.816858][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.885'. [ 308.870542][ T6436] team0: Port device wlan1 added [ 308.880036][ T6435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.211384][ T3615] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 310.926917][ T6438] loop1: detected capacity change from 0 to 128 [ 310.933630][ T3615] usb 3-1: Using ep0 maxpacket: 32 [ 311.603562][ T3615] usb 3-1: unable to read config index 0 descriptor/all [ 311.610522][ T3615] usb 3-1: can't read configurations, error -71 [ 314.943770][ T3592] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 316.290294][ T26] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 316.991689][ T6333] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.083678][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 317.622046][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.628460][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.693813][ T26] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 317.710759][ T26] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 318.333929][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 318.343004][ T26] usb 3-1: config 1 has no interface number 0 [ 318.386229][ T26] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.423910][ T26] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 318.449717][ T26] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 318.467846][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.119239][ T26] usb 3-1: can't set config #1, error -71 [ 319.144786][ T26] usb 3-1: USB disconnect, device number 17 [ 325.163478][ C1] sched: RT throttling activated [ 327.052587][ T3550] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.071279][ T3550] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.081148][ T3550] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.091215][ T3550] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.098766][ T3550] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 327.106300][ T3561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.916935][ T6333] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.939683][ T6471] loop2: detected capacity change from 0 to 128 [ 329.143626][ T3546] Bluetooth: hci0: command tx timeout [ 329.306382][ T6473] loop1: detected capacity change from 0 to 32768 [ 329.315532][ T6473] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.897 (6473) [ 330.156217][ T26] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 330.168533][ T3779] bridge0: port 3(erspan0) entered disabled state [ 330.185966][ T3779] device erspan0 left promiscuous mode [ 330.191497][ T3779] bridge0: port 3(erspan0) entered disabled state [ 330.219535][ T6473] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.245231][ T6473] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 330.273877][ T6473] BTRFS info (device loop1): using free space tree [ 330.523723][ T26] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 330.534332][ T26] usb 3-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 330.543369][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.553133][ T26] usb 3-1: config 0 descriptor?? [ 330.606321][ T26] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 330.814823][ T26] usb 3-1: USB disconnect, device number 18 [ 331.062813][ T6473] BTRFS info (device loop1): enabling ssd optimizations [ 331.078471][ T6468] chnl_net:caif_netlink_parms(): no params data found [ 331.733550][ T3546] Bluetooth: hci0: command tx timeout [ 331.784318][ T6333] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.821790][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.190425][ T3546] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.193041][ T3546] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.194129][ T3546] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.195481][ T3546] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.196550][ T3546] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.196826][ T3546] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.326662][ T3561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.329205][ T3561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.329980][ T3561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.330760][ T3561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.331274][ T3561] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.331532][ T3561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.066419][ T3546] Bluetooth: hci0: command tx timeout [ 334.148896][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.157256][ T3545] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 334.168745][ T6468] device bridge_slave_0 entered promiscuous mode [ 335.211657][ T3561] Bluetooth: hci4: command tx timeout [ 335.213973][ T3546] Bluetooth: hci5: command tx timeout [ 335.276897][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.197001][ T3546] Bluetooth: hci0: command tx timeout [ 336.209426][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.226380][ T6468] device bridge_slave_1 entered promiscuous mode [ 337.269948][ T6468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.283774][ T6468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.313481][ T3546] Bluetooth: hci5: command tx timeout [ 338.193751][ T3546] Bluetooth: hci4: command tx timeout [ 338.195802][ T3588] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 338.230313][ T6333] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.279008][ T6468] team0: Port device team_slave_0 added [ 338.289689][ T6468] team0: Port device team_slave_1 added [ 339.309008][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.323552][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.384616][ T3546] Bluetooth: hci5: command tx timeout [ 339.403578][ T6468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.561332][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.578797][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.660630][ T6468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.478210][ T3546] Bluetooth: hci4: command tx timeout [ 340.491578][ T6524] loop2: detected capacity change from 0 to 2048 [ 341.716548][ T3546] Bluetooth: hci5: command tx timeout [ 342.804851][ T3546] Bluetooth: hci4: command tx timeout [ 342.826878][ T6468] device hsr_slave_0 entered promiscuous mode [ 342.833913][ T6468] device hsr_slave_1 entered promiscuous mode [ 342.840630][ T6468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.848202][ T6468] Cannot create hsr debugfs directory [ 342.871755][ T6499] chnl_net:caif_netlink_parms(): no params data found [ 343.918390][ T6501] chnl_net:caif_netlink_parms(): no params data found [ 346.847038][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.854275][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.862058][ T6499] device bridge_slave_0 entered promiscuous mode [ 348.998046][ T6328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.669053][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.676181][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.684381][ T6499] device bridge_slave_1 entered promiscuous mode [ 349.691334][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.703650][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.718011][ T6501] device bridge_slave_0 entered promiscuous mode [ 350.463773][ T6501] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.470843][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.504827][ T6501] device bridge_slave_1 entered promiscuous mode [ 350.519849][ T6499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.531383][ T6499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.607164][ T6547] loop2: detected capacity change from 0 to 32768 [ 350.608293][ T6547] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.906 (6547) [ 351.305519][ T6499] team0: Port device team_slave_0 added [ 351.313590][ T6499] team0: Port device team_slave_1 added [ 351.333284][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.340233][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.838162][ T6499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.854827][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.861772][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.887714][ T6499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.923562][ T6547] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 352.246739][ T6547] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 352.260897][ T6501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.277184][ T6547] BTRFS info (device loop2): using free space tree [ 352.298727][ T6328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.758990][ T6547] BTRFS error (device loop2): open_ctree failed [ 352.770954][ T6499] device hsr_slave_0 entered promiscuous mode [ 352.777869][ T6499] device hsr_slave_1 entered promiscuous mode [ 353.263349][ T6499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.270952][ T6499] Cannot create hsr debugfs directory [ 353.278298][ T6501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.976729][ T6328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.630742][ T6501] team0: Port device team_slave_0 added [ 354.645987][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 354.893724][ T26] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 355.549848][ T6501] team0: Port device team_slave_1 added [ 355.564109][ T3546] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 355.573578][ T3546] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 355.581593][ T3546] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 355.592263][ T3546] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 355.609927][ T3546] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 355.617416][ T3546] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.683627][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 355.803875][ T26] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 355.812242][ T26] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 355.843638][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 355.852605][ T26] usb 3-1: config 1 has no interface number 0 [ 355.893499][ T26] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.923543][ T26] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 355.963715][ T26] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 355.972772][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.066115][ T26] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 356.826321][ T3779] device hsr_slave_0 left promiscuous mode [ 356.832802][ T3779] device hsr_slave_1 left promiscuous mode [ 356.840038][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.847484][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.855246][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.863723][ T3779] device bridge_slave_1 left promiscuous mode [ 356.869973][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.878468][ T3779] device bridge_slave_0 left promiscuous mode [ 356.884626][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.174430][ T26] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 357.607967][ T3779] device veth1_macvtap left promiscuous mode [ 357.614085][ T3779] device veth0_macvtap left promiscuous mode [ 357.620109][ T3779] device veth1_vlan left promiscuous mode [ 357.625858][ T3779] device veth0_vlan left promiscuous mode [ 357.703605][ T3546] Bluetooth: hci7: command tx timeout [ 358.795430][ T26] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 358.869670][ T3779] team0 (unregistering): Port device team_slave_1 removed [ 359.217179][ T3779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.250292][ T3779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.786976][ T3546] Bluetooth: hci7: command tx timeout [ 360.151897][ T3779] bond0 (unregistering): Released all slaves [ 360.665786][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.672755][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.698628][ T6501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.711122][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.718153][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.744030][ T6501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.124599][ T6328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.167925][ T6566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.176011][ T6566] bond0: (slave bond1): Enslaving as an active interface with an up link [ 361.209955][ T3330] usb 3-1: USB disconnect, device number 20 [ 361.216729][ T3330] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 361.569016][ T6501] device hsr_slave_0 entered promiscuous mode [ 361.575851][ T6501] device hsr_slave_1 entered promiscuous mode [ 361.863673][ T3550] Bluetooth: hci7: command tx timeout [ 363.901937][ T6569] chnl_net:caif_netlink_parms(): no params data found [ 364.685739][ T3550] Bluetooth: hci7: command tx timeout [ 367.265706][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 367.299534][ T6569] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.306735][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.314937][ T6569] device bridge_slave_0 entered promiscuous mode [ 367.323280][ T6587] device team0 entered promiscuous mode [ 367.335535][ T6587] device team_slave_1 entered promiscuous mode [ 367.342020][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.349212][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.160887][ T6569] device bridge_slave_1 entered promiscuous mode [ 368.180031][ T6586] device team0 left promiscuous mode [ 368.185356][ T6586] device team_slave_1 left promiscuous mode [ 368.229445][ T6569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.259230][ T6569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.105568][ T6569] team0: Port device team_slave_0 added [ 369.124358][ T6569] team0: Port device team_slave_1 added [ 369.986227][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.993201][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.019177][ T6569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.032268][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.039236][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.065139][ T6569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.280179][ T6590] loop2: detected capacity change from 0 to 32768 [ 370.281380][ T6590] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.914 (6590) [ 371.191786][ T6590] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 371.220285][ T6569] device hsr_slave_0 entered promiscuous mode [ 371.226957][ T6590] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 371.236606][ T6590] BTRFS info (device loop2): using free space tree [ 372.286588][ T6569] device hsr_slave_1 entered promiscuous mode [ 372.293416][ T6569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.301002][ T6569] Cannot create hsr debugfs directory [ 372.362361][ T6590] BTRFS error (device loop2): open_ctree failed [ 378.889703][ T3592] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 378.890313][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.904950][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.837337][ T6618] loop2: detected capacity change from 0 to 128 [ 385.332440][ T6468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 386.531245][ T6468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 386.577944][ T6468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 386.603165][ T6468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.798899][ T6499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.808423][ T6501] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 389.740276][ T3550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.750983][ T3550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.759254][ T3550] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.768093][ T3550] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.775630][ T3550] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 389.782976][ T3550] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 390.575762][ T6499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 390.633402][ T6569] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.311942][ T6501] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 391.342487][ T6499] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 391.356517][ T6499] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 391.372692][ T6501] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 391.385653][ T6501] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 392.104020][ T3550] Bluetooth: hci1: command tx timeout [ 393.299382][ T3546] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 393.309488][ T3546] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 393.317832][ T3546] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 393.325762][ T3546] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 393.334480][ T3546] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 393.341877][ T3546] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.193483][ T3550] Bluetooth: hci1: command tx timeout [ 395.431737][ T3546] Bluetooth: hci0: command tx timeout [ 395.447119][ T6569] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.495846][ T3546] Bluetooth: hci1: command tx timeout [ 396.522800][ T3779] tipc: Disabling bearer [ 396.528111][ T3779] tipc: Left network mode [ 396.564513][ T3546] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.583048][ T3779] tipc: Disabling bearer [ 396.588361][ T3779] tipc: Left network mode [ 396.614835][ T3546] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.625432][ T3546] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 396.633283][ T3546] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.642280][ T3546] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 396.650941][ T3546] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 397.594227][ T3550] Bluetooth: hci0: command tx timeout [ 398.535718][ T3550] Bluetooth: hci1: command tx timeout [ 398.633921][ T6569] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.453562][ T3546] Bluetooth: hci2: command tx timeout [ 399.466239][ T6632] chnl_net:caif_netlink_parms(): no params data found [ 399.507481][ T6621] chnl_net:caif_netlink_parms(): no params data found [ 399.633519][ T3550] Bluetooth: hci0: command tx timeout [ 400.176446][ T6635] chnl_net:caif_netlink_parms(): no params data found [ 400.522927][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.530014][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.537798][ T6621] device bridge_slave_0 entered promiscuous mode [ 400.545341][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.552386][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.560233][ T6621] device bridge_slave_1 entered promiscuous mode [ 400.583699][ T6632] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.590753][ T6632] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.598541][ T6632] device bridge_slave_0 entered promiscuous mode [ 400.844820][ T6632] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.851901][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.859786][ T6632] device bridge_slave_1 entered promiscuous mode [ 400.918638][ T6621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.929507][ T6621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.166034][ T6621] team0: Port device team_slave_0 added [ 401.173201][ T6621] team0: Port device team_slave_1 added [ 401.189334][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.196283][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.222128][ T6621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.233948][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.240875][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.488667][ T6621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.496253][ T3550] Bluetooth: hci2: command tx timeout [ 401.510723][ T6632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.521691][ T6632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.583011][ T6632] team0: Port device team_slave_0 added [ 401.716694][ T3546] Bluetooth: hci0: command tx timeout [ 401.904408][ T3546] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 401.906767][ T3546] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 401.908101][ T3546] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 401.908892][ T3546] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 401.909959][ T3546] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 401.910235][ T3546] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.399012][ T6569] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.411069][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.418210][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.426061][ T6635] device bridge_slave_0 entered promiscuous mode [ 402.433688][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.440733][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.448462][ T6635] device bridge_slave_1 entered promiscuous mode [ 402.456477][ T6632] team0: Port device team_slave_1 added [ 402.796101][ T6621] device hsr_slave_0 entered promiscuous mode [ 403.400258][ T6621] device hsr_slave_1 entered promiscuous mode [ 403.418455][ T6621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.433412][ T6621] Cannot create hsr debugfs directory [ 404.158489][ T3550] Bluetooth: hci2: command tx timeout [ 404.167400][ T3550] Bluetooth: hci4: command tx timeout [ 404.918677][ T6635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.959340][ T6632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.966376][ T6632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.400826][ T6632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.442867][ T6635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.472309][ T6632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.481375][ T6632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.974903][ T6632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.057585][ T6635] team0: Port device team_slave_0 added [ 406.183618][ T3550] Bluetooth: hci4: command tx timeout [ 406.189060][ T3550] Bluetooth: hci2: command tx timeout [ 406.493803][ T6635] team0: Port device team_slave_1 added [ 406.518308][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 407.484958][ T6632] device hsr_slave_0 entered promiscuous mode [ 407.504334][ T6632] device hsr_slave_1 entered promiscuous mode [ 407.523634][ T6632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.531241][ T6632] Cannot create hsr debugfs directory [ 407.910795][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.917776][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.943654][ T6635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.206346][ T6569] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.263560][ T3550] Bluetooth: hci4: command tx timeout [ 408.263667][ T6569] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 408.676969][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.685427][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.712347][ T6635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.166552][ T6569] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 409.186670][ T6569] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 409.208510][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.216133][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.730100][ T6653] device bridge_slave_0 entered promiscuous mode [ 410.145978][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.153126][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.162106][ T6653] device bridge_slave_1 entered promiscuous mode [ 410.193705][ T6635] device hsr_slave_0 entered promiscuous mode [ 410.200445][ T6635] device hsr_slave_1 entered promiscuous mode [ 410.207371][ T6635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.215063][ T6635] Cannot create hsr debugfs directory [ 410.920114][ T3546] Bluetooth: hci4: command tx timeout [ 410.975540][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.998535][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.932628][ T6653] team0: Port device team_slave_0 added [ 411.944009][ T6653] team0: Port device team_slave_1 added [ 412.854732][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.861712][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.897198][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.710681][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.718378][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.744548][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.511465][ T6653] device hsr_slave_0 entered promiscuous mode [ 414.518303][ T6653] device hsr_slave_1 entered promiscuous mode [ 414.524862][ T6653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.533156][ T6653] Cannot create hsr debugfs directory [ 417.078858][ T3550] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 417.089837][ T3550] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 417.100183][ T3561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 417.113630][ T3561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 417.133732][ T3561] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 417.141068][ T3561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 419.019022][ T6661] chnl_net:caif_netlink_parms(): no params data found [ 419.519009][ T6661] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.526313][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.534337][ T6661] device bridge_slave_0 entered promiscuous mode [ 419.542286][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.550915][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.558940][ T6661] device bridge_slave_1 entered promiscuous mode [ 419.578076][ T6661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.590669][ T6661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.911093][ T6661] team0: Port device team_slave_0 added [ 419.918762][ T6661] team0: Port device team_slave_1 added [ 419.936324][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.943280][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.971969][ T6661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.984828][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.991793][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.017905][ T6661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.242163][ T3546] Bluetooth: hci3: command tx timeout [ 420.292200][ T6661] device hsr_slave_0 entered promiscuous mode [ 420.301220][ T6661] device hsr_slave_1 entered promiscuous mode [ 420.307827][ T6661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.315525][ T6661] Cannot create hsr debugfs directory [ 420.653258][ T6621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 420.663300][ T6621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 420.671798][ T6621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 421.385695][ T6621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 421.442812][ T6621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.454713][ T6511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 421.462609][ T6511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.474721][ T6621] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.486162][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 421.496310][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 421.504853][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.511934][ T6508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.538678][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 421.547659][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 421.556497][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.565118][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.572200][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.579959][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 421.588868][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 421.598401][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 421.607825][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.616570][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 421.625531][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.641779][ T6621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.656706][ T6621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.670624][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.679343][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 421.688171][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.698378][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.707436][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.720216][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 422.263814][ T3546] Bluetooth: hci3: command tx timeout [ 422.909034][ T3779] bridge0: port 3(erspan0) entered disabled state [ 422.965320][ T3779] device erspan0 left promiscuous mode [ 422.970904][ T3779] bridge0: port 3(erspan0) entered disabled state [ 423.606836][ T6621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.653717][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.661266][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 424.340358][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 424.344642][ T3546] Bluetooth: hci3: command tx timeout [ 424.349252][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 424.368070][ T6621] device veth0_vlan entered promiscuous mode [ 424.384971][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 424.393195][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 424.416186][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 424.432425][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 424.444895][ T6621] device veth1_vlan entered promiscuous mode [ 424.469918][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 424.478780][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 424.487158][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 424.495900][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 424.506896][ T6621] device veth0_macvtap entered promiscuous mode [ 424.519847][ T6621] device veth1_macvtap entered promiscuous mode [ 424.537383][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.549287][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.559393][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.571400][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.581399][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.593549][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.605125][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.613133][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 424.622175][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 424.630604][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 424.639668][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 424.651837][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.661228][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 424.672785][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 424.684319][ T6621] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.693034][ T6621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.704215][ T6621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.712938][ T6621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.321431][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.333510][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.348389][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.361983][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 425.388884][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.401336][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 427.048007][ T3546] Bluetooth: hci3: command tx timeout [ 434.725206][ T3591] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 435.810904][ T3779] team0: Port device wlan1 removed [ 440.450880][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.457280][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.035243][ T6691] loop0: detected capacity change from 0 to 2048 [ 449.679398][ T6653] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.854252][ T3546] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.864522][ T3546] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.872791][ T3546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.880600][ T3546] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.890360][ T3550] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 452.897798][ T3546] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 452.960947][ T3550] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 452.971106][ T3546] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 452.979905][ T3546] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 452.989196][ T3550] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 452.997938][ T3550] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 453.005385][ T3546] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 453.424879][ T6700] chnl_net:caif_netlink_parms(): no params data found [ 453.470065][ T6702] chnl_net:caif_netlink_parms(): no params data found [ 454.590328][ T3546] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 454.613762][ T3550] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 454.622315][ T3550] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 454.631792][ T3550] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 454.639449][ T3550] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 454.646810][ T3550] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 456.016238][ T3561] Bluetooth: hci5: command tx timeout [ 456.022425][ T3561] Bluetooth: hci6: command tx timeout [ 456.079045][ T6700] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.093607][ T6700] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.112459][ T6700] device bridge_slave_0 entered promiscuous mode [ 457.460033][ T3561] Bluetooth: hci7: command tx timeout [ 458.797336][ T3561] Bluetooth: hci6: command tx timeout [ 458.803269][ T3561] Bluetooth: hci5: command tx timeout [ 458.869792][ T6700] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.893998][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.902437][ T6700] device bridge_slave_1 entered promiscuous mode [ 458.929033][ T6702] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.936702][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.954739][ T6702] device bridge_slave_0 entered promiscuous mode [ 458.964948][ T6702] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.983617][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.003808][ T6702] device bridge_slave_1 entered promiscuous mode [ 460.137304][ T3561] Bluetooth: hci7: command tx timeout [ 461.240562][ T3561] Bluetooth: hci5: command tx timeout [ 461.246227][ T3561] Bluetooth: hci6: command tx timeout [ 461.302677][ T6653] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.414307][ T3550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.424336][ T3550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.434226][ T3550] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.443875][ T3550] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.452735][ T3550] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 461.460171][ T3550] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 462.393025][ T3561] Bluetooth: hci7: command tx timeout [ 462.434706][ T6702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.449317][ T6702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.480898][ T6700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.457570][ T3561] Bluetooth: hci5: command tx timeout [ 463.461704][ T6700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.462981][ T3561] Bluetooth: hci6: command tx timeout [ 463.502050][ T6702] team0: Port device team_slave_0 added [ 463.543821][ T3550] Bluetooth: hci1: command tx timeout [ 463.566108][ T6702] team0: Port device team_slave_1 added [ 464.524856][ T3550] Bluetooth: hci7: command tx timeout [ 464.559797][ T6700] team0: Port device team_slave_0 added [ 464.583171][ T6702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.591313][ T6702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.621000][ T6702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.634238][ T6702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.641196][ T6702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.675312][ T6702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.487004][ T6700] team0: Port device team_slave_1 added [ 465.517548][ T6702] device hsr_slave_0 entered promiscuous mode [ 465.535644][ T6702] device hsr_slave_1 entered promiscuous mode [ 465.542218][ T6702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.549771][ T6702] Cannot create hsr debugfs directory [ 465.569433][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.577328][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.604692][ T6700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.627071][ T3550] Bluetooth: hci1: command tx timeout [ 466.462566][ T6653] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.486643][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.503663][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.553523][ T6700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.600472][ T6712] chnl_net:caif_netlink_parms(): no params data found [ 468.579371][ T3550] Bluetooth: hci1: command tx timeout [ 468.628963][ T6700] device hsr_slave_0 entered promiscuous mode [ 468.636065][ T6700] device hsr_slave_1 entered promiscuous mode [ 468.642851][ T6700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.650427][ T6700] Cannot create hsr debugfs directory [ 470.809218][ T3561] Bluetooth: hci1: command tx timeout [ 470.891612][ T6718] chnl_net:caif_netlink_parms(): no params data found [ 472.008411][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.015520][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.023863][ T6712] device bridge_slave_0 entered promiscuous mode [ 473.636809][ T6653] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.651502][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.658713][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.667210][ T6712] device bridge_slave_1 entered promiscuous mode [ 478.337167][ T6712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.375271][ T6712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.452873][ T3550] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 479.462859][ T3550] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 479.472335][ T3550] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 479.480208][ T3550] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 479.487879][ T3550] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 479.495383][ T3550] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 481.804468][ T3561] Bluetooth: hci8: command tx timeout [ 485.114494][ T3550] Bluetooth: hci8: command tx timeout [ 485.177821][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.193486][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.201395][ T6718] device bridge_slave_0 entered promiscuous mode [ 485.244924][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.252053][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.284710][ T6718] device bridge_slave_1 entered promiscuous mode [ 487.173638][ T3561] Bluetooth: hci8: command tx timeout [ 489.493213][ T3561] Bluetooth: hci8: command tx timeout [ 489.585323][ T6712] team0: Port device team_slave_0 added [ 494.096563][ T6718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.115459][ T6712] team0: Port device team_slave_1 added [ 499.297798][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.304777][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.330835][ T6712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.345120][ T6718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.298500][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.304904][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.320225][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.343573][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.386302][ T6712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.591295][ T3550] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 513.601371][ T3550] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 513.609959][ T3550] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 513.624219][ T3550] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 513.633916][ T3550] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 513.641266][ T3550] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.054402][ T6735] chnl_net:caif_netlink_parms(): no params data found [ 514.161217][ T3550] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 514.172068][ T3550] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 514.180559][ T3550] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 514.188641][ T3550] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 514.196430][ T3550] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 514.203862][ T3550] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 515.134418][ T3550] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 515.145904][ T3550] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 515.154438][ T3550] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 515.163613][ T3550] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 515.171193][ T3550] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 515.178618][ T3550] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 515.703649][ T3561] Bluetooth: hci4: command tx timeout [ 516.264212][ T3561] Bluetooth: hci9: command tx timeout [ 517.223794][ T6745] Bluetooth: hci10: command tx timeout [ 522.157605][ T6745] Bluetooth: hci4: command tx timeout [ 522.163058][ T6745] Bluetooth: hci9: command tx timeout [ 522.175599][ T3550] Bluetooth: hci0: command 0x0406 tx timeout [ 522.181637][ T3550] Bluetooth: hci2: command 0x0406 tx timeout [ 522.188862][ T3561] Bluetooth: hci10: command tx timeout [ 522.644094][ T3546] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 522.654077][ T3546] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 522.663531][ T3546] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 522.684017][ T3546] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 522.691671][ T3546] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 522.699276][ T3546] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 524.264390][ T6746] Bluetooth: hci9: command tx timeout [ 524.269930][ T6746] Bluetooth: hci10: command tx timeout [ 524.275794][ T3546] Bluetooth: hci4: command tx timeout [ 524.743614][ T6746] Bluetooth: hci11: command tx timeout [ 526.344445][ T6746] Bluetooth: hci10: command tx timeout [ 526.349991][ T6746] Bluetooth: hci4: command tx timeout [ 526.357404][ T6745] Bluetooth: hci9: command tx timeout [ 526.823740][ T6746] Bluetooth: hci11: command tx timeout [ 533.429093][ T6746] Bluetooth: hci11: command tx timeout [ 535.463599][ T6746] Bluetooth: hci11: command tx timeout [ 536.884397][ T3546] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 536.895191][ T3546] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 536.904429][ T3546] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 536.912348][ T3546] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 536.920011][ T3546] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 536.927505][ T3546] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 538.983631][ T6746] Bluetooth: hci12: command tx timeout [ 547.066345][ T6746] Bluetooth: hci12: command tx timeout [ 549.144179][ T6746] Bluetooth: hci3: command 0x0406 tx timeout [ 549.150228][ T6746] Bluetooth: hci12: command tx timeout [ 551.223987][ T6746] Bluetooth: hci12: command tx timeout [ 582.699046][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 582.736453][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 596.851617][ T3561] Bluetooth: hci7: command 0x0406 tx timeout [ 596.857990][ T6745] Bluetooth: hci5: command 0x0406 tx timeout [ 596.864084][ T3546] Bluetooth: hci6: command 0x0406 tx timeout [ 596.870641][ T28] INFO: task syz-executor:6632 blocked for more than 157 seconds. [ 596.903245][ T28] Not tainted 6.1.97-syzkaller #0 [ 596.953366][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.962078][ T28] task:syz-executor state:D stack:21736 pid:6632 ppid:1 flags:0x00004004 [ 597.063427][ T28] Call Trace: [ 597.066750][ T28] [ 597.069686][ T28] __schedule+0x142d/0x4550 [ 597.133379][ T28] ? __mutex_lock+0x6b4/0xd80 [ 597.138109][ T28] ? __sched_text_start+0x8/0x8 [ 597.142968][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 597.213355][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 597.218625][ T28] schedule+0xbf/0x180 [ 597.222712][ T28] schedule_preempt_disabled+0xf/0x20 [ 597.323401][ T28] __mutex_lock+0x6b9/0xd80 [ 597.327964][ T28] ? __mutex_lock+0x53c/0xd80 [ 597.332650][ T28] ? new_device_store+0x1ad/0x800 [ 597.373360][ T28] ? mutex_lock_nested+0x10/0x10 [ 597.378356][ T28] ? read_lock_is_recursive+0x10/0x10 [ 597.413356][ T28] new_device_store+0x1ad/0x800 [ 597.433352][ T28] ? kernfs_fop_write_iter+0x1e7/0x4f0 [ 597.486052][ T28] ? nsim_num_vf+0x50/0x50 [ 597.490531][ T28] ? sysfs_kf_write+0x181/0x2a0 [ 597.543474][ T28] ? sysfs_kf_read+0x300/0x300 [ 597.548291][ T28] kernfs_fop_write_iter+0x3a2/0x4f0 [ 597.583770][ T28] vfs_write+0x7ae/0xba0 [ 597.588066][ T28] ? file_end_write+0x250/0x250 [ 597.592922][ T28] ? do_sys_openat2+0x42b/0x500 [ 597.656611][ T3550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 597.666397][ T28] ? __fdget_pos+0x2c1/0x360 [ 597.671041][ T28] ksys_write+0x19c/0x2c0 [ 597.675789][ T6746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 597.685092][ T3550] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.693034][ T3550] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.701974][ T3550] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 597.709370][ T6746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 597.744469][ T6746] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 597.754987][ T6746] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 597.763591][ T6746] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 597.771540][ T6746] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 597.779209][ T6746] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 597.786726][ T3550] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 597.813380][ T28] ? print_irqtrace_events+0x210/0x210 [ 597.818895][ T28] ? __ia32_sys_read+0x80/0x80 [ 597.843607][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 597.849627][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 597.883440][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 597.889478][ T28] do_syscall_64+0x3b/0xb0 [ 597.913388][ T28] ? clear_bhb_loop+0x45/0xa0 [ 597.918110][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.953559][ T28] RIP: 0033:0x7f3cb697475f [ 597.958033][ T28] RSP: 002b:00007ffd85140f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 597.983615][ T28] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f3cb697475f [ 598.033380][ T28] RDX: 0000000000000003 RSI: 00007ffd85140fb0 RDI: 0000000000000005 [ 598.041394][ T28] RBP: 00007f3cb69e45c4 R08: 0000000000000000 R09: 00007ffd85140db7 [ 598.104463][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 598.112479][ T28] R13: 00007ffd85140fb0 R14: 00007f3cb7634620 R15: 0000000000000003 [ 598.163463][ T28] [ 598.166552][ T28] [ 598.166552][ T28] Showing all locks held in the system: [ 598.203459][ T28] 1 lock held by rcu_tasks_kthre/12: [ 598.208787][ T28] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 598.264659][ T6746] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 598.274731][ T6746] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 598.282747][ T6746] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 598.291644][ T3546] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 598.299361][ T3546] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 598.306781][ T6746] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 598.328446][ T28] 1 lock held by rcu_tasks_trace/13: [ 598.343526][ T28] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 598.383450][ T28] 3 locks held by kworker/0:1/14: [ 598.388512][ T28] #0: ffff888027bd2538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 598.423412][ T28] #1: ffffc90000137d20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 598.533547][ T28] #2: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 598.583403][ T28] 3 locks held by kworker/1:1/26: [ 598.588466][ T28] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 598.633412][ T28] #1: ffffc90000a1fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 598.675030][ T28] #2: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 598.713608][ T28] 1 lock held by khungtaskd/28: [ 598.718495][ T28] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 598.753454][ T28] 2 locks held by getty/3305: [ 598.758172][ T28] #0: ffff88814b155098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 598.793422][ T28] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 598.823380][ T28] 4 locks held by kworker/u5:2/3550: [ 598.829051][ T28] #0: ffff888063fd8938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 598.873403][ T28] #1: ffffc90003defd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 598.913927][ T28] #2: ffff88805c41c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0 [ 598.943589][ T28] #3: ffffffff8e3f0c48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0 [ 598.973584][ T28] 4 locks held by kworker/u5:6/3561: [ 598.978908][ T28] #0: ffff888077974938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 599.007909][ T6765] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 599.023563][ T3546] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 599.032195][ T6765] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 599.040239][ T3546] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 599.047941][ T3546] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 599.056181][ T6765] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 599.083404][ T28] #1: ffffc90003e9fd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 599.103610][ T28] #2: ffff88805c418078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0 [ 599.123388][ T28] #3: ffffffff8e3f0c48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0 [ 599.153578][ T28] 3 locks held by kworker/0:6/3591: [ 599.159543][ T28] 5 locks held by kworker/u4:10/3777: [ 599.173397][ T28] 4 locks held by kworker/u4:11/3779: [ 599.178780][ T28] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 599.203446][ T28] #1: ffffc90004877d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 599.223547][ T28] #2: ffffffff8e28d810 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 599.232908][ T28] #3: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe0/0x3b0 [ 599.258374][ T28] 3 locks held by kworker/0:9/5467: [ 599.273460][ T28] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 599.293405][ T28] #1: ffffc90003487d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 599.323528][ T28] #2: ffff88805267e240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 599.343408][ T28] 3 locks held by kworker/1:9/6506: [ 599.348628][ T28] 3 locks held by kworker/1:11/6508: [ 599.360758][ T28] #0: ffff888027bd2538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 599.383944][ T28] #1: ffffc9000324fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 599.413521][ T28] #2: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 599.422972][ T28] 4 locks held by syz-executor/6632: [ 599.443504][ T28] #0: ffff88807df20460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xba0 [ 599.452434][ T28] #1: ffff888073285088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 599.483497][ T28] #2: ffff888143bb20f0 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 599.503389][ T28] #3: ffffffff8dc0cf08 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1ad/0x800 [ 599.523383][ T28] 4 locks held by syz-executor/6635: [ 599.528678][ T28] #0: ffff88807df20460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xba0 [ 599.553479][ T28] #1: ffff88805eaf2488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 599.563275][ T28] #2: ffff888143bb20f0 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 599.593378][ T28] #3: ffffffff8dc0cf08 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1ad/0x800 [ 599.613378][ T28] 7 locks held by syz-executor/6661: [ 599.618674][ T28] #0: ffff88807df20460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xba0 [ 599.643498][ T28] #1: ffff8880754cf088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 599.663358][ T28] #2: ffff888143bb21d8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 599.683395][ T28] #3: ffffffff8dc0cf08 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480 [ 599.703374][ T28] #4: ffff888051fbd0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x880 [ 599.733566][ T28] #5: ffff888051fbe2f8 (&devlink->lock_key#7){+.+.}-{3:3}, at: nsim_drv_remove+0x54/0x160 [ 599.753379][ T28] #6: ffffffff8d1301c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 599.770404][ T28] 1 lock held by syz.0.927/6694: [ 599.783529][ T28] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x8c7/0xf40 [ 599.792809][ T28] 3 locks held by kworker/u4:7/6697: [ 599.813477][ T28] 4 locks held by syz-executor/6700: [ 599.818786][ T28] #0: ffff88807df20460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xba0 [ 599.843493][ T28] #1: ffff8880498f0488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 599.853289][ T28] #2: ffff888143bb21d8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 599.883387][ T28] #3: ffffffff8dc0cf08 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480 [ 599.903451][ T28] 4 locks held by syz-executor/6702: [ 599.908748][ T28] #0: ffff88807df20460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xba0 [ 599.933500][ T28] #1: ffff88807d18e088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 599.943290][ T28] #2: ffff888143bb21d8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 599.973402][ T28] #3: ffffffff8dc0cf08 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480 [ 599.993407][ T28] 3 locks held by syz-executor/6712: [ 599.998734][ T28] #0: ffff88805b8050b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0 [ 600.023761][ T28] #1: ffff88805b804078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 600.043411][ T28] #2: ffffffff8e3f0c48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 600.063378][ T28] 1 lock held by syz-executor/6718: [ 600.068602][ T28] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 600.093495][ T28] 4 locks held by syz-executor/6731: [ 600.098828][ T28] #0: ffff88804b3d90b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0 [ 600.123452][ T28] #1: ffff88804b3d8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 600.133168][ T28] #2: ffffffff8e3f0c48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 600.173587][ T28] #3: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 600.193380][ T28] 1 lock held by syz-executor/6735: [ 600.198604][ T28] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 600.223490][ T28] 1 lock held by syz-executor/6740: [ 600.228708][ T28] 2 locks held by syz-executor/6743: [ 600.243427][ T28] #0: ffffffff8e28d810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 600.252871][ T28] #1: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 600.282433][ T28] 4 locks held by kworker/u5:0/6745: [ 600.293500][ T28] #0: ffff88805cf4c138 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 600.323531][ T28] #1: ffffc900036dfd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 600.343738][ T28] #2: ffff888052894078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0 [ 600.363420][ T28] #3: ffffffff8e3f0c48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0 [ 600.383441][ T28] 4 locks held by kworker/u5:3/6746: [ 600.393452][ T28] #0: ffff8880215de938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 600.413441][ T28] #1: ffffc900036efd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 600.443572][ T28] #2: ffff88805c748078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0 [ 600.463400][ T28] #3: ffffffff8e3f0c48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0 [ 600.483404][ T28] 1 lock held by syz-executor/6748: [ 600.489382][ T28] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 600.513450][ T28] 1 lock held by syz-executor/6751: [ 600.518677][ T28] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 600.543567][ T28] 1 lock held by syz-executor/6756: [ 600.548876][ T28] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 600.573459][ T28] 1 lock held by syz-executor/6757: [ 600.578671][ T28] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 600.603489][ T28] 1 lock held by syz-executor/6761: [ 600.608711][ T28] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 600.633370][ T28] 1 lock held by syz-executor/6764: [ 600.638586][ T28] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 600.663483][ T28] [ 600.665826][ T28] ============================================= [ 600.665826][ T28] [ 600.683417][ T28] NMI backtrace for cpu 1 [ 600.687761][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 600.695564][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 600.705614][ T28] Call Trace: [ 600.708898][ T28] [ 600.711830][ T28] dump_stack_lvl+0x1e3/0x2cb [ 600.716527][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 600.721906][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 600.727369][ T28] ? panic+0x764/0x764 [ 600.731476][ T28] ? vprintk_emit+0x622/0x740 [ 600.736160][ T28] ? printk_sprint+0x490/0x490 [ 600.740932][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 600.746051][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 600.751001][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 600.757165][ T28] ? _printk+0xd1/0x111 [ 600.761323][ T28] ? panic+0x764/0x764 [ 600.765392][ T28] ? __wake_up_klogd+0xcc/0x100 [ 600.770242][ T28] ? panic+0x764/0x764 [ 600.774308][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 600.780388][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 600.786461][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 600.792455][ T28] watchdog+0xf88/0xfd0 [ 600.796620][ T28] ? watchdog+0x1f8/0xfd0 [ 600.800960][ T28] kthread+0x28d/0x320 [ 600.805031][ T28] ? hungtask_pm_notify+0x50/0x50 [ 600.810055][ T28] ? kthread_blkcg+0xd0/0xd0 [ 600.814645][ T28] ret_from_fork+0x1f/0x30 [ 600.819087][ T28] [ 600.822788][ T28] Sending NMI from CPU 1 to CPUs 0: [ 600.828251][ C0] NMI backtrace for cpu 0 [ 600.828262][ C0] CPU: 0 PID: 3591 Comm: kworker/0:6 Not tainted 6.1.97-syzkaller #0 [ 600.828278][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 600.828287][ C0] Workqueue: events_power_efficient gc_worker [ 600.828306][ C0] RIP: 0010:__lock_acquire+0xf7f/0x1f80 [ 600.828327][ C0] Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 20 c2 49 90 be 08 00 00 00 e8 a9 9b 77 00 48 0f a3 1d 31 45 df 0e <0f> 83 bb 01 00 00 48 8d 04 5b 48 c1 e0 06 48 8d 98 20 21 19 90 48 [ 600.828339][ C0] RSP: 0018:ffffc90000007a80 EFLAGS: 00000057 [ 600.828351][ C0] RAX: 0000000000000001 RBX: 000000000000002c RCX: ffffffff816a7ce7 [ 600.828361][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9049c220 [ 600.828370][ C0] RBP: b4f6a874e194f063 R08: dffffc0000000000 R09: fffffbfff2093845 [ 600.828381][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801635c658 [ 600.828391][ C0] R13: ffff88801635bb80 R14: 0000000000000001 R15: 1ffff11002c6b8df [ 600.828401][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 600.828414][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.828424][ C0] CR2: 00007ffd738cce78 CR3: 00000000476be000 CR4: 00000000003506f0 [ 600.828437][ C0] Call Trace: [ 600.828442][ C0] [ 600.828448][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 600.828468][ C0] ? read_lock_is_recursive+0x10/0x10 [ 600.828487][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 600.828512][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 600.828531][ C0] ? nmi_handle+0x12e/0x440 [ 600.828550][ C0] ? nmi_handle+0x25/0x440 [ 600.828567][ C0] ? __lock_acquire+0xf7f/0x1f80 [ 600.828584][ C0] ? default_do_nmi+0x62/0x150 [ 600.828598][ C0] ? exc_nmi+0xa8/0x100 [ 600.828611][ C0] ? end_repeat_nmi+0x16/0x31 [ 600.828632][ C0] ? __lock_acquire+0xf77/0x1f80 [ 600.828649][ C0] ? __lock_acquire+0xf7f/0x1f80 [ 600.828666][ C0] ? __lock_acquire+0xf7f/0x1f80 [ 600.828684][ C0] ? __lock_acquire+0xf7f/0x1f80 [ 600.828701][ C0] [ 600.828705][ C0] [ 600.828715][ C0] lock_acquire+0x1f8/0x5a0 [ 600.828732][ C0] ? __hrtimer_run_queues+0x6d3/0xe50 [ 600.828751][ C0] ? read_lock_is_recursive+0x10/0x10 [ 600.828768][ C0] ? advance_sched+0x6d0/0x970 [ 600.828785][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 600.828804][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 600.828819][ C0] ? advance_sched+0x6d0/0x970 [ 600.828835][ C0] _raw_spin_lock_irq+0xcf/0x110 [ 600.828851][ C0] ? __hrtimer_run_queues+0x6d3/0xe50 [ 600.828866][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 600.828885][ C0] __hrtimer_run_queues+0x6d3/0xe50 [ 600.828908][ C0] ? hrtimer_interrupt+0x980/0x980 [ 600.828927][ C0] hrtimer_interrupt+0x392/0x980 [ 600.828956][ C0] __sysvec_apic_timer_interrupt+0x156/0x580 [ 600.828974][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 600.828990][ C0] [ 600.828994][ C0] [ 600.828999][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 600.829016][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x1c/0x30 [ 600.829032][ C0] Code: eb d0 cc cc cc cc cc cc cc cc cc cc cc cc 31 c0 83 3d 77 52 e8 03 00 74 1d 83 3d 02 86 e8 03 00 74 14 65 48 8b 0d d4 3f 77 75 <31> c0 83 b9 dc 0a 00 00 00 0f 94 c0 c3 cc cc cc cc cc cc cc 48 8b [ 600.829043][ C0] RSP: 0018:ffffc9000404faf8 EFLAGS: 00000202 [ 600.829054][ C0] RAX: 0000000000000000 RBX: ffff8880284cc1c8 RCX: ffff88801635bb80 [ 600.829064][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 600.829073][ C0] RBP: ffffc9000404fc50 R08: ffffffff88c4a15e R09: fffffbfff2093856 [ 600.829083][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 600.829092][ C0] R13: 0000000000004000 R14: ffff888028400000 R15: 0000000000033073 [ 600.829105][ C0] ? gc_worker+0x3ce/0x1530 [ 600.829121][ C0] gc_worker+0xcf6/0x1530 [ 600.829136][ C0] ? gc_worker+0x27a/0x1530 [ 600.829153][ C0] ? init_conntrack+0x14e0/0x14e0 [ 600.829167][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 600.829183][ C0] ? process_one_work+0x7a9/0x11d0 [ 600.829197][ C0] process_one_work+0x8a9/0x11d0 [ 600.829218][ C0] ? worker_detach_from_pool+0x260/0x260 [ 600.829234][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 600.829249][ C0] ? kthread_data+0x4e/0xc0 [ 600.829268][ C0] ? wq_worker_running+0x97/0x190 [ 600.829288][ C0] worker_thread+0xa47/0x1200 [ 600.829307][ C0] ? _raw_spin_unlock+0x40/0x40 [ 600.829327][ C0] kthread+0x28d/0x320 [ 600.829338][ C0] ? worker_clr_flags+0x190/0x190 [ 600.829352][ C0] ? kthread_blkcg+0xd0/0xd0 [ 600.829365][ C0] ret_from_fork+0x1f/0x30 [ 600.829387][ C0] [ 601.284393][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 601.291259][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 601.299067][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 601.309123][ T28] Call Trace: [ 601.312484][ T28] [ 601.315426][ T28] dump_stack_lvl+0x1e3/0x2cb [ 601.320117][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 601.325674][ T28] ? panic+0x764/0x764 [ 601.329748][ T28] ? llist_add_batch+0x160/0x1d0 [ 601.334693][ T28] ? vscnprintf+0x59/0x80 [ 601.339025][ T28] panic+0x318/0x764 [ 601.343007][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 601.349174][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 601.354552][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 601.360706][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 601.366863][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 601.373029][ T28] watchdog+0xfc7/0xfd0 [ 601.377199][ T28] ? watchdog+0x1f8/0xfd0 [ 601.381536][ T28] kthread+0x28d/0x320 [ 601.385602][ T28] ? hungtask_pm_notify+0x50/0x50 [ 601.390716][ T28] ? kthread_blkcg+0xd0/0xd0 [ 601.395307][ T28] ret_from_fork+0x1f/0x30 [ 601.399757][ T28] [ 602.513456][ T28] Shutting down cpus with NMI [ 602.518393][ T28] Kernel Offset: disabled [ 602.522714][ T28] Rebooting in 86400 seconds..