last executing test programs: 4.972101064s ago: executing program 0 (id=76): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r1 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f00000f8000/0x2000)=nil, 0x2000, 0x1000003, 0x11012, r1, 0xbfb92000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r2, 0x200000000114, 0x8, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x818, &(0x7f0000000040), 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") write$cgroup_pid(r0, &(0x7f0000004780), 0x12) 4.418756173s ago: executing program 0 (id=80): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200001, 0xfffffbff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000, 0x2, 0x80000000000, 0x400000000, 0x6, 0x7fffffff}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) 4.377760083s ago: executing program 0 (id=81): getpid() syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x67, 0x97, 0x90, 0x40, 0x421, 0x335, 0x65bf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0xf, 0x8, 0x5c7, 0x40, 0x8, 0x7, [@generic={0x2, 0x10}]}}]}}]}}]}}, 0x0) 3.391217038s ago: executing program 2 (id=91): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev(r0, &(0x7f0000001980)=[{}, {&(0x7f0000000040)="93a25f9eb66015f2e7d4fc8c3b811304d1bb25007b6651b56b8f8f349f4129b1ef51", 0x22}, {0x0}], 0x3, 0x8, 0x365) 2.976394265s ago: executing program 2 (id=96): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xb7c, 0x0, 0x1, 0xa2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x400c010) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 2.859323466s ago: executing program 0 (id=99): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xe, 0x1, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.777653288s ago: executing program 0 (id=101): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2.740802378s ago: executing program 0 (id=102): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_setup(0x24f9, 0x0, 0x0, 0x0) 2.053605369s ago: executing program 2 (id=108): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)={0x40, 0x7, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 2.024212419s ago: executing program 3 (id=110): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048081) 1.933465811s ago: executing program 3 (id=111): syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYRESHEX, @ANYRESHEX], 0x1, 0x1517, &(0x7f00000046c0)="$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") get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x101, &(0x7f0000ffd000/0x2000)=nil, 0x2) 1.855057162s ago: executing program 4 (id=114): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 1.646948525s ago: executing program 3 (id=115): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x2, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 1.565386977s ago: executing program 3 (id=116): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f00000000c0)="$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") openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.510294867s ago: executing program 2 (id=117): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/5, 0x5}], 0x1, 0x10, 0x6) 1.31294619s ago: executing program 1 (id=118): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_cache\x00') lseek(r0, 0x8000, 0x0) 1.265593091s ago: executing program 3 (id=119): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) flock(r2, 0x2) close(r0) 1.265329971s ago: executing program 1 (id=120): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x6, 0x5505, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 1.147645563s ago: executing program 2 (id=121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 870.183747ms ago: executing program 1 (id=122): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX], 0x20) 869.843757ms ago: executing program 4 (id=123): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) 765.638579ms ago: executing program 4 (id=124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x892f}, @void, @eth={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x4305}}}}, 0x16) 762.427469ms ago: executing program 3 (id=125): syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200004c, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x143, &(0x7f0000001580)="$eJzs0LFLAmEYx/Hf25VGZRoZ2JAFDR2JeZ7YFqGRIGQHRbugFwSakYu0NbT5J0hUQtPhEI0NZi2GB2L/RMtBUNBovPdeWFBD+/PZ3u/zvo94m2umDB8gQdgoFY+O9XJZzy/saJnU7s3t3STvbgCjP+br9v1mAniRgOYwYJ0CeQAPHmD/oKCv5EoFfrYSgAwgOS66AnF3jDe/aFGnyYtAa0Y09ZcWc5qLv/UO9vUvgSXepgb73gFUaqGG8bTdaafDy9dzEs7SoflphvPqtx7Uq2pqtj4RkLCnP14hyfi750g73I00jJ7ZyWxpGc2MqepqTIkqSrzH/3m8b38UjonfYc7RhUDQjbcT5wjDnlv3zAOgdfGhFb1uP4DXQx/QxV8TVqnlsoGRetbvG4Ik42s9IYQQQgghhBDyb58BAAD//8kVZzA=") mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0), 0x3200008, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xd1) lseek(r0, 0x400, 0x0) getdents64(r0, 0x0, 0x0) 645.095541ms ago: executing program 32 (id=125): syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200004c, &(0x7f0000000280)=ANY=[@ANYBLOB="009c74fbdedb35410b4b39523e95fc76118b5f893831d2a69603aed32d7ed8d926063b9f40074d75df684430d7b4338a30dcd937fa4f95c2d6f0fccafe7535ed73b6a95946bbc501924a4d5d5f3b49768815e3e9061703b05b3aacbfd021e97dd21c57cd0eb981eae095faf8e832ca2776a7ee234498d7fb60323bac6950556d9752fbaa76afb0d0cc6508b9d4b242b8d3e12e082ae92c9d962e84670bd313cc143d2398b5ebd6d0524acee51dc3d3c7695c6c7364e7670401815dff78247ef207267e0914eb626ac1a7d230fb2f0ba975a612d008a813f852e8dbb91540c5a5168cda7464b5be0865f3b3e31356b42f8fc15cbf1dc096415b5b865f97bcb190f310fe569f4321b2cc0c16b7bb75fac29e5e396dc2027a26ab4ae01e6ac82331cdb9ac83d921031bf6645f6079a120c00ea3cd3a30db0f66b2c9cd2d50c3a3fde16d903d7f56e8d992c26c86097ed081b62d7374d414a7b0b4b6684ae0a1609559809d74a28a9806d483c83edf33a0986af834d37a47797885800f37a233f702ac474be501d3cd9c4a974a4fc7bb87c2e6f9086f3dad1059a306c6f1c47422ce440372068e895a140f8e43f6f46c575666559844fba4f294a9bd626c643f"], 0x0, 0x143, &(0x7f0000001580)="$eJzs0LFLAmEYx/Hf25VGZRoZ2JAFDR2JeZ7YFqGRIGQHRbugFwSakYu0NbT5J0hUQtPhEI0NZi2GB2L/RMtBUNBovPdeWFBD+/PZ3u/zvo94m2umDB8gQdgoFY+O9XJZzy/saJnU7s3t3STvbgCjP+br9v1mAniRgOYwYJ0CeQAPHmD/oKCv5EoFfrYSgAwgOS66AnF3jDe/aFGnyYtAa0Y09ZcWc5qLv/UO9vUvgSXepgb73gFUaqGG8bTdaafDy9dzEs7SoflphvPqtx7Uq2pqtj4RkLCnP14hyfi750g73I00jJ7ZyWxpGc2MqepqTIkqSrzH/3m8b38UjonfYc7RhUDQjbcT5wjDnlv3zAOgdfGhFb1uP4DXQx/QxV8TVqnlsoGRetbvG4Ik42s9IYQQQgghhBDyb58BAAD//8kVZzA=") mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0), 0x3200008, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xd1) lseek(r0, 0x400, 0x0) getdents64(r0, 0x0, 0x0) 636.551111ms ago: executing program 2 (id=127): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040600) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000003a00), 0x0, 0xc0c0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$int_in(r0, 0x5452, 0x0) recvfrom$inet6(r0, &(0x7f00000004c0)=""/209, 0xd1, 0x100, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 357.090505ms ago: executing program 4 (id=128): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 299.231326ms ago: executing program 1 (id=129): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r1], 0x20) 283.842286ms ago: executing program 4 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002"], 0xec}}, 0x8050) 211.143507ms ago: executing program 4 (id=131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0x20000000) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 153.540088ms ago: executing program 1 (id=132): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x7, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xd0, 0x268, 0x311, 0x0, 0x268, 0x1e0, 0x460, 0x460, 0x1e0, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0xa8, 0xd0, 0x0, {0x9401}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0xe4030000, {}, [@common=@ipv6header={{0x28}, {0x0, 0x0, 0x5}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x3, 0x1, 0x3, 0x2, 0x8, 0x1, 0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) syz_genetlink_get_family_id$nbd(0x0, r4) connect$802154_dgram(r0, &(0x7f0000000340)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 0s ago: executing program 1 (id=133): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xbb}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 41.430844][ T4015] cgroup: Unknown subsys name 'net' [ 41.684274][ T4015] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.027948][ T4015] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 43.440875][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 43.507886][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 43.609925][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.612043][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.614908][ T4031] device bridge_slave_0 entered promiscuous mode [ 43.636133][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.638198][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.641465][ T4031] device bridge_slave_1 entered promiscuous mode [ 43.648262][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.651265][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.653853][ T4025] device bridge_slave_0 entered promiscuous mode [ 43.657010][ T4029] chnl_net:caif_netlink_parms(): no params data found [ 43.669091][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 43.683769][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.685871][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.688600][ T4025] device bridge_slave_1 entered promiscuous mode [ 43.705658][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.708293][ T4030] chnl_net:caif_netlink_parms(): no params data found [ 43.714657][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.751618][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.772778][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.788163][ T4031] team0: Port device team_slave_0 added [ 43.792677][ T4031] team0: Port device team_slave_1 added [ 43.838465][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.840880][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.844174][ T4032] device bridge_slave_0 entered promiscuous mode [ 43.855719][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.858061][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.862771][ T4029] device bridge_slave_0 entered promiscuous mode [ 43.875658][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.877589][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.886274][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.895223][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.897151][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.901241][ T4032] device bridge_slave_1 entered promiscuous mode [ 43.906366][ T4025] team0: Port device team_slave_0 added [ 43.908347][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.910891][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.913579][ T4029] device bridge_slave_1 entered promiscuous mode [ 43.925810][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.927662][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.938648][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.955513][ T4025] team0: Port device team_slave_1 added [ 43.972159][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.974102][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.976577][ T4030] device bridge_slave_0 entered promiscuous mode [ 43.987258][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.992004][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.007634][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.009726][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.012316][ T4030] device bridge_slave_1 entered promiscuous mode [ 44.028086][ T4029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.058088][ T4029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.061158][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.063032][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.070344][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.120725][ T4031] device hsr_slave_0 entered promiscuous mode [ 44.168767][ T4031] device hsr_slave_1 entered promiscuous mode [ 44.215773][ T4032] team0: Port device team_slave_0 added [ 44.219564][ T4032] team0: Port device team_slave_1 added [ 44.223039][ T4030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.237057][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.239272][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.246180][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.256712][ T4030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.309180][ T4029] team0: Port device team_slave_0 added [ 44.312472][ T4029] team0: Port device team_slave_1 added [ 44.327441][ T4030] team0: Port device team_slave_0 added [ 44.336003][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.338003][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.345154][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.355522][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.357426][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.364767][ T4029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.372384][ T4030] team0: Port device team_slave_1 added [ 44.379772][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.381648][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.394897][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.403697][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.405566][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.412736][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.454601][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.456475][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.463595][ T4030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.530494][ T4025] device hsr_slave_0 entered promiscuous mode [ 44.578811][ T4025] device hsr_slave_1 entered promiscuous mode [ 44.638701][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.640966][ T4025] Cannot create hsr debugfs directory [ 44.646983][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.649047][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.655988][ T4030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.730387][ T4032] device hsr_slave_0 entered promiscuous mode [ 44.768832][ T4032] device hsr_slave_1 entered promiscuous mode [ 44.808512][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.810615][ T4032] Cannot create hsr debugfs directory [ 44.900501][ T4029] device hsr_slave_0 entered promiscuous mode [ 44.958931][ T4029] device hsr_slave_1 entered promiscuous mode [ 44.998611][ T4029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.002889][ T4029] Cannot create hsr debugfs directory [ 45.080405][ T4030] device hsr_slave_0 entered promiscuous mode [ 45.128767][ T4030] device hsr_slave_1 entered promiscuous mode [ 45.188617][ T4030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.190743][ T4030] Cannot create hsr debugfs directory [ 45.228954][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 45.231211][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 45.308616][ T4036] Bluetooth: hci3: command 0x0409 tx timeout [ 45.308718][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 45.311875][ T25] Bluetooth: hci4: command 0x0409 tx timeout [ 45.388207][ T4031] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.421892][ T4031] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.478533][ T4031] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.530786][ T4031] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.601215][ T4025] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.670495][ T4025] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.720617][ T4025] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.771267][ T4025] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.881427][ T4030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.921371][ T4030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.980417][ T4030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.027425][ T4030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.077608][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.094773][ T4032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.120870][ T4032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.161310][ T4032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.205767][ T4032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.247153][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.250466][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.267812][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.283939][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.286690][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.290917][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.292981][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.295774][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.300146][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.302922][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.305490][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.307424][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.324768][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.350188][ T4029] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.402019][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.418052][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.424941][ T4029] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.474860][ T4029] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.527982][ T4029] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.563540][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.569278][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.571783][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.574230][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.577137][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.581492][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.584175][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.586686][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.588700][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.591956][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.594508][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.612099][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.615101][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.636092][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.639965][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.642579][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.644540][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.646781][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.651429][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.654119][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.661933][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.664526][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.680926][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.686055][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.697362][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.701200][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.707638][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.710992][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.713276][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.716223][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.725688][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.728261][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.739362][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.742097][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.744756][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.747303][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.749310][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.760764][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.770135][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.772776][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.780758][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.789713][ T4025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.793689][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.796803][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.804215][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.814596][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.817264][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.825485][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.827430][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.847342][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.856965][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.860689][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.865474][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.879963][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.898883][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.902310][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.905053][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.927102][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.931084][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.934275][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.936297][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.940124][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.943963][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.946960][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.950450][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.953116][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.955101][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.957587][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.974563][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.982724][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.985460][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.999366][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.002407][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.005122][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.018206][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.030403][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.032510][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.034603][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.036787][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.042444][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.049660][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.055557][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.069182][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.071646][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.074116][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.076733][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.080368][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.090069][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.092753][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.095860][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.098361][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.100500][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.103999][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.124298][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.127172][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.136413][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.138505][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.142519][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.145431][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.153436][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.156278][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.166545][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.172723][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.175401][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.189294][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.194832][ T4030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.198340][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.207605][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.212302][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.214943][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.218179][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.244916][ T4025] device veth0_vlan entered promiscuous mode [ 47.247590][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.251236][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.253907][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.256734][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.260742][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.266377][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.269737][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.274237][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.277198][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.287430][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.291406][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.294207][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.297760][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.308975][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 47.310953][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 47.321488][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.323651][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.333664][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.336359][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.346716][ T4031] device veth0_vlan entered promiscuous mode [ 47.351179][ T4025] device veth1_vlan entered promiscuous mode [ 47.355380][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.357741][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.362538][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.365318][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.376669][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.396960][ T4031] device veth1_vlan entered promiscuous mode [ 47.406569][ T4074] Bluetooth: hci4: command 0x041b tx timeout [ 47.408330][ T4074] Bluetooth: hci1: command 0x041b tx timeout [ 47.411079][ T4074] Bluetooth: hci3: command 0x041b tx timeout [ 47.435977][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.439329][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.442001][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.444279][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.471276][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.479204][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.488065][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.491902][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.499927][ T4025] device veth0_macvtap entered promiscuous mode [ 47.525569][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.529036][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.531728][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.534890][ T4025] device veth1_macvtap entered promiscuous mode [ 47.542452][ T4031] device veth0_macvtap entered promiscuous mode [ 47.562092][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.564664][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.567301][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.572473][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.589602][ T4031] device veth1_macvtap entered promiscuous mode [ 47.593734][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.596321][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.598961][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.612336][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.628192][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.631941][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.655512][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.663237][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.665298][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.668009][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.672534][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.675174][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.677940][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.683575][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.688045][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.690989][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.696223][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.700113][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.703923][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.711779][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.714464][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.717217][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.721469][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.724458][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.727003][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.730400][ T4030] device veth0_vlan entered promiscuous mode [ 47.746509][ T4032] device veth0_vlan entered promiscuous mode [ 47.750514][ T4025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.753031][ T4025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.755403][ T4025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.757782][ T4025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.762125][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.764878][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.770469][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.773340][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.777045][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.795597][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.798835][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.827447][ T4031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.830342][ T4031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.832705][ T4031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.835134][ T4031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.850946][ T4030] device veth1_vlan entered promiscuous mode [ 47.854146][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.856885][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.860618][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.863499][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.865924][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.880508][ T4032] device veth1_vlan entered promiscuous mode [ 47.897156][ T4029] device veth0_vlan entered promiscuous mode [ 47.959378][ T4029] device veth1_vlan entered promiscuous mode [ 47.998309][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.001476][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.004449][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.007174][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.012254][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.015177][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.017512][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.017675][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.020519][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.024339][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.042772][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.046230][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.050879][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.053653][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.056367][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.059866][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.062627][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.067837][ T4032] device veth0_macvtap entered promiscuous mode [ 48.076961][ T4030] device veth0_macvtap entered promiscuous mode [ 48.083377][ T4029] device veth0_macvtap entered promiscuous mode [ 48.092184][ T4032] device veth1_macvtap entered promiscuous mode [ 48.104092][ T4030] device veth1_macvtap entered promiscuous mode [ 48.121826][ T4029] device veth1_macvtap entered promiscuous mode [ 48.129211][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.131426][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.134261][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.136857][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.140522][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.143620][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.147004][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.155050][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.161123][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.182656][ T561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.184917][ T561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.200964][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.205445][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.213013][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.215715][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.220623][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.224503][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.239921][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.242884][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.256006][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.269507][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.272326][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.275141][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.277783][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.284362][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.292227][ T4103] loop3: detected capacity change from 0 to 1024 [ 48.295634][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.298889][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.302140][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.304835][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.307600][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.316564][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.319506][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.322220][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.325006][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.330175][ T4103] ======================================================= [ 48.330175][ T4103] WARNING: The mand mount option has been deprecated and [ 48.330175][ T4103] and is ignored by this kernel. Remove the mand [ 48.330175][ T4103] option from the mount to silence this warning. [ 48.330175][ T4103] ======================================================= [ 48.335868][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.344316][ T4103] EXT4-fs (loop3): Ignoring removed nobh option [ 48.346037][ T4103] EXT4-fs (loop3): Ignoring removed bh option [ 48.347709][ T4103] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 48.350117][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.354271][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.367657][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.378161][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.383692][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.388809][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.391735][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.394491][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.397826][ T4103] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 48.397842][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.398355][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.412842][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.418168][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.422453][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.425095][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.428201][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.431805][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.434584][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.439199][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.442715][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.449163][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.455428][ T4032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.457886][ T4032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.494880][ T4032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.497264][ T4032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.522303][ T4103] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 48.525677][ T4103] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 48.529557][ T4103] EXT4-fs (loop3): re-mounted. Opts: delalloc,journal_async_commit,noquota,nobarrier,journal_ioprio=0x0000000000000001,nouid32,. Quota mode: none. [ 48.671147][ T4108] loop0: detected capacity change from 0 to 32768 [ 48.688722][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.691666][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.694342][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.697199][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.703786][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.706651][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.710025][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.712843][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.716645][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.721272][ T4030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.723671][ T4030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.726041][ T4030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.728307][ T4030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.732484][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.735271][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.751068][ T4029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.753421][ T4029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.755781][ T4029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.758175][ T4029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.817230][ T4108] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 48.933301][ T4025] ocfs2: Unmounting device (7,0) on (node local) [ 49.056711][ T4118] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7'. [ 49.233999][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.236302][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.250338][ T336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.252930][ T336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.257048][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.284283][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.286404][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.293861][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.309970][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.314157][ T336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.316411][ T336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.332303][ T4123] loop3: detected capacity change from 0 to 32768 [ 49.339763][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.356960][ T561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.370109][ T561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.377072][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.385002][ T4123] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.10 (4123) [ 49.392878][ T4074] Bluetooth: hci2: command 0x040f tx timeout [ 49.394554][ T4074] Bluetooth: hci0: command 0x040f tx timeout [ 49.399240][ T336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.417620][ T4123] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 49.417900][ T336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.420435][ T4123] BTRFS info (device loop3): setting nodatacow, compression disabled [ 49.424473][ T4123] BTRFS info (device loop3): max_inline at 0 [ 49.426085][ T4123] BTRFS info (device loop3): enabling disk space caching [ 49.428041][ T4123] BTRFS info (device loop3): setting datasum, datacow enabled [ 49.430174][ T4123] BTRFS info (device loop3): turning off barriers [ 49.430705][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.431812][ T4123] BTRFS info (device loop3): turning on flush-on-commit [ 49.435569][ T4123] BTRFS info (device loop3): doing ref verification [ 49.437314][ T4123] BTRFS info (device loop3): force clearing of disk cache [ 49.439306][ T4123] BTRFS info (device loop3): enabling ssd optimizations [ 49.441217][ T4123] BTRFS info (device loop3): max_inline at 4096 [ 49.442908][ T4123] BTRFS info (device loop3): disk space caching is enabled [ 49.444812][ T4123] BTRFS info (device loop3): has skinny extents [ 49.470312][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 49.480447][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 49.483157][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 49.536568][ T4134] udc-core: couldn't find an available UDC or it's busy [ 49.547634][ T4136] udc-core: couldn't find an available UDC or it's busy [ 49.549972][ T4134] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.555395][ T4136] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.688680][ T4071] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 49.813447][ T4123] BTRFS info (device loop3): clearing free space tree [ 49.815940][ T4123] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 49.818828][ T4123] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 50.008725][ T4071] usb 1-1: Using ep0 maxpacket: 8 [ 50.149951][ T4172] udc-core: couldn't find an available UDC or it's busy [ 50.152039][ T4172] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.288587][ T4071] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 50.291456][ T4071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.293780][ T4071] usb 1-1: Product: syz [ 50.295647][ T4071] usb 1-1: Manufacturer: syz [ 50.298021][ T4071] usb 1-1: SerialNumber: syz [ 50.324360][ T4071] usb 1-1: config 0 descriptor?? [ 50.342602][ T4171] loop1: detected capacity change from 0 to 32768 [ 50.407908][ T4171] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 50.718370][ T4184] loop2: detected capacity change from 0 to 32768 [ 50.722467][ T4071] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 50.805495][ T4029] ocfs2: Unmounting device (7,1) on (node local) [ 50.835613][ T4186] loop4: detected capacity change from 0 to 32768 [ 50.864819][ T4184] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.17 (4184) [ 50.904384][ T4184] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 50.906865][ T4184] BTRFS info (device loop2): setting nodatacow, compression disabled [ 50.909163][ T4184] BTRFS info (device loop2): max_inline at 0 [ 50.910738][ T4184] BTRFS info (device loop2): enabling disk space caching [ 50.912695][ T4184] BTRFS info (device loop2): turning off barriers [ 50.914385][ T4184] BTRFS info (device loop2): turning on flush-on-commit [ 50.916234][ T4184] BTRFS info (device loop2): doing ref verification [ 50.918064][ T4184] BTRFS info (device loop2): force clearing of disk cache [ 50.920053][ T4184] BTRFS info (device loop2): enabling ssd optimizations [ 50.922009][ T4184] BTRFS info (device loop2): max_inline at 4096 [ 50.923690][ T4184] BTRFS info (device loop2): disk space caching is enabled [ 50.925668][ T4184] BTRFS info (device loop2): has skinny extents [ 50.931199][ T4190] loop3: detected capacity change from 0 to 1024 [ 50.962372][ T4190] hfsplus: gid requires an argument [ 50.963899][ T4190] hfsplus: unable to parse mount options [ 50.964529][ T4194] loop1: detected capacity change from 0 to 1024 [ 50.975198][ T4186] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 51.000332][ T4194] EXT4-fs (loop1): Ignoring removed nobh option [ 51.002187][ T4194] EXT4-fs (loop1): Ignoring removed bh option [ 51.003976][ T4194] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.041746][ T4032] ocfs2: Unmounting device (7,4) on (node local) [ 51.058725][ T4194] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 51.108671][ T4071] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 51.144529][ T4071] usb 1-1: USB disconnect, device number 2 [ 51.150178][ T4184] BTRFS info (device loop2): clearing free space tree [ 51.151354][ T4194] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.152069][ T4184] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 51.155352][ T4194] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 51.158002][ T4184] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 51.167425][ T4194] EXT4-fs (loop1): re-mounted. Opts: delalloc,journal_async_commit,noquota,nobarrier,journal_ioprio=0x0000000000000001,nouid32,. Quota mode: none. [ 51.430034][ T4221] loop3: detected capacity change from 0 to 32768 [ 51.597340][ T4222] loop4: detected capacity change from 0 to 32768 [ 51.601380][ T4222] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.23 (4222) [ 51.614504][ T4072] Bluetooth: hci0: command 0x0419 tx timeout [ 51.616227][ T4072] Bluetooth: hci2: command 0x0419 tx timeout [ 51.618225][ T4072] Bluetooth: hci4: command 0x0419 tx timeout [ 51.651185][ T4072] Bluetooth: hci1: command 0x0419 tx timeout [ 51.654582][ T4072] Bluetooth: hci3: command 0x0419 tx timeout [ 51.753747][ T4221] XFS (loop3): Mounting V5 Filesystem [ 51.768023][ T4164] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.778452][ T4164] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.814558][ T4164] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 51.848730][ T4164] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x54/0x3e4, xfs_inobt block 0x18 [ 51.858724][ T4164] XFS (loop3): Unmount and run xfs_repair [ 51.860232][ T4164] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 51.862224][ T4164] 00000000: 49 41 42 33 00 00 00 01 ff ff ff ff ff ff ff ff IAB3............ [ 51.865496][ T4243] udc-core: couldn't find an available UDC or it's busy [ 51.867685][ T4243] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.896903][ T4164] 00000010: 00 00 00 00 00 00 00 18 00 00 00 01 00 00 00 10 ................ [ 51.906138][ T4164] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 05 00 9d 8b 4e eb ...^T.Lr......N. [ 51.912324][ T4164] 00000030: 00 00 00 00 f0 ea ad a5 00 00 11 40 00 00 40 37 ...........@..@7 [ 51.914701][ T4164] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 51.927010][ T4164] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 51.933585][ T4164] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 51.935963][ T4164] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 51.938687][ T4221] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x18 len 8 error 74 [ 51.942152][ T4221] XFS (loop3): Failed to read root inode 0x1140, error 117 [ 52.271397][ T4249] loop1: detected capacity change from 0 to 32768 [ 52.282163][ T4249] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.29 (4249) [ 52.293260][ T4164] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 52.306467][ T4249] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 52.309100][ T4249] BTRFS info (device loop1): using free space tree [ 52.310914][ T4249] BTRFS info (device loop1): has skinny extents [ 52.339610][ T4017] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 11 scanned by udevd (4017) [ 52.416492][ T4249] BTRFS info (device loop1): enabling ssd optimizations [ 52.427587][ T4247] fido_id[4247]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 52.814712][ T4272] loop2: detected capacity change from 0 to 32768 [ 52.874247][ T4275] loop3: detected capacity change from 0 to 40427 [ 52.932228][ T4164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.935176][ T4164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.937787][ T4164] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 52.950746][ T4164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.979215][ T4164] usb 1-1: config 0 descriptor?? [ 53.044993][ T4275] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 53.047216][ T4275] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 53.054156][ T4275] F2FS-fs (loop3): invalid crc value [ 53.123477][ T4272] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.31 (4272) [ 53.168286][ T4272] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 53.170890][ T4272] BTRFS info (device loop2): using free space tree [ 53.172663][ T4272] BTRFS info (device loop2): has skinny extents [ 53.228018][ T4275] F2FS-fs (loop3): Found nat_bits in checkpoint [ 53.302954][ T4275] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 53.305054][ T4275] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 53.451799][ T4272] BTRFS info (device loop2): enabling ssd optimizations [ 53.501924][ T4164] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 53.504101][ T4164] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 53.508064][ T4164] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0002/input/input2 [ 53.609659][ T4164] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 54.052666][ T4323] udc-core: couldn't find an available UDC or it's busy [ 54.070583][ T4315] usb 1-1: USB disconnect, device number 3 [ 54.076817][ T4323] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.387871][ T4143] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4143) [ 54.567431][ T4321] fido_id[4321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 55.126547][ T4342] loop0: detected capacity change from 0 to 32768 [ 55.204173][ T4348] loop3: detected capacity change from 0 to 32768 [ 55.242296][ T4348] XFS: ikeep mount option is deprecated. [ 55.259228][ T4342] XFS: attr2 mount option is deprecated. [ 55.271096][ T4359] loop2: detected capacity change from 0 to 256 [ 55.278021][ T4348] XFS (loop3): Mounting V5 Filesystem [ 55.287680][ T4342] XFS (loop0): Mounting V5 Filesystem [ 55.417619][ T4342] XFS (loop0): Ending clean mount [ 55.424804][ T4348] XFS (loop3): Ending clean mount [ 55.431146][ T4348] XFS (loop3): Quotacheck needed: Please wait. [ 55.447727][ T4342] XFS (loop0): Quotacheck needed: Please wait. [ 55.466598][ T4348] XFS (loop3): Quotacheck: Done. [ 55.478189][ T4342] XFS (loop0): Quotacheck: Done. [ 55.563636][ T4374] loop1: detected capacity change from 0 to 4096 [ 55.585633][ T4031] XFS (loop3): Unmounting Filesystem [ 55.589031][ T4025] XFS (loop0): Unmounting Filesystem [ 55.628313][ T4381] udc-core: couldn't find an available UDC or it's busy [ 55.630960][ T4381] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.819532][ T4385] udc-core: couldn't find an available UDC or it's busy [ 55.821543][ T4385] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.915893][ T4389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.64'. [ 56.038130][ T4393] Cannot find map_set index 0 as target [ 56.097485][ T4400] loop0: detected capacity change from 0 to 512 [ 56.158362][ T4400] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.162115][ T4400] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.167348][ T4406] loop4: detected capacity change from 0 to 1024 [ 56.187030][ T4400] EXT4-fs (loop0): 1 truncate cleaned up [ 56.203017][ T4400] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,inode_readahead_blks=0x0000000000000040,usrquota,,errors=continue. Quota mode: writeback. [ 56.234734][ T4406] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.259090][ T4414] udc-core: couldn't find an available UDC or it's busy [ 56.261096][ T4414] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.287277][ T4406] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 1: comm syz.4.70: lblock 1 mapped to illegal pblock 1 (length 4) [ 56.312476][ T4406] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 4 with error 117 [ 56.335312][ T4406] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.335312][ T4406] [ 56.436498][ T4410] loop3: detected capacity change from 0 to 4096 [ 56.464759][ T4410] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 56.627448][ T4423] loop4: detected capacity change from 0 to 4096 [ 56.681741][ T4421] loop1: detected capacity change from 0 to 32768 [ 56.697147][ T4425] capability: warning: `syz.0.76' uses deprecated v2 capabilities in a way that may be insecure [ 56.779645][ T4421] XFS: ikeep mount option is deprecated. [ 56.802647][ T4410] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 56.815608][ T4410] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 56.904364][ T4425] loop0: detected capacity change from 0 to 32768 [ 56.951305][ T561] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 56.966630][ T4421] XFS (loop1): Mounting V5 Filesystem [ 56.977539][ T4433] udc-core: couldn't find an available UDC or it's busy [ 56.992177][ T4433] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.001041][ T4031] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22. [ 57.002145][ T4436] tmpfs: Unknown parameter 'usrquota' [ 57.105452][ T4421] XFS (loop1): Ending clean mount [ 57.108760][ T4421] XFS (loop1): Quotacheck needed: Please wait. [ 57.213738][ T4421] XFS (loop1): Quotacheck: Done. [ 57.298749][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 57.334910][ T4029] XFS (loop1): Unmounting Filesystem [ 57.363151][ T4441] loop3: detected capacity change from 0 to 32768 [ 57.404983][ T4441] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 57.407433][ T4441] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 57.437670][ T4441] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 57.488242][ T4441] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 57.513811][ T4445] loop4: detected capacity change from 0 to 1024 [ 57.658783][ T25] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 57.661057][ T25] usb 1-1: config 0 has no interface number 0 [ 57.662765][ T25] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xF has invalid maxpacket 1479, setting to 64 [ 57.675019][ T25] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=65.bf [ 57.680412][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.725620][ T25] usb 1-1: config 0 descriptor?? [ 57.747050][ T4445] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.785761][ T25] rndis_wlan 1-1:0.219: invalid descriptor buffer length [ 57.787821][ T25] usb 1-1: bad CDC descriptors [ 57.798753][ T25] rndis_host 1-1:0.219: invalid descriptor buffer length [ 57.800777][ T25] usb 1-1: bad CDC descriptors [ 57.802403][ T25] cdc_acm 1-1:0.219: invalid descriptor buffer length [ 57.835685][ T4447] loop2: detected capacity change from 0 to 40427 [ 57.898695][ T4447] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 57.900763][ T4447] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 57.904997][ T4447] F2FS-fs (loop2): invalid crc value [ 57.929003][ T4447] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.950323][ T4459] udc-core: couldn't find an available UDC or it's busy [ 57.952378][ T4459] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.957452][ T4447] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 57.959834][ T4447] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 57.974357][ T4168] usb 1-1: USB disconnect, device number 4 [ 57.998661][ T4465] udc-core: couldn't find an available UDC or it's busy [ 58.000631][ T4465] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.143674][ T4471] device syzkaller1 entered promiscuous mode [ 58.233836][ T4473] loop2: detected capacity change from 0 to 1024 [ 58.256565][ T4473] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 58.283735][ T26] audit: type=1326 audit(58.250:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaca808a8 code=0x7ffc0000 [ 58.297595][ T26] audit: type=1326 audit(58.260:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaca808a8 code=0x7ffc0000 [ 58.330115][ T26] audit: type=1326 audit(58.260:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffaca808a8 code=0x7ffc0000 [ 58.366405][ T26] audit: type=1326 audit(58.260:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaca808a8 code=0x7ffc0000 [ 58.385094][ T4479] tipc: Started in network mode [ 58.386540][ T4479] tipc: Node identity 7f000001, cluster identity 4711 [ 58.386695][ T26] audit: type=1326 audit(58.260:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaca808a8 code=0x7ffc0000 [ 58.389225][ T4479] tipc: Enabled bearer , priority 10 [ 58.403091][ T26] audit: type=1326 audit(58.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=202 compat=0 ip=0xffffaca808a8 code=0x7ffc0000 [ 58.409997][ T26] audit: type=1326 audit(58.260:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaca808a8 code=0x7ffc0000 [ 58.416732][ T26] audit: type=1326 audit(58.260:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4476 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaca808a8 code=0x7ffc0000 [ 58.673433][ T4492] udc-core: couldn't find an available UDC or it's busy [ 58.681175][ T4492] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.807806][ T4487] loop3: detected capacity change from 0 to 32768 [ 58.851189][ T4487] gfs2: Invalid block size shift [ 58.998623][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 59.154757][ T4503] loop3: detected capacity change from 0 to 8192 [ 59.224933][ T4244] loop3: p1 p4 < > [ 59.238251][ T4244] loop3: partition table partially beyond EOD, truncated [ 59.242660][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 59.273624][ T4244] loop3: p1 start 4261412864 is beyond EOD, truncated [ 59.306601][ T4503] loop3: p1 p4 < > [ 59.310194][ T4503] loop3: partition table partially beyond EOD, truncated [ 59.314551][ T4503] loop3: p1 start 4261412864 is beyond EOD, truncated [ 59.321237][ T4507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.107'. [ 59.349782][ T4509] udc-core: couldn't find an available UDC or it's busy [ 59.351750][ T4509] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.509438][ T4317] tipc: Node number set to 2130706433 [ 59.518844][ T21] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 59.521362][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.523936][ T21] usb 1-1: Product: syz [ 59.525150][ T21] usb 1-1: Manufacturer: syz [ 59.526401][ T21] usb 1-1: SerialNumber: syz [ 59.541531][ T4520] udc-core: couldn't find an available UDC or it's busy [ 59.544126][ T4520] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.551945][ T21] usb 1-1: config 0 descriptor?? [ 59.678863][ T4518] loop3: detected capacity change from 0 to 256 [ 59.694001][ T4518] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 59.771649][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 59.806756][ T4146] udevd[4146]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 59.818614][ T21] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 59.825027][ T4527] loop3: detected capacity change from 0 to 512 [ 59.874137][ T4527] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.886169][ T4146] udevd[4146]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 59.954674][ T4527] Quota error (device loop3): v2_read_file_info: Free block number too big (58381 >= 6). [ 59.958315][ T4527] EXT4-fs warning (device loop3): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.090119][ T4031] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /32/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 60.383000][ T4536] loop1: detected capacity change from 0 to 40427 [ 60.426043][ T4536] F2FS-fs (loop1): invalid crc value [ 60.440554][ T4536] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.456678][ T4536] F2FS-fs (loop1): Start checkpoint disabled! [ 60.481853][ T4536] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 60.568876][ T26] audit: type=1326 audit(60.540:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9256d8a8 code=0x7ffc0000 [ 60.572776][ T153] attempt to access beyond end of device [ 60.572776][ T153] loop1: rw=2049, want=40976, limit=40427 [ 60.615817][ T4546] syz.4.124 uses obsolete (PF_INET,SOCK_PACKET) [ 60.819637][ T4552] loop1: detected capacity change from 0 to 512 [ 60.863814][ T4552] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.122: iget: bad extended attribute block 1 [ 60.876807][ T4552] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.122: couldn't read orphan inode 15 (err -117) [ 60.880319][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.884783][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 60.910721][ T4552] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 60.998630][ T21] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 61.002768][ T21] usb 1-1: USB disconnect, device number 5 [ 61.006620][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.096806][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.102490][ T4564] ucma_write: process 86 (syz.4.128) changed security contexts after opening file descriptor, this is not allowed. [ 61.139283][ T4566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.130'. [ 61.168050][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.222372][ T4572] Zero length message leads to an empty skb [ 61.225570][ T4572] xt_NFQUEUE: number of total queues is 0 [ 61.425365][ T4557] chnl_net:caif_netlink_parms(): no params data found [ 61.478449][ C0] ------------[ cut here ]------------ [ 61.480250][ C0] refcount_t: addition on 0; use-after-free. [ 61.482233][ C0] WARNING: CPU: 0 PID: 9 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 61.484692][ C0] Modules linked in: [ 61.485711][ C0] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted 5.15.185-syzkaller #0 [ 61.487882][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.490559][ C0] Workqueue: netns cleanup_net [ 61.491857][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 61.494042][ C0] pc : refcount_warn_saturate+0x134/0x1f8 [ 61.495738][ C0] lr : refcount_warn_saturate+0x134/0x1f8 [ 61.497295][ C0] sp : ffff800008007800 [ 61.498455][ C0] x29: ffff800008007800 x28: ffff0000e7179000 x27: ffff0000cc5dd000 [ 61.500676][ C0] x26: 1fffe0001812a001 x25: dfff800000000000 x24: 1fffe000198bba01 [ 61.502887][ C0] x23: ffff0000cf387c00 x22: ffff0000c1da8154 x21: ffff0000c13e4880 [ 61.505285][ C0] x20: ffff0000c1da8154 x19: ffff80001659e000 x18: 0000000000000101 [ 61.507467][ C0] x17: 0000000000000000 x16: ffff8000111a97c4 x15: 00000000ffffffff [ 61.509824][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 61.511958][ C0] x11: 0000000000000100 x10: 0000000000000000 x9 : 4cb61e4e29394600 [ 61.514129][ C0] x8 : 4cb61e4e29394600 x7 : 0000000000000001 x6 : 0000000000000001 [ 61.516337][ C0] x5 : ffff8000080070f8 x4 : ffff80001423f280 x3 : ffff800008503958 [ 61.518507][ C0] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 000000000000002a [ 61.520704][ C0] Call trace: [ 61.521618][ C0] refcount_warn_saturate+0x134/0x1f8 [ 61.523097][ C0] tipc_crypto_xmit+0x1634/0x2220 [ 61.524446][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 61.525863][ C0] tipc_disc_timeout+0x4c8/0x608 [ 61.527190][ C0] call_timer_fn+0x19c/0x858 [ 61.528513][ C0] __run_timers+0x46c/0x6c4 [ 61.529740][ C0] run_timer_softirq+0x7c/0x114 [ 61.531074][ C0] handle_softirqs+0x344/0xbf0 [ 61.532363][ C0] __irq_exit_rcu+0x240/0x440 [ 61.533672][ C0] irq_exit+0x14/0x88 [ 61.534768][ C0] handle_domain_irq+0x14c/0x1fc [ 61.536211][ C0] gic_handle_irq+0x78/0x1c8 [ 61.537465][ C0] call_on_irq_stack+0x24/0x4c [ 61.538808][ C0] do_interrupt_handler+0x6c/0x88 [ 61.540199][ C0] el1_interrupt+0x30/0x58 [ 61.541428][ C0] el1h_64_irq_handler+0x18/0x24 [ 61.542834][ C0] el1h_64_irq+0x78/0x7c [ 61.543945][ C0] __sanitizer_cov_trace_pc+0xa8/0xac [ 61.545411][ C0] batadv_hard_if_event+0x8c/0xddc [ 61.546814][ C0] raw_notifier_call_chain+0xd4/0x164 [ 61.548273][ C0] call_netdevice_notifiers+0x10c/0x18c [ 61.549761][ C0] udp_tunnel_nic_netdevice_event+0x8bc/0x1378 [ 61.551518][ C0] raw_notifier_call_chain+0xd4/0x164 [ 61.553036][ C0] call_netdevice_notifiers+0x10c/0x18c [ 61.554573][ C0] register_netdevice+0xf04/0x1304 [ 61.555971][ C0] nsim_create+0x2bc/0x36c [ 61.557203][ C0] __nsim_dev_port_add+0x4a8/0x7cc [ 61.558609][ C0] nsim_dev_port_add_all+0x4c/0x124 [ 61.560019][ C0] nsim_dev_reload_up+0x3f8/0x660 [ 61.561385][ C0] devlink_reload+0x288/0x5c8 [ 61.562644][ C0] devlink_pernet_pre_exit+0x194/0x33c [ 61.564117][ C0] cleanup_net+0x470/0xa98 [ 61.565299][ C0] process_one_work+0x79c/0x1140 [ 61.566674][ C0] worker_thread+0x8f4/0x101c [ 61.567969][ C0] kthread+0x374/0x454 [ 61.569024][ C0] ret_from_fork+0x10/0x20 [ 61.570257][ C0] irq event stamp: 275795 [ 61.571439][ C0] hardirqs last enabled at (275794): [] __up_console_sem+0xb4/0x100 [ 61.574022][ C0] hardirqs last disabled at (275795): [] el1_dbg+0x24/0x80 [ 61.576507][ C0] softirqs last enabled at (275764): [] clusterip_netdev_event+0x384/0x3ac [ 61.579388][ C0] softirqs last disabled at (275767): [] __irq_exit_rcu+0x240/0x440 [ 61.582014][ C0] ---[ end trace daad18604789981a ]--- [ 61.583577][ C0] ------------[ cut here ]------------ [ 61.585105][ C0] refcount_t: underflow; use-after-free. [ 61.586856][ C0] WARNING: CPU: 0 PID: 9 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 61.589329][ C0] Modules linked in: [ 61.590392][ C0] CPU: 0 PID: 9 Comm: kworker/u4:0 Tainted: G W 5.15.185-syzkaller #0 [ 61.592906][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.595542][ C0] Workqueue: netns cleanup_net [ 61.596807][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 61.598909][ C0] pc : refcount_warn_saturate+0x154/0x1f8 [ 61.600433][ C0] lr : refcount_warn_saturate+0x154/0x1f8 [ 61.601931][ C0] sp : ffff800008007800 [ 61.603002][ C0] x29: ffff800008007800 x28: ffff0000e7179000 x27: 0000000000000000 [ 61.605153][ C0] x26: 1fffe0001812a001 x25: dfff800000000000 x24: 1fffe000198bba01 [ 61.607317][ C0] x23: ffff0000f19e9038 x22: ffff0000c1da8000 x21: ffff0000c13e4880 [ 61.609528][ C0] x20: ffff0000c1da8154 x19: ffff80001659e000 x18: 0000000000000101 [ 61.611698][ C0] x17: 0000000000000000 x16: ffff8000083008fc x15: 00000000ffffffff [ 61.613813][ C0] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 61.615938][ C0] x11: 0000000000000100 x10: 0000000000000000 x9 : 4cb61e4e29394600 [ 61.618042][ C0] x8 : 4cb61e4e29394600 x7 : 0000000000000001 x6 : 0000000000000001 [ 61.620204][ C0] x5 : ffff8000080070f8 x4 : ffff80001423f280 x3 : ffff800008300a0c [ 61.622361][ C0] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000026 [ 61.624532][ C0] Call trace: [ 61.625392][ C0] refcount_warn_saturate+0x154/0x1f8 [ 61.626825][ C0] tipc_crypto_xmit+0x177c/0x2220 [ 61.628232][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 61.629684][ C0] tipc_disc_timeout+0x4c8/0x608 [ 61.631050][ C0] call_timer_fn+0x19c/0x858 [ 61.632254][ C0] __run_timers+0x46c/0x6c4 [ 61.633442][ C0] run_timer_softirq+0x7c/0x114 [ 61.634821][ C0] handle_softirqs+0x344/0xbf0 [ 61.636081][ C0] __irq_exit_rcu+0x240/0x440 [ 61.637279][ C0] irq_exit+0x14/0x88 [ 61.638409][ C0] handle_domain_irq+0x14c/0x1fc [ 61.639691][ C0] gic_handle_irq+0x78/0x1c8 [ 61.640930][ C0] call_on_irq_stack+0x24/0x4c [ 61.642242][ C0] do_interrupt_handler+0x6c/0x88 [ 61.643589][ C0] el1_interrupt+0x30/0x58 [ 61.644817][ C0] el1h_64_irq_handler+0x18/0x24 [ 61.646148][ C0] el1h_64_irq+0x78/0x7c [ 61.647245][ C0] __sanitizer_cov_trace_pc+0xa8/0xac [ 61.648669][ C0] batadv_hard_if_event+0x8c/0xddc [ 61.650009][ C0] raw_notifier_call_chain+0xd4/0x164 [ 61.651451][ C0] call_netdevice_notifiers+0x10c/0x18c [ 61.652932][ C0] udp_tunnel_nic_netdevice_event+0x8bc/0x1378 [ 61.654651][ T4586] udc-core: couldn't find an available UDC or it's busy [ 61.654671][ C0] raw_notifier_call_chain+0xd4/0x164 [ 61.656788][ T4586] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.658051][ C0] call_netdevice_notifiers+0x10c/0x18c [ 61.661602][ C0] register_netdevice+0xf04/0x1304 [ 61.663022][ C0] nsim_create+0x2bc/0x36c [ 61.664229][ C0] __nsim_dev_port_add+0x4a8/0x7cc [ 61.665612][ C0] nsim_dev_port_add_all+0x4c/0x124 [ 61.666954][ C0] nsim_dev_reload_up+0x3f8/0x660 [ 61.668317][ C0] devlink_reload+0x288/0x5c8 [ 61.669554][ C0] devlink_pernet_pre_exit+0x194/0x33c [ 61.671026][ C0] cleanup_net+0x470/0xa98 [ 61.672202][ C0] process_one_work+0x79c/0x1140 [ 61.673497][ C0] worker_thread+0x8f4/0x101c [ 61.674804][ C0] kthread+0x374/0x454 [ 61.675946][ C0] ret_from_fork+0x10/0x20 [ 61.677167][ C0] irq event stamp: 275825 [ 61.678357][ C0] hardirqs last enabled at (275824): [] __up_console_sem+0xb4/0x100 [ 61.680927][ C0] hardirqs last disabled at (275825): [] el1_dbg+0x24/0x80 [ 61.683315][ C0] softirqs last enabled at (275764): [] clusterip_netdev_event+0x384/0x3ac [ 61.686044][ C0] softirqs last disabled at (275767): [] __irq_exit_rcu+0x240/0x440 [ 61.688557][ C0] ---[ end trace daad18604789981b ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 61.962085][ T9] tipc: Disabling bearer [ 61.965141][ T9] tipc: Left network mode [ 62.153872][ T9] ------------[ cut here ]------------ [ 62.155534][ T9] refcount_t: saturated; leaking memory. [ 62.157409][ T9] WARNING: CPU: 1 PID: 9 at lib/refcount.c:19 refcount_warn_saturate+0x174/0x1f8 [ 62.160022][ T9] Modules linked in: [ 62.161120][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Tainted: G W 5.15.185-syzkaller #0 [ 62.163627][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.166376][ T9] Workqueue: netns cleanup_net [ 62.167690][ T9] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 62.169803][ T9] pc : refcount_warn_saturate+0x174/0x1f8 [ 62.171359][ T9] lr : refcount_warn_saturate+0x174/0x1f8 [ 62.172895][ T9] sp : ffff80001b2c7540 [ 62.174022][ T9] x29: ffff80001b2c7540 x28: 1ffff00003658eb0 x27: dfff800000000000 [ 62.176172][ T9] x26: 00000000c0000000 x25: 00000000c0000000 x24: 0000000000000cc0 [ 62.178303][ T9] x23: ffff0000c1da8154 x22: 000000000000000a x21: 000000007ffffffe [ 62.180515][ T9] x20: ffff0000c1da8154 x19: ffff80001659e000 x18: 0000000000000001 [ 62.182662][ T9] x17: 0000000000000000 x16: ffff8000111a97c4 x15: 00000000ffffffff [ 62.184908][ T9] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000ff0100 [ 62.187027][ T9] x11: 0000000000000000 x10: 0000000000000000 x9 : 4cb61e4e29394600 [ 62.189132][ T9] x8 : 4cb61e4e29394600 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.191283][ T9] x5 : ffff80001b2c6e38 x4 : ffff80001423f280 x3 : ffff800008503958 [ 62.193442][ T9] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000026 [ 62.195593][ T9] Call trace: [ 62.196461][ T9] refcount_warn_saturate+0x174/0x1f8 [ 62.197868][ T9] nf_nat_masq_schedule+0x48c/0x57c [ 62.199245][ T9] masq_device_event+0x9c/0xe0 [ 62.200477][ T9] raw_notifier_call_chain+0xd4/0x164 [ 62.201930][ T9] dev_close_many+0x2cc/0x440 [ 62.203186][ T9] unregister_netdevice_many+0x3d4/0x17d0 [ 62.204743][ T9] ip6gre_exit_batch_net+0x418/0x468 [ 62.206153][ T9] cleanup_net+0x644/0xa98 [ 62.207314][ T9] process_one_work+0x79c/0x1140 [ 62.208655][ T9] worker_thread+0x8f4/0x101c [ 62.209896][ T9] kthread+0x374/0x454 [ 62.211027][ T9] ret_from_fork+0x10/0x20 [ 62.212206][ T9] irq event stamp: 280054 [ 62.213355][ T9] hardirqs last enabled at (280053): [] __up_console_sem+0xb4/0x100 [ 62.215985][ T9] hardirqs last disabled at (280054): [] el1_dbg+0x24/0x80 [ 62.218338][ T9] softirqs last enabled at (280036): [] pppoe_device_event+0x4a4/0x4d4 [ 62.221068][ T9] softirqs last disabled at (280034): [] pppoe_device_event+0xdc/0x4d4 [ 62.223696][ T9] ---[ end trace daad18604789981c ]--- [ 62.225206][ C1] vkms_vblank_simulate: vblank timer overrun [ 63.841337][ T9] device hsr_slave_0 left promiscuous mode [ 63.878594][ T9] device hsr_slave_1 left promiscuous mode [ 64.009441][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.011704][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.015806][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.017846][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.020950][ T9] device bridge_slave_1 left promiscuous mode [ 64.023496][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.062737][ T9] device bridge_slave_0 left promiscuous mode [ 64.064408][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.219090][ T9] device veth1_macvtap left promiscuous mode [ 64.221072][ T9] device veth0_macvtap left promiscuous mode [ 64.222800][ T9] device veth1_vlan left promiscuous mode [ 64.224527][ T9] device veth0_vlan left promiscuous mode [ 64.782609][ T9] team0 (unregistering): Port device team_slave_1 removed [ 64.795090][ T9] team0 (unregistering): Port device team_slave_0 removed [ 64.805551][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.840355][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.020995][ T9] bond0 (unregistering): Released all slaves [ 67.991928][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.047083][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.086510][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.127517][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.296245][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.344022][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.388143][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.425491][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.622715][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.666309][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.707153][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.756171][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.632151][ T2057] ieee802154 phy0 wpan0: encryption failed: -22