last executing test programs: 3m43.495884406s ago: executing program 3 (id=167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x63, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f"}}}}, 0x71) 3m40.340920996s ago: executing program 1 (id=171): r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c81) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="720e08733a245d4d89a5c41888a6cdeb07316aa2c9c12e47f60e788da5638bf2", 0x20}], 0x1) 3m40.267606096s ago: executing program 3 (id=173): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x20000000) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x2, 0x3, 0x13, 0x5, "61fce678192bb3589187b027eaf0d4fdfae677e80f680eda9bbf7d1b0b67dcc2d26cef0b0e59d91144568d0da45854c70a1a05fb21d427099f2793ae3dbede80", "08e911c5da5318eaed2648768838506c64718cbe56cadf0dad8278b464fdf258", [0xe56, 0x5]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, 0x0, 0x0, 0x9000) 3m39.519682725s ago: executing program 1 (id=174): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3m36.822661678s ago: executing program 1 (id=177): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x8000000, 0x5, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_emit_ethernet(0x96, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) close(0x3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') 3m34.76633943s ago: executing program 1 (id=181): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000040)={0x980903, 0x3, @value=0x140000000000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000202073250000000000202020db1af8ff00000000bfa1fb0fffff"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) io_setup(0x30, &(0x7f0000000600)=0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000000c0)="01", 0x24}]) 3m34.557532563s ago: executing program 3 (id=183): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m30.61372365s ago: executing program 1 (id=188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100000000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000180)=ANY=[], 0xff, 0x5a86, &(0x7f0000001080)="$eJzs3X+QHNV9IPDXM7Pa2V39WAkcZDCrRUYJwbG14lf5RyrIucROgUPJ5ZRjcbJhQSsieyVU+hFAJrHIgc86sMtOOZfg5A/iwr6zrbi4si9GoUzAnMT5l4qLj7qyqbPvsP/wFeGsMqCjXD42tTP9Zmd6p7dnZ2elBT6fkran37z59rdfv+np92Z2JwAAAPCqcPyufaeuOfd3v/VnEy985Pf+YdcdYahcK6/GCsPp8tYzlSGnU39lbW2Z7Re/9uEv/mT0xt/+5gODn3vx2PYLdvzgd8668aEPXnX03r9+9PkVX33p6aK4sT9dPLOePJuEUP36yb/46LFvnzNdlqyc/lk6FMLqZM2jq5NMiLFfhBC2T+cYQlibufMrL1y6Y3p5x939LeWrMvXy+nuD/v6KNt0PrwwhHDx1yxvCD9++9c7vrvvy3/UdeebQTJWk2tSfQlh5ffPj+0IIA+n/kPbF0NQfY6fdEkIYbHrcmwvyen2H+W/MWT8vXS5Ll0MFceL96zPrpUy97HrUl1kOFmxvofLy6KZeuYM6yzPr2ZPRQuXlGctXp8uvpcuL5xm/nO5DOQmlJFQa6U8mM30kNB23JCS1Y1ltrJcaxzak+59ZTzLrpcx6uS+zX7Xtph2tnCSt5bFepjyejitp+QXN1yZtvCen/LXpspo+UV+M6yF7o25o1o3GftXEvE7OkcvpUGo6B7Urbxz49GAMpWVDyZpZj5lqI953bOs9G8rbvnF8OCeP5IEkjZ90Ff/gd1Yv/8CXDh/Ivq434l9fSuOXuor/o6tP/Ozaw5/9TG78T8b45a7iX/Lw4LNXP3bX+tz2ORnbp9JV/PGnH//4urNvOJKb/30xfrWr+JuPnuhfcerhR3LzH4vtM9BV/Kfe9o4ff+HJB5/JjR9i/MGu4m87uucT/SOnLsqN/0hsn6Hu+s9zR674/sjIT0fz4j8R46/oKv7nD9371vtX3X1V7vHdEttnuKv477rwoTuXn3rw/LxzZ3Jfp6+wALRzVnqN9bF0vatx5lR21mL+msYLfzVaqV/zLU//r1hw9CaZi8/p7azsZXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCG85g3/9Z3/+73Dz1bS9f70xlOl+jKWLwshGQgh7Ns/vnf/zt03jX7w5gN7d49Pjo7vH53YvX/vbaOX/cbo3ok9k+O3Td879sZL649bE5L6Mjl/1rYHwtRUabi1LG7vX1145Icb3vx//jmEsdd8b6SSm//Ge3fdf3abnxnJ5qkrdx245nuX/226X8NpXsNt8pqampoKOXn93/f98v4/P/mTi0IY+5W58nr8qd/6x5aEagUzcVKl/lBPqD8ZbJtHI+s0n9helR07JyfG5m7f6ceXc/bjX3/4mV/suPVTv6y3bzV3Pzps34HNU5Olv9z6rv//l7fXC4ryOlPHvai9417E/GL7VdP2Xpnu18qc/ark7Ndd333kya+fezi/oQv2qy/tAH3Jazvabty7wWR1S3k1rR8TiY/buH/Xno37bjv4xp27xm+auGli91s2XbbpirHLr7h8Y23PN/Zm/58/FMYqz60bDHH7v9rh/veiPw1kn32ztrvqjw99Lf7srD+15rVs3u0xnVdxezRnlPf8G3zPRz/9lnsfu6ZeUNTPY+3G+SRdDk4f502hqb/Nbqt2+1V0fEIIo+3a4WfPXxXO+R877yw6DzUfmeafGcnmqW+v//nfvvlv1v5mveC0nOebE+ryPN/IeiafWntVd+y8o7nuUmvf/lBO92uobV6bvv1Y3z3H//lPGvktWxZuHd+/f++m+s/laabLk/Pa5pUtjfu1rvazHNLDGxrdtE1/ndYX6vllz5+xerZVh9L7hpI1bfcrK953bOs9G8rbvnE8r6WTB+pbHAgr6svkdTk1JzMPLDcSbrf9pfr8K+ofI+/8m6++96t/f9ms/nFJ/WfRfiU5+/XlJz//6c996t/+fe/2652/dWL45//zjzbUC5b8eaVcT6SRdZpPMnNemZy4JISi59+60H4/Gs+/f1+OcdOM2u9P0fMvu52Z+u3jjWbWh0K5q+frJQ8PPnv1Y3etz32+npzr+dq8s7e3PK5c8HxdKv0n+/xKKq15LN7zq6WjJJunvvmxsw49+pEt59YLil4vG7Xb9etLOxh/5OzXP177/ZGbR//Nf+/deeOLv/GV634wvvlP6wXdH/eYS2+OezVt32pO+zayjuPO5vZ90403T26vlxe185m7/k2XBeOfeCrZd9vBD41PTk7s3dfZfnX6ehq3k23lbl9P49ltTcF+lWbt1+Ld6KS9On2+xfy3d91erc+3oZB09bpw8Durl3/gS4cPDM96VLqh60tp/FJX8X909YmfXXv4s5/Jjf/JGL/SVfzxpx//+LqzbziSG/++JI1f7Sr+5qMn+leceviR3PhjMf+BruI/9bZ3/PgLTz74TG78EOMPdRU/9dPc+E8k6Xamr5FC+MoLl+6oryehL32+xTz6WvIK2fUks17KrJeb10txFiHdQDlJWstjvbT8gqZc2vnDnPJ4FVZdW1++GNdD9sbc5UtNqenc36686DoVAOCVLr7/H69B4/v/E+mFUv5MA8zodhz2o+eOXPH9kZGfrs2JG8dhM/M5re+xrk3jx8fHecCRN4Wx6eUdo/UL/fm+jxCfD9l5zridi17fGqNwnnOqtv1Z85xF8+/rM+sxr/p8eaVpHJqaPa6phA7m39dnwhTNv2d2v/j9rNGPzUprtGneKnv8+tIZs3afdwit7VKZjpDXP7LzYvHzHCMrw5ba9jrsH9nP0cTjkP0cTdzOuZkTZ7efo8nrH8Oz26Elr9g/Yr05+kct5eL3I2cfvzBH+84cv/bRssdvHse7GsJ/+mxcWaz3Z3swb9j2lNbJvGF/my3E+zqfN1zc98PMS+bET59gHcwbvrSq5XGnd94wlsf9qHQ4n/jenPJezSfG00XM6+QcuZwO5hOBV6o4/o+vEdPj/+kL8P+XqVc0TsleNcZ4uZ/TK7fPp2jcMftzeoNdvY5vO7rnE/0jpy7Kvc55pNPP6e1pWRss+NxPUTtuyKwXtmPOBE3ReC+7naJ2z34uYyis6KrdP3/o3rfev+ruq3LbfUv9hbS43T/dsraioN0X+/OcL//PGRgvtI2/xD/H0On82Rn7HEP6wafFGo/8QU75fMcjg7NuNParZumOR2ZeSPtbJ/AAANqK4//G+2fp+P9/xQrpdUTRuPXizHqMlztuzbk+yRu3/n66vDVTfyj9jYr5Xje/68KH7lx+6sHzc8ct93U6Dv2PLWvDhePQhY2bc8cRW3rzefHccURjnLWwcWJu/o1x4sLG6Tlv0zaN0xc2js5tn8Y4unUe4NMnOosf5wFy4zfmAXo4zn1pptLpG+cWzNdlNhZXO52vOyPj6JWt+7ko4+j012cXaxz9npzy+Y6jh2bdaOxXzdIdR7eWG0cDAK9UcfwfL+Pi+P+xTL2Fvs+eOy7o0XV79u+BNOI/sSjjypn4PXr/t3jct9jj1rxxfXKo3VbivZ2P6xd7XuLl/v7vYs8LDdf+gGcaf9PKDuN3Ok92xt5fXirj4nSjxsUAACxlcfw/kK7nj/8XNj6ZNX7rq19CzoxPXn7j8+Z6Z2583qv33Y3P28bv9H3rnPhLZ/5rcT8n86of/8f1dHXK+B8AgCUojv/jrz3Gv//3X9L17N+tX3rj9Kn0knSR3kdP28M43Tg9zDFOvzLn9z3i/Z2P03s8zxbjN38OwDzA6f18/MBMffMAAACcCX21kdLs37N/f7rM/p593u/lX5tTv6aDv4laSS+Pb9i/d2LiugN7to/vn7hu983bJ/Zdd8venfv3T+yu11vouDF33JIm2RcqaXu0r5cdt61KJwZW5fw9hGz9GPa82o3Zfw8hu9mBgr8jMHP8Oss37/iV5qjfrn/kHe+8+H+YUz9qHP8b/+iS63bsu27n7p37d45P7jw40Rp9uiEG5/G9mUn6f17fl/r4U//ueAj1W7Vvzcwozf/7O+PhmWceLT9mPZFK0y2S5B7/6TySTB6r00xW533/QU7e3/pvf/7HF0798gshjL2m/Lr55t0acvPUf37fxO/vP/69PdP5l+bMv1Ezzavo+0qz9eP+VCZv3rf/DTtuPrA7+42S3YnzGaXG+iLNZ6RP/3KH8xPbcsrn+/v75Vk3lqaO5yemvf2G05cYAMASF9//j9ez8f3DT6UXULG883F6/cKx2/ePc8fpY52N07PfS1Y0Ts/Wj/vb6Ti9usBxenb7+eP0gdz67cbpeePuvPh/kFN/vjrvJ138PkYcfn7p8IHcfnJ9tp8MtK2X/T6Don6SrT/ffpIssJ9kt180n9Oufrt+knfc8+K/O6d+nqL+UGn0h4X9/kxuf/hkZ+eNX8+sF/WHbP359ofSAvtDdvtF/aFd/Xb9Ie/45sW/Jqd+p1r7x3THqPWLietuuXnvh5rqLfb3X4TZH8noJL9lM49d3O//6Fbn7bu4n/taeP4hbK6V5OW/uJ8rW3j+Re0/j9//Whlmfa4sN/8nck4gPc9/cb/fJSOv+uzHn6752vRMUPT5s6J53K055fOdx10268bSNK95XKCn4vg/vt0Tx/93p8tevw308v+eNN9j1jZ+j77HrOg65lX3ep59y93rOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDLX38I/ZW1tZvH79p36ppzf/dbfzbxwkd+7x923fFrH/7iT0Zv/O1vPjD4uRePbb9gxw9+56wbH/rgVUfv/etHn1/x1ZeeLow9XPtZuThdrYaQPJuEUP36yb/46LFvnzNdloQQysnwoRBWJ2seXZ1kIoz9IoSwPaZaab3zKy9cumN6ecfd/S3lqzJBsvsVhsoxn+Y8Q7i1cI94Gaqm/ezgqVveEH749q13fnfdl/+u78gzh2aqJNWm/hTCyuubH98XQhhI/4f6U6ZmbXxwutwSQhhsetybC/J6fYf5b8xZPy9dLkuXQwVx4v3rM+ulTL3setSXWQ4WbG+h8vLotl6R5Zn17MloofLyjOWr0+XX0uXF84xfjv+TUEpCpZH+ZDLTR0LTcUtCUjuW1cZ6qXFsQ7r/mfUks17KrJf7MvtV227a0cpJ0loe62XK4+m4kpZf0HyubuM9OeWvTZfV9In6YlwP2Rt1Q7NuNParJuZ1co5cUv+huEr3Sk3noHbljQOfHoyhtGwoWTPrMVNtxPuObb1nQ3nbN44P5+SRPJCk8ZOu4h/8zurlH/jS4QNr8+JfX0rjl7qK/6OrT/zs2sOf/Uxu/E/G+OWu4l/y8OCzVz921/rc9jkZ26fSVfzxpx//+LqzbziSm/99MX61q/ibj57oX3Hq4Udy8x+L7TPQVfyn3vaOH3/hyQefyY0fYvzBruJvO7rnE/0jpy7Kjf9IbJ+h7vrPc0eu+P7IyE9H8+I/EeOv6Cr+5w/d+9b7V919Ve7x3RLbZ7ir+O+68KE7l5968Py8c2dyX69eOQFenc5Kr7E+lq53O85cqKbxwl+NVurXfMvT/yt6uaGM6e2sXMT4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8Mv3T7Ze9/31XvntrJQkhyakz1Ua8r7xs8+bRLrY7/vTjH1939g1HmsvWdhEHAAAAKBbH4aVGSTWsDbckA+G8tvXjHMF5cS1pLc8uY5zsHEGncUImTqlNnFIXcco9yqfSozh9PYqzrEdx+nsUp1oQpxo6izMwR5zKdA/oMJ/BOfPpPM5Qj+Is71GcFT2Ks7JHcVb1KM7wnHE674erexRnTY/inNWjOGf3KM5rehTnV3oU55wexcnOKc+3H65Ia56bF6d2o1wYp5KUG3e0m08/J93O+QvcztCc26lOrSh6Pe5wOwMF+xO38/rM40rF2znUXL/a4XZ+df7bad3/Drfz6wvcTqlgO7Hf3prNL24nrnXY/2/rUZyDPYrz4R7Fub1Hcf5kPnHavEcW4/xpj/L5yALjAHQqjv9nxnvDob/ym2EwPeNkZwHieHdd7efs17u8E1KM97pM+bKieNmBeibeuvnml51AyMRbn4nW1xKv0hiPzBGv2hxvQ+bOufb3bZvb59Yc7+JMef8c8WqyEwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsIj+6fbL3v++K9+9NSRh+l9bU23E+8rLNm8e7WK7x7bes6G87RvHm8v6K10EAgAAAArFcXhfo6Qa+iubQn+yrKVeNZ0HqKbr5eH6cmRl2DK9TEZLtfXBZPWcj6ukj9u4f9eejftuO/jGnbvGb5q4aWL3WzZdtumKscuvuHzjjp2TE2P1nyH0F8QLIdSmH/bddvBD45OTE3v31Quz+a9NH7e2lmztX+1xI28KY9PLO9L81xRsrzRre4t3o6MDCAAAAAAAAADAv7Brt6GSluUDwK9nZs7MeHT/zh/fxsU9DusqVlZqx9ASzwNBgi+LByHmWCdZciXp6C66K2aTLqSmFIGysGz4oQ2TNOmLLymRLywYZgmdTUKl/FAfCi1DxQ+hTJwz88yZmTPjnAZx1+33+/C8XPd139dzPx8OXM8ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPkSLjen5+szs3GQSkQzJaQ6QjeWLaVobo+5Xntj+g9LUO6d3x0qFMRYCAAAARsr68IlOpBylQj7yceLy3cboGoiVvh8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjfs9iYnq/PzM4dmUQkQ3KaA2Rj+WKa1sao++pbD332pampv3XHqmOsAwAAAIyW9eG5TqQc1TglJpITlzr/TjT7NrC+b34rb0W2zoY15vV/OxiWd8oa805bY97HRuRtbp9vCgAAAPjoy/r/QidSiVJh3ap+OOv/R/X1Wd7JfXn59nntvxUorjkTAAAAeH9Z/1/qRKpRKlQ7/fpa+/2NfXnZ/FH/t8/mnzpk/qj/51/aPvs/PQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8dCw2pufrM7Nz+SQiGZLTHCAbyxfTtDZG3bOfnPzHxftv39gdKxXGWAgAAAAYKevDV1rvcpQKkzERRy73/VMX3vvIlx55bDoiWm1+sRg3bdmx4/qzW8cs76zn9098/9nXv70q76zW8aBtEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+MAsNqbn6zOzc0ckEcmQnOYA2Vi+mKa1Meq+8vkv/uWBFx9/rTtWHWMdAAAAYLSsD1/p/ctRjWIU4/jlu+5ef0mub/6wbwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA4eOGb978jS0LC1uvd3FwLpr5iEPgMVy46L042H+ZAACAD9rJkUTzv3TCZQf7qQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEPBYmN6vj4zO1dOIpIhOc1mc9fSoVs2li+maW2MuukTL5TWvfPk092x6hjrAAAAAKNlffhK71+OakzERBy3fDfom8By/1/5EB8SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKQsNqbn6zOzc+uSiGRITnOAbCxfTNPaGHXv37X3c/cd/b2LumOlwhgLAQAAACNlfXixEylHqfDxKMVJ7fuF3glJvn0e/F1gZd72nmmTa57X6JpVjPya593Zt7NCezeteeV2NF9pnTvzaivzcu15ta551eiUr3XmLb+s3T3V1o14zkHvHgAAAD4sWf9f6kQqUSqUuvr/n/bkV/S5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAQi43p+frM7FySRCRDcpoDZGP5YprWxqh782///6iv/uyund2x6hjrAAAAAKNlffhK71+OamyI/4sNy31/VHrzs7x/1t+9755//fX0iDOPPzBV6F/2R9nFr1+54Kn+Q0SuNzsXcXS7XjKk3m9+f8+Nm5rvPhBx5nH5k1bVi/ev17tk2ny0vvXSHc8e2D7i5QAAAMBhIuv/JzqRSpQK1w3t/7POe0T/37HcgB99465fHNs+tjvyvhm5Srtebki9L2x66M+nnvv315f6/9X1Ptm5+vTea+87tqdgK9InSZsz1+7cfOCcfbls1636+b762Xv58rde+/fVN939bqt+Ocrt+Pq+R2lVW33sKx9pcyG3Z+6S9/Y0eusXhuz/9t89/eKv1t/19lL9t06e7NQ/LQbVb+28MLR+HJE2Jy+/Y/d5e/dv7q0fEbXIr67/xtsXxQl/vOa2/v1P9i3c/ea7j/0vIG0+v/HNfefeWz2/t36yVL9L9v5//uL9u39y93cfy+pnvxU5/ZS11s/11X/uzmN2PXPrZet76+f66mf7f+qKl6a21b7zh/79X9WzamHoU6ze/4NnPHzly1vSW/qHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi+Ljen5+szsXC6JSIbkNAfIxvLFNK2NUffVi19444q7fvzD7lh1jHUAAACA0bI+fKX3L0c1ilGMyeW+/9H61kt3PHtge1Rao0n7XFjYdsOOT1y9bed1Vx2kJwcAAADW6tWLk+X+v9CJVKJU2BQT7f5/5tqdmw+csy+X9f+5pXMSEVdfs7D1zOjkPXfnMbueufWy9Z3vBBHLPwsoL+V9ZiXvwgteqLz5p6+fOjDv7JW85ze+ue/ce6vnZ3nRnXdWdL5PPHjGw1e+vCW9pfN83Xmf+tq2hfbniWzdycvv2H3e3v2bc9l3jPZ5sr1ulreQ2zN3yXt7GrlKlJbG8+28cnvfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBqi43p+frM7FzkI5IhOc1u7UA2li+maW2Mupds+uVtR73z+IbuWKkwxkIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAfduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBffyFSlX0cwJ9nZvbd2Z1d3dUX2orW1YrCLpSCiLqpqAiNELoyJCzNiygIIgq7aA2NxIpugqwbiQqqLQSD3CTRYo3+STddVFBgXQQiLdQu0kXGzjxnnD3OaXS2AunzgeHZ5znnfM/vnOeZM3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDzSm9lpN4e2fHI7J0X3frZU/fPPHn7Bw9tu+KJt34a23Tzp3v7Xz85tXn5lm9vWbrpwANrJne/cvi3wff+ONYx+PFGszJ1qyHEEzGE6ofTLz499fkFc2MxhFCOQ+MhDMclh4djLmH17yGEzc0652/cN3PNlrl2267eeeOLcyH56wq1clZPw9D8eludyodx3qmmdbZ19rGrwvc3rd/+5bJ33+mZOD5+epc4t085racQFm1sPb4nhNCXPnOy1TaSHZzadSGE/pbjrutQ16VnWf+qgv7Fqf1famsdcrLtK3L9Um6/fD/Tk2v7O5xvoYrq6Ha/TgZy/fzDaKGada5qPz6c2vdTu/Ic88vZJ4ZSDJVm+Q/G02sktMxbDLE+l9Vmv5TNbSWk6+9pOS6GEHP9Uq5f7sldV/28aaGVY5w/nu2XG88ex5U0vrz1Wd3GXQXjF6a2mr6oJ7N+yP/RUDvjj+Z11WV1Tf9FLf+GUsszqN14c+LTZNTSWC0uOeOYU21k26bWP3t5ecNHR4YK6oh7Y8qPXeVv/WJ44J63dz46UpS/sZTyS13l/7D26C9373z15cL8F7L8clf5Vx/sP7H24x0rCu/PdHZ/KmeVH1M/23bvsU+eW/b/+ybazXU9f0+WX+2q/hsnj/YOzh48VFj/6uz+9HWV/90Nt/345tf7jxfmhyy/v6v8DZMPP987OntlYf6hxlehVl+hXayfXyeu/WZ09Oexovyvsvs/2CY/dsx/Y3z39a8t3rWmcH2uy+7PUMrvO6f677jswPaB2f2XFD07456/65cT4L9pafof65nU7/SeuW+m1PY9c6Fa3hdeGqs0foEG0qfTu+FCzJ1n0T+YDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwJztwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFMBAAD//+bWGOM=") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280), 0x208e24b) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) 3m28.687964387s ago: executing program 3 (id=191): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x8000000, 0x5, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_emit_ethernet(0x96, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) close(0x3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') 3m27.16428887s ago: executing program 3 (id=193): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x20000000) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x2, 0x3, 0x13, 0x5, "61fce678192bb3589187b027eaf0d4fdfae677e80f680eda9bbf7d1b0b67dcc2d26cef0b0e59d91144568d0da45854c70a1a05fb21d427099f2793ae3dbede80", "08e911c5da5318eaed2648768838506c64718cbe56cadf0dad8278b464fdf258", [0xe56, 0x5]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, 0x0, 0x0, 0x9000) 3m26.744987007s ago: executing program 1 (id=194): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) symlink(&(0x7f000000a900)='./file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002200)=""/4096, 0x1000) 3m22.387929958s ago: executing program 3 (id=200): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "c2c48bc5"}, @local=@item_4={0x3, 0x2, 0xa, "c0e828b9"}, @global]}}, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0200000004000000080000000162000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000001"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "2e20cb5922405d2b0ed7c8729548014700bdc1229e2d9a0b6002a38c4590b7b6", "70dd7d02e84babe45bd05d343a339dedd14c54f4d2f554799a09c7c256d6f061", "c50d2abf3165b9e7d620f0e3df116caeaa76d18e5e786a3a0cd313577dcdb7fb", "504fb8f6245be4989b5ebef3e7c2775f741959c7dd21cc4e1c8d657671b43cef", "93679acb84092946a1a81ee8d8afdf231fa01792631c12a2ba65e45bb2feccb3", "cbca73085d806a78916b08c1", 0x3, 0x81, 0x8, 0x81, 0x7}}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x2, 0x0, 0x0, 0x5, 0x2, 0x0, 0x80, 0x19, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x40000000000000, 0x2000000000}, 0x0, 0x6e6bb0}, [@replay_thresh={0x8}]}, 0xc0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) io_setup(0x222, &(0x7f0000000180)) 3m10.377684977s ago: executing program 32 (id=194): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) symlink(&(0x7f000000a900)='./file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002200)=""/4096, 0x1000) 3m6.545895419s ago: executing program 33 (id=200): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "c2c48bc5"}, @local=@item_4={0x3, 0x2, 0xa, "c0e828b9"}, @global]}}, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0200000004000000080000000162000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000001"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "2e20cb5922405d2b0ed7c8729548014700bdc1229e2d9a0b6002a38c4590b7b6", "70dd7d02e84babe45bd05d343a339dedd14c54f4d2f554799a09c7c256d6f061", "c50d2abf3165b9e7d620f0e3df116caeaa76d18e5e786a3a0cd313577dcdb7fb", "504fb8f6245be4989b5ebef3e7c2775f741959c7dd21cc4e1c8d657671b43cef", "93679acb84092946a1a81ee8d8afdf231fa01792631c12a2ba65e45bb2feccb3", "cbca73085d806a78916b08c1", 0x3, 0x81, 0x8, 0x81, 0x7}}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x2, 0x0, 0x0, 0x5, 0x2, 0x0, 0x80, 0x19, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x40000000000000, 0x2000000000}, 0x0, 0x6e6bb0}, [@replay_thresh={0x8}]}, 0xc0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) io_setup(0x222, &(0x7f0000000180)) 23.035516901s ago: executing program 2 (id=461): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone3(&(0x7f0000000380)={0x1000, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000000c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x49, 0x39, 0x65, 0x36]}}, {@space_cache}, {@datasum}, {@nobarrier}, {@flushoncommit}, {@noenospc_debug}, {@notreelog}, {@noautodefrag}, {@clear_cache}, {@commit={'commit', 0x3d, 0x7}}, {@compress}, {@enospc_debug}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x1, 0x2d, 0x6b, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 19.208432548s ago: executing program 2 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e) 14.029227573s ago: executing program 2 (id=473): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000200)="0f096766c7442400001000006766c74424020b8000006766c744240600000000670f0114240fae8c00600f0966b97d0300000f3266b871c7ffff0f23c80f21f86635000030000f23f8dbc00f3066b90b06000066b81000008066ba000000000f30660f01f6", 0x65}], 0x1, 0x23, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x8001) 11.679123545s ago: executing program 0 (id=475): r0 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r0, &(0x7f0000000700)=""/115, 0x73, 0x5) r1 = syz_open_dev$usbfs(0x0, 0xc, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) close(r0) 11.500092154s ago: executing program 4 (id=476): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x4}, 0x28) write$FUSE_OPEN(r0, &(0x7f00000002c0)={0x20}, 0x20) 11.015453811s ago: executing program 2 (id=477): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone3(&(0x7f0000000380)={0x1000, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000000c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x49, 0x39, 0x65, 0x36]}}, {@space_cache}, {@datasum}, {@nobarrier}, {@flushoncommit}, {@noenospc_debug}, {@notreelog}, {@noautodefrag}, {@clear_cache}, {@commit={'commit', 0x3d, 0x7}}, {@compress}, {@enospc_debug}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x1, 0x2d, 0x6b, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") syz_usb_connect(0x0, 0x3f, &(0x7f0000003240)=ANY=[], 0x0) 10.617839192s ago: executing program 6 (id=478): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x80000b, @empty, 0x3}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 10.309326124s ago: executing program 4 (id=479): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x65) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143042, 0x4) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./bus/file0\x00', 0x0) rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10.037782049s ago: executing program 0 (id=480): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) dup3(r3, r4, 0x0) setfsgid(0xffffffffffffffff) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 9.307372653s ago: executing program 6 (id=481): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff0100000001000000560000002500", 0x1e}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 7.144420864s ago: executing program 6 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e) 4.834768051s ago: executing program 2 (id=483): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0xc0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x0}}, './file1\x00'}) keyctl$set_reqkey_keyring(0xe, 0x5) r3 = request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00\x00\x00\x01\x00\x00', 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}], [{@appraise_type}, {@uid_gt={'uid>', r2}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@seclabel}, {@uid_gt={'uid>', r2}}, {@dont_appraise}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000004ff6943b80000000800000014f200000000861f4104bfeacd", 0x20, 0xfffffffffffffffb) r4 = openat(0xffffffffffffff9c, &(0x7f0000001d40)='./file1\x00', 0x0, 0x111) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x130, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf, 0x4, "0bfbd7cce4615b598fffe2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x30, 0x4, "2b480c6fb1bb133153798bef4035b514a3dc69e8317b7e2780adbe42eebcf6412e92c73f6fa95feb2523f235"}, @ETHTOOL_A_BITSET_MASK={0x0, 0x5, "960357c68520c5e02b60538bcbe2ba3bbf43945af62937eb8045143ae3f3ed1586695e2f63a3f9464521be349da1e9ff202458ad103de34ed5a69c8538ca11aa5c9c6375d34e92beb02bef454e85522dd814f0d2ab5102077bfcda87fa92ce4cc377aed8b493344cfb250ec87ede1aeeead341e21a1140156f48846cf84e82f9ff6e273d785b396a4466fd9996e9a6a53a71c7bff4a164b038b90f120660f91618cc076c5e53e79d1f0cd37d2f0902f774f534bb715000b12c5467"}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8010}, 0x4400) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="24850d8c343014eac4f3467f427c42fb14dd233e4a7bac9a73374b2be33f1ced08052ef8a320c176b75c395c49113c33f65a68e520b771b0b8606822f95872385f", 0x41, 0x800, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x51) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) keyctl$get_keyring_id(0x0, r3, 0x10) shutdown(r0, 0x1) 4.395659172s ago: executing program 4 (id=484): signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 4.242175397s ago: executing program 0 (id=485): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.489561719s ago: executing program 6 (id=486): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000200)="0f096766c7442400001000006766c74424020b8000006766c744240600000000670f0114240fae8c00600f0966b97d0300000f3266b871c7ffff0f23c80f21f86635000030000f23f8dbc00f3066b90b06000066b81000008066ba000000000f30660f01f6", 0x65}], 0x1, 0x23, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x8001) 3.119266518s ago: executing program 4 (id=487): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x71}, 0x440d0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, 0x0) 3.020449645s ago: executing program 0 (id=488): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.877368484s ago: executing program 4 (id=489): r0 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r0, &(0x7f0000000700)=""/115, 0x73, 0x5) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xc, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) close(r0) 1.574928669s ago: executing program 0 (id=490): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x80000b, @empty, 0x3}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.553415721s ago: executing program 6 (id=491): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff0100000001000000560000002500", 0x1e}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 275.629515ms ago: executing program 0 (id=492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x3c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004801}, 0x8004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 212.538176ms ago: executing program 4 (id=493): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x65) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143042, 0x4) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./bus/file0\x00', 0x0) rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 55.995315ms ago: executing program 6 (id=494): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) dup3(r3, r4, 0x0) setfsgid(0xffffffffffffffff) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e) kernel console output (not intermixed with test programs): 218.656862][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.685930][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.846000][ T5819] hsr_slave_0: entered promiscuous mode [ 218.855222][ T5819] hsr_slave_1: entered promiscuous mode [ 218.864674][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 218.870824][ T5819] Cannot create hsr debugfs directory [ 218.916921][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.924611][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.951785][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.969729][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.977061][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.004260][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.242911][ T5812] hsr_slave_0: entered promiscuous mode [ 219.253938][ T5812] hsr_slave_1: entered promiscuous mode [ 219.262162][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 219.268030][ T5812] Cannot create hsr debugfs directory [ 219.496690][ T5820] hsr_slave_0: entered promiscuous mode [ 219.507307][ T5820] hsr_slave_1: entered promiscuous mode [ 219.516704][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 219.522694][ T5820] Cannot create hsr debugfs directory [ 219.714912][ T5823] hsr_slave_0: entered promiscuous mode [ 219.725853][ T5823] hsr_slave_1: entered promiscuous mode [ 219.735176][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 219.741293][ T5823] Cannot create hsr debugfs directory [ 220.089667][ T5822] Bluetooth: hci1: command tx timeout [ 220.095401][ T5822] Bluetooth: hci0: command tx timeout [ 220.150112][ T5821] Bluetooth: hci3: command tx timeout [ 220.257624][ T5821] Bluetooth: hci4: command tx timeout [ 220.257904][ T5822] Bluetooth: hci2: command tx timeout [ 220.887934][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.020651][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.140460][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.301721][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.487081][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.563237][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.593426][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.672185][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.712013][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.833840][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.911429][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.984640][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.051138][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.097564][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.200104][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.367690][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.437779][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.503920][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.613839][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.752327][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.907970][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.215423][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.339591][ T1861] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.347272][ T1861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.392058][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.451497][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.459726][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.765341][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.917218][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.924969][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.029100][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.061236][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.068817][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.394026][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.461381][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.546394][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.554119][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.675044][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.683050][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.818291][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.916491][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.957069][ T5819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.969694][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.104438][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.112261][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.135012][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.292704][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.300534][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.326169][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.334247][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.637739][ T5820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.650823][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.701329][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.709114][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.644501][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.356166][ T5811] veth0_vlan: entered promiscuous mode [ 227.482216][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.570316][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.594953][ T5811] veth1_vlan: entered promiscuous mode [ 228.047968][ T5811] veth0_macvtap: entered promiscuous mode [ 228.201372][ T5812] veth0_vlan: entered promiscuous mode [ 228.230974][ T5811] veth1_macvtap: entered promiscuous mode [ 228.255160][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.323308][ T5819] veth0_vlan: entered promiscuous mode [ 228.458638][ T5819] veth1_vlan: entered promiscuous mode [ 228.499727][ T5812] veth1_vlan: entered promiscuous mode [ 228.627216][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.657343][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.744945][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.783180][ T1124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.903607][ T1124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.943839][ T1124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.007363][ T1124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.067353][ T5812] veth0_macvtap: entered promiscuous mode [ 229.087614][ T5819] veth0_macvtap: entered promiscuous mode [ 229.145127][ T5820] veth0_vlan: entered promiscuous mode [ 229.180285][ T5819] veth1_macvtap: entered promiscuous mode [ 229.206537][ T5812] veth1_macvtap: entered promiscuous mode [ 229.310772][ T5820] veth1_vlan: entered promiscuous mode [ 229.394692][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.505337][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.571647][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.623587][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.704128][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.711933][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.755314][ T4025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.854629][ T4025] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.896851][ T5820] veth0_macvtap: entered promiscuous mode [ 229.928385][ T4025] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.951854][ T1124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.018242][ T1124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.031759][ T5820] veth1_macvtap: entered promiscuous mode [ 230.083981][ T1124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.157372][ T1124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.236770][ T1124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.321575][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.432432][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.530871][ T1124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.601388][ T4025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.679815][ T4025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.720771][ T4025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.333666][ T5823] veth0_vlan: entered promiscuous mode [ 232.535641][ T5823] veth1_vlan: entered promiscuous mode [ 232.911665][ T5823] veth0_macvtap: entered promiscuous mode [ 233.006584][ T5823] veth1_macvtap: entered promiscuous mode [ 233.255288][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.368245][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.489662][ T3669] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.499635][ T3669] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.508696][ T3669] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.580392][ T3669] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.611512][ T4025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.619779][ T4025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.887354][ T3669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.897587][ T3669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.105196][ T4025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.114004][ T4025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.392830][ T3669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.401944][ T3669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.453587][ T4025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.461946][ T4025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.696721][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 238.696950][ T1861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.724463][ T1861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.268534][ T5995] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 239.393191][ T1861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.401895][ T1861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.033668][ T3669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.042357][ T3669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.898222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 243.678328][ T3669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.686952][ T3669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.998769][ T4613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.007390][ T4613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.332773][ T6041] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12'. [ 245.329154][ T6056] 9pnet_fd: Insufficient options for proto=fd [ 245.766967][ T6059] loop0: detected capacity change from 0 to 512 [ 245.833052][ T6059] ext4: Unknown parameter 'appraise_type' [ 247.057796][ T6074] loop0: detected capacity change from 0 to 512 [ 247.383985][ T6081] loop4: detected capacity change from 0 to 256 [ 247.395234][ T6081] ======================================================= [ 247.395234][ T6081] WARNING: The mand mount option has been deprecated and [ 247.395234][ T6081] and is ignored by this kernel. Remove the mand [ 247.395234][ T6081] option from the mount to silence this warning. [ 247.395234][ T6081] ======================================================= [ 247.442106][ T6074] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.19: bg 0: block 248: padding at end of block bitmap is not set [ 247.485835][ T6074] Quota error (device loop0): write_blk: dquota write failed [ 247.494204][ T6074] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 247.505212][ T6074] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.19: Failed to acquire dquot type 1 [ 247.834649][ T6074] EXT4-fs (loop0): 1 truncate cleaned up [ 247.843853][ T6074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.857246][ T6074] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.443472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 248.523926][ T6081] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 248.538608][ T6081] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 248.664928][ T6074] EXT4-fs (loop0): shut down requested (2) [ 249.160447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 249.262537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 249.364771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 249.569407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 249.671692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 249.908146][ T6086] Bluetooth: MGMT ver 1.23 [ 249.914234][ T6086] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 250.341265][ T6088] netlink: 56 bytes leftover after parsing attributes in process `syz.2.25'. [ 250.471545][ T6074] syz.0.19 (6074) used greatest stack depth: 3040 bytes left [ 250.517141][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.151765][ T6095] syzkaller1: entered promiscuous mode [ 251.157809][ T6095] syzkaller1: entered allmulticast mode [ 251.427070][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 251.701625][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 251.711674][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.724083][ T9] usb 1-1: Product: syz [ 251.728468][ T9] usb 1-1: Manufacturer: syz [ 251.734653][ T9] usb 1-1: SerialNumber: syz [ 251.801502][ T9] usb 1-1: config 0 descriptor?? [ 252.285816][ T6110] loop1: detected capacity change from 0 to 512 [ 252.294302][ T9] usb 1-1: USB disconnect, device number 2 [ 252.369812][ T6110] ext4: Unknown parameter 'appraise_type' [ 252.676288][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.169659][ T6128] loop2: detected capacity change from 0 to 512 [ 254.183614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 254.580843][ T6128] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.38: bg 0: block 248: padding at end of block bitmap is not set [ 254.737603][ T6128] Quota error (device loop2): write_blk: dquota write failed [ 254.746519][ T6128] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 254.757129][ T6128] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.38: Failed to acquire dquot type 1 [ 254.776083][ T6135] netlink: 56 bytes leftover after parsing attributes in process `syz.3.40'. [ 254.827460][ T6134] loop4: detected capacity change from 0 to 256 [ 254.860299][ T6128] EXT4-fs (loop2): 1 truncate cleaned up [ 254.868726][ T6128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.882979][ T6128] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.047985][ T6128] EXT4-fs (loop2): shut down requested (2) [ 255.079000][ T6134] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 255.097467][ T6134] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 255.807648][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.959678][ T6146] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 255.966447][ T6146] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 255.973812][ T6146] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 255.980806][ T6146] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 256.400015][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 256.656447][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.667243][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 256.677010][ T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 256.686645][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.775459][ T9] usb 2-1: config 0 descriptor?? [ 256.915243][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 256.922493][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 257.047601][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 257.069610][ T1950] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 257.112986][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 257.121455][ T9] usb 2-1: media controller created [ 257.157291][ T6154] loop4: detected capacity change from 0 to 2048 [ 257.194151][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.243355][ T1950] usb 1-1: device descriptor read/64, error -71 [ 257.292942][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 257.299545][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 257.391361][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 257.418805][ T6154] loop4: p1 < > p3 p4 < > [ 257.503254][ T6154] loop4: p3 start 4284289 is beyond EOD, truncated [ 257.515762][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 257.523364][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 257.548188][ T1950] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 257.598087][ T9] usb 2-1: USB disconnect, device number 2 [ 257.675931][ T5172] loop4: p1 < > p3 p4 < > [ 257.690142][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 257.710621][ T1950] usb 1-1: device descriptor read/64, error -71 [ 257.725571][ T5172] loop4: p3 start 4284289 is beyond EOD, truncated [ 257.823987][ T1950] usb usb1-port1: attempt power cycle [ 257.874433][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 257.928100][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 258.005635][ T24] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 258.014552][ T24] usb 5-1: config 4 has no interface number 0 [ 258.021115][ T24] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.032825][ T24] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.044127][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 258.053669][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.047119][ T6160] loop2: detected capacity change from 0 to 32768 [ 259.056510][ T6160] XFS: ikeep mount option is deprecated. [ 259.064983][ T1950] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 259.095624][ T1950] usb 1-1: device descriptor read/8, error -71 [ 259.245108][ T6160] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 259.247395][ T24] hub 5-1:4.128: USB hub found [ 259.319837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 259.330354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 259.707875][ T1950] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 259.822020][ T24] hub 5-1:4.128: config failed, can't read hub descriptor (err -22) [ 259.878394][ T24] usb 5-1: USB disconnect, device number 2 [ 260.225699][ T6178] netlink: 56 bytes leftover after parsing attributes in process `syz.3.53'. [ 260.285323][ T6178] netlink: 56 bytes leftover after parsing attributes in process `syz.3.53'. [ 260.330037][ T1950] usb 1-1: device descriptor read/8, error -71 [ 260.398327][ T6160] XFS (loop2): Ending clean mount [ 260.453050][ T6160] XFS (loop2): Quotacheck needed: Please wait. [ 260.473722][ T1950] usb usb1-port1: unable to enumerate USB device [ 260.566708][ T6160] XFS (loop2): Quotacheck: Done. [ 260.722521][ T5812] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 261.018046][ T6089] udevd[6089]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 261.246167][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 261.510565][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 261.559882][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.570495][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.658511][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.672188][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.686880][ T24] usb 1-1: Product: syz [ 261.694054][ T24] usb 1-1: Manufacturer: syz [ 261.698983][ T24] usb 1-1: SerialNumber: syz [ 261.972445][ T6089] udevd[6089]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 262.152929][ T24] usb 1-1: 0:2 : does not exist [ 262.300794][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 262.608082][ T24] usb 1-1: USB disconnect, device number 7 [ 264.860675][ T6205] warning: `syz.0.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 264.966310][ T6208] loop2: detected capacity change from 0 to 256 [ 265.278399][ T6208] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 265.291964][ T6208] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 265.328078][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.430180][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 265.450892][ T1950] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 265.628355][ T1950] usb 5-1: device descriptor read/64, error -71 [ 265.715582][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.726724][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 265.736559][ T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 265.750150][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.947337][ T1950] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 265.992482][ T9] usb 2-1: config 0 descriptor?? [ 266.067413][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 266.076645][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 266.170136][ T1950] usb 5-1: device descriptor read/64, error -71 [ 266.221728][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 266.276999][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 266.284735][ T9] usb 2-1: media controller created [ 266.311731][ T1950] usb usb5-port1: attempt power cycle [ 266.892071][ T6219] loop3: detected capacity change from 0 to 32768 [ 266.901174][ T6219] XFS: ikeep mount option is deprecated. [ 266.992082][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.018841][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 267.025949][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 267.048141][ T6219] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 267.504626][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 267.744538][ T1950] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 267.772441][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 267.779952][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 267.847009][ T1950] usb 5-1: device descriptor read/8, error -71 [ 267.891572][ T9] usb 2-1: USB disconnect, device number 3 [ 267.964088][ T6219] XFS (loop3): Ending clean mount [ 267.989791][ T6219] XFS (loop3): Quotacheck needed: Please wait. [ 268.096511][ T6219] XFS (loop3): Quotacheck: Done. [ 268.118781][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 268.143321][ T1950] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 268.317182][ T5819] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 268.976860][ T1950] usb 5-1: device descriptor read/8, error -71 [ 269.109925][ T1950] usb usb5-port1: unable to enumerate USB device [ 269.404238][ T6243] loop4: detected capacity change from 0 to 512 [ 269.821934][ T6243] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.72: bg 0: block 248: padding at end of block bitmap is not set [ 269.959985][ T6243] Quota error (device loop4): write_blk: dquota write failed [ 269.968115][ T6243] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 269.978956][ T6243] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.72: Failed to acquire dquot type 1 [ 270.113589][ T6243] EXT4-fs (loop4): 1 truncate cleaned up [ 270.121928][ T6243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.135365][ T6243] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.339623][ T6257] overlayfs: overlapping lowerdir path [ 270.376589][ T6243] EXT4-fs (loop4): shut down requested (2) [ 270.420290][ T6257] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 270.471523][ T1950] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 270.709802][ T1950] usb 3-1: Using ep0 maxpacket: 16 [ 270.735098][ T1950] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.746220][ T1950] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.884533][ T1950] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.894652][ T1950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.903130][ T1950] usb 3-1: Product: syz [ 270.907536][ T1950] usb 3-1: Manufacturer: syz [ 270.912895][ T1950] usb 3-1: SerialNumber: syz [ 271.086640][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.346040][ T1950] usb 3-1: 0:2 : does not exist [ 271.461484][ T1950] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 271.516368][ T6262] input: syz0 as /devices/virtual/input/input7 [ 271.742329][ T6264] loop4: detected capacity change from 0 to 256 [ 271.881095][ T1950] usb 3-1: USB disconnect, device number 2 [ 272.397604][ T6264] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 272.417650][ T6264] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 273.167928][ T6267] loop3: detected capacity change from 0 to 32768 [ 273.176927][ T6267] XFS: ikeep mount option is deprecated. [ 273.306411][ T6213] udevd[6213]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.391369][ T6267] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 273.979874][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 274.005666][ T6267] XFS (loop3): Ending clean mount [ 274.055800][ T6267] XFS (loop3): Quotacheck needed: Please wait. [ 274.187314][ T6267] XFS (loop3): Quotacheck: Done. [ 274.219693][ T24] usb 3-1: device descriptor read/64, error -71 [ 274.440929][ T5819] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 274.496983][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 274.732158][ T24] usb 3-1: device descriptor read/64, error -71 [ 274.849654][ T24] usb usb3-port1: attempt power cycle [ 275.259662][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 275.354465][ T24] usb 3-1: device descriptor read/8, error -71 [ 275.641172][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 275.646040][ T6294] loop4: detected capacity change from 0 to 512 [ 275.712565][ T6294] ext4: Unknown parameter 'appraise_type' [ 275.722334][ T24] usb 3-1: device descriptor read/8, error -71 [ 275.847973][ T24] usb usb3-port1: unable to enumerate USB device [ 275.910113][ T6296] loop1: detected capacity change from 0 to 512 [ 276.143265][ T6302] overlayfs: overlapping lowerdir path [ 276.232065][ T6304] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 276.339015][ T6296] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.88: bg 0: block 248: padding at end of block bitmap is not set [ 276.368161][ T6296] Quota error (device loop1): write_blk: dquota write failed [ 276.376519][ T6296] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 276.387369][ T6296] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.88: Failed to acquire dquot type 1 [ 276.538710][ T6296] EXT4-fs (loop1): 1 truncate cleaned up [ 276.548522][ T6296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.562231][ T6296] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.862258][ T6296] EXT4-fs (loop1): shut down requested (2) [ 277.194682][ T6311] capability: warning: `syz.4.92' uses deprecated v2 capabilities in a way that may be insecure [ 277.672628][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.789753][ T6314] loop2: detected capacity change from 0 to 2048 [ 277.902040][ T6213] loop2: p1 < > p3 p4 < > [ 277.933953][ T6213] loop2: p3 start 4284289 is beyond EOD, truncated [ 278.090769][ T6314] loop2: p1 < > p3 p4 < > [ 278.113538][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 278.151963][ T6314] loop2: p3 start 4284289 is beyond EOD, truncated [ 278.326561][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 278.406507][ T9] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 278.415589][ T9] usb 3-1: config 4 has no interface number 0 [ 278.422126][ T9] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.433774][ T9] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.448484][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 278.460068][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.373407][ T6321] loop3: detected capacity change from 0 to 40427 [ 279.663824][ T6321] F2FS-fs (loop3): invalid crc value [ 279.670307][ T6322] loop1: detected capacity change from 0 to 32768 [ 279.673693][ T6322] XFS: ikeep mount option is deprecated. [ 279.714926][ T9] hub 3-1:4.128: USB hub found [ 279.952019][ T6322] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 280.055926][ T6321] F2FS-fs (loop3): Start checkpoint disabled! [ 280.103181][ T6321] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 280.127567][ T9] hub 3-1:4.128: 2 ports detected [ 280.133035][ T9] hub 3-1:4.128: Using single TT (err -22) [ 280.674216][ T6314] vlan2: entered promiscuous mode [ 280.679650][ T6314] hsr0: entered promiscuous mode [ 281.033875][ T6322] XFS (loop1): Ending clean mount [ 281.072116][ T6322] XFS (loop1): Quotacheck needed: Please wait. [ 281.248780][ T9] hub 3-1:4.128: hub_hub_status failed (err = -32) [ 281.255940][ T9] hub 3-1:4.128: config failed, can't get hub status (err -32) [ 281.325498][ T6322] XFS (loop1): Quotacheck: Done. [ 281.471372][ T5820] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 282.419802][ T9] usb 3-1: USB disconnect, device number 7 [ 282.587827][ T6345] loop1: detected capacity change from 0 to 512 [ 282.721341][ T6346] loop4: detected capacity change from 0 to 512 [ 282.794890][ T6346] ext4: Unknown parameter 'appraise_type' [ 282.905751][ T6345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.920118][ T6345] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.383729][ T6358] overlayfs: overlapping lowerdir path [ 283.599936][ T6358] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 284.029050][ T6362] loop0: detected capacity change from 0 to 512 [ 284.160504][ T6360] loop0: detected capacity change from 512 to 511 [ 284.218250][ T6362] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 285.996533][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.274050][ T6385] loop0: detected capacity change from 0 to 32768 [ 287.284359][ T6385] XFS: ikeep mount option is deprecated. [ 287.547407][ T6385] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 288.312863][ T6385] XFS (loop0): Ending clean mount [ 288.333638][ T6385] XFS (loop0): Quotacheck needed: Please wait. [ 288.453454][ T6385] XFS (loop0): Quotacheck: Done. [ 289.456353][ T6409] loop3: detected capacity change from 0 to 512 [ 289.493121][ T6409] ext4: Unknown parameter 'appraise_type' [ 289.509029][ T5811] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 289.848466][ T6413] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 290.251888][ T6416] loop2: detected capacity change from 0 to 512 [ 290.601846][ T6416] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.120: bg 0: block 248: padding at end of block bitmap is not set [ 290.690245][ T6416] Quota error (device loop2): write_blk: dquota write failed [ 290.698494][ T6416] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 290.710823][ T6416] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.120: Failed to acquire dquot type 1 [ 290.863746][ T6416] EXT4-fs (loop2): 1 truncate cleaned up [ 290.872558][ T6416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.886058][ T6416] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.990527][ T6423] afs: Unknown parameter '' [ 291.137324][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.147376][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.212068][ T6416] EXT4-fs (loop2): shut down requested (2) [ 291.831810][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.379886][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 293.583223][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 293.665060][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.679970][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.755934][ T6450] loop1: detected capacity change from 0 to 512 [ 293.774703][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.784557][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.793145][ T9] usb 4-1: Product: syz [ 293.797612][ T9] usb 4-1: Manufacturer: syz [ 293.806686][ T9] usb 4-1: SerialNumber: syz [ 293.856703][ T6450] ext4: Unknown parameter 'appraise_type' [ 294.169636][ T9] usb 4-1: 0:2 : does not exist [ 294.257427][ T6453] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 294.270368][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 294.587038][ T9] usb 4-1: USB disconnect, device number 2 [ 295.091836][ T6089] udevd[6089]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.107227][ T6472] kvm: user requested TSC rate below hardware speed [ 297.620734][ T6482] kvm: user requested TSC rate below hardware speed [ 297.759493][ T6490] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 299.051250][ T6505] loop2: detected capacity change from 0 to 512 [ 299.086331][ T6505] ext4: Unknown parameter 'appraise_type' [ 299.340002][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 299.570039][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 299.636108][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.652846][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.734467][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.750025][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.758287][ T24] usb 1-1: Product: syz [ 299.764761][ T24] usb 1-1: Manufacturer: syz [ 299.770003][ T24] usb 1-1: SerialNumber: syz [ 300.120579][ T24] usb 1-1: 0:2 : does not exist [ 300.225865][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 300.483103][ T24] usb 1-1: USB disconnect, device number 8 [ 300.931514][ T6213] udevd[6213]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.715189][ T6530] loop6: detected capacity change from 0 to 7 [ 301.758952][ T6530] Dev loop6: unable to read RDB block 7 [ 301.765082][ T6530] loop6: unable to read partition table [ 301.841518][ T6530] loop6: partition table beyond EOD, truncated [ 301.848214][ T6530] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 302.487959][ T6538] loop2: detected capacity change from 0 to 512 [ 303.092407][ T6538] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.162: bg 0: block 248: padding at end of block bitmap is not set [ 303.142973][ T6547] loop4: detected capacity change from 0 to 512 [ 303.182934][ T6547] ext4: Unknown parameter 'appraise_type' [ 303.265218][ T6538] Quota error (device loop2): write_blk: dquota write failed [ 303.279913][ T6538] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 303.290476][ T6538] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.162: Failed to acquire dquot type 1 [ 303.319690][ T6538] EXT4-fs (loop2): 1 truncate cleaned up [ 303.338921][ T6538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.353067][ T6538] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.830954][ T6538] EXT4-fs (loop2): shut down requested (2) [ 304.952619][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.036058][ T5879] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 307.289608][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 307.365057][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.375725][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.467949][ T5879] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.477701][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.486237][ T5879] usb 3-1: Product: syz [ 307.490747][ T5879] usb 3-1: Manufacturer: syz [ 307.495496][ T5879] usb 3-1: SerialNumber: syz [ 307.554845][ T6573] loop3: detected capacity change from 0 to 512 [ 307.864977][ T5879] usb 3-1: 0:2 : does not exist [ 307.978706][ T5879] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 308.011566][ T6573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.025141][ T6573] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.000415][ T5879] usb 3-1: USB disconnect, device number 8 [ 309.244002][ T6581] loop6: detected capacity change from 0 to 7 [ 309.319931][ T6089] Dev loop6: unable to read RDB block 7 [ 309.326079][ T6089] loop6: unable to read partition table [ 309.498275][ T6089] loop6: partition table beyond EOD, truncated [ 309.530991][ T6581] Dev loop6: unable to read RDB block 7 [ 309.537022][ T6581] loop6: unable to read partition table [ 309.663888][ T6581] loop6: partition table beyond EOD, truncated [ 309.671047][ T6581] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 310.488160][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.227256][ T6593] loop4: detected capacity change from 0 to 512 [ 311.262603][ T6592] process 'syz.1.177' launched './file0' with NULL argv: empty string added [ 311.332864][ T6593] ext4: Unknown parameter 'appraise_type' [ 312.366052][ T6598] loop2: detected capacity change from 0 to 512 [ 312.900709][ T6598] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.179: bg 0: block 248: padding at end of block bitmap is not set [ 312.956457][ T6598] Quota error (device loop2): write_blk: dquota write failed [ 312.967545][ T6598] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 312.978672][ T6598] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.179: Failed to acquire dquot type 1 [ 313.080499][ T6598] EXT4-fs (loop2): 1 truncate cleaned up [ 313.088813][ T6598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.102860][ T6598] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.129483][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.418259][ T6598] EXT4-fs (loop2): shut down requested (2) [ 314.685431][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.032876][ T6615] netlink: 'syz.3.183': attribute type 5 has an invalid length. [ 316.793733][ T6615] Zero length message leads to an empty skb [ 318.848592][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 319.135093][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 319.183317][ T6623] loop1: detected capacity change from 0 to 32768 [ 319.329948][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.340935][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.553569][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.563165][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.571940][ T9] usb 3-1: Product: syz [ 319.577223][ T9] usb 3-1: Manufacturer: syz [ 319.583259][ T9] usb 3-1: SerialNumber: syz [ 319.604873][ T6623] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 319.605007][ T6623] allowing incompatible features above 0.0: (unknown version) [ 319.605110][ T6623] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 319.650287][ T6623] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 319.658833][ T6623] bcachefs (loop1): initializing new filesystem [ 319.682942][ T6623] bcachefs (loop1): going read-write [ 319.766160][ T6623] bcachefs (loop1): marking superblocks [ 319.836004][ T6623] bcachefs (loop1): initializing freespace [ 319.868524][ T6623] bcachefs (loop1): done initializing freespace [ 319.891490][ T6623] bcachefs (loop1): reading snapshots table [ 319.897848][ T6623] bcachefs (loop1): reading snapshots done [ 320.058726][ T6623] bcachefs (loop1): loop1: Superblock write was silently dropped! (seq 0 expected 42) [ 320.073029][ T6623] bcachefs (loop1): done starting filesystem [ 320.174283][ T9] usb 3-1: 0:2 : does not exist [ 320.257043][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 320.349876][ T6623] syz.1.188 (6623) used greatest stack depth: 1200 bytes left [ 320.553601][ T6647] loop3: detected capacity change from 0 to 512 [ 320.700057][ T5820] bcachefs (loop1): shutting down [ 320.705288][ T5820] bcachefs (loop1): going read-only [ 320.738488][ T9] usb 3-1: USB disconnect, device number 9 [ 320.810463][ T5820] bcachefs (loop1): finished waiting for writes to stop [ 321.060598][ T5820] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 321.376444][ T6647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.389884][ T6647] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.829912][ T5820] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 321.931243][ T5820] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 322.023618][ T5820] bcachefs (loop1): marking filesystem clean [ 323.463018][ T5820] bcachefs (loop1): shutdown complete [ 324.164418][ T6662] udevd[6662]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.126825][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.304938][ T6645] Set syz1 is full, maxelem 65536 reached [ 330.007827][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 331.112231][ T6685] loop2: detected capacity change from 0 to 32768 [ 331.125508][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 331.138843][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 331.153823][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 331.163282][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.353095][ T6685] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 331.353235][ T6685] allowing incompatible features above 0.0: (unknown version) [ 331.353363][ T6685] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 331.396989][ T6685] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 331.405739][ T6685] bcachefs (loop2): initializing new filesystem [ 331.429984][ T6685] bcachefs (loop2): going read-write [ 331.447923][ T9] usb 4-1: config 0 descriptor?? [ 331.476614][ T6685] bcachefs (loop2): marking superblocks [ 331.542877][ T6685] bcachefs (loop2): initializing freespace [ 331.574795][ T6685] bcachefs (loop2): done initializing freespace [ 331.603875][ T6685] bcachefs (loop2): reading snapshots table [ 331.610430][ T6685] bcachefs (loop2): reading snapshots done [ 331.775187][ T6685] bcachefs (loop2): loop2: Superblock write was silently dropped! (seq 0 expected 42) [ 331.865850][ T6685] bcachefs (loop2): done starting filesystem [ 332.266952][ T9] corsair 0003:1B1C:1B09.0001: unbalanced delimiter at end of report description [ 332.433817][ T9] corsair 0003:1B1C:1B09.0001: parse failed [ 332.442492][ T9] corsair 0003:1B1C:1B09.0001: probe with driver corsair failed with error -22 [ 333.694099][ T5812] bcachefs (loop2): shutting down [ 333.699696][ T5812] bcachefs (loop2): going read-only [ 333.725541][ T5812] bcachefs (loop2): finished waiting for writes to stop [ 333.900421][ T5812] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4 [ 334.028311][ T6711] loop0: detected capacity change from 0 to 1024 [ 334.082286][ T5812] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4 [ 334.134780][ T5812] bcachefs (loop2): clean shutdown complete, journal seq 5 [ 334.145883][ T5812] bcachefs (loop2): marking filesystem clean [ 334.163399][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 334.163716][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 334.171728][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 334.177174][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 334.182721][ T5112] Bluetooth: hci2: command 0x0406 tx timeout [ 334.466375][ T5812] bcachefs (loop2): shutdown complete [ 335.083380][ T6715] loop4: detected capacity change from 0 to 512 [ 335.516673][ T6715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.530174][ T6715] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.623688][ T3637] hfsplus: b-tree write err: -5, ino 4 [ 336.315927][ T30] audit: type=1800 audit(1754359163.788:2): pid=6719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.210" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 337.252006][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.693950][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.821563][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.843117][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.869680][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.906619][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.865919][ T6740] chnl_net:caif_netlink_parms(): no params data found [ 342.049874][ T6755] loop0: detected capacity change from 0 to 1024 [ 342.083384][ T5814] Bluetooth: hci5: command tx timeout [ 342.810907][ T6758] loop4: detected capacity change from 0 to 512 [ 343.127778][ T5816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.172774][ T5816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.180433][ T6758] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.222: bg 0: block 248: padding at end of block bitmap is not set [ 343.198168][ T5816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.242090][ T5816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.280623][ T5816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.350388][ T6758] Quota error (device loop4): write_blk: dquota write failed [ 343.358572][ T6758] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 343.375186][ T6758] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.222: Failed to acquire dquot type 1 [ 343.453192][ T6758] EXT4-fs (loop4): 1 truncate cleaned up [ 343.463154][ T6758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.481039][ T6758] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.801147][ T1124] hfsplus: b-tree write err: -5, ino 4 [ 343.846436][ T6758] EXT4-fs (loop4): shut down requested (2) [ 343.952908][ T6768] loop2: detected capacity change from 0 to 512 [ 344.154011][ T5816] Bluetooth: hci5: command tx timeout [ 344.222841][ T6768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.236281][ T6768] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.463926][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.714101][ T2977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.151717][ T2977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.437842][ T5816] Bluetooth: hci6: command tx timeout [ 345.664022][ T2977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.000114][ T6740] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.007987][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.016101][ T6740] bridge_slave_0: entered allmulticast mode [ 346.036315][ T6740] bridge_slave_0: entered promiscuous mode [ 346.196442][ T2977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.235682][ T5816] Bluetooth: hci5: command tx timeout [ 346.310732][ T6740] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.318487][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.327319][ T6740] bridge_slave_1: entered allmulticast mode [ 346.346600][ T6740] bridge_slave_1: entered promiscuous mode [ 347.272091][ T6740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.511289][ T5816] Bluetooth: hci6: command tx timeout [ 347.704611][ T6740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.853414][ T6796] overlayfs: missing 'lowerdir' [ 348.064420][ T2977] bridge_slave_1: left allmulticast mode [ 348.070764][ T2977] bridge_slave_1: left promiscuous mode [ 348.083702][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.144188][ T2977] bridge_slave_0: left allmulticast mode [ 348.151298][ T2977] bridge_slave_0: left promiscuous mode [ 348.158137][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.352719][ T5816] Bluetooth: hci5: command tx timeout [ 348.772956][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.951468][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.041288][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.093783][ T2977] bond0 (unregistering): Released all slaves [ 349.401064][ T6802] netlink: 'syz.0.230': attribute type 5 has an invalid length. [ 349.591266][ T5816] Bluetooth: hci6: command tx timeout [ 349.599841][ T6805] loop4: detected capacity change from 0 to 1024 [ 349.724676][ T6740] team0: Port device team_slave_0 added [ 350.041565][ T6763] chnl_net:caif_netlink_parms(): no params data found [ 350.154181][ T6740] team0: Port device team_slave_1 added [ 350.186665][ T6808] loop2: detected capacity change from 0 to 512 [ 350.389937][ T6808] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.233: bg 0: block 248: padding at end of block bitmap is not set [ 350.524137][ T6808] Quota error (device loop2): write_blk: dquota write failed [ 350.541482][ T6808] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 350.552182][ T6808] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.233: Failed to acquire dquot type 1 [ 350.594300][ T6808] EXT4-fs (loop2): 1 truncate cleaned up [ 350.603842][ T6808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.618639][ T6808] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.913328][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.920981][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.953525][ T6740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.037463][ T4318] hfsplus: b-tree write err: -5, ino 4 [ 351.129518][ T2977] hsr_slave_0: left promiscuous mode [ 351.159462][ T2977] hsr_slave_1: left promiscuous mode [ 351.167887][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.176149][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.212686][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.221355][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.290020][ T2977] veth1_macvtap: left promiscuous mode [ 351.295791][ T2977] veth0_macvtap: left promiscuous mode [ 351.303280][ T2977] veth1_vlan: left promiscuous mode [ 351.308866][ T2977] veth0_vlan: left promiscuous mode [ 351.703364][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.705900][ T5816] Bluetooth: hci6: command tx timeout [ 352.226887][ T6819] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 352.432367][ T2977] team0 (unregistering): Port device team_slave_1 removed [ 352.573192][ T2977] team0 (unregistering): Port device team_slave_0 removed [ 352.804596][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.811458][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.996913][ T6830] loop0: detected capacity change from 0 to 512 [ 356.188479][ T6830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.202180][ T6830] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.094885][ T6840] loop0: detected capacity change from 512 to 511 [ 357.198301][ T30] audit: type=1800 audit(1754359184.688:3): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.239" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 357.473173][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.480915][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.511595][ T6740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.921945][ T1950] usb 4-1: USB disconnect, device number 3 [ 358.120549][ T6740] hsr_slave_0: entered promiscuous mode [ 358.132338][ T6740] hsr_slave_1: entered promiscuous mode [ 358.141889][ T6740] debugfs: 'hsr0' already exists in 'hsr' [ 358.147827][ T6740] Cannot create hsr debugfs directory [ 358.328223][ T4173] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.612199][ T4173] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.714464][ T6837] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 16368: padding at end of block bitmap is not set [ 358.806852][ T4173] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.064573][ T6856] loop4: detected capacity change from 0 to 256 [ 359.112604][ T6856] exfat: Deprecated parameter 'namecase' [ 359.118959][ T6856] exfat: Deprecated parameter 'namecase' [ 359.125682][ T6856] exfat: Deprecated parameter 'utf8' [ 359.218344][ T4173] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.335892][ T6856] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 359.629510][ T30] audit: type=1800 audit(1754359187.108:4): pid=6856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.242" name="bus" dev="loop4" ino=1048644 res=0 errno=0 [ 360.019030][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.620859][ T6865] loop0: detected capacity change from 0 to 512 [ 360.666405][ T4173] bridge_slave_1: left allmulticast mode [ 360.676661][ T4173] bridge_slave_1: left promiscuous mode [ 360.684198][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.735539][ T6865] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.244: bg 0: block 248: padding at end of block bitmap is not set [ 360.760211][ T4173] bridge_slave_0: left allmulticast mode [ 360.766286][ T4173] bridge_slave_0: left promiscuous mode [ 360.777728][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.816279][ T6865] Quota error (device loop0): write_blk: dquota write failed [ 360.826025][ T6865] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 360.838000][ T6865] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.244: Failed to acquire dquot type 1 [ 360.894156][ T6865] EXT4-fs (loop0): 1 truncate cleaned up [ 360.902971][ T6865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.916519][ T6865] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.061082][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 361.314916][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.325657][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 361.461427][ T9] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 361.471056][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.479575][ T9] usb 3-1: Product: syz [ 361.484043][ T9] usb 3-1: Manufacturer: syz [ 361.491982][ T9] usb 3-1: SerialNumber: syz [ 361.612587][ T4173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.623707][ T9] usb 3-1: config 0 descriptor?? [ 361.672070][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 361.690666][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 361.701529][ T4173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.728038][ T4173] bond0 (unregistering): Released all slaves [ 361.743573][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 361.755145][ T9] usb 3-1: media controller created [ 361.775566][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.813150][ T6874] loop4: detected capacity change from 0 to 512 [ 361.877586][ T6874] ext4: Unknown parameter 'appraise_type' [ 361.886836][ T6763] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.895244][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.910752][ T6763] bridge_slave_0: entered allmulticast mode [ 361.976226][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.214643][ T6763] bridge_slave_0: entered promiscuous mode [ 362.375171][ T6763] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.383054][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.391265][ T6763] bridge_slave_1: entered allmulticast mode [ 362.401426][ T6763] bridge_slave_1: entered promiscuous mode [ 363.045873][ T9] DVB: Unable to find symbol tda10046_attach() [ 363.052731][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 363.062001][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 363.299848][ T4173] hsr_slave_0: left promiscuous mode [ 363.312830][ T4173] hsr_slave_1: left promiscuous mode [ 363.323785][ T4173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.336346][ T4173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.352106][ T4173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.360687][ T4173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.420654][ T4173] veth1_macvtap: left promiscuous mode [ 363.426603][ T4173] veth0_macvtap: left promiscuous mode [ 363.438444][ T4173] veth1_vlan: left promiscuous mode [ 363.444362][ T4173] veth0_vlan: left promiscuous mode [ 363.877494][ T9] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 363.905885][ T9] usb 3-1: USB disconnect, device number 10 [ 364.373315][ T6893] loop4: detected capacity change from 0 to 512 [ 364.603075][ T6893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.622245][ T6893] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.777509][ T4173] team0 (unregistering): Port device team_slave_1 removed [ 365.299884][ T4173] team0 (unregistering): Port device team_slave_0 removed [ 365.668048][ T6763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.938856][ T6763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.276193][ T6740] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 367.769574][ T6912] loop2: detected capacity change from 0 to 512 [ 367.819032][ T6740] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 367.930315][ T6763] team0: Port device team_slave_0 added [ 367.942911][ T6740] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 368.022814][ T6740] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.082003][ T6912] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.256: bg 0: block 248: padding at end of block bitmap is not set [ 368.088775][ T6763] team0: Port device team_slave_1 added [ 368.154831][ T6912] Quota error (device loop2): write_blk: dquota write failed [ 368.162993][ T6912] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 368.173899][ T6912] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.256: Failed to acquire dquot type 1 [ 368.292847][ T6912] EXT4-fs (loop2): 1 truncate cleaned up [ 368.301370][ T6912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.314688][ T6912] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.603521][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.611390][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.638154][ T6763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.854445][ T6920] loop0: detected capacity change from 0 to 512 [ 368.867702][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.875349][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.903160][ T6763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.912762][ T6920] ext4: Unknown parameter 'appraise_type' [ 369.131067][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.647741][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.751093][ T6763] hsr_slave_0: entered promiscuous mode [ 369.762491][ T6763] hsr_slave_1: entered promiscuous mode [ 369.771654][ T6763] debugfs: 'hsr0' already exists in 'hsr' [ 369.777578][ T6763] Cannot create hsr debugfs directory [ 370.598982][ T6740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.256135][ T6740] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.297695][ T6939] netlink: 68 bytes leftover after parsing attributes in process `syz.4.263'. [ 371.412626][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.420298][ T3669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.571837][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.579547][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.081787][ T6763] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 372.195511][ T6763] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 372.247886][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 372.332429][ T6763] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 372.422665][ T6763] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 372.433255][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 372.455886][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.467122][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 372.478444][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 372.567746][ T1950] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 372.634889][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 372.645113][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 372.656556][ T9] usb 1-1: Manufacturer: syz [ 372.732448][ T9] usb 1-1: config 0 descriptor?? [ 372.794135][ T1950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.805514][ T1950] usb 3-1: config 0 interface 0 has no altsetting 0 [ 372.866421][ T1950] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 372.876877][ T1950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.886521][ T1950] usb 3-1: Product: syz [ 372.892216][ T1950] usb 3-1: Manufacturer: syz [ 372.897160][ T1950] usb 3-1: SerialNumber: syz [ 372.995764][ T9] usb 1-1: USB disconnect, device number 9 [ 373.114116][ T1950] usb 3-1: config 0 descriptor?? [ 373.242010][ T1950] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 373.378369][ T1950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 373.477127][ T1950] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 373.486491][ T1950] usb 3-1: media controller created [ 373.645606][ T1950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.217802][ T6962] loop4: detected capacity change from 0 to 512 [ 374.435578][ T6962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.449718][ T6962] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.490045][ T6763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.887724][ T6740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.986597][ T1950] DVB: Unable to find symbol tda10046_attach() [ 374.993847][ T1950] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 375.003026][ T1950] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 375.085677][ T6763] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.133927][ T6973] loop0: detected capacity change from 0 to 512 [ 375.193164][ T6973] ext4: Unknown parameter 'appraise_type' [ 375.248963][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.256697][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.472336][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.480248][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.920130][ T1950] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 376.249394][ T1950] usb 3-1: USB disconnect, device number 11 [ 377.335454][ T6988] overlayfs: overlapping lowerdir path [ 378.161789][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.173213][ T6740] veth0_vlan: entered promiscuous mode [ 379.371120][ T6740] veth1_vlan: entered promiscuous mode [ 379.524843][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 379.770651][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 379.792909][ T6763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.834655][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.845478][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 379.857502][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 379.962156][ T6740] veth0_macvtap: entered promiscuous mode [ 380.054396][ T6740] veth1_macvtap: entered promiscuous mode [ 380.095842][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 380.106237][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 380.114763][ T24] usb 3-1: Manufacturer: syz [ 380.136970][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 380.146046][ T7017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 380.235525][ T24] usb 3-1: config 0 descriptor?? [ 380.289749][ T4404] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.358237][ T4404] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.563804][ T4173] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.590425][ T24] usb 3-1: USB disconnect, device number 12 [ 381.037541][ T4318] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.191421][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.514623][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.759613][ T4173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.934546][ T2977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.121027][ T2977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.281504][ T4318] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.513253][ T7039] overlayfs: overlapping lowerdir path [ 385.600754][ T7048] loop4: detected capacity change from 0 to 512 [ 385.824305][ T7048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.840216][ T7048] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.911682][ T6763] veth0_vlan: entered promiscuous mode [ 387.306978][ T6763] veth1_vlan: entered promiscuous mode [ 387.874751][ T6763] veth0_macvtap: entered promiscuous mode [ 387.903740][ T5875] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 387.965388][ T6763] veth1_macvtap: entered promiscuous mode [ 388.116104][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 388.263064][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.295900][ T5875] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 388.305582][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.314854][ T5875] usb 1-1: Product: syz [ 388.322204][ T5875] usb 1-1: Manufacturer: syz [ 388.327035][ T5875] usb 1-1: SerialNumber: syz [ 388.403411][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.444897][ T5875] usb 1-1: config 0 descriptor?? [ 388.528102][ T5875] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 388.683554][ T3637] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.786297][ T3637] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.883018][ T3637] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.958995][ T3637] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.183175][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.300468][ T5875] gspca_sonixj: i2c_w8 err -71 [ 390.340276][ T5875] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 390.789856][ T5875] usb 1-1: USB disconnect, device number 10 [ 394.697324][ T7101] overlayfs: overlapping lowerdir path [ 396.004642][ T7120] syzkaller1: entered promiscuous mode [ 396.011190][ T7120] syzkaller1: entered allmulticast mode [ 396.741940][ T7128] overlayfs: failed to resolve './file1': -2 [ 397.239734][ T7133] bridge_slave_0: left allmulticast mode [ 397.245669][ T7133] bridge_slave_0: left promiscuous mode [ 397.253368][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.366044][ T7133] bridge_slave_1: left allmulticast mode [ 397.372216][ T7133] bridge_slave_1: left promiscuous mode [ 397.379369][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.540573][ T7133] bond0: (slave bond_slave_0): Releasing backup interface [ 397.625986][ T7133] bond0: (slave bond_slave_1): Releasing backup interface [ 397.846503][ T7133] team0: Port device team_slave_0 removed [ 397.949796][ T7133] team0: Port device team_slave_1 removed [ 397.961884][ T7133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.969719][ T7133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.997883][ T7132] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.004757][ T7132] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 398.089936][ T7133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.097700][ T7133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.223286][ T7132] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.230437][ T7132] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 398.486361][ T7132] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 398.493415][ T7132] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 398.515732][ T7132] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 398.524222][ T7132] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 398.649646][ T7132] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 398.700823][ T7132] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 398.707407][ T7132] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 398.840270][ T7132] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 399.112396][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 399.455708][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 399.472121][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 399.486491][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 399.567350][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 399.614430][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 400.255282][ T7157] overlayfs: overlapping lowerdir path [ 400.338895][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 400.466737][ T7159] loop6: detected capacity change from 0 to 7 [ 400.559965][ T5816] Bluetooth: hci5: command 0x0c1a tx timeout [ 400.566500][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 400.906835][ T5814] Bluetooth: hci6: command 0x0c1a tx timeout [ 401.166766][ T7159] Dev loop6: unable to read RDB block 7 [ 401.173136][ T7159] loop6: unable to read partition table [ 401.180601][ T7159] loop6: partition table beyond EOD, truncated [ 401.187433][ T7159] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 401.198996][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 401.669428][ T5816] Bluetooth: hci2: command tx timeout [ 402.395608][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 402.790097][ T5816] Bluetooth: hci5: command 0x0c1a tx timeout [ 403.230160][ T5816] Bluetooth: hci6: command 0x0c1a tx timeout [ 403.236806][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 403.618319][ T7147] chnl_net:caif_netlink_parms(): no params data found [ 403.751321][ T5816] Bluetooth: hci2: command tx timeout [ 404.874808][ T5816] Bluetooth: hci5: command 0x0c1a tx timeout [ 405.269923][ T5816] Bluetooth: hci6: command 0x0c1a tx timeout [ 405.831140][ T5816] Bluetooth: hci2: command tx timeout [ 406.045299][ T7184] overlayfs: failed to resolve './file0': -2 [ 406.489053][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 406.504741][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 406.520873][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 406.630711][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 406.718335][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.052976][ T7147] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.065481][ T7147] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.073625][ T7147] bridge_slave_0: entered allmulticast mode [ 407.086188][ T7147] bridge_slave_0: entered promiscuous mode [ 407.343178][ T7193] loop0: detected capacity change from 0 to 512 [ 407.351699][ T7147] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.359479][ T7147] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.371986][ T7147] bridge_slave_1: entered allmulticast mode [ 407.513239][ T7147] bridge_slave_1: entered promiscuous mode [ 407.693939][ T4404] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.822704][ T7200] 9pnet_fd: Insufficient options for proto=fd [ 407.911285][ T5816] Bluetooth: hci2: command tx timeout [ 407.974626][ T7193] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 408.038084][ T7193] System zones: 0-2, 18-18, 34-35 [ 408.118559][ T7193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.133056][ T7193] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 408.175972][ T4404] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.241470][ T7207] loop6: detected capacity change from 0 to 7 [ 408.340822][ T7207] Dev loop6: unable to read RDB block 7 [ 408.346759][ T7207] loop6: unable to read partition table [ 408.400602][ T7207] loop6: partition table beyond EOD, truncated [ 408.407184][ T7207] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 408.540988][ T7147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.646334][ T4404] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.692268][ T7210] overlayfs: overlapping lowerdir path [ 408.873535][ T7147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.953044][ T5816] Bluetooth: hci3: command tx timeout [ 409.008343][ T4404] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.053418][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.601615][ T7147] team0: Port device team_slave_0 added [ 410.238639][ T7147] team0: Port device team_slave_1 added [ 411.218365][ T5816] Bluetooth: hci3: command tx timeout [ 413.175764][ T7232] overlayfs: failed to resolve './file0': -2 [ 413.269877][ T5816] Bluetooth: hci3: command tx timeout [ 414.027351][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.034276][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.256593][ T4404] bridge_slave_1: left allmulticast mode [ 415.262880][ T4404] bridge_slave_1: left promiscuous mode [ 415.271440][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.308076][ T4404] bridge_slave_0: left allmulticast mode [ 415.314166][ T4404] bridge_slave_0: left promiscuous mode [ 415.321349][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.355512][ T5816] Bluetooth: hci3: command tx timeout [ 415.501626][ T7247] 9pnet_fd: Insufficient options for proto=fd [ 416.588909][ T7246] loop0: detected capacity change from 0 to 32768 [ 416.599774][ T7246] XFS: ikeep mount option is deprecated. [ 416.839619][ T7246] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 416.874121][ T7250] loop6: detected capacity change from 0 to 7 [ 416.951425][ T4404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.952337][ T7250] Dev loop6: unable to read RDB block 7 [ 416.966801][ T7250] loop6: unable to read partition table [ 417.005284][ T4404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.022942][ T4404] bond0 (unregistering): Released all slaves [ 417.045311][ T7250] loop6: partition table beyond EOD, truncated [ 417.053169][ T7250] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 417.072961][ T7147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.080604][ T7147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.111177][ T7147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.252051][ T7187] chnl_net:caif_netlink_parms(): no params data found [ 417.422614][ T7147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.430542][ T7147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.457611][ T7147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.630354][ T7246] XFS (loop0): Ending clean mount [ 417.657038][ T7246] XFS (loop0): Quotacheck needed: Please wait. [ 417.752725][ T7246] XFS (loop0): Quotacheck: Done. [ 418.099727][ T4404] hsr_slave_0: left promiscuous mode [ 418.113911][ T5811] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 418.148703][ T4404] hsr_slave_1: left promiscuous mode [ 418.157944][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.165835][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.314099][ T7262] overlayfs: overlapping lowerdir path [ 418.338791][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.346770][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.520678][ T4404] veth1_macvtap: left promiscuous mode [ 418.530472][ T4404] veth0_macvtap: left promiscuous mode [ 418.536452][ T4404] veth1_vlan: left promiscuous mode [ 418.542149][ T4404] veth0_vlan: left promiscuous mode [ 419.657764][ T7270] overlayfs: failed to resolve './file0': -2 [ 419.915227][ T4404] team0 (unregistering): Port device team_slave_1 removed [ 420.028693][ T4404] team0 (unregistering): Port device team_slave_0 removed [ 421.162281][ T7147] hsr_slave_0: entered promiscuous mode [ 421.173409][ T7147] hsr_slave_1: entered promiscuous mode [ 421.183135][ T7147] debugfs: 'hsr0' already exists in 'hsr' [ 421.192820][ T7147] Cannot create hsr debugfs directory [ 421.499965][ T4404] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.683827][ T4404] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.041039][ T4404] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.702480][ T4404] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.164101][ T7299] overlayfs: overlapping lowerdir path [ 423.316994][ T7295] loop4: detected capacity change from 0 to 32768 [ 423.328932][ T7295] XFS: ikeep mount option is deprecated. [ 423.333678][ T7187] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.347658][ T7187] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.355733][ T7187] bridge_slave_0: entered allmulticast mode [ 423.365922][ T7187] bridge_slave_0: entered promiscuous mode [ 423.513089][ T7295] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 423.556762][ T7187] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.565573][ T7187] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.573717][ T7187] bridge_slave_1: entered allmulticast mode [ 423.584005][ T7187] bridge_slave_1: entered promiscuous mode [ 424.156081][ T7295] XFS (loop4): Ending clean mount [ 424.182573][ T7295] XFS (loop4): Quotacheck needed: Please wait. [ 424.223672][ T4404] bridge_slave_1: left allmulticast mode [ 424.230608][ T4404] bridge_slave_1: left promiscuous mode [ 424.237353][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.313780][ T4404] bridge_slave_0: left allmulticast mode [ 424.322098][ T4404] bridge_slave_0: left promiscuous mode [ 424.330782][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.341857][ T7295] XFS (loop4): Quotacheck: Done. [ 424.486171][ T7314] kvm: user requested TSC rate below hardware speed [ 424.540611][ T5823] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 425.522020][ T4404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.671905][ T4404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.787016][ T4404] bond0 (unregistering): Released all slaves [ 425.942845][ T7187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.263262][ T7187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.407431][ T4404] hsr_slave_0: left promiscuous mode [ 426.437371][ T4404] hsr_slave_1: left promiscuous mode [ 426.446028][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.453851][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.461479][ T42] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 426.491196][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.498807][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.670687][ T4404] veth1_macvtap: left promiscuous mode [ 426.676662][ T4404] veth0_macvtap: left promiscuous mode [ 426.683055][ T4404] veth1_vlan: left promiscuous mode [ 426.688659][ T4404] veth0_vlan: left promiscuous mode [ 426.713737][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.728197][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 426.803698][ T42] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 426.814189][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.825622][ T42] usb 1-1: Product: syz [ 426.831126][ T42] usb 1-1: Manufacturer: syz [ 426.835964][ T42] usb 1-1: SerialNumber: syz [ 426.897255][ T42] usb 1-1: config 0 descriptor?? [ 427.076105][ T42] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 427.164165][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 427.234521][ T42] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 427.245490][ T42] usb 1-1: media controller created [ 427.370561][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.829837][ T4404] team0 (unregistering): Port device team_slave_1 removed [ 427.972093][ T4404] team0 (unregistering): Port device team_slave_0 removed [ 428.192794][ T42] DVB: Unable to find symbol tda10046_attach() [ 428.201697][ T42] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 428.212930][ T42] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 429.054206][ T42] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 429.087945][ T42] usb 1-1: USB disconnect, device number 11 [ 429.398096][ T7187] team0: Port device team_slave_0 added [ 429.592093][ T7187] team0: Port device team_slave_1 added [ 429.962529][ T7359] loop6: detected capacity change from 0 to 7 [ 430.060768][ T7359] Dev loop6: unable to read RDB block 7 [ 430.066752][ T7359] loop6: AHDI p3 p4 [ 430.077193][ T7359] loop6: partition table partially beyond EOD, truncated [ 430.086638][ T7359] loop6: p3 start 1886353253 is beyond EOD, truncated [ 430.166781][ T7187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.174207][ T7187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.204581][ T7187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.495265][ T7187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.502950][ T7187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.534011][ T7187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.092602][ T7147] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 431.355244][ T7187] hsr_slave_0: entered promiscuous mode [ 431.366285][ T7187] hsr_slave_1: entered promiscuous mode [ 431.375625][ T7187] debugfs: 'hsr0' already exists in 'hsr' [ 431.381967][ T7187] Cannot create hsr debugfs directory [ 431.399418][ T7147] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 431.408728][ T5875] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 431.548645][ T7147] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 431.652241][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.663366][ T5875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 432.283404][ T7370] loop0: detected capacity change from 0 to 32768 [ 432.294030][ T7370] XFS: ikeep mount option is deprecated. [ 432.343232][ T7370] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 432.660419][ T7372] loop2: detected capacity change from 0 to 32768 [ 432.682659][ T5875] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 432.692334][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.701761][ T5875] usb 5-1: Product: syz [ 432.706130][ T5875] usb 5-1: Manufacturer: syz [ 432.711168][ T5875] usb 5-1: SerialNumber: syz [ 432.711930][ T7147] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 432.805453][ T5875] usb 5-1: config 0 descriptor?? [ 432.870135][ T7370] XFS (loop0): Ending clean mount [ 432.894142][ T7370] XFS (loop0): Quotacheck needed: Please wait. [ 432.945100][ T5875] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 433.006486][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 433.024668][ T5875] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 433.034052][ T5875] usb 5-1: media controller created [ 433.156387][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.305495][ T7372] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 433.305636][ T7372] allowing incompatible features above 0.0: (unknown version) [ 433.305744][ T7372] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 433.343398][ T7372] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 433.352079][ T7372] bcachefs (loop2): initializing new filesystem [ 433.379843][ T7372] bcachefs (loop2): going read-write [ 433.451435][ T7372] bcachefs (loop2): marking superblocks [ 433.516419][ T7372] bcachefs (loop2): initializing freespace [ 433.548150][ T7372] bcachefs (loop2): done initializing freespace [ 433.571695][ T7372] bcachefs (loop2): reading snapshots table [ 433.581320][ T7372] bcachefs (loop2): reading snapshots done [ 433.710110][ T7372] bcachefs (loop2): loop2: Superblock write was silently dropped! (seq 0 expected 42) [ 433.715236][ T7370] XFS (loop0): Quotacheck: Done. [ 433.742604][ T7372] bcachefs (loop2): done starting filesystem [ 434.184160][ T5812] bcachefs (loop2): shutting down [ 434.190292][ T5812] bcachefs (loop2): going read-only [ 434.200244][ T5812] bcachefs (loop2): finished waiting for writes to stop [ 434.258513][ T5811] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 434.282509][ T5812] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 434.520465][ T5875] DVB: Unable to find symbol tda10046_attach() [ 434.526833][ T5875] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 434.535914][ T5875] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 434.741371][ T5875] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 434.793251][ T5812] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 434.891405][ T5875] usb 5-1: USB disconnect, device number 7 [ 434.969520][ T5812] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 435.060588][ T5812] bcachefs (loop2): marking filesystem clean [ 435.495909][ T5812] bcachefs (loop2): shutdown complete [ 436.257435][ T7187] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 436.406353][ T7187] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 436.500900][ T7187] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 436.630918][ T7187] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 436.728138][ T7147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.081875][ T7147] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.182866][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.190768][ T3669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.347055][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.354893][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.935895][ T7187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.290412][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 439.290679][ T7429] loop6: detected capacity change from 0 to 7 [ 439.362559][ T7187] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.400505][ T7429] Dev loop6: unable to read RDB block 7 [ 439.406381][ T7429] loop6: AHDI p3 p4 [ 439.412210][ T7429] loop6: partition table partially beyond EOD, truncated [ 439.423862][ T7429] loop6: p3 start 1886353253 is beyond EOD, truncated [ 439.506671][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.514383][ T3669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.566540][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.577684][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 439.690189][ T9] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 439.699824][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.708112][ T9] usb 1-1: Product: syz [ 439.713107][ T9] usb 1-1: Manufacturer: syz [ 439.713434][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.717973][ T9] usb 1-1: SerialNumber: syz [ 439.725533][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.943944][ T9] usb 1-1: config 0 descriptor?? [ 440.022877][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 440.244113][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 440.352736][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 440.362408][ T9] usb 1-1: media controller created [ 440.489727][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.435339][ T7147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.722074][ T9] DVB: Unable to find symbol tda10046_attach() [ 441.728451][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 441.740509][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 442.063641][ T9] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 442.194483][ T9] usb 1-1: USB disconnect, device number 12 [ 443.573876][ T7450] loop0: detected capacity change from 0 to 32768 [ 443.584207][ T7450] XFS: ikeep mount option is deprecated. [ 443.721254][ T7450] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 443.755510][ T7187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.291728][ T7450] XFS (loop0): Ending clean mount [ 444.309592][ T7450] XFS (loop0): Quotacheck needed: Please wait. [ 444.427580][ T7450] XFS (loop0): Quotacheck: Done. [ 444.609671][ T5811] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 446.662973][ T7147] veth0_vlan: entered promiscuous mode [ 446.757848][ T7147] veth1_vlan: entered promiscuous mode [ 447.158434][ T7147] veth0_macvtap: entered promiscuous mode [ 447.264101][ T7147] veth1_macvtap: entered promiscuous mode [ 447.613627][ T7147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.842212][ T7147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.897859][ T7187] veth0_vlan: entered promiscuous mode [ 448.028716][ T1861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.077632][ T7187] veth1_vlan: entered promiscuous mode [ 448.101032][ T1861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.137867][ T7508] loop6: detected capacity change from 0 to 7 [ 448.172372][ T1861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.199068][ T7508] Dev loop6: unable to read RDB block 7 [ 448.205294][ T7508] loop6: unable to read partition table [ 448.271424][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.330937][ T7508] loop6: partition table beyond EOD, truncated [ 448.337581][ T7508] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 448.728999][ T7187] veth0_macvtap: entered promiscuous mode [ 448.816607][ T7187] veth1_macvtap: entered promiscuous mode [ 449.073615][ T5879] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 449.154881][ T7187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.296378][ T7187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.339552][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.355120][ T5879] usb 1-1: config 0 interface 0 has no altsetting 0 [ 449.466927][ T3669] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.502451][ T5879] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 449.513156][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.522273][ T5879] usb 1-1: Product: syz [ 449.526832][ T5879] usb 1-1: Manufacturer: syz [ 449.531910][ T5879] usb 1-1: SerialNumber: syz [ 449.576801][ T3669] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.694493][ T5879] usb 1-1: config 0 descriptor?? [ 449.780113][ T5879] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 449.929459][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 449.966771][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.037153][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.076668][ T5879] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 450.086037][ T5879] usb 1-1: media controller created [ 450.265740][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.561688][ T5879] DVB: Unable to find symbol tda10046_attach() [ 451.568185][ T5879] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 451.578775][ T5879] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 451.613723][ T7539] loop4: detected capacity change from 0 to 1024 [ 451.663269][ T7539] EXT4-fs: Ignoring removed oldalloc option [ 451.733242][ T7539] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 452.035221][ T7539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.117334][ T5879] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 452.257914][ T5879] usb 1-1: USB disconnect, device number 13 [ 452.581839][ T7551] 9pnet_fd: Insufficient options for proto=fd [ 453.502728][ T7564] loop0: detected capacity change from 0 to 512 [ 453.593739][ T7564] EXT4-fs: Ignoring removed orlov option [ 453.788374][ T7564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.802539][ T7564] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 454.911078][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.737964][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.602556][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 457.001276][ T7594] Bluetooth: MGMT ver 1.23 [ 457.660173][ T5879] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 457.915063][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.925858][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 458.050026][ T5879] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 458.064085][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.073049][ T5879] usb 3-1: Product: syz [ 458.077430][ T5879] usb 3-1: Manufacturer: syz [ 458.082606][ T5879] usb 3-1: SerialNumber: syz [ 458.209576][ T5879] usb 3-1: config 0 descriptor?? [ 458.231747][ T5879] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 458.274689][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 458.414171][ T5879] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 458.423678][ T5879] usb 3-1: media controller created [ 458.627112][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.573629][ T5879] DVB: Unable to find symbol tda10046_attach() [ 459.582205][ T5879] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 459.595975][ T5879] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 460.692056][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 460.702660][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 460.750054][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 460.770504][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 460.784782][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 461.223389][ T5879] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 461.320889][ T5879] usb 3-1: USB disconnect, device number 13 [ 461.705557][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.713820][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.218287][ T3637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.226855][ T3637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.974885][ T5816] Bluetooth: hci5: command tx timeout [ 463.892858][ T1950] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 464.218198][ T1950] usb 5-1: Using ep0 maxpacket: 16 [ 464.295605][ C1] hrtimer: interrupt took 439797 ns [ 464.534089][ T1950] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.544913][ T1950] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.777189][ T1950] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.787248][ T1950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.795823][ T1950] usb 5-1: Product: syz [ 464.801330][ T1950] usb 5-1: Manufacturer: syz [ 464.806243][ T1950] usb 5-1: SerialNumber: syz [ 464.963883][ T7668] overlayfs: overlapping lowerdir path [ 465.031253][ T5816] Bluetooth: hci5: command tx timeout [ 465.279043][ T1950] usb 5-1: 0:2 : does not exist [ 465.434831][ T1950] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 465.544490][ T7631] chnl_net:caif_netlink_parms(): no params data found [ 465.770015][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.780862][ T1950] usb 5-1: USB disconnect, device number 8 [ 465.973607][ T7674] overlayfs: failed to resolve './file1': -2 [ 466.105792][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.500456][ T6662] udevd[6662]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.848527][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.199502][ T5816] Bluetooth: hci5: command tx timeout [ 467.377808][ T7690] loop2: detected capacity change from 0 to 256 [ 467.454638][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.722307][ T7690] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 467.736586][ T7690] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 468.927351][ T12] bridge_slave_1: left allmulticast mode [ 468.933572][ T12] bridge_slave_1: left promiscuous mode [ 468.940571][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.050089][ T12] bridge_slave_0: left allmulticast mode [ 469.056160][ T12] bridge_slave_0: left promiscuous mode [ 469.069639][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.136939][ T7708] kvm: user requested TSC rate below hardware speed [ 469.279788][ T5816] Bluetooth: hci5: command tx timeout [ 469.970675][ T7718] overlayfs: overlapping lowerdir path [ 471.319207][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.360821][ T5879] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 471.413748][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.470521][ T12] bond0 (unregistering): Released all slaves [ 471.590810][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 471.620959][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.631940][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.798647][ T5879] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.808340][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.817293][ T5879] usb 5-1: Product: syz [ 471.821967][ T5879] usb 5-1: Manufacturer: syz [ 471.826791][ T5879] usb 5-1: SerialNumber: syz [ 472.044751][ T7631] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.052662][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.061739][ T7631] bridge_slave_0: entered allmulticast mode [ 472.072136][ T7631] bridge_slave_0: entered promiscuous mode [ 472.180902][ T7631] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.201445][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.214694][ T7631] bridge_slave_1: entered allmulticast mode [ 472.224940][ T7631] bridge_slave_1: entered promiscuous mode [ 472.552891][ T5879] usb 5-1: 0:2 : does not exist [ 472.577950][ T5879] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 472.941214][ T5879] usb 5-1: USB disconnect, device number 9 [ 473.181477][ T12] hsr_slave_0: left promiscuous mode [ 473.232286][ T12] hsr_slave_1: left promiscuous mode [ 473.241528][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.249490][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.373099][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.381115][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.535304][ T6662] udevd[6662]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.590232][ T12] veth1_macvtap: left promiscuous mode [ 473.596216][ T12] veth0_macvtap: left promiscuous mode [ 473.602790][ T12] veth1_vlan: left promiscuous mode [ 473.608380][ T12] veth0_vlan: left promiscuous mode [ 473.826671][ T7750] loop6: detected capacity change from 0 to 256 [ 474.377835][ T7750] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 474.392364][ T7750] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 475.134559][ T12] team0 (unregistering): Port device team_slave_1 removed [ 475.307858][ T12] team0 (unregistering): Port device team_slave_0 removed [ 475.553108][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.560209][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.791377][ T7631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.989564][ T7631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.411249][ T7763] autofs: Bad value for 'fd' [ 476.760662][ T7631] team0: Port device team_slave_0 added [ 477.065070][ T7631] team0: Port device team_slave_1 added [ 477.554801][ T7631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.562343][ T7631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.588788][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.597864][ T7631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.825339][ T7631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.833233][ T7631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.859761][ T7631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.695018][ T7631] hsr_slave_0: entered promiscuous mode [ 479.706695][ T7631] hsr_slave_1: entered promiscuous mode [ 479.716630][ T7631] debugfs: 'hsr0' already exists in 'hsr' [ 479.723904][ T7631] Cannot create hsr debugfs directory [ 481.651117][ T5879] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 481.914258][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 482.054744][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.065350][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.281584][ T5879] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.291185][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.299652][ T5879] usb 3-1: Product: syz [ 482.304039][ T5879] usb 3-1: Manufacturer: syz [ 482.308859][ T5879] usb 3-1: SerialNumber: syz [ 482.666993][ T5879] usb 3-1: 0:2 : does not exist [ 482.713926][ T5879] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 482.983286][ T5879] usb 3-1: USB disconnect, device number 14 [ 483.411349][ T7798] loop4: detected capacity change from 0 to 256 [ 483.505779][ T6662] udevd[6662]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.800315][ T7798] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 483.814729][ T7798] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 485.044380][ T7808] autofs: Bad value for 'fd' [ 485.204156][ T7631] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 485.441750][ T7631] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 485.781179][ T7631] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 486.134159][ T7631] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 486.216910][ T7811] loop2: detected capacity change from 0 to 32768 [ 486.246192][ T7811] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.429 (7811) [ 486.299889][ T7811] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 486.310536][ T7811] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 486.325443][ T7811] BTRFS info (device loop2): disk space caching is enabled [ 486.333097][ T7811] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 486.659791][ T7811] BTRFS info (device loop2): rebuilding free space tree [ 486.691990][ T7811] BTRFS info (device loop2): disabling free space tree [ 486.699675][ T7811] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 486.709872][ T7811] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 487.924323][ T5812] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 488.257978][ T7631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.403654][ T7631] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.685995][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.693792][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.174289][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.181853][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.858788][ T7631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.934821][ T7863] loop6: detected capacity change from 0 to 512 [ 493.022342][ T7863] ext4: Unknown parameter 'appraise_type' [ 496.732846][ T7896] 9pnet_fd: Insufficient options for proto=fd [ 496.866248][ T7892] loop6: detected capacity change from 0 to 32768 [ 496.975009][ T7631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.004769][ T7892] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.447 (7892) [ 497.086259][ T7892] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 497.097177][ T7892] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 497.106550][ T7892] BTRFS info (device loop6): disk space caching is enabled [ 497.114221][ T7892] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 497.750605][ T7892] BTRFS info (device loop6): rebuilding free space tree [ 497.810355][ T7892] BTRFS info (device loop6): disabling free space tree [ 497.817706][ T7892] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 497.828201][ T7892] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 499.175045][ T7187] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 500.159823][ T7930] loop0: detected capacity change from 0 to 256 [ 500.814456][ T7930] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 500.828747][ T7930] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 503.888976][ T7631] veth0_vlan: entered promiscuous mode [ 504.153360][ T7631] veth1_vlan: entered promiscuous mode [ 504.703455][ T7631] veth0_macvtap: entered promiscuous mode [ 504.844466][ T7631] veth1_macvtap: entered promiscuous mode [ 505.247521][ T7631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.532316][ T7631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.639654][ T7969] 9pnet_fd: Insufficient options for proto=fd [ 506.083110][ T7965] loop2: detected capacity change from 0 to 32768 [ 506.098248][ T1861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.136356][ T7965] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.461 (7965) [ 506.209535][ T1861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.242490][ T7965] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 506.253303][ T7965] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 506.262611][ T7965] BTRFS info (device loop2): disk space caching is enabled [ 506.270291][ T7965] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 506.338471][ T1861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.432856][ T1861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.629943][ T7965] BTRFS info (device loop2): rebuilding free space tree [ 506.670697][ T7965] BTRFS info (device loop2): disabling free space tree [ 506.678018][ T7965] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 506.688784][ T7965] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 507.799786][ T8002] loop4: detected capacity change from 0 to 256 [ 509.590188][ T5812] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 510.596027][ T8002] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 510.610333][ T8002] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 513.950682][ T8027] loop6: detected capacity change from 0 to 512 [ 514.032356][ T8027] ext4: Unknown parameter 'appraise_type' [ 515.694594][ T8021] Set syz1 is full, maxelem 65536 reached [ 516.374597][ T8041] fuse: Bad value for 'fd' [ 516.517654][ T8042] 9pnet_fd: Insufficient options for proto=fd [ 517.691901][ T8057] loop4: detected capacity change from 0 to 256 [ 518.097005][ T8054] loop2: detected capacity change from 0 to 32768 [ 518.136654][ T8054] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.477 (8054) [ 518.176979][ T8054] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 518.188278][ T8054] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 518.197713][ T8054] BTRFS info (device loop2): disk space caching is enabled [ 518.205432][ T8054] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 518.259572][ T8057] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 518.277645][ T8057] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 522.040418][ T8054] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 522.041074][ T8054] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 522.300754][ T8054] BTRFS error (device loop2): open_ctree failed: -12 [ 524.615490][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 524.658489][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 524.671550][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 524.687493][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 524.704031][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 524.830998][ T8105] kvm: user requested TSC rate below hardware speed [ 526.313055][ T8112] 9pnet_fd: Insufficient options for proto=fd [ 526.410076][ T8120] loop2: detected capacity change from 0 to 512 [ 526.584770][ T8120] ext4: Unknown parameter 'appraise_type' [ 526.874753][ T5816] Bluetooth: hci2: command tx timeout [ 526.960352][ T8100] chnl_net:caif_netlink_parms(): no params data found [ 527.680230][ T8129] loop4: detected capacity change from 0 to 256 [ 528.033764][ T8129] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 528.048617][ T8129] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 528.211990][ T8139] ===================================================== [ 528.219864][ T8139] BUG: KMSAN: uninit-value in sctp_assoc_bh_rcv+0x34e/0xbc0 [ 528.227373][ T8139] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 528.233173][ T8139] sctp_inq_push+0x2a3/0x350 [ 528.237959][ T8139] sctp_backlog_rcv+0x3c7/0xda0 [ 528.243395][ T8139] sk_backlog_rcv+0x142/0x420 [ 528.248293][ T8139] __release_sock+0x1d3/0x330 [ 528.253453][ T8139] release_sock+0x6b/0x270 [ 528.258075][ T8139] sctp_wait_for_connect+0x458/0x820 [ 528.263733][ T8139] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 528.270039][ T8139] sctp_sendmsg+0x3910/0x49f0 [ 528.275047][ T8139] inet_sendmsg+0x26c/0x2a0 [ 528.280068][ T8139] __sock_sendmsg+0x278/0x3d0 [ 528.285078][ T8139] __sys_sendto+0x593/0x720 [ 528.290498][ T8139] __x64_sys_sendto+0x130/0x200 [ 528.295676][ T8139] x64_sys_call+0x3910/0x3e20 [ 528.305453][ T8139] do_syscall_64+0xd9/0x210 [ 528.311692][ T8139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.317976][ T8139] [ 528.320816][ T8139] Uninit was created at: [ 528.325374][ T8139] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 528.332315][ T8139] kmalloc_reserve+0x22f/0x4b0 [ 528.337316][ T8139] __alloc_skb+0x347/0x7d0 [ 528.342170][ T8139] sctp_packet_transmit+0x18a1/0x46d0 [ 528.347723][ T8139] sctp_outq_flush+0x1c7d/0x67c0 [ 528.353119][ T8139] sctp_outq_uncork+0x9e/0xc0 [ 528.357990][ T8139] sctp_do_sm+0x8c8e/0x9720 [ 528.362978][ T8139] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 528.368161][ T8139] sctp_inq_push+0x2a3/0x350 [ 528.373114][ T8139] sctp_backlog_rcv+0x3c7/0xda0 [ 528.378154][ T8139] sk_backlog_rcv+0x142/0x420 [ 528.383668][ T8139] __release_sock+0x1d3/0x330 [ 528.388536][ T8139] release_sock+0x6b/0x270 [ 528.393497][ T8139] sctp_wait_for_connect+0x458/0x820 [ 528.404137][ T8139] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 528.411651][ T8139] sctp_sendmsg+0x3910/0x49f0 [ 528.416671][ T8139] inet_sendmsg+0x26c/0x2a0 [ 528.421611][ T8139] __sock_sendmsg+0x278/0x3d0 [ 528.426495][ T8139] __sys_sendto+0x593/0x720 [ 528.431455][ T8139] __x64_sys_sendto+0x130/0x200 [ 528.436540][ T8139] x64_sys_call+0x3910/0x3e20 [ 528.441951][ T8139] do_syscall_64+0xd9/0x210 [ 528.446654][ T8139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.453070][ T8139] [ 528.455516][ T8139] CPU: 1 UID: 0 PID: 8139 Comm: syz.6.494 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(none) [ 528.467681][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 528.478606][ T8139] ===================================================== [ 528.485834][ T8139] Disabling lock debugging due to kernel taint [ 528.492305][ T8139] Kernel panic - not syncing: kmsan.panic set ... [ 528.499071][ T8139] CPU: 1 UID: 0 PID: 8139 Comm: syz.6.494 Tainted: G B 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(none) [ 528.512532][ T8139] Tainted: [B]=BAD_PAGE [ 528.516819][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 528.527035][ T8139] Call Trace: [ 528.530427][ T8139] [ 528.533492][ T8139] __dump_stack+0x26/0x30 [ 528.538072][ T8139] dump_stack_lvl+0x53/0x270 [ 528.542993][ T8139] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.549148][ T8139] dump_stack+0x1e/0x25 [ 528.553793][ T8139] vpanic+0x361/0xc50 [ 528.558151][ T8139] panic+0x15d/0x160 [ 528.562523][ T8139] kmsan_report+0x31c/0x320 [ 528.567348][ T8139] ? __msan_warning+0x1b/0x30 [ 528.572237][ T8139] ? sctp_assoc_bh_rcv+0x34e/0xbc0 [ 528.577565][ T8139] ? sctp_inq_push+0x2a3/0x350 [ 528.582542][ T8139] ? sctp_backlog_rcv+0x3c7/0xda0 [ 528.587824][ T8139] ? sk_backlog_rcv+0x142/0x420 [ 528.592933][ T8139] ? __release_sock+0x1d3/0x330 [ 528.598109][ T8139] ? release_sock+0x6b/0x270 [ 528.603316][ T8139] ? sctp_wait_for_connect+0x458/0x820 [ 528.609070][ T8139] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 528.615006][ T8139] ? sctp_sendmsg+0x3910/0x49f0 [ 528.620208][ T8139] ? inet_sendmsg+0x26c/0x2a0 [ 528.625134][ T8139] ? __sock_sendmsg+0x278/0x3d0 [ 528.630204][ T8139] ? __sys_sendto+0x593/0x720 [ 528.635148][ T8139] ? __x64_sys_sendto+0x130/0x200 [ 528.640504][ T8139] ? x64_sys_call+0x3910/0x3e20 [ 528.645608][ T8139] ? do_syscall_64+0xd9/0x210 [ 528.650476][ T8139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.656950][ T8139] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.663357][ T8139] ? kmsan_get_metadata+0xfb/0x160 [ 528.668690][ T8139] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 528.675327][ T8139] ? kmsan_get_metadata+0xfb/0x160 [ 528.680658][ T8139] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.686719][ T8139] ? kmsan_get_metadata+0xfb/0x160 [ 528.692310][ T8139] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.698801][ T8139] ? sctp_inq_pop+0x15ea/0x19e0 [ 528.703962][ T8139] ? kmsan_get_metadata+0xfb/0x160 [ 528.709595][ T8139] __msan_warning+0x1b/0x30 [ 528.714497][ T8139] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 528.719807][ T8139] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 528.725495][ T8139] sctp_inq_push+0x2a3/0x350 [ 528.730318][ T8139] sctp_backlog_rcv+0x3c7/0xda0 [ 528.735578][ T8139] ? kmsan_get_metadata+0xfb/0x160 [ 528.740942][ T8139] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 528.746859][ T8139] sk_backlog_rcv+0x142/0x420 [ 528.751878][ T8139] __release_sock+0x1d3/0x330 [ 528.756788][ T8139] release_sock+0x6b/0x270 [ 528.761488][ T8139] sctp_wait_for_connect+0x458/0x820 [ 528.766987][ T8139] ? __pfx_autoremove_wake_function+0x10/0x10 [ 528.773355][ T8139] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 528.779182][ T8139] ? kmsan_get_metadata+0xfb/0x160 [ 528.784513][ T8139] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.790615][ T8139] sctp_sendmsg+0x3910/0x49f0 [ 528.795740][ T8139] ? kmsan_save_stack_with_flags+0x20/0x60 [ 528.801957][ T8139] ? __pfx_sctp_sendmsg+0x10/0x10 [ 528.807349][ T8139] inet_sendmsg+0x26c/0x2a0 [ 528.812127][ T8139] __sock_sendmsg+0x278/0x3d0 [ 528.817048][ T8139] __sys_sendto+0x593/0x720 [ 528.821809][ T8139] ? do_futex+0x416/0x480 [ 528.826484][ T8139] ? kmsan_get_metadata+0xfb/0x160 [ 528.831877][ T8139] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.838065][ T8139] __x64_sys_sendto+0x130/0x200 [ 528.843207][ T8139] x64_sys_call+0x3910/0x3e20 [ 528.848153][ T8139] do_syscall_64+0xd9/0x210 [ 528.852862][ T8139] ? irqentry_exit+0x16/0x60 [ 528.857732][ T8139] ? clear_bhb_loop+0x40/0x90 [ 528.862617][ T8139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.868828][ T8139] RIP: 0033:0x7f2720f8eb69 [ 528.873403][ T8139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.893484][ T8139] RSP: 002b:00007f2721df8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 528.902204][ T8139] RAX: ffffffffffffffda RBX: 00007f27211b6080 RCX: 00007f2720f8eb69 [ 528.910525][ T8139] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 000000000000000a [ 528.919269][ T8139] RBP: 00007f2721011df1 R08: 000020000005ffe4 R09: 000000000000001c [ 528.927504][ T8139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.935621][ T8139] R13: 0000000000000000 R14: 00007f27211b6080 R15: 00007ffda8d5afe8 [ 528.943788][ T8139] [ 528.947391][ T8139] Kernel Offset: disabled [ 528.951816][ T8139] Rebooting in 86400 seconds..