last executing test programs: 16m54.492189099s ago: executing program 4 (id=1926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = creat(0x0, 0x0) syz_emit_vhci(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x3}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000300)=0xd0) r5 = semget$private(0x0, 0x207, 0x53) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000040)=""/119) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000009000000850000008200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 16m52.478640845s ago: executing program 4 (id=1932): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0) lseek(r6, 0x5, 0x2) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x2, 0x1, 0x3, 0x0, 0x7}}) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000300)={{0x1, @name="c42a6838d28443227483ec8fe343db49cbeecd991aef557d83b98b12db1f5b3d"}, 0x8, 0x4, 0x47}) syz_open_dev$usbmon(&(0x7f0000000340), 0x7, 0x501400) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) 16m44.40970232s ago: executing program 4 (id=1941): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="050200000000000000110800000000009500a505006033dfdb10e71fa2d3999e00000015d9a1b33f700f96c535fff9c6877d574daae1043716ffffffffffffff441e4162e1e5223010cb8d8b294b45fb9a6915979ca6ef13c8d8018f2737b13a1c06f014e00e13fd826affb4a0"], 0x0, 0xd, 0xcb, &(0x7f0000000500)=""/203, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) wait4(0x0, 0x0, 0x4000000a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x3b20, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x81}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000180)={r6, 0x0, 0x0, 0x4, 0xc, 0x8, 0x100, 0x80000001, 0x5, 0x5, 0xfffffff9, 0x80000000}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000080)={0x2, r8, 0x1ff, 0x0, 0x4, 0x800008, 0x0, 0x0, 0x4000}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400052d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07906706000007000000170300000ee600a8bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f24"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 16m43.749325429s ago: executing program 4 (id=1943): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006880)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x8000) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 16m41.105392653s ago: executing program 4 (id=1945): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x450}) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x300, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 16m36.199294387s ago: executing program 4 (id=1957): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a20000000060a0904000000000000000002000000090002007379"], 0x48}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, 0x0, 0x36) 16m20.177222895s ago: executing program 32 (id=1957): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a20000000060a0904000000000000000002000000090002007379"], 0x48}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, 0x0, 0x36) 5m48.560373231s ago: executing program 3 (id=3072): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000001540), 0x6, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x3, 0x8d) r2 = fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)) shutdown(r3, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx4\x00', 0x20808c, 0x0) 5m46.105983353s ago: executing program 3 (id=3073): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006880)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x8000) socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 5m44.276606978s ago: executing program 3 (id=3077): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10e, &(0x7f00000004c0)={0x0, 0x310, 0x4000, 0xffffffff, 0x10b}, &(0x7f0000000340), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r4, 0x0, 0x0, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000751d000000000000000000fea3a1278611", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0100"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000380)={0x2}) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}], 0x1) 5m35.387997695s ago: executing program 3 (id=3088): preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x1000, 0x3f2f0fde) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x0, 0x4, 0x20a}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000000340)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 5m35.0408112s ago: executing program 3 (id=3091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = creat(0x0, 0x0) syz_emit_vhci(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r4 = semget$private(0x0, 0x207, 0x53) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000040)=""/119) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000009000000850000008200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$binfmt_misc(r6, &(0x7f0000000300), 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 5m32.321195846s ago: executing program 3 (id=3096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf250900000008000300", @ANYRES32, @ANYBLOB="0500080002000000080009000559ac0f000a00060008021100000000001b3ac38de1f6efde2b965976e6a77cd583cd461ba4ceaec478a85ad7a97d60e3be15d14750d38a1b9705b64ca6882457afbb1f74f5e67f26466e584689e8a43ad926da479a285cb838e01a9e25372c820569065f68efeeade80b721946590eb171146a4ab8297ab3eded9b8efdfa0682082dd3142516da2c22622addfc83130b8e681d"], 0x38}, 0x1, 0x0, 0x0, 0x4000851}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) syz_open_dev$rtc(&(0x7f0000000000), 0xb, 0x40000) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x402) rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x6}) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000400)}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) read(r3, &(0x7f0000000540)=""/251, 0xfb) 5m16.383068937s ago: executing program 33 (id=3096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf250900000008000300", @ANYRES32, @ANYBLOB="0500080002000000080009000559ac0f000a00060008021100000000001b3ac38de1f6efde2b965976e6a77cd583cd461ba4ceaec478a85ad7a97d60e3be15d14750d38a1b9705b64ca6882457afbb1f74f5e67f26466e584689e8a43ad926da479a285cb838e01a9e25372c820569065f68efeeade80b721946590eb171146a4ab8297ab3eded9b8efdfa0682082dd3142516da2c22622addfc83130b8e681d"], 0x38}, 0x1, 0x0, 0x0, 0x4000851}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) syz_open_dev$rtc(&(0x7f0000000000), 0xb, 0x40000) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x402) rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x6}) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000400)}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) read(r3, &(0x7f0000000540)=""/251, 0xfb) 13.169602215s ago: executing program 5 (id=3614): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000300)=0x20, 0xfffffffffffffef6) write$binfmt_misc(r3, &(0x7f0000000300), 0x6) 12.460007854s ago: executing program 0 (id=3615): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setfsgid(0x0) socket(0x840000000002, 0x3, 0xff) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bca) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 11.694620384s ago: executing program 5 (id=3618): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 10.948283474s ago: executing program 5 (id=3620): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) 10.912424825s ago: executing program 6 (id=3621): syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) close(0x3) syz_open_dev$vcsu(0x0, 0x8001, 0x400) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x30}, 0x0) 8.772471483s ago: executing program 0 (id=3623): syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup(0xffffffffffffffff) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 7.4735895s ago: executing program 0 (id=3626): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x40, 0x7, 0x4, {0x4, 0xb, "1b08"}}, 0x0}, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 7.452501691s ago: executing program 1 (id=3627): r0 = socket(0x15, 0x5, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) 7.397970101s ago: executing program 5 (id=3628): ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@i_version}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3c1uG0UcAPD/bj6bliaVOPBxiQCJSIikSVugEkhEXDjQEz1wJIrdEtVpUGIkWkV8CMQNJBAPAAfgETjCgXeAM3CAShHKgZSb0dq7jhvbaZPadZX8ftLIMztrz6zHs15PZicBHFvTEfFqRAxFxNmImMy3p3mIjxoh229ne3P5v+3N5SRqtTf/SSLJtxWvleSPJ/MXmEkj0k+TeLJDuRs3bl5bqlTK63l6rrr67tzGjZvPr6wuXS1fLV9feOHc+QsXXrq48GLPjnVrNfn8me/f+PPLz0pf/fr3T1NZfU/lea3H0SvTMd18T/a62OvCBmy8JZ4MD7AiAADsK82v/Yfr1/+TMRS7F2+T8cUvA60cAAAA0BO1WvEIAAAAHF2J3/4AAABwxBXzAHa2N5eLMMDpCDxgW4sRMdVo/9t5aOQMN+/pHYkYGe9T+dMR8fr4pYUsRJ/uwwYAAAA4zn5ebCz81z7+l8ZjLfudiIiJYm2/Hprek24f/0lv9bhIWmwtRrwcEbfbxv/SYpepoTz1SH2ocCS5slIpn42I0xExEyNjWXp+nzI+eOraD93yWsf/vvnjrfms/Oxxd4/01vDYnc8pLVWX7ueY2bX1ccQTw53aP2mO/7auk3kYb6/svNItL2v/rL2L0N7+9FPt24hnO/b/3ZVLk/3XZ52rnw/m8rPCWHsZv5/67pNu5bf2/yxk5Rd/C6D/sv4/sX/719fJba7Xu3HwMn7899Jv3fLu3v6dz/+jyeV6BUfzbe8vVavr8xGjSWPLHdt9mpqK96N4v7L2n3m68/d/cf2X5N/9p1vWhz6I1z48c7lbnv4/WFn7lw7U/w8eeWfi8Zlu5d9b/z9fr0zxIq7/7u5eG2jQ9QQAAAAAAACgN9L63L4knW3G03R2tjHP99GYSCtrG9Xnrqy9d73UmAM4FSNpMf9zsmU+6HzjNvJmemFP+lxEnImIrydP1NOzy2uV0qAPHgAAAI6Jk11+/2f+OszNHgAAAMDDaWrQFQAAAAD6zu9/AAAAONLuZ13/Snm9+BdBh3y6iMjhIkP5B+9hqc/RiwzwpAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/B8AAP//91C79Q==") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) chdir(&(0x7f00000001c0)='./file0\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x800000, 0x0) unlink(&(0x7f0000000040)='./file1\x00') 7.267852643s ago: executing program 6 (id=3629): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timerfd_create(0x0, 0x0) 7.205343284s ago: executing program 2 (id=3630): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) 7.100185585s ago: executing program 1 (id=3631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x29}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 6.980375687s ago: executing program 6 (id=3632): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000", @ANYRES32=0x0, @ANYBLOB], 0x2c}], 0x1}, 0x0) 6.890002008s ago: executing program 1 (id=3633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/9, 0x9}], 0x1, 0x2f, 0x0) 5.821776442s ago: executing program 2 (id=3634): socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), 0x4) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) 5.696150074s ago: executing program 1 (id=3635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fallocate(r3, 0x3, 0x5000000, 0x8000c62) syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x80000) 5.687686244s ago: executing program 6 (id=3636): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000001ec0)=""/254, 0x31, 0xfe, 0x6, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r1], 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) io_setup(0x7ff, &(0x7f0000000500)=0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x4, r4, 0x0}]) 5.603955965s ago: executing program 5 (id=3637): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 4.660143997s ago: executing program 1 (id=3638): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700", @ANYRES32=0x0, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, 0x0, 0x107042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x187842, 0x3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) 4.167569194s ago: executing program 2 (id=3639): epoll_create1(0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) 2.289199419s ago: executing program 2 (id=3640): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) listen(r2, 0x4000) close(r2) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e24, @broadcast}, {0x306, @broadcast}, 0xffffff7d, {0x2, 0x4e20, @broadcast}, 'veth0_virt_wifi\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r3, 0x11, 0x64, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2.23628282s ago: executing program 0 (id=3641): syz_open_dev$vim2m(0x0, 0x800, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 2.23578964s ago: executing program 5 (id=3642): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendfile(r2, r3, 0x0, 0x1000000201005) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffbffa003e458, 0x700000000000000) 2.123034891s ago: executing program 1 (id=3643): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.548828919s ago: executing program 34 (id=3642): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendfile(r2, r3, 0x0, 0x1000000201005) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffbffa003e458, 0x700000000000000) 1.526203349s ago: executing program 0 (id=3645): r0 = socket$inet6(0xa, 0x80002, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0xfffffffd, @local, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.525853559s ago: executing program 2 (id=3646): r0 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x20024c}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0xd070, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) 1.525612189s ago: executing program 6 (id=3647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8012, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 165.826247ms ago: executing program 0 (id=3648): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0xa, 0x4, 0x2, 0x896cddca7811a831, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x0, 0x40, 0x9, 0x4}}) 36.232969ms ago: executing program 6 (id=3649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x1) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 0s ago: executing program 2 (id=3650): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_DUMPABLE(0x26) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): v: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1476.953383][ T127] dvb-usb: bulk message failed: -22 (1/0) [ 1476.959882][ T127] dvb-usb: error while querying for an remote control event. [ 1476.964764][T15353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1476.986639][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'. [ 1477.127683][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 1477.139739][ T7] dvb-usb: error while querying for an remote control event. [ 1477.222189][T15353] device hsr_slave_0 entered promiscuous mode [ 1477.319035][ T127] dvb-usb: bulk message failed: -22 (1/0) [ 1477.325478][ T127] dvb-usb: error while querying for an remote control event. [ 1477.404035][T15353] device hsr_slave_1 entered promiscuous mode [ 1477.416346][T15479] loop3: detected capacity change from 0 to 2048 [ 1477.488769][T15483] binder: 15481:15483 ioctl c0306201 2000000003c0 returned -14 [ 1477.498513][T15483] binder: 15481:15483 ioctl c0306201 0 returned -14 [ 1477.530761][T15484] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1477.530848][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 1477.541808][T15353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1477.547246][ T7] dvb-usb: error while querying for an remote control event. [ 1477.595428][ T4302] usb 6-1: USB disconnect, device number 11 [ 1477.610808][T15353] Cannot create hsr debugfs directory [ 1478.488091][ T4302] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1480.468111][T15507] loop0: detected capacity change from 0 to 2048 [ 1480.725349][T15515] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1482.330420][T15528] loop2: detected capacity change from 0 to 1024 [ 1482.589962][T15528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1482.696662][T15353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1482.725521][T15353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1482.796275][T15353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1482.826037][T15353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1482.854672][T15124] EXT4-fs (loop2): unmounting filesystem. [ 1484.679500][T15353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.589027][T15353] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.647294][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1485.693607][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1485.793783][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3032'. [ 1485.855842][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1486.151830][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1486.199921][ T7626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.207102][ T7626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1486.243824][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1486.274101][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1486.300827][ T7626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.308050][ T7626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.348691][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1486.379041][ T4302] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1486.579848][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1486.598359][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1487.338530][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1487.401314][ T4302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.439020][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1487.447968][ T4302] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1487.473527][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1487.485940][ T4302] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1487.513721][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1487.524878][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.554579][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1487.573629][ T4302] usb 4-1: config 0 descriptor?? [ 1487.597856][ T4302] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1487.608096][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1487.630879][ T4302] dvb-usb: bulk message failed: -22 (3/0) [ 1487.643299][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1487.676642][ T4302] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1487.700403][T15353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1487.733339][ T4302] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1487.764747][ T4302] usb 4-1: media controller created [ 1487.800123][ T4302] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1487.818438][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1487.834783][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1487.846198][T15563] dvb-usb: bulk message failed: -22 (4/0) [ 1487.881298][ T4302] dvb-usb: bulk message failed: -22 (6/0) [ 1487.920317][ T4302] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1487.980684][ T4302] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input101 [ 1488.053710][ T4302] dvb-usb: schedule remote query interval to 150 msecs. [ 1488.289047][ T4302] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1488.449412][T11548] dvb-usb: bulk message failed: -22 (1/0) [ 1488.455873][T11548] dvb-usb: error while querying for an remote control event. [ 1488.458809][T13745] usb 4-1: USB disconnect, device number 42 [ 1488.542511][T13745] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1488.573829][T15584] loop5: detected capacity change from 0 to 2048 [ 1488.902465][T15590] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1490.193743][T15598] loop3: detected capacity change from 0 to 512 [ 1490.871237][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.877595][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.884554][T15598] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1491.986879][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1492.009786][T15598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 1492.039660][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1492.047204][T15598] System zones: 1-12 [ 1492.073924][T15353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.087116][T15598] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1492.234118][T15598] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3040: invalid indirect mapped block 12 (level 1) [ 1492.399012][ T4302] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1492.412085][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1492.458381][ T9053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1492.578242][T15598] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3040: invalid indirect mapped block 2 (level 2) [ 1492.619110][ T4302] usb 6-1: Using ep0 maxpacket: 8 [ 1492.692414][ T4302] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1492.701931][ T4302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.822696][ T4302] usb 6-1: Product: syz [ 1492.829539][ T4302] usb 6-1: Manufacturer: syz [ 1492.834206][ T4302] usb 6-1: SerialNumber: syz [ 1492.841655][ T4302] usb 6-1: config 0 descriptor?? [ 1492.883865][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1492.897949][T15598] EXT4-fs (loop3): 1 truncate cleaned up [ 1492.914936][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1492.927908][T15598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1492.972195][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1492.991455][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1493.016198][T15353] device veth0_vlan entered promiscuous mode [ 1493.042092][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 1493.054545][ T4302] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1493.112834][T15353] device veth1_vlan entered promiscuous mode [ 1493.855682][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1493.886448][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1493.916749][T15353] device veth0_macvtap entered promiscuous mode [ 1493.964359][T15353] device veth1_macvtap entered promiscuous mode [ 1494.022441][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1494.039750][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1494.100243][T15353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1494.121024][T15353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.143234][T15353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1494.163173][T15353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.187255][T15353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1494.222910][T15353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.353380][T15353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.073446][ T4302] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1495.099491][ T4302] usb 6-1: USB disconnect, device number 12 [ 1495.180518][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1495.238839][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1495.328810][T15353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.366346][T15353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.418077][T15353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.479094][T15353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.531273][T15353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.590766][T15353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.648420][T15353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.692067][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1495.774983][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1495.801825][T15353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.833294][T15353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.857801][T15353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.874805][T15353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.207062][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.226559][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.330132][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1496.383274][ T7626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.419105][ T7626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.453220][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1496.519061][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3049'. [ 1496.565994][T15654] loop2: detected capacity change from 0 to 2048 [ 1496.772287][T15659] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1496.951319][T10938] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1497.654751][T10938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.695549][T10938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1497.728690][T10938] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1497.782669][T10938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.324607][T10938] usb 4-1: config 0 descriptor?? [ 1498.419462][T10938] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1498.426140][T10938] dvb-usb: bulk message failed: -22 (3/0) [ 1498.480491][T10938] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1498.538607][T10938] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1498.579137][T10938] usb 4-1: media controller created [ 1498.585583][T10938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1498.614351][T15656] dvb-usb: bulk message failed: -22 (4/0) [ 1498.830372][T10938] dvb-usb: bulk message failed: -22 (6/0) [ 1499.175255][T10938] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1499.254603][T10938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input102 [ 1499.353923][T10938] dvb-usb: schedule remote query interval to 150 msecs. [ 1499.751036][T10938] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1499.853182][T10938] usb 4-1: USB disconnect, device number 43 [ 1499.941093][T10938] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1500.007054][T15690] loop3: detected capacity change from 0 to 2048 [ 1500.109679][T15691] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1501.355302][ T4401] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.369805][T15126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1501.379661][T15126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1501.389876][T15126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1501.399206][T15126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1501.408154][T15126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1501.416560][T15126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1501.471004][T15705] loop3: detected capacity change from 0 to 1024 [ 1501.488008][T15706] binder: 15699:15706 ioctl c0306201 2000000003c0 returned -14 [ 1501.625705][T15705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1502.321175][ T4401] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.364113][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 1502.578561][ T4401] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.489355][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 1503.543773][ T4401] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.906337][T15707] chnl_net:caif_netlink_parms(): no params data found [ 1504.101011][T15738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3066'. [ 1505.568981][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 1505.999124][T10938] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1506.500914][T10938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.545786][T10938] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1506.560830][T10938] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1506.570295][T10938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.580665][T10938] usb 4-1: config 0 descriptor?? [ 1506.588246][T10938] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1506.595492][T10938] dvb-usb: bulk message failed: -22 (3/0) [ 1506.604350][T10938] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1506.622539][T10938] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1506.638271][T10938] usb 4-1: media controller created [ 1506.645414][T10938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1506.658302][T10938] dvb-usb: bulk message failed: -22 (6/0) [ 1506.664439][T10938] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1506.700976][T10938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input103 [ 1507.261362][T10938] dvb-usb: schedule remote query interval to 150 msecs. [ 1507.269131][T10938] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1507.337965][T15761] loop1: detected capacity change from 0 to 1024 [ 1507.369259][T15707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.379675][T15707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.418170][T13745] usb 4-1: USB disconnect, device number 44 [ 1507.429086][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 1507.435083][ T7] dvb-usb: error while querying for an remote control event. [ 1507.462917][T15707] device bridge_slave_0 entered promiscuous mode [ 1507.555477][T13745] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1507.572318][T15761] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1507.659025][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 1507.886836][T15773] I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1507.896241][T15773] qnx4: unable to read the superblock [ 1508.355493][T15707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.205890][T15707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.729005][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 1509.733649][T15707] device bridge_slave_1 entered promiscuous mode [ 1510.032508][T15353] EXT4-fs (loop1): unmounting filesystem. [ 1511.537068][T15707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.579360][T15707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1514.863876][T15707] team0: Port device team_slave_0 added [ 1514.910268][T15819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3081'. [ 1515.002622][T15707] team0: Port device team_slave_1 added [ 1515.309114][ T4242] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1515.507714][ T4242] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.540871][ T4242] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1515.591137][ T4242] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1515.600781][ T4242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.614926][ T4242] usb 6-1: config 0 descriptor?? [ 1515.631130][ T4242] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1515.637993][ T4242] dvb-usb: bulk message failed: -22 (3/0) [ 1515.664208][ T4242] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1515.710821][ T4242] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1515.755677][ T4242] usb 6-1: media controller created [ 1515.921007][T15829] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1515.930594][T15829] qnx4: unable to read the superblock [ 1515.937303][T15821] dvb-usb: bulk message failed: -22 (4/0) [ 1517.894587][ T4242] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1517.907794][ T4242] dvb-usb: bulk message failed: -22 (6/0) [ 1517.913716][ T4242] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1517.925826][ T4242] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input104 [ 1517.940467][ T4242] dvb-usb: schedule remote query interval to 150 msecs. [ 1517.948140][ T4242] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1518.099231][T11548] dvb-usb: bulk message failed: -22 (1/0) [ 1518.105123][T11548] dvb-usb: error while querying for an remote control event. [ 1518.211308][T11548] usb 6-1: USB disconnect, device number 13 [ 1518.239315][T15707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1518.273820][T11548] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1518.279234][T15707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.398571][T15707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1518.789210][T15837] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1518.798707][T15837] qnx4: unable to read the superblock [ 1520.777984][T15841] binder: 15840:15841 ioctl c0306201 2000000003c0 returned -14 [ 1520.854623][T15707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1520.924359][T15707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.071655][T15707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.169296][T15707] device hsr_slave_0 entered promiscuous mode [ 1521.179215][T15707] device hsr_slave_1 entered promiscuous mode [ 1521.296790][T15707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1521.304908][T15707] Cannot create hsr debugfs directory [ 1522.285577][ T4242] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1522.859231][ T4242] usb 3-1: Using ep0 maxpacket: 8 [ 1523.001570][ T4242] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1523.118575][ T4242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.156580][ T4242] usb 3-1: Product: syz [ 1523.167141][ T4242] usb 3-1: Manufacturer: syz [ 1523.176003][ T4242] usb 3-1: SerialNumber: syz [ 1523.263448][ T4242] usb 3-1: config 0 descriptor?? [ 1523.272267][ T4242] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1523.631391][ T4401] device hsr_slave_0 left promiscuous mode [ 1523.668331][ T4401] device hsr_slave_1 left promiscuous mode [ 1523.856851][ T4401] device veth1_macvtap left promiscuous mode [ 1523.899634][ T4401] device veth0_macvtap left promiscuous mode [ 1523.941100][T15864] loop1: detected capacity change from 0 to 2048 [ 1523.944275][T15868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3096'. [ 1523.958132][ T4401] device veth1_vlan left promiscuous mode [ 1523.964431][ T4401] device veth0_vlan left promiscuous mode [ 1524.409097][ T4242] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1524.507938][T15873] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1524.617901][ T4242] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.643106][ T4242] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1524.687778][ T4242] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1524.699283][ T4242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.758185][ T4242] usb 4-1: config 0 descriptor?? [ 1524.766880][ T4242] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1524.774200][ T4242] dvb-usb: bulk message failed: -22 (3/0) [ 1524.783032][ T4242] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1524.800111][ T4242] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1524.819285][ T4242] usb 4-1: media controller created [ 1524.825782][ T4242] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1524.871075][ T4242] dvb-usb: bulk message failed: -22 (6/0) [ 1524.877136][ T4242] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1524.937440][ T4242] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input105 [ 1524.976506][ T4242] dvb-usb: schedule remote query interval to 150 msecs. [ 1524.984301][ T4242] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1525.149245][ T4242] dvb-usb: bulk message failed: -22 (1/0) [ 1525.156029][ T4242] dvb-usb: error while querying for an remote control event. [ 1525.329920][T15872] dvb-usb: bulk message failed: -22 (4/0) [ 1525.338448][ T4242] dvb-usb: bulk message failed: -22 (1/0) [ 1525.346705][ T4242] dvb-usb: error while querying for an remote control event. [ 1525.529294][ T4302] dvb-usb: bulk message failed: -22 (1/0) [ 1525.537431][ T4302] dvb-usb: error while querying for an remote control event. [ 1525.741948][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1525.741965][ T26] audit: type=1800 audit(1748372448.304:24): pid=15864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3094" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1525.801298][ T4302] usb 3-1: USB disconnect, device number 45 [ 1525.829173][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1525.844201][ T4307] dvb-usb: error while querying for an remote control event. [ 1526.038991][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1526.045166][ T4307] dvb-usb: error while querying for an remote control event. [ 1526.219085][ T4302] dvb-usb: bulk message failed: -22 (1/0) [ 1526.224969][ T4302] dvb-usb: error while querying for an remote control event. [ 1526.403988][T15897] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.413445][T15897] qnx4: unable to read the superblock [ 1526.413476][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1526.425576][ T4307] dvb-usb: error while querying for an remote control event. [ 1527.929004][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1527.939128][ T4307] dvb-usb: error while querying for an remote control event. [ 1528.126960][T15902] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1528.137083][T15902] qnx4: unable to read the superblock [ 1529.922476][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1530.597588][ T4307] dvb-usb: error while querying for an remote control event. [ 1530.759013][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1530.765003][ T4307] dvb-usb: error while querying for an remote control event. [ 1530.949042][ T129] dvb-usb: bulk message failed: -22 (1/0) [ 1530.954838][ T129] dvb-usb: error while querying for an remote control event. [ 1531.119137][ T129] dvb-usb: bulk message failed: -22 (1/0) [ 1531.124998][ T129] dvb-usb: error while querying for an remote control event. [ 1531.310652][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1531.316619][ T4307] dvb-usb: error while querying for an remote control event. [ 1531.479326][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1531.485846][ T4307] dvb-usb: error while querying for an remote control event. [ 1531.651148][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1531.657096][ T4307] dvb-usb: error while querying for an remote control event. [ 1531.839012][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1531.844795][ T4307] dvb-usb: error while querying for an remote control event. [ 1532.039149][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1532.045430][T15903] dvb-usb: error while querying for an remote control event. [ 1532.280017][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1532.293704][T15903] dvb-usb: error while querying for an remote control event. [ 1532.469198][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1532.475143][T15903] dvb-usb: error while querying for an remote control event. [ 1532.824918][T15917] loop5: detected capacity change from 0 to 32768 [ 1532.833815][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1532.839962][T15903] dvb-usb: error while querying for an remote control event. [ 1532.872105][T15917] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1532.882448][T15917] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1532.891219][T15917] BTRFS info (device loop5): enabling auto defrag [ 1532.897678][T15917] BTRFS info (device loop5): doing ref verification [ 1532.904347][T15917] BTRFS info (device loop5): use no compression [ 1532.910659][T15917] BTRFS info (device loop5): force clearing of disk cache [ 1532.917844][T15917] BTRFS error (device loop5): unrecognized mount option 'max_inline=' [ 1533.000192][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1533.570963][T15917] BTRFS error (device loop5): open_ctree failed: -22 [ 1534.116298][ T4307] dvb-usb: error while querying for an remote control event. [ 1534.279262][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1534.285673][ T4307] dvb-usb: error while querying for an remote control event. [ 1534.346524][T14391] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (14391) [ 1534.393523][T15932] binder: 15931:15932 ioctl c0306201 2000000003c0 returned -14 [ 1534.409245][ T129] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1534.479175][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1534.487881][ T4307] dvb-usb: error while querying for an remote control event. [ 1534.629249][ T129] usb 2-1: Using ep0 maxpacket: 8 [ 1534.663767][ T129] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1534.673556][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.682069][ T129] usb 2-1: Product: syz [ 1534.686622][ T129] usb 2-1: Manufacturer: syz [ 1534.697694][ T129] usb 2-1: SerialNumber: syz [ 1534.716740][ T129] usb 2-1: config 0 descriptor?? [ 1534.723682][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1534.729828][ T4307] dvb-usb: error while querying for an remote control event. [ 1534.758198][ T129] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1534.929284][ T4307] dvb-usb: bulk message failed: -22 (1/0) [ 1534.935707][ T4307] dvb-usb: error while querying for an remote control event. [ 1535.129102][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1535.146833][T15903] dvb-usb: error while querying for an remote control event. [ 1535.529342][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1535.539824][T15903] dvb-usb: error while querying for an remote control event. [ 1535.808364][ T129] dvb-usb: bulk message failed: -22 (1/0) [ 1535.829011][ T129] dvb-usb: error while querying for an remote control event. [ 1536.119000][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1536.128844][T15903] dvb-usb: error while querying for an remote control event. [ 1536.210884][T15946] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1536.220410][T15946] qnx4: unable to read the superblock [ 1536.439190][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1536.445146][T15903] dvb-usb: error while querying for an remote control event. [ 1536.689231][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1536.697682][T15903] dvb-usb: error while querying for an remote control event. [ 1536.852752][T15951] loop2: detected capacity change from 0 to 1024 [ 1536.939262][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1536.974007][T15903] dvb-usb: error while querying for an remote control event. [ 1537.152627][T15951] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1537.315026][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1537.322051][T15903] dvb-usb: error while querying for an remote control event. [ 1537.415554][ T127] usb 2-1: USB disconnect, device number 36 [ 1537.505367][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1537.511347][T15903] dvb-usb: error while querying for an remote control event. [ 1537.654472][T15124] EXT4-fs (loop2): unmounting filesystem. [ 1537.729187][T11548] dvb-usb: bulk message failed: -22 (1/0) [ 1537.735235][T11548] dvb-usb: error while querying for an remote control event. [ 1537.899232][T11548] dvb-usb: bulk message failed: -22 (1/0) [ 1537.909118][T11548] dvb-usb: error while querying for an remote control event. [ 1538.699718][T11548] dvb-usb: bulk message failed: -22 (1/0) [ 1538.706136][T11548] dvb-usb: error while querying for an remote control event. [ 1538.922442][T11548] dvb-usb: bulk message failed: -22 (1/0) [ 1538.928246][T11548] dvb-usb: error while querying for an remote control event. [ 1539.089303][T11548] dvb-usb: bulk message failed: -22 (1/0) [ 1539.254955][T11548] dvb-usb: error while querying for an remote control event. [ 1539.429021][T11548] dvb-usb: bulk message failed: -22 (1/0) [ 1539.434837][T11548] dvb-usb: error while querying for an remote control event. [ 1539.599052][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1539.605448][T15903] dvb-usb: error while querying for an remote control event. [ 1539.704857][T15972] sock: sock_timestamping_bind_phc: sock not bind to device [ 1539.765930][T15972] loop2: detected capacity change from 0 to 512 [ 1539.799495][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1539.805299][T15903] dvb-usb: error while querying for an remote control event. [ 1539.829233][T15972] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1539.933454][T15972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 1539.949180][T15972] System zones: 1-12 [ 1539.954240][T15972] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1540.005926][ T4401] bond0 (unregistering): Released all slaves [ 1540.012211][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1540.018496][T15903] dvb-usb: error while querying for an remote control event. [ 1540.093422][T15972] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3117: invalid indirect mapped block 12 (level 1) [ 1540.160060][T15972] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3117: invalid indirect mapped block 2 (level 2) [ 1540.249014][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1540.257116][T15903] dvb-usb: error while querying for an remote control event. [ 1540.308474][T15972] EXT4-fs (loop2): 1 truncate cleaned up [ 1540.339848][T15972] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1540.391742][T11247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1540.402396][T11247] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1540.420402][T11247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1540.469286][T11247] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1540.478716][T11247] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1540.486209][T11247] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1540.503269][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1540.512641][T15903] dvb-usb: error while querying for an remote control event. [ 1540.679023][T15903] dvb-usb: bulk message failed: -22 (1/0) [ 1540.684834][T15903] dvb-usb: error while querying for an remote control event. [ 1540.899168][T11548] dvb-usb: bulk message failed: -22 (1/0) [ 1540.905265][T11548] dvb-usb: error while querying for an remote control event. [ 1541.087817][T15124] EXT4-fs (loop2): unmounting filesystem. [ 1541.169056][T11548] dvb-usb: bulk message failed: -22 (1/0) [ 1541.175190][T11548] dvb-usb: error while querying for an remote control event. [ 1542.040205][ T129] dvb-usb: bulk message failed: -22 (1/0) [ 1542.046404][ T129] dvb-usb: error while querying for an remote control event. [ 1542.239480][ T129] dvb-usb: bulk message failed: -22 (1/0) [ 1542.264167][ T129] dvb-usb: error while querying for an remote control event. [ 1542.439144][ T129] dvb-usb: bulk message failed: -22 (1/0) [ 1542.446243][ T129] dvb-usb: error while querying for an remote control event. [ 1542.540492][T11247] Bluetooth: hci4: command 0x0409 tx timeout [ 1542.730578][ T129] dvb-usb: bulk message failed: -22 (1/0) [ 1542.769105][ T129] dvb-usb: error while querying for an remote control event. [ 1542.978981][ T129] dvb-usb: bulk message failed: -22 (1/0) [ 1542.985275][ T129] dvb-usb: error while querying for an remote control event. [ 1543.149063][ T129] dvb-usb: bulk message failed: -22 (1/0) [ 1543.154868][ T129] dvb-usb: error while querying for an remote control event. [ 1543.314440][T15776] usb 4-1: USB disconnect, device number 45 [ 1543.415205][T15776] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1544.579175][ T129] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1544.620250][T11247] Bluetooth: hci4: command 0x041b tx timeout [ 1544.798958][ T129] usb 6-1: Using ep0 maxpacket: 8 [ 1544.832277][ T129] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1544.889125][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.959036][ T129] usb 6-1: Product: syz [ 1544.983697][ T129] usb 6-1: Manufacturer: syz [ 1545.006086][T15975] chnl_net:caif_netlink_parms(): no params data found [ 1545.022959][ T129] usb 6-1: SerialNumber: syz [ 1545.100421][ T129] usb 6-1: config 0 descriptor?? [ 1545.146931][ T129] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1546.188395][T15975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.206634][T15975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.742277][T15975] device bridge_slave_0 entered promiscuous mode [ 1546.765162][T15707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1546.796609][T15975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.810602][T15975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.845803][T15975] device bridge_slave_1 entered promiscuous mode [ 1546.849882][T11247] Bluetooth: hci4: command 0x040f tx timeout [ 1546.877562][T15707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1546.890806][T15707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1546.927519][T15707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1547.039960][T15975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.112052][T15975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.367577][T15903] usb 6-1: USB disconnect, device number 14 [ 1547.513117][T15975] team0: Port device team_slave_0 added [ 1547.614876][T15975] team0: Port device team_slave_1 added [ 1547.682524][T16044] sock: sock_timestamping_bind_phc: sock not bind to device [ 1547.852549][T16045] loop5: detected capacity change from 0 to 512 [ 1548.004984][T16045] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1548.057172][T15975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.087822][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.131279][T16045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 1548.169942][T15975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1548.176672][T16045] System zones: [ 1548.197888][T15707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1548.221274][T16045] 1-12 [ 1548.232251][T16045] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1548.238802][T16045] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3130: invalid indirect mapped block 12 (level 1) [ 1548.266022][T15975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1548.282296][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.319324][T16045] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3130: invalid indirect mapped block 2 (level 2) [ 1548.339022][T15975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.355062][T16045] EXT4-fs (loop5): 1 truncate cleaned up [ 1548.383127][T16045] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1548.541490][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1548.593689][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1548.689016][T11247] Bluetooth: hci2: command 0x0406 tx timeout [ 1548.718689][T15707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1548.760753][T15975] device hsr_slave_0 entered promiscuous mode [ 1548.799212][T11246] EXT4-fs (loop5): unmounting filesystem. [ 1548.906172][T15975] device hsr_slave_1 entered promiscuous mode [ 1548.930472][T11247] Bluetooth: hci4: command 0x0419 tx timeout [ 1548.951527][T15975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1548.993262][T16049] sock: sock_timestamping_bind_phc: sock not bind to device [ 1549.001403][T15975] Cannot create hsr debugfs directory [ 1549.042563][T16049] loop5: detected capacity change from 0 to 512 [ 1549.049339][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1549.069362][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1549.150770][T16049] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1549.159420][T10540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.167458][T10540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.199322][T16049] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 1549.207778][T16049] System zones: 1-12 [ 1549.229329][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1549.249711][T16049] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1549.256779][T16049] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3131: invalid indirect mapped block 12 (level 1) [ 1549.271446][T16049] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3131: invalid indirect mapped block 2 (level 2) [ 1549.285438][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1549.294164][T10540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.301400][T10540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1549.324924][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1549.329535][T16049] EXT4-fs (loop5): 1 truncate cleaned up [ 1549.339529][T16049] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1549.351018][T10540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1549.369954][T16051] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1549.425153][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1549.456528][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1549.487992][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1549.560579][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1549.596525][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1549.661480][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1549.825641][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1549.842738][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1549.861683][T15707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1549.890233][T15707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1550.555807][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1550.725050][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1551.228723][T11246] EXT4-fs (loop5): unmounting filesystem. [ 1551.721633][T16074] loop2: detected capacity change from 0 to 256 [ 1551.735026][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.746243][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.727891][T14391] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1553.432689][T15975] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1553.470189][T15975] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1553.547736][T15975] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1553.585822][T15975] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1553.592917][T15903] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1553.674695][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1553.686668][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1553.751597][T15707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.811740][T15903] usb 2-1: Using ep0 maxpacket: 8 [ 1553.825608][T15903] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1553.829287][T10938] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1553.845201][T15903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.857112][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1553.865933][T15903] usb 2-1: Product: syz [ 1553.870530][T15903] usb 2-1: Manufacturer: syz [ 1553.875162][T15903] usb 2-1: SerialNumber: syz [ 1553.881125][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1553.882925][T15903] usb 2-1: config 0 descriptor?? [ 1553.917389][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1553.928744][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1553.951999][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1553.969230][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1553.979051][T15707] device veth0_vlan entered promiscuous mode [ 1554.007078][T15707] device veth1_vlan entered promiscuous mode [ 1554.024849][T15975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1554.059228][T10938] usb 3-1: Using ep0 maxpacket: 8 [ 1554.072736][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1554.093396][T10938] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1554.103660][T15903] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1554.109671][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1554.127141][T10938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.136336][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1554.153438][T10938] usb 3-1: Product: syz [ 1554.157661][T10938] usb 3-1: Manufacturer: syz [ 1554.165718][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1554.183452][T10938] usb 3-1: SerialNumber: syz [ 1554.196705][T10938] usb 3-1: config 0 descriptor?? [ 1554.197936][T15975] 8021q: adding VLAN 0 to HW filter on device team0 [ 1554.216780][T10938] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1554.221240][T15707] device veth0_macvtap entered promiscuous mode [ 1554.235975][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1554.261971][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1554.321188][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1554.343025][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1554.364337][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1554.378273][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.385495][ T4403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.404146][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1554.420185][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1554.429543][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.436660][ T4403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.445540][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1554.458227][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1554.471441][T15707] device veth1_macvtap entered promiscuous mode [ 1554.483957][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1554.500226][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1554.538815][T15707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.552229][T15707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.563764][T15707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.574526][T15707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.585072][T15707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.596088][T15707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.606834][T15707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.618257][T15707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.634770][T15707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.654339][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1554.667554][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1554.677969][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1554.693021][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1554.702956][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1554.713118][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1554.727746][T15707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.752072][T15707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.779410][T15707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.808231][T15707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.829001][T15707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.849296][T15707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.871122][T15707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.891788][T15707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.913198][T15707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.937193][T15975] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1554.963766][T15975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1554.990460][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1555.010795][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1555.043337][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1555.068574][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1555.078805][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1555.088749][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1555.097949][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1555.110534][T15707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.120051][T15707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.128787][T15707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.138062][T15707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.159129][ T2904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1555.292087][T11290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.317224][T11290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.367687][ T4403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.370228][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1555.379306][ T4403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.403134][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1555.524961][T15903] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1555.548779][T15903] usb 2-1: USB disconnect, device number 37 [ 1555.616016][T16119] loop0: detected capacity change from 0 to 2048 [ 1555.715524][T16120] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1555.968759][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1555.989323][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1556.234584][T15975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1556.715181][ T7] usb 3-1: USB disconnect, device number 46 [ 1556.961379][T16136] sock: sock_timestamping_bind_phc: sock not bind to device [ 1556.985613][T16136] loop1: detected capacity change from 0 to 512 [ 1557.087007][T16136] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1557.214720][T16136] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 1557.270397][T16136] System zones: 1-12 [ 1557.332547][T16136] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1557.372817][T16136] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3140: invalid indirect mapped block 12 (level 1) [ 1557.493920][T16136] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3140: invalid indirect mapped block 2 (level 2) [ 1557.659078][T16136] EXT4-fs (loop1): 1 truncate cleaned up [ 1557.741944][T16136] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1558.243739][T15353] EXT4-fs (loop1): unmounting filesystem. [ 1558.857666][T16153] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1558.867109][T16153] qnx4: unable to read the superblock [ 1560.600394][T16156] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1561.547624][T16165] loop1: detected capacity change from 0 to 2048 [ 1561.576546][T11903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1561.607185][T11903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1561.692697][T16170] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1563.124661][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1563.630377][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1563.695016][T15975] device veth0_vlan entered promiscuous mode [ 1563.731945][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1563.756902][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1563.814385][T15975] device veth1_vlan entered promiscuous mode [ 1563.932046][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1563.971517][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1564.260362][T15975] device veth0_macvtap entered promiscuous mode [ 1565.150443][T15975] device veth1_macvtap entered promiscuous mode [ 1566.145324][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1566.184499][T16196] loop5: detected capacity change from 0 to 2048 [ 1566.206496][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.339689][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1566.429331][ T127] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1566.439837][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.460117][T16201] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1566.470958][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1566.484000][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.554847][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1566.565942][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.576650][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1566.747878][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1567.539063][ T127] usb 3-1: Using ep0 maxpacket: 8 [ 1567.548263][ T127] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1567.589855][T15975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1567.594481][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.616259][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1567.635674][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1567.657878][ T127] usb 3-1: Product: syz [ 1567.677822][ T127] usb 3-1: Manufacturer: syz [ 1567.697036][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1567.725363][ T127] usb 3-1: SerialNumber: syz [ 1567.730836][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1567.730922][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1567.730940][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1567.730960][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1567.730975][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1567.730994][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1567.731008][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1567.761684][ T127] usb 3-1: config 0 descriptor?? [ 1567.903685][ T127] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1568.012256][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1568.097503][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.161238][T15975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1568.199465][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1568.240887][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1568.280877][T15975] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.318407][T15975] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.354207][T15975] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.869762][T16222] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1568.879205][T16222] qnx4: unable to read the superblock [ 1570.175332][T15975] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.856790][T10938] usb 3-1: USB disconnect, device number 47 [ 1571.051812][ T5452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.119271][ T5452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.673932][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1571.705287][T16229] loop2: detected capacity change from 0 to 2048 [ 1571.740421][ T5452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.764814][ T5452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.834149][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1571.846592][T16231] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1573.351721][T16235] loop5: detected capacity change from 0 to 2048 [ 1573.429064][T16245] loop6: detected capacity change from 0 to 256 [ 1573.491088][T16250] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1574.268586][T14391] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1576.309275][T15903] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1576.610455][T15903] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1576.673502][T15903] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1576.923786][T15903] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1576.975016][T15903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.002562][T16260] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1577.764329][T16274] loop2: detected capacity change from 0 to 2048 [ 1578.086655][T16276] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1581.573333][ T14] usb 6-1: USB disconnect, device number 15 [ 1581.949071][T15903] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1582.149191][T15903] usb 7-1: Using ep0 maxpacket: 8 [ 1582.158035][T15903] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1582.220939][T15903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.269129][T15903] usb 7-1: Product: syz [ 1582.273435][T15903] usb 7-1: Manufacturer: syz [ 1582.278158][T15903] usb 7-1: SerialNumber: syz [ 1582.304228][T15903] usb 7-1: config 0 descriptor?? [ 1582.343448][T15903] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1583.614332][T15903] gspca_sonixj: reg_r err -110 [ 1583.619618][T15903] sonixj: probe of 7-1:0.0 failed with error -110 [ 1584.294907][T16295] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1584.304303][T16295] qnx4: unable to read the superblock [ 1584.529035][T11247] Bluetooth: hci3: command 0x0406 tx timeout [ 1586.784617][ T14] usb 7-1: USB disconnect, device number 2 [ 1588.166353][T16316] loop5: detected capacity change from 0 to 256 [ 1589.088215][T14789] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1589.649087][ T4302] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1590.529250][ T4302] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1590.739219][ T4302] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1590.915921][ T4302] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1590.925716][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.972148][T16320] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1591.746938][T16333] loop1: detected capacity change from 0 to 32768 [ 1591.920461][T16333] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1591.930850][T16333] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1591.939550][T16333] BTRFS info (device loop1): enabling auto defrag [ 1591.945980][T16333] BTRFS info (device loop1): doing ref verification [ 1591.952608][T16333] BTRFS info (device loop1): use no compression [ 1591.958901][T16333] BTRFS info (device loop1): force clearing of disk cache [ 1591.966038][T16333] BTRFS error (device loop1): unrecognized mount option 'max_inline=' [ 1591.974895][T16333] BTRFS error (device loop1): open_ctree failed: -22 [ 1592.699032][T16223] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1592.870356][T14878] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (14878) [ 1592.909033][T16223] usb 2-1: Using ep0 maxpacket: 8 [ 1592.918189][T16223] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1593.044523][T16223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.057884][T16223] usb 2-1: Product: syz [ 1593.072514][T16223] usb 2-1: Manufacturer: syz [ 1593.099561][T16223] usb 2-1: SerialNumber: syz [ 1593.156717][T15903] usb 3-1: USB disconnect, device number 48 [ 1593.197809][T16223] usb 2-1: config 0 descriptor?? [ 1593.257439][T16223] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1594.632877][T16223] usb 2-1: USB disconnect, device number 38 [ 1601.617423][T16376] loop6: detected capacity change from 0 to 256 [ 1603.711320][T16395] loop2: detected capacity change from 0 to 32768 [ 1603.768464][T16395] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1603.778980][T16395] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1603.787635][T16395] BTRFS info (device loop2): enabling auto defrag [ 1603.794108][T16395] BTRFS info (device loop2): doing ref verification [ 1603.800735][T16395] BTRFS info (device loop2): use no compression [ 1603.807063][T16395] BTRFS info (device loop2): force clearing of disk cache [ 1603.814246][T16395] BTRFS error (device loop2): unrecognized mount option 'max_' [ 1603.823998][T16395] BTRFS error (device loop2): open_ctree failed: -22 [ 1604.346865][T16401] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1604.800161][T14789] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (14789) [ 1604.858723][T16399] loop0: detected capacity change from 0 to 256 [ 1606.299021][T15903] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1606.579018][T13745] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1606.647916][T15903] usb 6-1: Using ep0 maxpacket: 8 [ 1606.700232][T15903] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1606.750580][T15903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.779500][T13745] usb 3-1: Using ep0 maxpacket: 8 [ 1606.787541][T13745] usb 3-1: config index 0 descriptor too short (expected 1821, got 853) [ 1606.788959][T15903] usb 6-1: Product: syz [ 1606.829003][T13745] usb 3-1: config 0 has an invalid interface number: 103 but max is 2 [ 1606.853334][T13745] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.878941][T15903] usb 6-1: Manufacturer: syz [ 1606.915384][T15903] usb 6-1: SerialNumber: syz [ 1606.943716][T13745] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1606.970810][T15903] usb 6-1: config 0 descriptor?? [ 1607.017552][T13745] usb 3-1: config 0 has no interface number 0 [ 1607.037219][T15903] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1607.040886][T13745] usb 3-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1607.104677][T13745] usb 3-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1607.146402][T13745] usb 3-1: config 0 interface 103 altsetting 9 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 1607.166640][T13745] usb 3-1: config 0 interface 103 has no altsetting 0 [ 1607.216199][T13745] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 1607.268218][T13745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.306735][T13745] usb 3-1: Product: syz [ 1607.328678][T13745] usb 3-1: Manufacturer: syz [ 1607.334073][T13745] usb 3-1: SerialNumber: syz [ 1607.341209][T13745] usb 3-1: config 0 descriptor?? [ 1607.623685][T13745] usb 3-1: USB disconnect, device number 49 [ 1607.810183][T15903] gspca_sonixj: reg_r err -71 [ 1607.815020][T15903] sonixj: probe of 6-1:0.0 failed with error -71 [ 1607.888637][T15903] usb 6-1: USB disconnect, device number 16 [ 1611.109155][ T14] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1611.282748][T16443] loop5: detected capacity change from 0 to 32768 [ 1611.306786][T16443] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1611.317128][T16443] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1611.325827][T16443] BTRFS info (device loop5): enabling auto defrag [ 1611.332340][T16443] BTRFS info (device loop5): doing ref verification [ 1611.339030][T16443] BTRFS info (device loop5): use no compression [ 1611.345308][T16443] BTRFS info (device loop5): force clearing of disk cache [ 1611.352493][T16443] BTRFS error (device loop5): unrecognized mount option 'max_inline=' [ 1611.361303][T16443] BTRFS error (device loop5): open_ctree failed: -22 [ 1611.863403][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 1611.873751][ T14] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1611.897767][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.938472][ T14] usb 3-1: Product: syz [ 1611.975465][ T14] usb 3-1: Manufacturer: syz [ 1611.981934][ T14] usb 3-1: SerialNumber: syz [ 1612.006829][ T14] usb 3-1: config 0 descriptor?? [ 1612.040809][ T14] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1612.437885][T14391] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (14391) [ 1612.569112][ T4307] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1612.679462][T16452] loop1: detected capacity change from 0 to 256 [ 1612.797514][ T4307] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1612.809076][ T4307] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1612.906943][ T14] gspca_sonixj: reg_r err -71 [ 1612.920085][ T14] sonixj: probe of 3-1:0.0 failed with error -71 [ 1612.939462][ T4307] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1612.957673][ T4307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.979535][ T14] usb 3-1: USB disconnect, device number 50 [ 1612.980779][T16449] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1613.062217][T14789] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1613.183113][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.189444][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.950045][T16463] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1615.377089][ T4307] usb 6-1: USB disconnect, device number 17 [ 1616.609843][ T14] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1617.660860][T16479] loop6: detected capacity change from 0 to 2048 [ 1617.769050][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 1617.800363][ T14] usb 2-1: config index 0 descriptor too short (expected 1821, got 853) [ 1617.841206][ T14] usb 2-1: config 0 has an invalid interface number: 103 but max is 2 [ 1617.894383][T16481] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1618.290110][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.446250][ T26] audit: type=1800 audit(1748372541.014:25): pid=16486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3227" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1618.491410][ T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1618.900490][ T14] usb 2-1: config 0 has no interface number 0 [ 1618.948128][ T14] usb 2-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1618.987746][ T14] usb 2-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1619.004948][ T14] usb 2-1: config 0 interface 103 altsetting 9 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 1619.018629][ T14] usb 2-1: config 0 interface 103 has no altsetting 0 [ 1619.046089][ T14] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 1619.112774][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.212984][ T14] usb 2-1: Product: syz [ 1619.217234][ T14] usb 2-1: Manufacturer: syz [ 1619.255701][ T14] usb 2-1: SerialNumber: syz [ 1619.286894][ T14] usb 2-1: config 0 descriptor?? [ 1619.302219][ T14] usb 2-1: can't set config #0, error -71 [ 1619.349759][ T14] usb 2-1: USB disconnect, device number 39 [ 1619.566795][T16491] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1622.389649][T16511] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1622.568973][T15903] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1622.799280][T15903] usb 1-1: Using ep0 maxpacket: 8 [ 1622.811400][T15903] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1623.021195][T15903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.031330][T15903] usb 1-1: Product: syz [ 1623.036824][T15903] usb 1-1: Manufacturer: syz [ 1623.044696][T15903] usb 1-1: SerialNumber: syz [ 1623.076061][T15903] usb 1-1: config 0 descriptor?? [ 1623.100478][T15903] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1623.922413][T15903] gspca_sonixj: reg_r err -71 [ 1623.927209][T15903] sonixj: probe of 1-1:0.0 failed with error -71 [ 1624.865773][T15903] usb 1-1: USB disconnect, device number 43 [ 1625.488980][T11247] Bluetooth: hci0: command 0x0406 tx timeout [ 1625.726175][T16520] loop0: detected capacity change from 0 to 256 [ 1625.933759][T16523] loop5: detected capacity change from 0 to 2048 [ 1626.062384][T16524] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1627.319228][T15903] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1628.099577][T16536] loop1: detected capacity change from 0 to 2048 [ 1628.189567][T16539] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1628.259075][T15903] usb 7-1: Using ep0 maxpacket: 8 [ 1628.266066][T15903] usb 7-1: config index 0 descriptor too short (expected 1821, got 853) [ 1628.543614][T15903] usb 7-1: config 0 has an invalid interface number: 103 but max is 2 [ 1628.579056][T15903] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.639518][T15903] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1628.730770][T15903] usb 7-1: config 0 has no interface number 0 [ 1629.005722][T15903] usb 7-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1629.021772][T15903] usb 7-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1629.071305][T15903] usb 7-1: config 0 interface 103 altsetting 9 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 1629.134562][T15903] usb 7-1: config 0 interface 103 has no altsetting 0 [ 1629.178139][T15903] usb 7-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 1629.226491][T15903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.265452][T15903] usb 7-1: Product: syz [ 1629.270041][T15903] usb 7-1: Manufacturer: syz [ 1629.302019][T15903] usb 7-1: SerialNumber: syz [ 1629.346047][T15903] usb 7-1: config 0 descriptor?? [ 1629.437173][ T26] audit: type=1800 audit(1748372552.004:26): pid=16536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3242" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1629.649649][T10938] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1630.196081][T15903] usb 7-1: USB disconnect, device number 3 [ 1630.299229][T10938] usb 3-1: Using ep0 maxpacket: 8 [ 1630.314460][T10938] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1630.344482][T10938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.368056][T10938] usb 3-1: Product: syz [ 1630.372772][T10938] usb 3-1: Manufacturer: syz [ 1630.385645][T10938] usb 3-1: SerialNumber: syz [ 1630.398335][T10938] usb 3-1: config 0 descriptor?? [ 1630.617397][T10938] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1631.020993][ T14] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1631.241453][T13745] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1631.358937][ T14] usb 6-1: Using ep0 maxpacket: 8 [ 1631.371596][ T14] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1631.419080][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.435185][ T14] usb 6-1: Product: syz [ 1631.449152][ T14] usb 6-1: Manufacturer: syz [ 1631.467618][ T14] usb 6-1: SerialNumber: syz [ 1631.473206][T13745] usb 7-1: Using ep0 maxpacket: 8 [ 1631.481531][T13745] usb 7-1: config index 0 descriptor too short (expected 1821, got 853) [ 1631.554593][ T14] usb 6-1: config 0 descriptor?? [ 1631.560974][T13745] usb 7-1: config 0 has an invalid interface number: 103 but max is 2 [ 1631.620660][ T14] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1631.633024][T13745] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.680717][T13745] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1631.770983][T13745] usb 7-1: config 0 has no interface number 0 [ 1631.823637][T13745] usb 7-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1631.908342][T13745] usb 7-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1632.065014][T10938] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1632.090831][T10938] usb 3-1: USB disconnect, device number 51 [ 1632.103261][T13745] usb 7-1: config 0 interface 103 altsetting 9 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 1632.154050][T13745] usb 7-1: config 0 interface 103 has no altsetting 0 [ 1632.203046][T13745] usb 7-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 1632.226765][T13745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.257261][T13745] usb 7-1: Product: syz [ 1632.267416][T13745] usb 7-1: Manufacturer: syz [ 1632.286979][T13745] usb 7-1: SerialNumber: syz [ 1632.316348][T13745] usb 7-1: config 0 descriptor?? [ 1632.413521][ T14] gspca_sonixj: reg_r err -71 [ 1632.418474][ T14] sonixj: probe of 6-1:0.0 failed with error -71 [ 1632.448467][ T14] usb 6-1: USB disconnect, device number 18 [ 1632.567887][T13745] usb 7-1: USB disconnect, device number 4 [ 1633.055316][T16573] loop2: detected capacity change from 0 to 2048 [ 1633.251735][T16575] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1635.267582][ T26] audit: type=1800 audit(1748372557.834:27): pid=16573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3251" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1635.689011][T11548] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1635.891604][T11548] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1635.924267][T11548] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1636.114249][T11548] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1636.157478][T11548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.183151][T16598] loop2: detected capacity change from 0 to 2048 [ 1636.264943][T16592] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1636.363581][T16601] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1637.869370][ T26] audit: type=1800 audit(1748372560.444:28): pid=16603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3256" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1638.218610][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3258'. [ 1639.009424][T11548] usb 6-1: USB disconnect, device number 19 [ 1641.273845][T10938] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1642.069164][T10938] usb 6-1: Using ep0 maxpacket: 8 [ 1642.086960][T10938] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1642.097911][T10938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.117095][T10938] usb 6-1: Product: syz [ 1642.123157][T10938] usb 6-1: Manufacturer: syz [ 1642.127760][T10938] usb 6-1: SerialNumber: syz [ 1642.145281][T10938] usb 6-1: config 0 descriptor?? [ 1642.363217][T10938] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1642.446401][T13745] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1642.648983][T13745] usb 2-1: Using ep0 maxpacket: 8 [ 1642.660246][T13745] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1642.680156][T13745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.689238][T13745] usb 2-1: Product: syz [ 1642.694580][T13745] usb 2-1: Manufacturer: syz [ 1642.699736][T13745] usb 2-1: SerialNumber: syz [ 1642.707121][T13745] usb 2-1: config 0 descriptor?? [ 1642.723950][T13745] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1643.498984][T11548] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1643.527699][T13745] gspca_sonixj: reg_r err -71 [ 1643.534674][T13745] sonixj: probe of 2-1:0.0 failed with error -71 [ 1643.559314][T13745] usb 2-1: USB disconnect, device number 40 [ 1643.631833][T16638] loop0: detected capacity change from 0 to 2048 [ 1643.680590][T16639] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1643.699065][T11548] usb 7-1: Using ep0 maxpacket: 8 [ 1643.721148][T11548] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1643.794554][T10938] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1643.905356][T11548] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.914222][T11548] usb 7-1: Product: syz [ 1643.918635][T11548] usb 7-1: Manufacturer: syz [ 1643.923680][T11548] usb 7-1: SerialNumber: syz [ 1643.923790][T10938] usb 6-1: USB disconnect, device number 20 [ 1643.936927][T11548] usb 7-1: config 0 descriptor?? [ 1644.059379][ T26] audit: type=1800 audit(1748372566.634:29): pid=16641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3268" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1644.150151][T11548] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1645.226088][T16651] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1646.332284][T16655] loop5: detected capacity change from 0 to 2048 [ 1646.433830][T16659] loop0: detected capacity change from 0 to 2048 [ 1646.480804][T11548] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 1646.491137][T16660] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1646.519348][T11548] usb 7-1: USB disconnect, device number 5 [ 1646.667908][T16661] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1647.698010][ T26] audit: type=1800 audit(1748372570.264:30): pid=16665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3274" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1647.914314][ T26] audit: type=1800 audit(1748372570.484:31): pid=16655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3272" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1648.328346][T16675] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3286'. [ 1652.107474][ T7] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1652.328948][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 1652.502728][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3282'. [ 1652.829019][ T7] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1652.849471][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.857512][ T7] usb 3-1: Product: syz [ 1652.866293][ T7] usb 3-1: Manufacturer: syz [ 1652.875048][ T7] usb 3-1: SerialNumber: syz [ 1652.893986][ T7] usb 3-1: config 0 descriptor?? [ 1652.903322][ T7] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1653.313580][T16703] loop5: detected capacity change from 0 to 256 [ 1653.711469][ T7] gspca_sonixj: reg_r err -110 [ 1653.732255][ T7] sonixj: probe of 3-1:0.0 failed with error -110 [ 1654.068947][ T7] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1654.121388][T16708] loop6: detected capacity change from 0 to 2048 [ 1654.230117][T16709] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1654.366076][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 1654.547338][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1654.610453][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.692105][ T7] usb 1-1: Product: syz [ 1654.734930][ T7] usb 1-1: Manufacturer: syz [ 1654.791755][ T7] usb 1-1: SerialNumber: syz [ 1654.904460][ T7] usb 1-1: config 0 descriptor?? [ 1655.226754][ T7] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1655.268127][T13745] usb 3-1: USB disconnect, device number 52 [ 1656.730482][ T7] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1656.775040][ T7] usb 1-1: USB disconnect, device number 44 [ 1660.421934][T16745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3296'. [ 1662.189063][T11548] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1663.209071][T11548] usb 6-1: Using ep0 maxpacket: 8 [ 1663.225360][T11548] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1663.245589][T11548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.286090][T11548] usb 6-1: Product: syz [ 1663.296221][T11548] usb 6-1: Manufacturer: syz [ 1663.301149][T11548] usb 6-1: SerialNumber: syz [ 1663.355914][T11548] usb 6-1: config 0 descriptor?? [ 1663.572916][T11548] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1663.638940][T15903] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1663.849004][T15903] usb 7-1: Using ep0 maxpacket: 8 [ 1663.861652][T15903] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1663.935910][T15903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.709804][T15903] usb 7-1: Product: syz [ 1664.738857][T15903] usb 7-1: Manufacturer: syz [ 1664.749522][T15903] usb 7-1: SerialNumber: syz [ 1664.782943][T15903] usb 7-1: config 0 descriptor?? [ 1664.848612][T15903] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1665.009047][T11548] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1665.065737][T11548] usb 6-1: USB disconnect, device number 21 [ 1665.234461][T15903] gspca_sonixj: reg_r err -32 [ 1665.239589][T15903] sonixj: probe of 7-1:0.0 failed with error -32 [ 1665.376124][T16769] loop2: detected capacity change from 0 to 2048 [ 1665.467909][T16770] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1666.448948][T11247] Bluetooth: hci4: command 0x0406 tx timeout [ 1666.896321][ T26] audit: type=1800 audit(1748372589.464:32): pid=16776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3303" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1667.234519][ T7] usb 7-1: USB disconnect, device number 6 [ 1667.899987][T16789] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3308'. [ 1668.913935][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3307'. [ 1669.695718][T16804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3319'. [ 1673.129281][T11548] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1673.329269][T11548] usb 2-1: Using ep0 maxpacket: 8 [ 1673.397438][T11548] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1673.424113][T11548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.726970][T11548] usb 2-1: Product: syz [ 1673.772288][T11548] usb 2-1: Manufacturer: syz [ 1673.782428][T11548] usb 2-1: SerialNumber: syz [ 1673.818054][T11548] usb 2-1: config 0 descriptor?? [ 1673.948645][T16837] loop6: detected capacity change from 0 to 2048 [ 1674.037577][T16838] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1674.074613][T11548] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1674.083321][T13745] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1674.328604][ T26] audit: type=1800 audit(1748372596.894:33): pid=16840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3322" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1674.529317][T13745] usb 6-1: Using ep0 maxpacket: 8 [ 1674.547298][T13745] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1674.611593][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.620131][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.638103][T13745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.708897][T13745] usb 6-1: Product: syz [ 1674.727950][T13745] usb 6-1: Manufacturer: syz [ 1674.768726][T13745] usb 6-1: SerialNumber: syz [ 1674.812506][T13745] usb 6-1: config 0 descriptor?? [ 1674.852550][T13745] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1675.219325][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3324'. [ 1675.284662][T13745] gspca_sonixj: reg_r err -32 [ 1675.716885][T13745] sonixj: probe of 6-1:0.0 failed with error -32 [ 1675.953107][T11548] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1675.989462][T11548] usb 2-1: USB disconnect, device number 41 [ 1676.054766][T16850] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3325'. [ 1676.900651][ T4307] usb 6-1: USB disconnect, device number 22 [ 1682.724058][T16888] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1682.802304][T16886] loop5: detected capacity change from 0 to 2048 [ 1682.937622][T16892] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1683.186950][T16896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3336'. [ 1684.319975][ T26] audit: type=1800 audit(1748372606.894:34): pid=16897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3334" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1684.849921][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3339'. [ 1684.998985][ T7] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1685.389077][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 1686.374555][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1686.420551][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.473290][ T7] usb 1-1: Product: syz [ 1686.497794][ T7] usb 1-1: Manufacturer: syz [ 1686.521916][ T7] usb 1-1: SerialNumber: syz [ 1686.576453][ T7] usb 1-1: config 0 descriptor?? [ 1686.615503][ T7] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1687.014597][ T7] gspca_sonixj: reg_r err -32 [ 1687.038753][ T7] sonixj: probe of 1-1:0.0 failed with error -32 [ 1688.528308][T16293] usb 1-1: USB disconnect, device number 45 [ 1691.719391][T16943] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3349'. [ 1692.382972][T16293] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1692.589058][T16293] usb 1-1: Using ep0 maxpacket: 8 [ 1693.503795][T16293] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1693.549093][T16293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.577629][T16293] usb 1-1: Product: syz [ 1693.656187][T16293] usb 1-1: Manufacturer: syz [ 1693.671948][T16293] usb 1-1: SerialNumber: syz [ 1693.682827][T16293] usb 1-1: config 0 descriptor?? [ 1695.404418][T16293] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 1695.422579][T16293] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1695.520815][T16293] usb 1-1: USB disconnect, device number 46 [ 1696.909095][T13745] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1697.848966][T13745] usb 2-1: Using ep0 maxpacket: 8 [ 1697.865551][T13745] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1697.942348][T13745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.977801][T13745] usb 2-1: Product: syz [ 1697.994071][T13745] usb 2-1: Manufacturer: syz [ 1698.024417][T13745] usb 2-1: SerialNumber: syz [ 1698.048465][T16981] loop2: detected capacity change from 0 to 2048 [ 1698.060264][T13745] usb 2-1: config 0 descriptor?? [ 1698.120989][T13745] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1698.382433][T16986] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1698.408693][T16987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3363'. [ 1699.024588][T13745] gspca_sonixj: reg_r err -32 [ 1699.044884][T13745] sonixj: probe of 2-1:0.0 failed with error -32 [ 1699.693017][ T26] audit: type=1800 audit(1748372622.264:35): pid=16988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3362" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1700.216005][T16996] loop6: detected capacity change from 0 to 256 [ 1700.592459][ T4307] usb 2-1: USB disconnect, device number 42 [ 1701.909272][T17006] loop2: detected capacity change from 0 to 2048 [ 1702.024863][T17007] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1707.917745][T17039] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3374'. [ 1709.038999][ T4307] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1710.103428][T17048] loop1: detected capacity change from 0 to 2048 [ 1710.210919][ T4307] usb 1-1: Using ep0 maxpacket: 8 [ 1710.221535][ T4307] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1710.250728][T17053] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1710.265551][ T4307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.277774][ T4307] usb 1-1: Product: syz [ 1710.284298][ T4307] usb 1-1: Manufacturer: syz [ 1710.291212][ T4307] usb 1-1: SerialNumber: syz [ 1710.329499][ T4307] usb 1-1: config 0 descriptor?? [ 1710.373645][ T4307] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1710.531636][ T26] audit: type=1800 audit(1748372633.094:36): pid=17055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3378" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1710.771633][ T4307] gspca_sonixj: reg_r err -32 [ 1710.778145][ T4307] sonixj: probe of 1-1:0.0 failed with error -32 [ 1711.998668][ T127] usb 1-1: USB disconnect, device number 47 [ 1717.439671][T17091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3388'. [ 1717.900390][T17093] loop6: detected capacity change from 0 to 2048 [ 1717.974017][T17096] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1718.593830][ T26] audit: type=1800 audit(1748372641.164:37): pid=17100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3391" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1719.691667][T17105] loop5: detected capacity change from 0 to 2048 [ 1719.805034][T17108] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1720.597517][ T127] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1720.825659][T17115] loop5: detected capacity change from 0 to 2048 [ 1721.629064][ T127] usb 7-1: Using ep0 maxpacket: 8 [ 1721.638008][ T127] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1721.797984][T17119] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1721.821365][ T127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.936694][ T127] usb 7-1: Product: syz [ 1722.072613][ T127] usb 7-1: Manufacturer: syz [ 1722.077240][ T127] usb 7-1: SerialNumber: syz [ 1722.205233][ T26] audit: type=1800 audit(1748372644.774:38): pid=17125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3396" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1722.442154][ T127] usb 7-1: config 0 descriptor?? [ 1722.575480][ T127] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1722.861090][ T127] gspca_sonixj: reg_r err -32 [ 1723.527538][ T127] sonixj: probe of 7-1:0.0 failed with error -32 [ 1724.240177][T17128] loop2: detected capacity change from 0 to 32768 [ 1724.281098][T17128] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1724.291429][T17128] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1724.300156][T17128] BTRFS info (device loop2): enabling auto defrag [ 1724.306614][T17128] BTRFS info (device loop2): doing ref verification [ 1724.313289][T17128] BTRFS info (device loop2): use no compression [ 1724.319601][T17128] BTRFS info (device loop2): force clearing of disk cache [ 1724.326733][T17128] BTRFS error (device loop2): unrecognized mount option 'max_inline=' [ 1724.336308][T17128] BTRFS error (device loop2): open_ctree failed: -22 [ 1724.463376][ T127] usb 7-1: USB disconnect, device number 7 [ 1726.479106][T17149] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3402'. [ 1727.175987][T14391] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (14391) [ 1727.294976][T17161] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3417'. [ 1728.015439][T17160] loop5: detected capacity change from 0 to 2048 [ 1730.215593][T17160] NILFS (loop5): error -4 creating segctord thread [ 1732.399795][T17184] loop0: detected capacity change from 0 to 2048 [ 1732.450671][T17194] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1733.654466][T17196] loop5: detected capacity change from 0 to 1024 [ 1734.619337][T17196] EXT4-fs warning (device loop5): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop5. [ 1735.014703][T17211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3421'. [ 1735.857501][T17213] loop1: detected capacity change from 0 to 2048 [ 1736.052254][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.058622][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.158087][T17221] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1737.732269][T17230] loop0: detected capacity change from 0 to 2048 [ 1737.822835][T17233] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1738.745789][T17229] loop2: detected capacity change from 0 to 4096 [ 1738.925762][ T26] audit: type=1800 audit(1748372661.494:39): pid=17236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3426" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1738.989573][T17229] ntfs3: Unknown parameter 'hide_dot_files' [ 1740.968889][T16293] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1741.728904][T16293] usb 1-1: Using ep0 maxpacket: 8 [ 1741.738494][T16293] usb 1-1: config index 0 descriptor too short (expected 1821, got 853) [ 1741.785529][T16293] usb 1-1: config 0 has an invalid interface number: 103 but max is 2 [ 1741.822607][T16293] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.853329][T16293] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1741.881036][T16293] usb 1-1: config 0 has no interface number 0 [ 1741.897699][T16293] usb 1-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1741.908940][T16293] usb 1-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1741.936668][T17265] loop6: detected capacity change from 0 to 1024 [ 1741.943134][T16293] usb 1-1: config 0 interface 103 altsetting 9 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 1741.958455][T16293] usb 1-1: config 0 interface 103 has no altsetting 0 [ 1741.969912][T16293] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 1741.987258][T16293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.997292][T16293] usb 1-1: Product: syz [ 1742.007439][T16293] usb 1-1: Manufacturer: syz [ 1742.018622][T16293] usb 1-1: SerialNumber: syz [ 1742.051912][T17265] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1742.073153][T16293] usb 1-1: config 0 descriptor?? [ 1742.188968][T13745] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1742.311650][T16293] usb 1-1: USB disconnect, device number 48 [ 1742.378970][T13745] usb 2-1: Using ep0 maxpacket: 8 [ 1742.387726][T13745] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1742.456987][T13745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.493887][T13745] usb 2-1: Product: syz [ 1742.508444][T13745] usb 2-1: Manufacturer: syz [ 1742.534759][T13745] usb 2-1: SerialNumber: syz [ 1742.568665][T13745] usb 2-1: config 0 descriptor?? [ 1742.804954][T13745] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1742.874986][T17253] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3433'. [ 1742.880966][T15975] EXT4-fs (loop6): unmounting filesystem. [ 1745.143736][T13745] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1745.170690][T13745] usb 2-1: USB disconnect, device number 43 [ 1749.776980][T17309] loop2: detected capacity change from 0 to 2048 [ 1749.865351][T17313] loop0: detected capacity change from 0 to 1024 [ 1749.906525][T17316] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1750.208882][ T26] audit: type=1800 audit(1748372672.774:40): pid=17320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3447" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1750.439526][T17313] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1750.954483][T15707] EXT4-fs (loop0): unmounting filesystem. [ 1753.688909][T13745] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1753.925458][T17348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3456'. [ 1754.811337][T13745] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1755.078874][T13745] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1755.089309][T13745] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1755.098382][T13745] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.119944][T17341] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1757.028636][T15903] usb 7-1: USB disconnect, device number 8 [ 1757.472438][T17366] loop6: detected capacity change from 0 to 512 [ 1757.517601][T17364] loop2: detected capacity change from 0 to 2048 [ 1757.538662][T17366] EXT4-fs: inline encryption not supported [ 1758.597274][T17366] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.3463: inode #1: comm syz.6.3463: iget: illegal inode # [ 1758.682892][T17373] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1759.434202][T17366] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.3463: error while reading EA inode 1 err=-117 [ 1759.490177][T17366] EXT4-fs (loop6): 1 orphan inode deleted [ 1759.496160][T17366] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1760.694825][T15975] EXT4-fs (loop6): unmounting filesystem. [ 1761.146876][T17390] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3467'. [ 1766.116295][T17417] loop5: detected capacity change from 0 to 512 [ 1766.166820][T17417] EXT4-fs: inline encryption not supported [ 1766.239973][T17417] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.3473: inode #1: comm syz.5.3473: iget: illegal inode # [ 1766.293196][T17417] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.3473: error while reading EA inode 1 err=-117 [ 1766.313908][T17417] EXT4-fs (loop5): 1 orphan inode deleted [ 1766.341755][T17417] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1767.203113][T11246] EXT4-fs (loop5): unmounting filesystem. [ 1767.797564][T17434] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3477'. [ 1769.537687][T17425] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1769.547173][T17425] qnx4: unable to read the superblock [ 1769.580593][T17441] loop5: detected capacity change from 0 to 256 [ 1771.756940][ T14] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1772.409035][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 1772.415998][ T14] usb 3-1: config index 0 descriptor too short (expected 1821, got 853) [ 1772.455125][ T14] usb 3-1: config 0 has an invalid interface number: 103 but max is 2 [ 1772.492441][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.513130][ T14] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1772.535896][ T14] usb 3-1: config 0 has no interface number 0 [ 1772.543619][ T14] usb 3-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1772.555116][ T14] usb 3-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1772.575467][ T14] usb 3-1: config 0 interface 103 altsetting 9 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 1772.599148][ T14] usb 3-1: config 0 interface 103 has no altsetting 0 [ 1772.612251][ T14] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 1773.432399][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.442548][ T14] usb 3-1: Product: syz [ 1773.446723][ T14] usb 3-1: Manufacturer: syz [ 1773.451695][ T14] usb 3-1: SerialNumber: syz [ 1773.463607][ T14] usb 3-1: config 0 descriptor?? [ 1773.685751][ T14] usb 3-1: USB disconnect, device number 53 [ 1776.111651][T17475] overlayfs: failed to resolve './file0': -2 [ 1778.495798][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3493'. [ 1780.654200][T17504] loop0: detected capacity change from 0 to 256 [ 1781.499133][ T4307] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1782.029065][ T4307] usb 7-1: device descriptor read/64, error -71 [ 1782.369469][ T4307] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1782.549021][ T4307] usb 7-1: device descriptor read/64, error -71 [ 1782.679145][ T4307] usb usb7-port1: attempt power cycle [ 1783.188869][ T4307] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1783.235650][ T4307] usb 7-1: device descriptor read/8, error -71 [ 1783.267221][T17521] loop2: detected capacity change from 0 to 256 [ 1783.539356][ T4307] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1783.596015][ T4307] usb 7-1: device descriptor read/8, error -71 [ 1783.597565][T17517] loop1: detected capacity change from 0 to 4096 [ 1783.698656][T17517] ntfs3: Unknown parameter 'hide_dot_files' [ 1783.719830][ T4307] usb usb7-port1: unable to enumerate USB device [ 1786.192634][T17541] sock: sock_timestamping_bind_phc: sock not bind to device [ 1786.296520][T17541] loop6: detected capacity change from 0 to 512 [ 1786.347984][T17541] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1786.519361][T17541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 1786.529897][T17541] System zones: 1-12 [ 1786.614562][T17541] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1787.260840][T17541] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3507: invalid indirect mapped block 12 (level 1) [ 1787.294951][T17541] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3507: invalid indirect mapped block 2 (level 2) [ 1787.409597][T17541] EXT4-fs (loop6): 1 truncate cleaned up [ 1787.438357][T17541] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1787.472498][T17551] overlayfs: failed to resolve './file0': -2 [ 1788.400861][T17558] loop1: detected capacity change from 0 to 256 [ 1788.965861][T17560] loop2: detected capacity change from 0 to 512 [ 1788.980725][T15975] EXT4-fs (loop6): unmounting filesystem. [ 1789.011433][T17560] EXT4-fs: inline encryption not supported [ 1789.146662][T17560] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3513: inode #1: comm syz.2.3513: iget: illegal inode # [ 1789.336929][T17560] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3513: error while reading EA inode 1 err=-117 [ 1789.434252][T17560] EXT4-fs (loop2): 1 orphan inode deleted [ 1789.499062][T10938] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1789.522137][T17560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1789.679015][T10938] usb 2-1: device descriptor read/64, error -71 [ 1789.717917][T17568] loop0: detected capacity change from 0 to 2048 [ 1789.958875][T10938] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1790.148931][T10938] usb 2-1: device descriptor read/64, error -71 [ 1790.299490][T10938] usb usb2-port1: attempt power cycle [ 1790.363415][T17572] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1791.578864][T10938] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1791.599543][T15124] EXT4-fs (loop2): unmounting filesystem. [ 1791.630166][T10938] usb 2-1: device descriptor read/8, error -71 [ 1791.851448][T17585] loop5: detected capacity change from 0 to 256 [ 1792.268894][T10938] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1794.004923][T10938] usb 2-1: device descriptor read/8, error -71 [ 1794.569025][T10938] usb usb2-port1: unable to enumerate USB device [ 1796.036866][T17603] loop0: detected capacity change from 0 to 2048 [ 1796.805261][T17605] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1796.845203][T17609] sock: sock_timestamping_bind_phc: sock not bind to device [ 1796.862745][T17609] loop2: detected capacity change from 0 to 512 [ 1796.878567][T17609] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1796.949177][T17609] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 1797.211285][T17609] System zones: 1-12 [ 1797.493261][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.501850][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.515149][T17609] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1797.553119][T17609] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3529: invalid indirect mapped block 12 (level 1) [ 1797.567694][T17609] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3529: invalid indirect mapped block 2 (level 2) [ 1797.582787][T17609] EXT4-fs (loop2): 1 truncate cleaned up [ 1797.588491][T17609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1797.831245][ T26] audit: type=1800 audit(1748372720.384:41): pid=17620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3525" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1798.266295][T17622] loop6: detected capacity change from 0 to 256 [ 1798.441221][T17619] overlayfs: failed to resolve './file0': -2 [ 1798.733449][T15124] EXT4-fs (loop2): unmounting filesystem. [ 1800.151023][T17636] loop6: detected capacity change from 0 to 512 [ 1800.204340][T17636] EXT4-fs: inline encryption not supported [ 1800.391747][T17636] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.3533: inode #1: comm syz.6.3533: iget: illegal inode # [ 1800.441186][T17636] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.3533: error while reading EA inode 1 err=-117 [ 1800.448993][T10938] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1800.608932][T10938] usb 1-1: device descriptor read/64, error -71 [ 1800.627302][T17636] EXT4-fs (loop6): 1 orphan inode deleted [ 1800.655622][T17636] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1800.879067][T10938] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1801.070539][T10938] usb 1-1: device descriptor read/64, error -71 [ 1801.199023][T10938] usb usb1-port1: attempt power cycle [ 1801.358693][T15975] EXT4-fs (loop6): unmounting filesystem. [ 1801.636140][T10938] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1802.576635][T17650] loop6: detected capacity change from 0 to 256 [ 1803.009797][T10938] usb 1-1: device descriptor read/8, error -71 [ 1803.678981][T10938] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1803.923289][T10938] usb 1-1: device not accepting address 52, error -71 [ 1804.546409][T10938] usb usb1-port1: unable to enumerate USB device [ 1806.744354][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 1807.283542][T17680] loop2: detected capacity change from 0 to 256 [ 1808.299582][T10938] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1808.938983][T10938] usb 2-1: Using ep0 maxpacket: 8 [ 1808.949295][T10938] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1809.012287][T10938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.042568][T10938] usb 2-1: Product: syz [ 1809.046804][T10938] usb 2-1: Manufacturer: syz [ 1809.138900][T15903] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1809.177993][T10938] usb 2-1: SerialNumber: syz [ 1809.192695][T10938] usb 2-1: config 0 descriptor?? [ 1809.408885][T15903] usb 7-1: Using ep0 maxpacket: 8 [ 1809.973231][T10938] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1810.030065][T15903] usb 7-1: config index 0 descriptor too short (expected 1821, got 853) [ 1810.161994][T15903] usb 7-1: config 0 has an invalid interface number: 103 but max is 2 [ 1810.218926][T15903] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1810.230952][T15903] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1810.241811][T15903] usb 7-1: config 0 has no interface number 0 [ 1810.248897][T15903] usb 7-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1810.260311][T15903] usb 7-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1810.272034][T15903] usb 7-1: config 0 interface 103 altsetting 9 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 1810.323599][T15903] usb 7-1: config 0 interface 103 has no altsetting 0 [ 1810.377029][T15903] usb 7-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 1810.387299][T15903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.395675][T15903] usb 7-1: Product: syz [ 1810.400351][T15903] usb 7-1: Manufacturer: syz [ 1810.405038][T15903] usb 7-1: SerialNumber: syz [ 1810.426175][T15903] usb 7-1: config 0 descriptor?? [ 1810.718353][T15903] usb 7-1: USB disconnect, device number 13 [ 1811.018931][T16293] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1811.199399][T16293] usb 1-1: device descriptor read/64, error -71 [ 1811.558855][T16293] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1811.700094][T10938] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1811.732010][T10938] usb 2-1: USB disconnect, device number 48 [ 1811.736107][T16293] usb 1-1: device descriptor read/64, error -71 [ 1812.013872][T17709] loop2: detected capacity change from 0 to 256 [ 1812.322058][T16293] usb usb1-port1: attempt power cycle [ 1812.738911][T16293] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1812.861303][T16293] usb 1-1: device descriptor read/8, error -71 [ 1814.248903][T16293] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1814.782396][T16293] usb 1-1: device descriptor read/8, error -71 [ 1814.899043][T16293] usb usb1-port1: unable to enumerate USB device [ 1815.975536][T17728] loop0: detected capacity change from 0 to 256 [ 1818.538421][T17749] loop1: detected capacity change from 0 to 512 [ 1818.579649][T17749] EXT4-fs: inline encryption not supported [ 1818.664124][T17749] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3563: inode #1: comm syz.1.3563: iget: illegal inode # [ 1818.853436][T17749] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3563: error while reading EA inode 1 err=-117 [ 1818.928000][T17749] EXT4-fs (loop1): 1 orphan inode deleted [ 1818.967859][T17749] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1820.132393][T15353] EXT4-fs (loop1): unmounting filesystem. [ 1821.018860][T10938] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1821.048871][ T14] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1821.208888][T10938] usb 7-1: Using ep0 maxpacket: 8 [ 1821.214161][ T14] usb 3-1: device descriptor read/64, error -71 [ 1821.222822][T17757] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1821.234764][T10938] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1821.264560][T17757] qnx4: unable to read the superblock [ 1821.273946][T10938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.439233][T10938] usb 7-1: Product: syz [ 1821.443453][T10938] usb 7-1: Manufacturer: syz [ 1821.449376][T10938] usb 7-1: SerialNumber: syz [ 1821.479878][T10938] usb 7-1: config 0 descriptor?? [ 1821.589052][ T14] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1821.712608][T10938] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1822.009093][ T14] usb 3-1: device descriptor read/64, error -71 [ 1822.329341][ T14] usb usb3-port1: attempt power cycle [ 1822.738945][ T14] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1823.234474][T10938] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 1823.262453][ T14] usb 3-1: device descriptor read/8, error -71 [ 1823.273824][T10938] usb 7-1: USB disconnect, device number 14 [ 1824.003507][T17779] loop1: detected capacity change from 0 to 2048 [ 1824.165757][T17785] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1826.608933][T13745] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1826.798829][T13745] usb 6-1: Using ep0 maxpacket: 8 [ 1826.957660][T13745] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1826.975895][T13745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.986994][T13745] usb 6-1: Product: syz [ 1826.993209][T13745] usb 6-1: Manufacturer: syz [ 1826.997833][T13745] usb 6-1: SerialNumber: syz [ 1827.036085][T13745] usb 6-1: config 0 descriptor?? [ 1827.858436][T13745] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1830.272664][T17827] loop0: detected capacity change from 0 to 4096 [ 1830.332676][T17827] ntfs3: Unknown parameter 'hide_dot_files' [ 1830.353482][T17829] loop2: detected capacity change from 0 to 2048 [ 1830.500423][ T14] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1830.520144][T13745] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1830.544159][T13745] usb 6-1: USB disconnect, device number 23 [ 1830.577744][T17831] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1831.288969][ T14] usb 2-1: device descriptor read/64, error -71 [ 1832.618907][ T14] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1832.809082][ T14] usb 2-1: device descriptor read/64, error -71 [ 1834.221092][ T14] usb usb2-port1: attempt power cycle [ 1834.928839][ T4307] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1835.118888][ T4307] usb 1-1: Using ep0 maxpacket: 8 [ 1835.159771][ T4307] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1836.212919][ T4307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.277481][ T4307] usb 1-1: Product: syz [ 1836.282741][ T4307] usb 1-1: Manufacturer: syz [ 1836.299182][ T4307] usb 1-1: SerialNumber: syz [ 1836.337362][ T4307] usb 1-1: config 0 descriptor?? [ 1836.676343][ T4307] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1837.894478][ T4307] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1837.986845][ T4307] usb 1-1: USB disconnect, device number 57 [ 1839.032174][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3603'. [ 1839.042691][T17888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3603'. [ 1839.254057][ T14] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1840.158912][ T14] usb 7-1: Using ep0 maxpacket: 16 [ 1840.165918][ T14] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1840.193287][ T14] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1840.235672][ T14] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1840.329812][ T14] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1840.817875][T17900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3607'. [ 1840.831047][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.872197][ T14] usb 7-1: Product: syz [ 1840.877250][ T14] usb 7-1: Manufacturer: syz [ 1840.887417][ T14] usb 7-1: SerialNumber: syz [ 1841.310294][ T14] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 1841.498982][T17912] capability: warning: `syz.0.3610' uses deprecated v2 capabilities in a way that may be insecure [ 1842.184224][ T14] usb 7-1: 2:1: cannot get freq at ep 0x82 [ 1842.351830][ T14] usb 7-1: USB disconnect, device number 15 [ 1843.661427][T17930] Bluetooth: MGMT ver 1.22 [ 1843.676756][T14878] udevd[14878]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1846.666573][T17949] loop5: detected capacity change from 0 to 128 [ 1847.344233][T17949] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1847.386097][T17949] ext4 filesystem being mounted at /326/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1847.460784][T17957] loop0: detected capacity change from 0 to 256 [ 1848.577208][T11246] EXT4-fs (loop5): unmounting filesystem. [ 1848.900675][T17971] loop5: detected capacity change from 0 to 512 [ 1848.926781][T17971] EXT4-fs: Ignoring removed i_version option [ 1848.941283][T17971] EXT4-fs: Ignoring removed i_version option [ 1849.140429][T17971] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1849.155301][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3632'. [ 1849.582700][T15903] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1850.429586][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'. [ 1850.504221][T17995] loop1: detected capacity change from 0 to 512 [ 1850.511442][T17995] EXT4-fs: Ignoring removed oldalloc option [ 1850.565278][T17995] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1850.578528][T17995] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1850.679827][T17995] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1850.693793][T17995] EXT4-fs (loop1): 1 truncate cleaned up [ 1850.700491][T17995] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1851.280536][T11246] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz-executor: corrupted in-inode xattr [ 1851.312694][T15903] usb 1-1: Using ep0 maxpacket: 8 [ 1851.320156][T15903] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1851.332164][T15903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1851.343272][T15903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1851.358884][T15903] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1851.369339][T15353] EXT4-fs (loop1): unmounting filesystem. [ 1851.397312][T11246] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz-executor: corrupted in-inode xattr [ 1851.423033][T15903] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1851.450135][T15903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.674647][T15903] usb 1-1: GET_CAPABILITIES returned 0 [ 1851.683686][T15903] usbtmc 1-1:16.0: can't read capabilities [ 1851.892225][T16293] usb 1-1: USB disconnect, device number 58 [ 1851.955163][T18003] loop1: detected capacity change from 0 to 512 [ 1853.678248][T18003] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1853.687399][T18003] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1853.708684][T11246] EXT4-fs (loop5): unmounting filesystem. [ 1853.895232][T15353] EXT4-fs (loop1): unmounting filesystem. [ 1853.947373][ T4401] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.986068][T18011] netlink: 'syz.0.3641': attribute type 10 has an invalid length. [ 1854.204892][T18011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1854.272072][T18011] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1854.393488][ T4401] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.784130][ T4401] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.067646][ T4401] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.091876][T18035] [ 1856.094244][T18035] ====================================================== [ 1856.101263][T18035] WARNING: possible circular locking dependency detected [ 1856.108304][T18035] 6.1.140-syzkaller #0 Not tainted [ 1856.113424][T18035] ------------------------------------------------------ [ 1856.120469][T18035] syz.2.3650/18035 is trying to acquire lock: [ 1856.126554][T18035] ffff888079451f90 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd4/0xa60 [ 1856.138122][T18035] [ 1856.138122][T18035] but task is already holding lock: [ 1856.145509][T18035] ffff888079450c70 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 1856.154620][T18035] [ 1856.154620][T18035] which lock already depends on the new lock. [ 1856.154620][T18035] [ 1856.165049][T18035] [ 1856.165049][T18035] the existing dependency chain (in reverse order) is: [ 1856.174164][T18035] [ 1856.174164][T18035] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1856.181909][T18035] lock_sock_nested+0x44/0x100 [ 1856.187259][T18035] smc_listen_out+0x109/0x3d0 [ 1856.192484][T18035] process_one_work+0x898/0x1160 [ 1856.197944][T18035] worker_thread+0xaa2/0x1250 [ 1856.203191][T18035] kthread+0x29d/0x330 [ 1856.207792][T18035] ret_from_fork+0x1f/0x30 [ 1856.212774][T18035] [ 1856.212774][T18035] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1856.222939][T18035] __lock_acquire+0x2cf8/0x7c50 [ 1856.228384][T18035] lock_acquire+0x1b4/0x490 [ 1856.233414][T18035] __flush_work+0xed/0xa60 [ 1856.238353][T18035] __cancel_work_timer+0x3ac/0x520 [ 1856.243989][T18035] smc_clcsock_release+0x5c/0xe0 [ 1856.249510][T18035] __smc_release+0x661/0x7d0 [ 1856.254621][T18035] smc_close_non_accepted+0xd1/0x1f0 [ 1856.260426][T18035] smc_close_active+0xb00/0xea0 [ 1856.265800][T18035] __smc_release+0x8d/0x7d0 [ 1856.270824][T18035] smc_release+0x2ca/0x530 [ 1856.275770][T18035] sock_close+0xd5/0x240 [ 1856.280532][T18035] __fput+0x22c/0x920 [ 1856.285081][T18035] task_work_run+0x1ca/0x250 [ 1856.290209][T18035] exit_to_user_mode_loop+0xe6/0x110 [ 1856.296070][T18035] exit_to_user_mode_prepare+0xb1/0x140 [ 1856.302140][T18035] syscall_exit_to_user_mode+0x16/0x40 [ 1856.308134][T18035] do_syscall_64+0x58/0xa0 [ 1856.313071][T18035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1856.319542][T18035] [ 1856.319542][T18035] other info that might help us debug this: [ 1856.319542][T18035] [ 1856.329765][T18035] Possible unsafe locking scenario: [ 1856.329765][T18035] [ 1856.337208][T18035] CPU0 CPU1 [ 1856.342574][T18035] ---- ---- [ 1856.347929][T18035] lock(sk_lock-AF_SMC/1); [ 1856.352435][T18035] lock((work_completion)(&new_smc->smc_listen_work)); [ 1856.361887][T18035] lock(sk_lock-AF_SMC/1); [ 1856.368915][T18035] lock((work_completion)(&new_smc->smc_listen_work)); [ 1856.375848][T18035] [ 1856.375848][T18035] *** DEADLOCK *** [ 1856.375848][T18035] [ 1856.383981][T18035] 2 locks held by syz.2.3650/18035: [ 1856.389170][T18035] #0: ffff88805585d610 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1856.399361][T18035] #1: ffff888079450c70 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 1856.408798][T18035] [ 1856.408798][T18035] stack backtrace: [ 1856.414710][T18035] CPU: 0 PID: 18035 Comm: syz.2.3650 Not tainted 6.1.140-syzkaller #0 [ 1856.422871][T18035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1856.432946][T18035] Call Trace: [ 1856.436229][T18035] [ 1856.439165][T18035] dump_stack_lvl+0x168/0x22e [ 1856.443850][T18035] ? load_image+0x3b0/0x3b0 [ 1856.448393][T18035] ? show_regs_print_info+0x12/0x12 [ 1856.453617][T18035] ? print_circular_bug+0x12b/0x1a0 [ 1856.458833][T18035] check_noncircular+0x274/0x310 [ 1856.463780][T18035] ? add_chain_block+0x940/0x940 [ 1856.468728][T18035] ? lockdep_lock+0xdc/0x1e0 [ 1856.473351][T18035] ? rcu_is_watching+0x11/0xa0 [ 1856.478178][T18035] ? lock_release+0xd4/0x910 [ 1856.482776][T18035] ? _find_first_zero_bit+0xcf/0x100 [ 1856.488127][T18035] __lock_acquire+0x2cf8/0x7c50 [ 1856.492986][T18035] ? __lock_acquire+0x7c50/0x7c50 [ 1856.498020][T18035] ? is_bpf_text_address+0x28b/0x2a0 [ 1856.503372][T18035] ? hlock_conflict+0x59/0x1f0 [ 1856.508142][T18035] ? verify_lock_unused+0x140/0x140 [ 1856.513341][T18035] ? __bfs+0x2a3/0x5c0 [ 1856.517410][T18035] ? check_path+0x40/0x40 [ 1856.521745][T18035] ? mark_lock+0x94/0x320 [ 1856.526090][T18035] ? __lock_acquire+0x13c0/0x7c50 [ 1856.531117][T18035] ? add_chain_block+0x940/0x940 [ 1856.536071][T18035] lock_acquire+0x1b4/0x490 [ 1856.540616][T18035] ? __flush_work+0xd4/0xa60 [ 1856.545221][T18035] ? __lock_acquire+0x13c0/0x7c50 [ 1856.550256][T18035] ? read_lock_is_recursive+0x10/0x10 [ 1856.555633][T18035] ? verify_lock_unused+0x140/0x140 [ 1856.560838][T18035] ? __flush_work+0xd4/0xa60 [ 1856.565431][T18035] __flush_work+0xed/0xa60 [ 1856.569852][T18035] ? __flush_work+0xd4/0xa60 [ 1856.574456][T18035] ? verify_lock_unused+0x140/0x140 [ 1856.579655][T18035] ? flush_work+0x20/0x20 [ 1856.583986][T18035] ? try_to_grab_pending+0xf1/0x840 [ 1856.589188][T18035] ? lockdep_hardirqs_off+0x70/0x100 [ 1856.594465][T18035] ? mark_lock+0x94/0x320 [ 1856.598813][T18035] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1856.604813][T18035] ? lock_chain_count+0x20/0x20 [ 1856.609677][T18035] ? __cancel_work_timer+0x331/0x520 [ 1856.614985][T18035] __cancel_work_timer+0x3ac/0x520 [ 1856.620118][T18035] ? cancel_work_sync+0x20/0x20 [ 1856.624991][T18035] ? __smc_release+0x659/0x7d0 [ 1856.629768][T18035] ? __local_bh_enable_ip+0x12a/0x1b0 [ 1856.635205][T18035] ? lockdep_hardirqs_on+0x94/0x140 [ 1856.640417][T18035] ? __local_bh_enable_ip+0x12a/0x1b0 [ 1856.645794][T18035] ? _local_bh_enable+0xa0/0xa0 [ 1856.650661][T18035] smc_clcsock_release+0x5c/0xe0 [ 1856.655605][T18035] __smc_release+0x661/0x7d0 [ 1856.660200][T18035] ? do_raw_spin_unlock+0x11d/0x230 [ 1856.665404][T18035] smc_close_non_accepted+0xd1/0x1f0 [ 1856.670692][T18035] smc_close_active+0xb00/0xea0 [ 1856.675552][T18035] ? sock_no_sendpage_locked+0x160/0x160 [ 1856.681189][T18035] __smc_release+0x8d/0x7d0 [ 1856.685690][T18035] ? do_raw_spin_unlock+0x11d/0x230 [ 1856.690896][T18035] smc_release+0x2ca/0x530 [ 1856.695316][T18035] sock_close+0xd5/0x240 [ 1856.699557][T18035] ? sock_mmap+0x90/0x90 [ 1856.703791][T18035] __fput+0x22c/0x920 [ 1856.707783][T18035] task_work_run+0x1ca/0x250 [ 1856.712382][T18035] ? task_work_cancel+0x230/0x230 [ 1856.717402][T18035] ? __close_range+0x1c5/0x730 [ 1856.722197][T18035] ? exit_to_user_mode_loop+0x3b/0x110 [ 1856.727658][T18035] exit_to_user_mode_loop+0xe6/0x110 [ 1856.732947][T18035] exit_to_user_mode_prepare+0xb1/0x140 [ 1856.738498][T18035] syscall_exit_to_user_mode+0x16/0x40 [ 1856.743958][T18035] do_syscall_64+0x58/0xa0 [ 1856.748376][T18035] ? clear_bhb_loop+0x60/0xb0 [ 1856.753050][T18035] ? clear_bhb_loop+0x60/0xb0 [ 1856.757734][T18035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1856.763650][T18035] RIP: 0033:0x7fb4d258e969 [ 1856.768079][T18035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1856.787702][T18035] RSP: 002b:00007fb4d23ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1856.796134][T18035] RAX: 0000000000000000 RBX: 00007fb4d27b5fa0 RCX: 00007fb4d258e969 [ 1856.804111][T18035] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 1856.812100][T18035] RBP: 00007fb4d2610ab1 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1856.820074][T18035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1856.828040][T18035] R13: 0000000000000000 R14: 00007fb4d27b5fa0 R15: 00007ffe0a1f1cc8 [ 1856.836020][T18035] [ 1858.872374][ T4401] device hsr_slave_0 left promiscuous mode [ 1858.878699][ T4401] device hsr_slave_1 left promiscuous mode [ 1858.885522][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1858.894509][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1858.902390][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1858.909994][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1858.917669][ T4401] device bridge_slave_1 left promiscuous mode [ 1858.927864][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.937221][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.943564][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.956074][ T4401] device bridge_slave_0 left promiscuous mode [ 1858.965412][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.979288][ T4401] device veth1_macvtap left promiscuous mode [ 1858.985357][ T4401] device veth0_macvtap left promiscuous mode [ 1858.992670][ T4401] device veth1_vlan left promiscuous mode [ 1858.998471][ T4401] device veth0_vlan left promiscuous mode [ 1859.169577][ T4401] team0 (unregistering): Port device team_slave_1 removed [ 1859.206297][ T4401] team0 (unregistering): Port device team_slave_0 removed [ 1859.221923][ T4401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1859.262979][ T4401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1859.375758][ T4401] bond0 (unregistering): Released all slaves [ 1859.799709][ T4401] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.873866][ T4401] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.905865][ T4401] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.983889][ T4401] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.077832][ T4401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.143240][ T4401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.196705][ T4401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.243548][ T4401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.335119][ T4401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.374370][ T4401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.414116][ T4401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.473167][ T4401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.810249][ T4401] device hsr_slave_0 left promiscuous mode [ 1861.816642][ T4401] device hsr_slave_1 left promiscuous mode [ 1861.825728][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1861.835014][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1861.845236][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1861.852937][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1861.864196][ T4401] device bridge_slave_1 left promiscuous mode [ 1861.871169][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.881867][ T4401] device bridge_slave_0 left promiscuous mode [ 1861.888111][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.902384][ T4401] device hsr_slave_0 left promiscuous mode [ 1861.909022][ T4401] device hsr_slave_1 left promiscuous mode [ 1861.915458][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1861.925695][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1861.933733][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1861.944090][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1861.952080][ T4401] device bridge_slave_1 left promiscuous mode [ 1861.958289][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.967019][ T4401] device bridge_slave_0 left promiscuous mode [ 1861.973329][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.984615][ T4401] device hsr_slave_0 left promiscuous mode [ 1861.991045][ T4401] device hsr_slave_1 left promiscuous mode [ 1861.997688][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1862.005587][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1862.014144][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1862.023901][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1862.031719][ T4401] device bridge_slave_1 left promiscuous mode [ 1862.037929][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1862.046747][ T4401] device bridge_slave_0 left promiscuous mode [ 1862.053571][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.071306][ T4401] device veth1_macvtap left promiscuous mode [ 1862.077462][ T4401] device veth0_macvtap left promiscuous mode [ 1862.086106][ T4401] device veth1_vlan left promiscuous mode [ 1862.092581][ T4401] device veth0_vlan left promiscuous mode [ 1862.102100][ T4401] device veth1_macvtap left promiscuous mode [ 1862.108148][ T4401] device veth0_macvtap left promiscuous mode [ 1862.114425][ T4401] device veth1_vlan left promiscuous mode [ 1862.120359][ T4401] device veth0_vlan left promiscuous mode [ 1862.127420][ T4401] device veth1_macvtap left promiscuous mode [ 1862.134307][ T4401] device veth0_macvtap left promiscuous mode [ 1862.140459][ T4401] device veth1_vlan left promiscuous mode [ 1862.146225][ T4401] device veth0_vlan left promiscuous mode [ 1862.373199][ T4401] team0 (unregistering): Port device team_slave_1 removed [ 1862.404868][ T4401] team0 (unregistering): Port device team_slave_0 removed [ 1862.438065][ T4401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1862.468823][ T4401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1862.521640][ T4401] bond0 (unregistering): Released all slaves [ 1862.684205][ T4401] team0 (unregistering): Port device team_slave_1 removed [ 1862.696140][ T4401] team0 (unregistering): Port device team_slave_0 removed [ 1862.707120][ T4401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1862.738116][ T4401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1862.802441][ T4401] bond0 (unregistering): Released all slaves [ 1862.922371][ T4401] team0 (unregistering): Port device team_slave_1 removed [ 1862.953834][ T4401] team0 (unregistering): Port device team_slave_0 removed [ 1862.981754][ T4401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1863.011139][ T4401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1863.077369][ T4401] bond0 (unregistering): Released all slaves