last executing test programs: 3m0.153478016s ago: executing program 2 (id=3): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1c}, 0x50) 2m59.723078895s ago: executing program 2 (id=23): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0x4148, 0x0) 2m56.436929251s ago: executing program 2 (id=36): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="2c000000110100000100000079b0cc09f0909092a24faddbd166258c78febea172e34b26ed3a6b4f24c247b00c10"], 0x1038}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], 0x14ac}}], 0x2, 0x200040c0) 2m56.397022395s ago: executing program 2 (id=37): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000000)='./file2\x00', 0x2004009, &(0x7f00000004c0)=ANY=[], 0x1, 0x226, &(0x7f0000000800)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 2m56.015638643s ago: executing program 2 (id=38): socketpair(0x28, 0x3, 0x7e0c, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000040)=""/4092, 0xffc) 2m54.172375914s ago: executing program 2 (id=42): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}]}, 0x2, 0x517, &(0x7f0000000140)="$eJzs3U9vI2cZAPBnJvGS7aYkpRxKpZaKFu1WsPamgTbi0BYJcasEKvclSrwhihNHsdNuQoVS8QGQEIJKnDhxQeIDIKHyDapKK8EdAQIh2MIBIWDQ2OPdxBpvEjW2I/v3k8bzzuuZeZ53HI/nX2YCmFrPRcTrETETES9GxEJRnxZdHHW7fLyP7r+zlnfxQRJv/i2JpKiLTumha8Vkc91eqdbB4dZqo1HfK4Zr7e3dWuvg8Obm9upGfaO+s7y89PLKKysxd2vQLL5znnbm7Xr1a3/68Q9+/vVXf/3Ft39/+y83vpdnPV+8323Ho6UnhmbOFLe7ZCr5ssjd+3dRv3ee5C+xpFi2lXEnAgDAmTwZEZ+KiM91tv8XYiZme2/ZpAMAAIAJkb02H/9JIjIAAABgYr3WuQY2SavF9a3zkabVavca3k/HY2mj2Wp/4U5zf2e9e63sYlTSO5uN+q3ius/FqCT58FKn/HD4pb7h5Yh4IiJ+tHC1M1xdazbWx33wAwAAAKbEtb79/38udPf/AQAAgAmzOO4EAAAAgKEbtP+fjDgPAAAAYHic/wcAAICJ9o033si7rPf86/W3Dva3mm/dXK+3tqrb+2vVtebebnWj2dzo3LNv+7T5NZrN3S/Fzv7dWrveatdaB4e3t5v7O+3bm71HYAMAAACj9sRn3/9dEhFHX7na6XJX8peZARO4VgAmRnqekf84vDyA0Rv0Mw9MvtlxJwCMz1Gxvw9MrRO3+ijZKDh+8c6JYwYfDC8nAADgYl3/TPn5/3wXoDLu5IChOtf5f2CiOP8P06vs/P9vBo/+4TBzAUarYgsApt5pj/oYePOOM5//z7JT5wUAAAzVfL7tfxRRLc4FzkeaVqsRj3f+1b+S3Nls1G9FxCcj4rcLlU/kw0udKROPBwQAAAAAAAAAAAAAAAAAAAAAAACAM8qyJDIAAABgokWkf06K539dX3hhvv/4wJXkXwudfkS8/dM3f3J3td3eW8rr//6gvv1eUf/SOI5gAAAAwNSb7a/o7af39uMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CJ9dP+dtV43yrh//WpELJbFn425Tn8uKhHx2D+SmD02XRIRMxcQ/+jdiHiqLH6SpxWLRRb98dOIuDqa+M9kWZZGSfxrFxAfptn7+frn9bLvXxrPdfrl3//Zovu4Bq//0gfrv5kB67/Hzxjj6Xu/rA2M/27E07Pl659e/GRA/OfLZliyUL79rcPDQfGzn0VcL/39SU7EqrW3d2utg8Obm9urG/WN+s7y8tLLK6+sfHnlVu3OZqNevJbG+OEzv/pfX9V/s65O+2NA/MVT2v9CXqgcb0x/mCLYvbv3n+wWK32z6MS/8Xz55//UI+LnfxOfL34H8vev98pH3fJxz/7iw2dLEyvirw9o/2mf/41BM+3z4je//4czjgoAjEDr4HBrtdGo7w298F6WZaOKdWkK2eVI41IU5i5HGgqnFy7iyBYAAHDZPNzoP8dE3x1iQgAAAAAAAAAAAAAAAAAAADCFWgeRDrwN2JWLuZ1Yf8yj8TQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCR/h8AAP//oszk1w==") 2m52.916311103s ago: executing program 32 (id=42): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}]}, 0x2, 0x517, &(0x7f0000000140)="$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") 2m25.086391154s ago: executing program 3 (id=158): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}}, 0x4000000) 2m23.85345817s ago: executing program 3 (id=161): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {r2, 0x400}], 0x2, 0x0, 0x0, 0x0) 2m20.322747945s ago: executing program 3 (id=179): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2m19.779884311s ago: executing program 3 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5, 0x19b, &(0x7f0000000300)="$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") 2m18.431902885s ago: executing program 3 (id=186): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000046, &(0x7f0000000cc0)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@noload}, {@delalloc}, {@noload}, {@resuid}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = memfd_create(0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x91}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x7) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20040600) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2m17.947415465s ago: executing program 3 (id=190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) unshare(0x20040600) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) shutdown(r0, 0x1) 2m17.002384298s ago: executing program 33 (id=190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) unshare(0x20040600) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) shutdown(r0, 0x1) 1m40.928525874s ago: executing program 1 (id=17): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 1m25.048023532s ago: executing program 1 (id=17): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 1m0.931531512s ago: executing program 1 (id=17): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 44.666188745s ago: executing program 1 (id=17): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 28.784209138s ago: executing program 1 (id=17): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 13.486783266s ago: executing program 1 (id=17): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 10.227939423s ago: executing program 4 (id=931): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc2002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 10.000324515s ago: executing program 7 (id=933): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x49c}) 9.551911598s ago: executing program 7 (id=936): r0 = semget$private(0x0, 0x7, 0x3c0) semop(r0, &(0x7f00000010c0)=[{0x3, 0x7fff}], 0x1) semop(r0, &(0x7f0000000180)=[{0x3, 0x2, 0x1800}], 0x1) 9.326839626s ago: executing program 7 (id=937): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x24008084) 7.127911914s ago: executing program 5 (id=955): r0 = socket(0x1c, 0x1, 0x0) ioctl$KDGETMODE(r0, 0x40046676, 0xfffffffffffffffd) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x1, 0x4) 6.937449413s ago: executing program 0 (id=957): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x91f9af01f841c98b) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0x0) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) socket(0x1c, 0x1, 0x0) r2 = socket(0x1c, 0x1, 0x0) ioctl$KDGETMODE(r2, 0x40046676, 0xfffffffffffffffd) r3 = socket(0x10, 0x1, 0x0) r4 = socket(0x1c, 0x1, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000000280)=[{0x0}, {&(0x7f00000002c0)="7913820dbcc6c1c68f37338ca40879a836d98dcae2dbbc4c296da4f9", 0x1c}, {&(0x7f0000000500)="b311e2ad42fa6094f47c211826ef52f550a7cc8540dfb028234578a8815100d578d78987758840d0d0fc7185bbee2303be8763c9ae55c670b3de77a6cdbcca15d14c689b18517d5e6f52ce3d894bedaef4d0aab5e721394cab1ed38327a881f7a83e00167ae590fce65b6960b61f48101f040c01138d02b1e25b9d266deaf1c2a5df867f633c849535fd892cb7d04df578f64a9e708ad10e0000dda737e87040a795b3b95347", 0xa6}], 0x3, 0x0, 0x0, 0x149}, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000280)=@file={0x8}, 0x8, 0x0, 0x0, &(0x7f0000000400)}, 0x11c) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x48, 0x0, 0x0) ioctl$KDGETMODE(r4, 0x40046676, 0xfffffffffffffffd) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000280)=0x4, 0x4) setsockopt(r3, 0x0, 0x1, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0x1c, 0x5, 0x84) openat(0xffffffffffffffff, 0x0, 0x40000, 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/96, 0x60}, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x40046676, 0xfffffffffffffffd) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 6.842830433s ago: executing program 5 (id=958): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200201, 0x0) chdir(&(0x7f0000000540)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.584012962s ago: executing program 5 (id=959): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000080)="ec", 0x1}], 0x1) 6.451136027s ago: executing program 0 (id=961): openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 6.228127884s ago: executing program 6 (id=962): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x66, 0x0, 0x0) 6.052090152s ago: executing program 6 (id=963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 5.92256719s ago: executing program 7 (id=964): r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0xffffffffffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="835500000000a51c", 0x8, 0x100, &(0x7f0000000180)={0x1c, 0x1c, 0x1}, 0x1c) 5.791608235s ago: executing program 4 (id=965): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000400)=ANY=[], 0x1df) 5.651599154s ago: executing program 0 (id=966): r0 = dup(0xffffffffffffffff) write$FUSE_DIRENTPLUS(r0, 0x0, 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r2, 0x0, r3, 0x0, 0x10000000000019, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) 5.650669424s ago: executing program 6 (id=967): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) 5.264112756s ago: executing program 4 (id=968): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x24, &(0x7f0000002100)=""/4072, &(0x7f0000000000)=0xfe8) 5.263694429s ago: executing program 7 (id=969): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000c00)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@ref_verify}, {@nobarrier}, {@fatal_errors_bug}, {}, {@enospc_debug}, {@datasum}, {@notreelog}, {@discard}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f00000003c0)='./file1\x00', 0x814, &(0x7f0000000040)=ANY=[], 0xff, 0x5a85, &(0x7f0000001080)="$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") r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0/file0\x00') io_submit(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8000) 4.736035241s ago: executing program 4 (id=970): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000005c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 4.451376164s ago: executing program 0 (id=971): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x400000, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.317920452s ago: executing program 5 (id=972): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 3.839985281s ago: executing program 5 (id=973): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) r6 = dup3(r4, r0, 0x80000) ioctl$NBD_DO_IT(r6, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3.802527534s ago: executing program 6 (id=974): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 3.20174725s ago: executing program 6 (id=975): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, 0x0, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = io_uring_setup(0x177f, &(0x7f0000000140)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) io_uring_enter(r4, 0x5e4c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000500) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.051977282s ago: executing program 0 (id=976): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x24008084) 3.05142116s ago: executing program 5 (id=977): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x24, &(0x7f0000000440)={0x0, 0xe, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.552683101s ago: executing program 4 (id=978): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001a00)={0x84, 0x0, 0x0, 0x0, &(0x7f00000016c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.390486067s ago: executing program 0 (id=979): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x818001, &(0x7f0000000480)={[{@inodes_32bit}, {@shared_inode_numbers}, {@errors_continue}, {@inline_data}, {@direct_io}, {@nochanges}, {@prjquota}, {@grpquota}, {@version_upgrade={'version_upgrade', 0x3d, 'incompatible'}}]}, 0x21, 0x5978, &(0x7f000000b5c0)="$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") 1.97325783s ago: executing program 6 (id=980): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x107382, 0x1d0) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x2968, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x9f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x80, 0xb5}}}}}]}}]}}, 0x0) truncate(&(0x7f00000013c0)='./file1\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) 446.766082ms ago: executing program 4 (id=981): syz_mount_image$bcachefs(&(0x7f0000000380), &(0x7f0000000100)='./file1\x00', 0x850, &(0x7f0000000540)=ANY=[], 0x1, 0x59c3, &(0x7f0000001880)="$eJzs3W2QXFXdIPBzu3synZm8TAI8RJDJEMjz8ICaCW+FL6XR9a0AqVhYStgoDGSC0SSkkiAQUIILLhRgoaWlqB/QQmrRaFEFq0RK5GUTVlGK1aW2kFpc0Q9ayJISiJTlOlszfU9Pz52+c3t6ekIIv18lc/uevv0/5557+vb9n+6ZDgAAALwu7L1+2/5zjnrfLz4//PI1H/zJpmtDb3msvBo36EuXV7xaLeRA6q4sGVtmx8W/XfW9Pw5c/J6f393z3Vf2rDt2/W/fe9jF93/qzN23ffOhl+bf+89nmwarjN+M4+nE8fXk+SSE6k/3ffULex47crQsCSGUk76dISxKFj+0KMlEG/x7CGFdvZ0T77zn5VPWjy6vval7QvnCTBDj/XWqq7aopuNsx/7LTwrPvHvNdb9a+sMfdO16buf4lkm1YTyFsODCbJi56f9RcbQtiQ9Ol6sb7ht1RkHzjmtxN1bkrB+dLueky96COPH+ZZn1Uma77HrUlVn2FNQ3U3ntaHe7IvMy69mT0UzltTOWL0qXP06XJ04zfjn+T0IpCZV68zcm42OkscokJGPHMp4Hk1CqH9uQ7n9mPcmslzLr5a5MJWP1pgOtnCQTy+N2mfJ4Oq6k5cc2nqubODen/A3pspo+UV+J6yF7o6Z30o36fo2J7do3RVsOhFLmPJMtrx/49GD0pmW9yeJJjxlpIt63Z83Ny8trH97bl9OO5O4kjZ+0FX/HLxfN+8T3b7xsSV78C0tp/FJb8X931uMvnH/jd76RG//WGL/cVvyTH+h5/qxHrl+W2z/7Yv9U2oo/9Oyjtyw9/KJdue2/PcavthV/1e7Hu+fvf+DB3PYPxv6Z21b8p9/+/j/c9eR9z+XGDzF+T1vx1+7e8sXu/v0n5MZ/MPZPb3vj58Vdpz/V3/+ngbz4T8T489uKf+fO2952x8Kbzsw9vqtj//S1Ff/s4++/bt7++47JO3cmt3fqlRPg9emw9BrrhnR9Yp75+3e2mmfOVEO+8PWBSu2ab176f34nK8pcfI7Ws6CT8QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgHMIRJ/33D/z+o33PV9Ki7vTG06XaMpbPCSGZG0LYtn1o6/YNmy8Z+NSll23dPLRxYGj7wPDm7VuvHDj1TQNbh7dsHLpy9N7BN59Se9zikNSWyTGTqu8eGRkp9U0si/X9h+N3PbP8jD//JYTBI37TX8ndhRW3bbrj8Mk/k8xmyaqRd2267JzfnPbtdL/60nb1NWnXyMjISMhp1/897x93fHnfH08IYfBfpmrXo0+/82cTmjVWMB4nVeoOtQZ1Jz2T27FoZLzVaXtif1XWb9g4PDh1/47uRzlnP/7jVc/9ff0VX/pHrX+rufuR07/ZzeauGtlY+tqas//f166uFRS1a5aOe3azScd9yv4eGanvRWxf7L9q2t8L0v1akLNflZz92pmEJ3961I0v7QyDlReXTq67aL+60gHQlbyhpXpjDT3Jognl1XT7aqZ9K7Zv2rJi25U73rxh09Alw5cMb37rylNXnj542umnrRjb8xUz3P/rf/XghP2P9f9ri/t/YMbTws/s/HH82dp4KmpXUX+Mtqu4P0ZbNLEkY+6qkZ5zv/CVt972yDm1gqJxHreun0/SZc/ocV4ZGsbb5L5qtl9F/RBCGGjWDy+8dGY48n9tuK7oPNR4ZBp/ZiSrRh5b9tdvn/GtJe+oFRyQ83xjg9o5z4+MjLd6vD1j/VVNj8fIQdq/3aMXEWP71du0XSsfe6Tr5r1/+Wy9fXPmhCuGtm/furL2c17a0nnJ0U3blS2N+7V07Gc5pN0S6sO0yXgd1RVq7cueP+Pm2V7tTe/rTRY33a+seN+eNTcvL699eG9eTyd312qcG+bXlskbc7bcmHlgud7gZvUfrM+/ovHR/4Fv3fvRe3906qTxcXLtZ9F+JTn79cMn7/zKd7/0n3/Uuf36wDsf7/vr//7k8lrBa+W8Um912p6k8bxycghFz7+lofl+5D7/Ss33p+j5l61nfPvm8QYy672h3Nbz9eQHep4/65Hrl+U+X/e1+ny9esJaueD5erCMn+zzK6lMbMfsPb8mDJRk1cjPbzhs50PXrD6qVjCvYFzXt242rk9pIf/I2a+fnf9U/6UD/+l/du688b033XPBb4dWfa5W0P5xj23pzHGvpv1bzenfeqtj3tnYv2+5+NKN62rlB+76tyj/zF7/psuC/CeeSrZduePTQxs3Dm/d1tp+tfp6GuvJ9vLEkfO3kZGR1l5P49ltccF+lSbt1+zdaKW/Wn2+xfavm7K/Wn++9YakrdeFHb9cNO8T37/xsr5Jj0orurCUxi+1Ff93Zz3+wvk3fucbufFvjfErbcUfevbRW5YeftGu3Pi3J2n8alvxV+1+vHv+/gcezI0/GNs/t634T7/9/X+468n7nsuNH2L83vb6/8Vdpz/V3/+n3PhPJGk9o69FIdzz8inra+tJ6Eqfb7EdXRPaFbLrSWa9lFkvN66XanOt9QrKSTKxPG6Xlh/b0JZmPpZTHq/Cqktqy1fiesjemLr8YFNqOPc3Ky+6TgUAONTF9//jNWh8/384vVDKn2mAcTPNw5bkxI152Ph8zpwJ9y9J48fHx3nA/reEwdHltQO1C/3pvo8Qnw/Zec5YzwnHTYzR/jzn1PPvyzLrsV21+fJKQx6ampzXVEIL8++T65l6/j2z+8Xz4wM3TGrWQMO8Vfb4daUzZs0+75Bpb2U0Qt74yM6Lxc9z9C8Iq8fqa3F8ZD9HE49D9nM0sZ6jMifOdj9HM9PxEZs9xfgYa3Lx+xuTj1+Yon/Hj1/zaNnjN43jXR3dfrbfn+3AvGHTU9qBmzec3ffDzEvmxE+fYAf7vGEsj/tRaXE+8aM55Z2aT4yni9iufVO05UAwnwgcqmL+H18jRvP/0Qvwv2W2K7oOzV41xni5nxMqN29PUd4x+XN6PW29jq/dveWL3f37Tyh6O6v4unjLhLWegs/9TN2PSVieKSnsx5wJmrQfKyEn38vWU9Tv2c9l9Ib5bfX7nTtve9sdC286M/f6cnXthbS4378yYW1+Qb8fhPlCGvJg+ZzBIZcv/LmV+AdLvjDb82evWj6SfvBptvKRj+SUTzcf6Zl0o75fY15z+UjXgW0XAPDaEfP/+vtnaf7/f+IG6XVEUf5/YmY9xsvNW3OuT/Lep/xQurwis31v+hsV071uPvv4+6+bt/++Y3LzlttbzUP/y4S1vsI8dGZ5c24esboznxfPzSPqedbM8sTc9tfzxJnl6bnx63n6zPLo3P6p59Eze98wN359HqDJ+2Ll/AriJrOS584dv6/1PLdgvi5TWVwtmq9LHozH9xDNo9Nfn52tPPrcnPLp5tG9k27U92uMPBoA4NUV8/94GRfz/0cy2830ffbcvKBD1+3ZvwdSj//EgcorZzvvm+28dbbz+tmel3htf1509ueFZnee7HWfF6eVyosBADiYxfw/vpWXn//PLD9plr91TchP5OdN4x+q+Xlfa/EPnvz8tT7/Jf/3vngx+T8AwKEt5v/x1x7j3//7b+l69u/Wy9Nz4h+qeXqL8eXpncrTOz/PFnwO4NWdB2j4PQnzAAAAvBq6xjKlyb9n//F0mf09+7zfyz8/Z/tWVdLL44u2bx0evuCyLeuGtg9fsPnSdcPbLrh864bt24c317abad6Ym7ekeWNXqKT90Xy7bN62MP17CAub/j2EZyZtH8MePXZj8t9DyFY7t+DvCIwfv9bam3f8SlNs32x85B3vvPgfy9k+qh//iz958gXrt12wYfOG7RuGNm7YMTxxu9GstWca35sZu2Va35ea+TFJafrf39mZdpQmtaMr7Y+872dPMu1YlLZkUd73H+S0+xf/48ufOX7kH3eFMHhE+Y3T77+G9DBZNfJfzxv+0Pa9v9kyWl6asv31LdN2FX1faXb7uD+VjZdu237S+ksv25z9Rsn2xPmMUn19luYz0qd/ucX5ibU55dP9nEJ50o2DU8vzEwAATBDf/4/Xs/H9wy+lF1CxvPU8fWbvH+fm6YOt5enZ7yWbOk+fvH3c31bz9OoM8/Rs/UV5erPtm+XpeXl3XvyP5Gw/Xa2Pk5l9ziN3nFzY2jjJfp9B4zhZ1cL20x0nyQzHSbb+onHSbPtm4yTvuOfF/3DO9nlaHw8z+1xO7ni4tbXx8O+Z9aLzRnb76Y6H0gzHQ7b+ovHQbPtm4yHv+ObFPydn+1ZNHB+jA2NsXAxfcPmlWz/dsN1sf//FzNs34+8LbN6+C2f2xWKtt392P/fV2faXw+T2z+7nyjrb/mb9P7PPleW2/4mZzYS13v7Z/X6Xdh2w+do51bGJ6aLPnxXN467JKZ/uPO6cSTcOTuZx4dUT8//4dk/M/29Kl51+G2i2r5Nm/3vSfO9x0/gd+h6zouuYA/d6Xlv3ej49Xs8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWtNdWTK23Hv9tv3nHPW+X3x++OVrPviTTdf+21Xf++PAxe/5+d09331lz7pj1//2vYddfP+nztx92zcfemn+vf98tjBw39jPyonpajWE5PkkhOpP9331C3seO3K0LAkhlJO+nSEsShY/tCjJRBj8ewhhXb2dE++85+VT1o8ur72pe0L5wkyQxv0KP9l0begtx/Y0tjOEKwr3iNegajrOduy//KTwzLvXXPerpT/8Qdeu53aOb5JUG8ZTCAsubHx8Vwhhbvp/VBxtS+KD0+XqEEJPw+POKGjXcS22f0XO+tHpck667C2IE+9fllkvZbbLrkddmWVPQX0zldeOdrcrMi+znj0Z5ciebpqoRcprZyxflC5/nC5PbK3+unL8n4RSEir15m9MxsdIaDhuSUjGjmW1vl6qH9vY6vH1sVtJ5v5SZr3cldmvsXrTgVZOkonlcbtMeTwdV9LyYxvP1U2cm1P+hnRZTZ+or8T1kL1R0zvpRn2/xsR27ZuiLQdCqeEc1Ky8fuDTg9GblvUmiyc9ZqSJeN+eNTcvL699eG9fTjuSu5M0ftJW/B2/XDTvE9+/8bIlefEvLKXxS23F/91Zj79w/o3f+UZu/Ftj/HJb8U9+oOf5sx65fllu/+yL/VNpK/7Qs4/esvTwi3bltv/2GL/aVvxVux/vnr//gQdz2z8Y+2duW/Gffvv7/3DXk/c9lxs/xPg9bcVfu3vLF7v795+QG//B2D+97Y2fF3ed/lR//58G8uI/EePPbyv+nTtve9sdC286M/f4ro7909dW/LOPv/+6efvvOybv3Jnc3vCK1KkXUYDXkcPSa6wb0vV288yZasgXvj5QqV3zzUv/z+9kRRmj9SyYxfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByafn31qR8/710fXlNJQkhythlpIt5XnrNq1UAb9Q49++gtSw+/aFdj2ZI24gAAAADFYh5eqpdUw5JweTI3HN10+zhHcHRcSyaWZ+cQYpzsHEG7cUodilPuUJxKh+J0dSjOnA7F6e5QnGpBnGpoLc7cKeJURkdFi+3pmbI9rcfp7VCceR2KM79DcRZ0KM7CDsXpy9zX7jhcNGV7Wo+zuENxDutQnMNbjfO3kSnjHNGh9vxLh+Ic2aE42Tnl6Y7D+emWR+XFGbtRLoxTScr1O5rNpx+Z1nPMDOvpLahnftHrcYv1zG2xnuMyjytNs55qi/X86wzrSVqs599nWE+poJ44bq/Iti/WE9daHP9XdijOjg7FuapDca7uUJzPdijO5zoU55oZxkmDARSK+f94vtcXuivvCD3pGSc7CxDz3aVjP9PXu8akvOkJKdTjvTFTPqdZvMYw2UQ9E29pK+1rjJedQMjEW5Yp75oQrzKWjxTEqzbGW565M2d/tybZHchp34mZ8u7m8cbbl51YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBZ9OurT/34ee/68JqQhNF/TY00Ee8rz1m1aqCNevesuXl5ee3DexvLuittBAIAAAAKxTy8q15SDd2VlaE7mTNhu2o6D1BN18t9tWX/grB6dJkMlMbWe5JFUz6ukj5uxfZNW1Zsu3LHmzdsGrpk+JLhzW9deerK0wdPO/20Fes3bBweHP05N4TQXRAvhDA2/bDtyh2fHtq4cXjrtlphtv1L0sctSdeT9HH9bwmDo8tr0/YvLqivNKm+2btRfPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/s2m2oW3cdB/D/SXKT7G5dr+wpK+tt6MMoOrStd9LpWA4IDra29DKQZHqdxbU4vF3L1o4641Zwmy2KsFEolb6wUoebwzd7cEPcA4XKrBa8tcg2dC/0hbLppBt9IR2R5ubkJmnSXEMf1u7zeXHOyf//+/9/52Sj8D03AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxbU9WxiXJpvDIchRD1qKl1kcyls3FcHKDvV1/a/KPc6PGlrWO5zAAbAQAAAH0lOXyoOZIPuUw6pMO19U8LQ8tEmMn9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAx89UdWyiXBqvXBqFEPWoqXWRzKWzcVwcoO/b7z/zuTdGR//ROlYYYB8AAACgvySHp5oj+VAIi8JQdG1bXfJuYF7H+s66ZJ/5s6zrfHfQq25RCEOzqbu+/35dX3N01q1pnLd1KwYAAIALTJL/M82RkZDLzOmZ//vl+qRuQUddunGe1W8Fev0QAQAAABhIkv9zzZFCyGUKzbw+27y/sKMuWb9oluuX9Fjf7+/5qxtnf6cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvHVHVsolwar6SjEKIeNbUukrl0No6LA/Rd8fLwv24/8OjC1rFcZoCNAAAAgL6SHD4TvfMhlxkOQ+HSeu4fvXXvc19+7oWxEMJ0zM9mw7Z1W7bct2L6OBSiet3yQweGfnjw3e+eUrd8+njeHhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhjpqpjE+XSeOWSKISoR02ti2QunY3j4gB93/rCl/721NEX32kdKwywDwAAANBfksNnsn8+FEI2ZMPV9U+tWf+kVMf6Xu8MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvH/d9+8FvrJifX33fOLi5PLmpzp2/hnHZ34eLMXWw/+b/v+b+Ns3Jxvv9lAgAAzrQFIQq1/9M1a8/3XQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8FU9WxiXJpvJKPQoh61NS6SObS2TguDtA3fulwbs7xl19tHSsMsA8AAADQX5LDZ7J/PhTCUBgKV9U/dXsnUM//I+fwJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICPlKnq2ES5NF6ZE4UQ9aipdZHMpbNxXByg75Pb93x+/9wf3NY6lssMsBEAAADQV5LDs82RfMhlPhly4brG58n2BVG6ce7+XmBm3ea2ZcOzXldtW5ee9bodHU+WaTzN9Lp8st/I9Lm5rnjqumLLukJoti+2rQu72lbN6XOfAQAAAM6jJP/nmiMjIZfJteTcn7fVj8i5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAPU9WxiXJpvBJFIUQ9ampdJHPpbBwXB+j74O8/cdnXfrFza+tYYYB9AAAAgP6SHD6T/fOhEOaHy8P8eu4PI+31Sd2/yyf2P/Gfvy8NYdnVR0Yzndv+JLn47Vu3vNJ5CCHVXp0KYW6jX9Sj3+/++MQDi2snngph2VXp607pF07fr33LuPZ8ef3qLQePbO7z5QAAAMBFIsn/Q82RkZDL3Nsz/yfJu0/+b6oH8LkPbP/VlY1jI5F3rEiNNPqlevT74uJn/rpk5T/fPZn/T9fvM3s27r+yreH0SIcorpU2bl1z5MZ9qeSpp/unO/on38tXvvPOfzdse/zEdP98yDfG52W69T/12OGSuDaZ2l1Z9eHuanv/TI/nf/QPrx79zbydH5zs//6C4Wb/60/z/KfvP3zHY7tu2nNgTXv/EEKxW//3PrgtXPPnex7pfP7hjo1bv/nWY4corh1aeGzfyr2Fm9v7Rx39k+//l0ef3PWzx7//QtI/+a3I0kWz7Z/q6P/6jiu2v/bw2nnt/VM9nv+VO98Y3VT83p86n//utl0zPe/i1Od/+oZn73pzXfxQ5xQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFZao6NlEujVdSUQhRj5paF8lcOhvHxQH6vn374ffu3PnTH7eOFQbYBwAAAOgvyeEz2T8fCiEbsmG4nvufL69fveXgkc1hZHo2apwzk5vu3/KpDZu23nv3LDulz8LdAwAAALOR5P9Mc2Qk5DKLw1Aj/5c2bl1z5MZ9qST/p5L8v+GeyfXLQrPu9R1XbH/t4bXzmu8JQqj/LCB/su6zM3W33nJ45Nhfvrmka92KmbpDC4/tW7m3cHNSF1rrlofm+4mnb3j2rjfXxQ8176+17tPf2DTZeD2R7Dt8x2O7btpzYE3zORrn4ca+Sd1kandl1Ye7q0ldunGu7xtC+PpZ+a8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABe2qerYRLk0XgnpEKIeNbUukrl0No6LA/RdtfjXj1x2/MX5rWO5zAAbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBfN6FxVX0cgM+ZmbyZZpI2aV8wKqZpVZS6sCiI6EZFRVqRgqtKkWprF6IgiCh1YSqtWKriRrC6KaKCGqWgYGOxtEoqfhU3LlRQqC6EUgxoQ3Whksm508nN3I7eVEF9HhjOnDP3/u7/3nNyJgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwj9JbG262h3fcP33LOTd89OhdJx656Z17t1308KvfjW667sO9fS+dnNy8YsuX1y/btP/uNRO7nz/008Bbvx7tGvzQbLMqdeshxOMxhPq7U888NvnxWTNjMYRQjYNjIQzFpYeGYi5h9S8hhM2tOud++OaJy7fMtNt29c4ZX5ILyd9XaFSzemYNzq2Xf5d6Wmdbpx+8JHx97frtny5/4/We8WNjpw6J9bb1FMLije3n94QQFqXXjGy1DWcnp3ZdCKGv7bwru9R1/h+s/9KC/rmp/V9qG11yss9X5vqV3HH5fqYn1/Z1ud5CFdVR9rhu+nP9/Ga0UEV1ZuNDqX07tav+ZH41e8VQiaHWKv+eeGqNhLZ5iyE257K5D9bm58W2uU79mOtXcv1qT+6+mtdNC60a49zx7LjceLYd19L4iva9uoNbC8bPTm09/aGezPoh/2ZWY96b1n01ZXVNnaaWv0OlbQ/qNN6a+DQZjTTWiEvnrenfOsg+m1z/xIXVDe8dHiyoI+6NKT+28vNOl7/1k6H+21/b+cBwUf7GSsqvlMr/Zu2RH27b+cJzhflPZ/nVUvmXHeg7vvb9HSsLn89U9nxqpfLvOPrBk8v/f+d4p7lu5u/J8uul8q+ZONI7MH3gYGH9q7Pns6hU/ldX3/jtK5/vO1aYH7L8vlL5Gybue6p3ZPriwvyDs8u90VyhJdbPj+NXfDEy8v1oUf5n2fMf6JAfu+a/PLb7qheX7FpTuD7XZc9nsFT9N1+wf3v/9L7zivbOuOdMfXMC/DctS/9jPZ76ZX9nLlTb74VnR2uz30D96fXzmbxQzsx1Fv+F+QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7MDByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVAAD//5hVH/Y=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) 0s ago: executing program 7 (id=982): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4080) kernel console output (not intermixed with test programs): d [ 175.092522][ T6872] SQUASHFS error: Unable to read metadata cache entry [99] [ 175.140883][ T6872] SQUASHFS error: Unable to read inode 0x127 [ 175.226165][ T6872] 9pnet_fd: Insufficient options for proto=fd [ 175.941745][ T5160] Bluetooth: hci3: command tx timeout [ 176.052632][ T6894] loop0: detected capacity change from 0 to 4096 [ 176.211444][ T6744] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.218640][ T6744] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.256307][ T6744] bridge_slave_0: entered allmulticast mode [ 176.276954][ T6744] bridge_slave_0: entered promiscuous mode [ 176.331037][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.371459][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.386492][ T6744] bridge_slave_1: entered allmulticast mode [ 176.405263][ T30] audit: type=1800 audit(1751694055.802:26): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.240" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 176.431537][ T6744] bridge_slave_1: entered promiscuous mode [ 177.067468][ T6744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.235828][ T6744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.572724][ T6744] team0: Port device team_slave_0 added [ 177.989879][ T6935] loop6: detected capacity change from 0 to 1024 [ 177.989945][ T6936] loop4: detected capacity change from 0 to 8 [ 178.017412][ T6936] SQUASHFS error: zlib decompression failed, data probably corrupt [ 178.035636][ T6936] SQUASHFS error: Failed to read block 0x9b: -5 [ 178.055344][ T6936] SQUASHFS error: Unable to read metadata cache entry [99] [ 178.084023][ T6936] SQUASHFS error: Unable to read inode 0x127 [ 178.142706][ T30] audit: type=1800 audit(1751694057.542:27): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.246" name=6673B45D236B2391CE322E30FB9C69FE0D514DC1F8B6E3979C1205FD5224B07D18A44FEC4F6F1A6F65158BB6ADCC295BF2DD7DEA107F59D7E03C61FE5822292E45968956B931BDC4D6445FF1631E0B98E4B4448774DD4B9CD53A45896FDB3F03702778741AE2B45A25BF9A23FC02FB97A630F132BF9DEF6C6D08 dev="loop6" ino=27 res=0 errno=0 [ 178.364530][ T49] hfsplus: b-tree write err: -5, ino 4 [ 178.628810][ T6744] team0: Port device team_slave_1 added [ 179.005236][ T6744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.032983][ T6744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.141671][ T6744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.352170][ T6744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.359171][ T6744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.471216][ T6744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.676105][ T6505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.242728][ T6984] capability: warning: `syz.4.262' uses 32-bit capabilities (legacy support in use) [ 180.254226][ T6744] hsr_slave_0: entered promiscuous mode [ 180.260986][ T6744] hsr_slave_1: entered promiscuous mode [ 180.565927][ T6989] loop0: detected capacity change from 0 to 8 [ 180.607628][ T6989] SQUASHFS error: zlib decompression failed, data probably corrupt [ 180.666330][ T6989] SQUASHFS error: Failed to read block 0x9b: -5 [ 180.691269][ T6989] SQUASHFS error: Unable to read metadata cache entry [99] [ 180.715092][ T6989] SQUASHFS error: Unable to read inode 0x127 [ 180.754993][ T6989] 9pnet_fd: Insufficient options for proto=fd [ 180.904322][ T6505] veth0_vlan: entered promiscuous mode [ 180.978702][ T6505] veth1_vlan: entered promiscuous mode [ 181.225539][ T6998] loop0: detected capacity change from 0 to 8 [ 181.279640][ T6998] SQUASHFS error: zlib decompression failed, data probably corrupt [ 181.313397][ T6505] veth0_macvtap: entered promiscuous mode [ 181.337868][ T6998] SQUASHFS error: Failed to read block 0x9b: -5 [ 181.360266][ T6505] veth1_macvtap: entered promiscuous mode [ 181.387582][ T6998] SQUASHFS error: Unable to read metadata cache entry [99] [ 181.423029][ T6998] SQUASHFS error: Unable to read inode 0x127 [ 181.586309][ T6505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.638968][ T6505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.683966][ T6744] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 181.720684][ T6505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.730498][ T6505] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.757628][ T6505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.788343][ T6505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.828976][ T6744] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 181.876997][ T6744] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 181.909944][ T6744] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 182.344231][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.364430][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.675650][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.721309][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.851263][ T6744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.973511][ T6744] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.072259][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.079484][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.149315][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.156568][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.964650][ T6227] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.223624][ T6227] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.482925][ T6227] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.735129][ T6227] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.851030][ T6744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.381708][ T6227] bridge_slave_1: left allmulticast mode [ 185.397641][ T6227] bridge_slave_1: left promiscuous mode [ 185.439476][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.503455][ T6227] bridge_slave_0: left allmulticast mode [ 185.509163][ T6227] bridge_slave_0: left promiscuous mode [ 185.559132][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.932001][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.947263][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.957381][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.966891][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.975735][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.571759][ T5951] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 186.741508][ T5951] usb 5-1: device descriptor read/64, error -71 [ 187.004638][ T5951] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 187.162301][ T5951] usb 5-1: device descriptor read/64, error -71 [ 187.241890][ T6227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.276173][ T5951] usb usb5-port1: attempt power cycle [ 187.299435][ T6227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.338429][ T6227] bond0 (unregistering): Released all slaves [ 187.637100][ T5951] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 187.698841][ T5951] usb 5-1: device descriptor read/8, error -71 [ 187.981261][ T5951] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 188.015470][ T5951] usb 5-1: device descriptor read/8, error -71 [ 188.102026][ T51] Bluetooth: hci2: command tx timeout [ 188.122546][ T5962] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 188.149956][ T5951] usb usb5-port1: unable to enumerate USB device [ 188.302354][ T5962] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 188.327528][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.337099][ T5962] usb 1-1: Product: syz [ 188.350207][ T5962] usb 1-1: Manufacturer: syz [ 188.357892][ T5962] usb 1-1: SerialNumber: syz [ 188.388973][ T5962] usb 1-1: config 0 descriptor?? [ 188.538013][ T6227] hsr_slave_0: left promiscuous mode [ 188.557273][ T6227] hsr_slave_1: left promiscuous mode [ 188.567798][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.579358][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.605838][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.628029][ T5962] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 188.639547][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.697519][ T6227] veth1_macvtap: left promiscuous mode [ 188.707085][ T6227] veth0_macvtap: left promiscuous mode [ 188.731816][ T6227] veth1_vlan: left promiscuous mode [ 188.745713][ T6227] veth0_vlan: left promiscuous mode [ 190.181359][ T51] Bluetooth: hci2: command tx timeout [ 190.283184][ T7186] loop4: detected capacity change from 0 to 8 [ 190.304990][ T7186] SQUASHFS error: zlib decompression failed, data probably corrupt [ 190.314306][ T7186] SQUASHFS error: Failed to read block 0x9b: -5 [ 190.329956][ T7186] SQUASHFS error: Unable to read metadata cache entry [99] [ 190.356889][ T7186] SQUASHFS error: Unable to read inode 0x127 [ 190.440726][ T6227] team0 (unregistering): Port device team_slave_1 removed [ 190.587651][ T6227] team0 (unregistering): Port device team_slave_0 removed [ 190.823245][ T5951] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 190.973190][ T5951] usb 5-1: device descriptor read/64, error -71 [ 191.211358][ T5951] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 191.361258][ T5951] usb 5-1: device descriptor read/64, error -71 [ 191.495408][ T5951] usb usb5-port1: attempt power cycle [ 191.679110][ T5962] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 191.742098][ T5962] usb 1-1: USB disconnect, device number 12 [ 191.852534][ T5951] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 191.918683][ T5951] usb 5-1: device descriptor read/8, error -71 [ 191.949187][ T6744] veth0_vlan: entered promiscuous mode [ 192.015596][ T7094] chnl_net:caif_netlink_parms(): no params data found [ 192.077378][ T6744] veth1_vlan: entered promiscuous mode [ 192.139270][ T7219] loop5: detected capacity change from 0 to 8 [ 192.158835][ T7219] SQUASHFS error: zlib decompression failed, data probably corrupt [ 192.185952][ T7219] SQUASHFS error: Failed to read block 0x9b: -5 [ 192.191455][ T5951] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 192.195734][ T7219] SQUASHFS error: Unable to read metadata cache entry [99] [ 192.249389][ T7219] SQUASHFS error: Unable to read inode 0x127 [ 192.249724][ T5951] usb 5-1: device descriptor read/8, error -71 [ 192.275226][ T51] Bluetooth: hci2: command tx timeout [ 192.384114][ T5951] usb usb5-port1: unable to enumerate USB device [ 192.611750][ T6744] veth0_macvtap: entered promiscuous mode [ 192.625903][ T7234] raw_sendmsg: syz.6.344 forgot to set AF_INET. Fix it! [ 192.773263][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.794841][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.829135][ T7094] bridge_slave_0: entered allmulticast mode [ 192.852529][ T7094] bridge_slave_0: entered promiscuous mode [ 192.903179][ T7094] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.930878][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.962363][ T7094] bridge_slave_1: entered allmulticast mode [ 192.973238][ T7094] bridge_slave_1: entered promiscuous mode [ 193.009927][ T6744] veth1_macvtap: entered promiscuous mode [ 193.270848][ T7094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.299651][ T7094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.487217][ T7094] team0: Port device team_slave_0 added [ 193.530342][ T7094] team0: Port device team_slave_1 added [ 193.644283][ T6744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.721741][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.728744][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.779281][ T7094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.821200][ T5951] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 193.843750][ T6744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.859555][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.888303][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.959428][ T7094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.013670][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.042902][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.057619][ T5951] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.082658][ T6744] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.091694][ T5951] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.107216][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.119309][ T6744] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.156996][ T6744] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.167102][ T5951] usb 1-1: config 0 descriptor?? [ 194.178568][ T6744] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.342144][ T51] Bluetooth: hci2: command tx timeout [ 194.434850][ T7094] hsr_slave_0: entered promiscuous mode [ 194.454376][ T7094] hsr_slave_1: entered promiscuous mode [ 194.460877][ T7094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.470232][ T7094] Cannot create hsr debugfs directory [ 194.682205][ T5951] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 195.328496][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.358245][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.527729][ T6002] usb 1-1: USB disconnect, device number 13 [ 195.589291][ T7302] loop4: detected capacity change from 0 to 4096 [ 195.622457][ T5908] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 195.641448][ T7302] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 195.768942][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.789522][ T5908] usb 6-1: unable to get BOS descriptor or descriptor too short [ 195.795026][ T7302] ntfs3(loop4): ino=1a, mi_enum_attr [ 195.807555][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.814680][ T7302] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 195.834645][ T5908] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 195.869141][ T5908] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.948769][ T5908] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.979553][ T5908] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.011347][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.030881][ T7302] ntfs3(loop4): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr [ 196.041255][ T5908] usb 6-1: Product: syz [ 196.124078][ T5908] usb 6-1: Manufacturer: syz [ 196.151417][ T5908] usb 6-1: SerialNumber: syz [ 196.575953][ T5908] usb 6-1: 0:2 : does not exist [ 196.642756][ T7319] loop6: detected capacity change from 0 to 2048 [ 196.700667][ T7094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.722702][ T5908] usb 6-1: USB disconnect, device number 7 [ 196.733507][ T7319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.880813][ T7094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.943782][ T30] audit: type=1800 audit(1751694076.342:28): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.370" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 197.025030][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.026438][ T7094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.245134][ T7094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.502652][ T6147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.881513][ T5962] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 197.887188][ T7094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.037393][ T7094] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.054571][ T5962] usb 5-1: Using ep0 maxpacket: 8 [ 198.097926][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.105186][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.114398][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.150017][ T5962] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 198.189659][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.224652][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.231846][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.286199][ T5962] usb 5-1: config 0 descriptor?? [ 198.296396][ T7357] loop7: detected capacity change from 0 to 4096 [ 198.524097][ T5962] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 198.561478][ T5929] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 198.730232][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.753630][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.768875][ T5929] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.790590][ T5929] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.800432][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.837252][ T5929] usb 6-1: config 0 descriptor?? [ 198.954009][ T24] usb 5-1: USB disconnect, device number 12 [ 199.329964][ T5929] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 199.365548][ T7094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.680424][ T7094] veth0_vlan: entered promiscuous mode [ 199.778024][ T7094] veth1_vlan: entered promiscuous mode [ 199.989250][ T7094] veth0_macvtap: entered promiscuous mode [ 200.044553][ T7094] veth1_macvtap: entered promiscuous mode [ 200.146274][ T7094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.206008][ T7094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.288509][ T24] usb 6-1: USB disconnect, device number 8 [ 200.299770][ T7094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.368123][ T7094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.388579][ T7094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.413393][ T7094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.789616][ T7413] overlayfs: failed to resolve './file1': -2 [ 200.960230][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.007863][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.116188][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.156484][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.354849][ T7428] loop7: detected capacity change from 0 to 8 [ 201.371249][ T5829] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 201.408431][ T7428] SQUASHFS error: zlib decompression failed, data probably corrupt [ 201.441642][ T7428] SQUASHFS error: Failed to read block 0x9b: -5 [ 201.453542][ T7428] SQUASHFS error: Unable to read metadata cache entry [99] [ 201.492466][ T7428] SQUASHFS error: Unable to read inode 0x127 [ 201.544377][ T5829] usb 6-1: Using ep0 maxpacket: 8 [ 201.579657][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.610713][ T5829] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.622240][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.662956][ T5829] usb 6-1: config 0 descriptor?? [ 201.906046][ T5829] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 201.997876][ T6227] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.169730][ T6227] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.171581][ T5951] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 202.320203][ T6227] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.347179][ T24] usb 6-1: USB disconnect, device number 9 [ 202.383863][ T5951] usb 5-1: unable to get BOS descriptor or descriptor too short [ 202.396861][ T5951] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 202.410919][ T5951] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.421450][ T5951] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.423641][ T6227] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.433370][ T5951] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.452509][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.460534][ T5951] usb 5-1: Product: syz [ 202.465103][ T5951] usb 5-1: Manufacturer: syz [ 202.469725][ T5951] usb 5-1: SerialNumber: syz [ 202.670236][ T6227] bridge_slave_1: left allmulticast mode [ 202.678325][ T6227] bridge_slave_1: left promiscuous mode [ 202.692962][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.708445][ T6227] bridge_slave_0: left allmulticast mode [ 202.710301][ T5951] usb 5-1: 0:2 : does not exist [ 202.714425][ T6227] bridge_slave_0: left promiscuous mode [ 202.725978][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.800105][ T5951] usb 5-1: USB disconnect, device number 13 [ 202.896496][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.295852][ T7453] loop7: detected capacity change from 0 to 8 [ 203.338973][ T7453] SQUASHFS error: zlib decompression failed, data probably corrupt [ 203.391231][ T7453] SQUASHFS error: Failed to read block 0x9b: -5 [ 203.405244][ T7453] SQUASHFS error: Unable to read metadata cache entry [99] [ 203.436807][ T7453] SQUASHFS error: Unable to read inode 0x127 [ 203.481779][ T5951] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 203.669976][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.712204][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.757617][ T5951] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.816701][ T5951] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.868370][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.877315][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.895690][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.913563][ T7464] overlayfs: failed to resolve './file1': -2 [ 203.930375][ T5951] usb 7-1: config 0 descriptor?? [ 204.037703][ T5160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.049095][ T5160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.063515][ T5160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.089371][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.101247][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.323087][ T6227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.355601][ T6227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.377250][ T6227] bond0 (unregistering): Released all slaves [ 204.396148][ T5951] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 205.165762][ T6227] hsr_slave_0: left promiscuous mode [ 205.177638][ T6227] hsr_slave_1: left promiscuous mode [ 205.187841][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.204805][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.204805][ T5915] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 205.237636][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.260675][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.334833][ T6227] veth1_macvtap: left promiscuous mode [ 205.354037][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 205.366585][ T6227] veth0_macvtap: left promiscuous mode [ 205.386161][ T5915] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 205.391485][ T6227] veth1_vlan: left promiscuous mode [ 205.395678][ T5915] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 205.416336][ T6227] veth0_vlan: left promiscuous mode [ 205.424927][ T5915] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.455979][ T5915] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.472838][ T5915] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 205.488902][ T5915] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.500013][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.511395][ T5915] usb 1-1: Product: syz [ 205.515714][ T5915] usb 1-1: Manufacturer: syz [ 205.520484][ T5915] usb 1-1: SerialNumber: syz [ 205.793372][ T5915] usb 1-1: 0:2 : does not exist [ 205.860029][ T5915] usb 1-1: USB disconnect, device number 14 [ 206.053188][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.181349][ T5160] Bluetooth: hci2: command tx timeout [ 206.404638][ T7512] loop7: detected capacity change from 0 to 8 [ 206.465224][ T7512] SQUASHFS error: zlib decompression failed, data probably corrupt [ 206.481709][ T7512] SQUASHFS error: Failed to read block 0x9b: -5 [ 206.491005][ T7512] SQUASHFS error: Unable to read metadata cache entry [99] [ 206.501387][ T7512] SQUASHFS error: Unable to read inode 0x127 [ 206.615755][ T7516] overlayfs: failed to resolve './file1': -2 [ 206.675938][ T24] usb 7-1: USB disconnect, device number 8 [ 206.854552][ T7518] loop5: detected capacity change from 0 to 4096 [ 206.903713][ T7518] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 206.998947][ T7518] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 207.162893][ T5951] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 207.332920][ T5951] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 207.354773][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.373468][ T5951] usb 5-1: Product: syz [ 207.393431][ T5951] usb 5-1: Manufacturer: syz [ 207.408876][ T5951] usb 5-1: SerialNumber: syz [ 207.459749][ T5951] usb 5-1: config 0 descriptor?? [ 207.470787][ T6227] team0 (unregistering): Port device team_slave_1 removed [ 207.639355][ T6227] team0 (unregistering): Port device team_slave_0 removed [ 207.726898][ T5951] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 208.221467][ T2145] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 208.261468][ T5160] Bluetooth: hci2: command tx timeout [ 208.331398][ T5908] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 208.345730][ T7527] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.396461][ T2145] usb 6-1: unable to get BOS descriptor or descriptor too short [ 208.439547][ T2145] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 208.480784][ T2145] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 208.496893][ T2145] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.498688][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.510433][ T2145] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.523053][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.561715][ T2145] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 208.568712][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.578195][ T2145] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.598070][ T2145] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.606441][ T2145] usb 6-1: Product: syz [ 208.608619][ T7527] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.610723][ T2145] usb 6-1: Manufacturer: syz [ 208.626526][ T2145] usb 6-1: SerialNumber: syz [ 208.631388][ T5908] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.663543][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.692896][ T5908] usb 1-1: config 0 descriptor?? [ 208.875564][ T2145] usb 6-1: 0:2 : does not exist [ 208.921975][ T7527] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.922340][ T2145] usb 6-1: USB disconnect, device number 10 [ 209.120339][ T7527] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.144540][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.187516][ T5908] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 209.290902][ T7467] chnl_net:caif_netlink_parms(): no params data found [ 209.359416][ T7555] fuse: Bad value for 'fd' [ 209.636887][ T7527] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.732276][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.739759][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.747332][ T7467] bridge_slave_0: entered allmulticast mode [ 209.756640][ T7467] bridge_slave_0: entered promiscuous mode [ 209.811244][ T7527] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.834345][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.843466][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.850687][ T7467] bridge_slave_1: entered allmulticast mode [ 209.859385][ T7467] bridge_slave_1: entered promiscuous mode [ 209.931683][ T7527] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.039002][ T7527] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.059058][ T7467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.119100][ T7467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.268710][ T7467] team0: Port device team_slave_0 added [ 210.284817][ T7467] team0: Port device team_slave_1 added [ 210.341636][ T5160] Bluetooth: hci2: command tx timeout [ 210.509912][ T7578] fuse: Bad value for 'fd' [ 210.553433][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.571439][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.663689][ T7467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.682687][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.720099][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.791202][ T7467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.808301][ T5951] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 210.862168][ T5951] usb 5-1: USB disconnect, device number 14 [ 211.037235][ T7580] veth0_virt_wifi: renamed from veth0_macvtap [ 211.341248][ T5951] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 211.344326][ T7594] fuse: Bad value for 'fd' [ 211.521454][ T5951] usb 6-1: Using ep0 maxpacket: 8 [ 211.558066][ T5951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.595535][ T5962] usb 1-1: USB disconnect, device number 15 [ 211.631423][ T5951] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 211.640508][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.729413][ T5951] usb 6-1: config 0 descriptor?? [ 211.864565][ T7467] hsr_slave_0: entered promiscuous mode [ 211.870064][ T7599] loop4: detected capacity change from 0 to 4096 [ 211.891896][ T7467] hsr_slave_1: entered promiscuous mode [ 211.922786][ T7467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.972837][ T7467] Cannot create hsr debugfs directory [ 211.981402][ T5951] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 211.983927][ T7607] fuse: Bad value for 'fd' [ 212.378519][ T5951] usb 6-1: USB disconnect, device number 11 [ 212.424984][ T5160] Bluetooth: hci2: command tx timeout [ 213.082118][ T7630] fuse: Bad value for 'fd' [ 213.091461][ T5951] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 213.231407][ T5962] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 213.266680][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.290947][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.336539][ T5951] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.370013][ T5951] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.393686][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.435644][ T5962] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 213.452727][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.492319][ T5951] usb 7-1: config 0 descriptor?? [ 213.508219][ T5962] usb 5-1: Product: syz [ 213.531270][ T5962] usb 5-1: Manufacturer: syz [ 213.538769][ T5962] usb 5-1: SerialNumber: syz [ 213.565392][ T5962] usb 5-1: config 0 descriptor?? [ 213.736523][ T7467] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.789446][ T5962] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 213.816569][ T7467] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.850169][ T7467] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.911494][ T7467] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.951874][ T5951] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 214.015309][ T7644] fuse: Bad value for 'fd' [ 214.347083][ T7467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.409133][ T7467] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.454304][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.461507][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.508008][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.515225][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.306212][ T7467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.452813][ T7467] veth0_vlan: entered promiscuous mode [ 215.510791][ T7467] veth1_vlan: entered promiscuous mode [ 215.684796][ T7467] veth0_macvtap: entered promiscuous mode [ 215.725820][ T7467] veth1_macvtap: entered promiscuous mode [ 215.794239][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.836035][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.886961][ T7467] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.911230][ T7467] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.940546][ T7467] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.971248][ T7467] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.257909][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.291702][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.351048][ T5929] usb 7-1: USB disconnect, device number 9 [ 216.440451][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.478903][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.853581][ T5962] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 216.896759][ T5962] usb 5-1: USB disconnect, device number 15 [ 217.195900][ T7707] netlink: 'syz.6.511': attribute type 10 has an invalid length. [ 217.265892][ T7707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.280922][ T7707] team0: Failed to send port change of device bond0 via netlink (err -105) [ 217.311456][ T7707] team0: Failed to send options change via netlink (err -105) [ 217.333190][ T7707] team0: Port device bond0 added [ 217.696229][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.517'. [ 217.829803][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.7.519'. [ 217.878194][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.931798][ T5962] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 218.124374][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.171455][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.210255][ T5962] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.238710][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.241511][ T5962] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.271333][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.302738][ T5962] usb 7-1: config 0 descriptor?? [ 218.371387][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.499273][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.751854][ T5962] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 218.856409][ T12] bridge_slave_1: left allmulticast mode [ 218.871664][ T12] bridge_slave_1: left promiscuous mode [ 218.877474][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.916409][ T12] bridge_slave_0: left allmulticast mode [ 218.962001][ T12] bridge_slave_0: left promiscuous mode [ 218.967822][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.600688][ T7755] loop4: detected capacity change from 0 to 8 [ 219.666278][ T7755] SQUASHFS error: zlib decompression failed, data probably corrupt [ 219.753284][ T7755] SQUASHFS error: Failed to read block 0x9b: -5 [ 219.798891][ T7755] SQUASHFS error: Unable to read metadata cache entry [99] [ 219.849072][ T7755] SQUASHFS error: Unable to read inode 0x127 [ 220.519318][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.528131][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.538106][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.547898][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.558574][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.742040][ T5929] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 220.820303][ T5951] usb 7-1: USB disconnect, device number 10 [ 220.927839][ T5929] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 220.937335][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.979867][ T5929] usb 5-1: Product: syz [ 220.996669][ T5929] usb 5-1: Manufacturer: syz [ 221.011541][ T5929] usb 5-1: SerialNumber: syz [ 221.038142][ T5929] usb 5-1: config 0 descriptor?? [ 221.283226][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.295114][ T5929] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 221.324928][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.378783][ T12] bond0 (unregistering): Released all slaves [ 221.484055][ T7752] warning: `syz.5.524' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 222.581241][ T51] Bluetooth: hci2: command tx timeout [ 223.144468][ T7811] loop7: detected capacity change from 0 to 8 [ 223.201580][ T7811] SQUASHFS error: zlib decompression failed, data probably corrupt [ 223.240093][ T5829] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 223.261334][ T7811] SQUASHFS error: Failed to read block 0x9b: -5 [ 223.267617][ T7811] SQUASHFS error: Unable to read metadata cache entry [99] [ 223.332722][ T7811] SQUASHFS error: Unable to read inode 0x127 [ 223.462594][ T5829] usb 6-1: unable to get BOS descriptor or descriptor too short [ 223.521427][ T5829] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 223.569672][ T5829] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 223.610272][ T5829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.666221][ T5829] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 223.677482][ T5829] usb 6-1: config 1 has no interface number 1 [ 223.685045][ T5829] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 223.713219][ T5829] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.730125][ T5829] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.747664][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.756179][ T12] hsr_slave_0: left promiscuous mode [ 223.769321][ T5829] usb 6-1: Product: syz [ 223.774109][ T5829] usb 6-1: Manufacturer: syz [ 223.778950][ T5829] usb 6-1: SerialNumber: syz [ 223.784050][ T12] hsr_slave_1: left promiscuous mode [ 223.798271][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.816180][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.830345][ T7826] netlink: 'syz.0.546': attribute type 13 has an invalid length. [ 223.855938][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.865100][ T7826] netlink: 'syz.0.546': attribute type 17 has an invalid length. [ 223.873618][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.974275][ T12] veth1_macvtap: left promiscuous mode [ 223.994131][ T12] veth0_macvtap: left promiscuous mode [ 224.014476][ T12] veth1_vlan: left promiscuous mode [ 224.028217][ T12] veth0_vlan: left promiscuous mode [ 224.114749][ T5829] usb 6-1: USB disconnect, device number 12 [ 224.225909][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.336260][ T5929] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 224.360927][ T5929] usb 5-1: USB disconnect, device number 16 [ 224.661310][ T51] Bluetooth: hci2: command tx timeout [ 225.186022][ T12] team0 (unregistering): Port device team_slave_1 removed [ 225.275908][ T12] team0 (unregistering): Port device team_slave_0 removed [ 226.065045][ T7826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.112796][ T7829] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 226.134697][ T7769] chnl_net:caif_netlink_parms(): no params data found [ 226.521011][ T7860] loop7: detected capacity change from 0 to 8 [ 226.570052][ T7860] SQUASHFS error: zlib decompression failed, data probably corrupt [ 226.596576][ T7860] SQUASHFS error: Failed to read block 0x9b: -5 [ 226.618130][ T7860] SQUASHFS error: Unable to read metadata cache entry [99] [ 226.665568][ T7860] SQUASHFS error: Unable to read inode 0x127 [ 226.741608][ T51] Bluetooth: hci2: command tx timeout [ 226.880510][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.561'. [ 227.121304][ T5829] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 227.139387][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.146782][ T6002] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 227.205168][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.244244][ T7769] bridge_slave_0: entered allmulticast mode [ 227.268776][ T7769] bridge_slave_0: entered promiscuous mode [ 227.327631][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.343521][ T6002] usb 1-1: unable to get BOS descriptor or descriptor too short [ 227.359205][ T6002] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 227.367839][ T5829] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 227.368761][ T6002] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 227.390569][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.391727][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.409547][ T5829] usb 7-1: Product: syz [ 227.431446][ T6002] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.438142][ T5829] usb 7-1: Manufacturer: syz [ 227.447808][ T5829] usb 7-1: SerialNumber: syz [ 227.448115][ T7769] bridge_slave_1: entered allmulticast mode [ 227.462970][ T6002] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 227.468291][ T5829] usb 7-1: config 0 descriptor?? [ 227.490132][ T6002] usb 1-1: config 1 has no interface number 1 [ 227.495866][ T7769] bridge_slave_1: entered promiscuous mode [ 227.497222][ T6002] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 227.517763][ T6002] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.533452][ T7884] syz_tun: entered allmulticast mode [ 227.546470][ T7879] syz_tun: left allmulticast mode [ 227.558121][ T5915] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 227.600555][ T6002] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.611972][ T6002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.620177][ T6002] usb 1-1: Product: syz [ 227.632437][ T6002] usb 1-1: Manufacturer: syz [ 227.637508][ T6002] usb 1-1: SerialNumber: syz [ 227.715832][ T5829] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 227.745167][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.788747][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.835043][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.860621][ T7769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.890308][ T5915] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.906481][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.943813][ T7769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.948622][ T5915] usb 6-1: config 0 descriptor?? [ 228.121645][ T6002] usb 1-1: USB disconnect, device number 16 [ 228.374014][ T7769] team0: Port device team_slave_0 added [ 228.470029][ T7769] team0: Port device team_slave_1 added [ 228.489498][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.525149][ T5915] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 228.764859][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.810725][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.843500][ T51] Bluetooth: hci2: command tx timeout [ 228.895963][ T7769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.946815][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.968814][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.994778][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.128623][ T7769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.614659][ T7769] hsr_slave_0: entered promiscuous mode [ 229.672587][ T7769] hsr_slave_1: entered promiscuous mode [ 229.690891][ T7769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.755683][ T7769] Cannot create hsr debugfs directory [ 230.282932][ T7926] loop0: detected capacity change from 0 to 8 [ 230.347604][ T7926] SQUASHFS error: zlib decompression failed, data probably corrupt [ 230.378160][ T7926] SQUASHFS error: Failed to read block 0x9b: -5 [ 230.443074][ T7926] SQUASHFS error: Unable to read metadata cache entry [99] [ 230.497250][ T7926] SQUASHFS error: Unable to read inode 0x127 [ 230.641062][ T6002] usb 6-1: USB disconnect, device number 13 [ 230.938102][ T5829] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 231.440900][ T5829] usb 7-1: USB disconnect, device number 11 [ 232.306784][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.354815][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.658383][ T7769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.050224][ T7769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.250011][ T7769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.341190][ T7769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 233.619686][ T7969] syzkaller0: entered promiscuous mode [ 233.626844][ T7969] syzkaller0: entered allmulticast mode [ 233.887449][ T7981] loop5: detected capacity change from 0 to 8 [ 233.936083][ T7981] SQUASHFS error: zlib decompression failed, data probably corrupt [ 234.017716][ T7981] SQUASHFS error: Failed to read block 0x9b: -5 [ 234.080770][ T7981] SQUASHFS error: Unable to read metadata cache entry [99] [ 234.141612][ T7981] SQUASHFS error: Unable to read inode 0x127 [ 234.801353][ T6002] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 234.961276][ T6002] usb 1-1: Using ep0 maxpacket: 8 [ 234.980086][ T6002] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.048489][ T6002] usb 1-1: config 0 has no interface number 0 [ 235.087817][ T6002] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.151903][ T6002] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 235.176458][ T6002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.203062][ T6002] usb 1-1: config 0 descriptor?? [ 235.230187][ T6002] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 235.431222][ T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 235.487329][ T6002] usb 1-1: USB disconnect, device number 17 [ 235.620329][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.629719][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.645831][ T10] usb 6-1: Product: syz [ 235.650182][ T10] usb 6-1: Manufacturer: syz [ 235.654869][ T10] usb 6-1: SerialNumber: syz [ 235.672229][ T10] usb 6-1: config 0 descriptor?? [ 235.894946][ T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 236.990682][ T7769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.156167][ T7769] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.300803][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.308084][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.348839][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.356082][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.758061][ T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 238.776381][ T7769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.813794][ T10] usb 6-1: USB disconnect, device number 14 [ 239.080044][ T7769] veth0_vlan: entered promiscuous mode [ 239.180612][ T7769] veth1_vlan: entered promiscuous mode [ 239.385063][ T7769] veth0_macvtap: entered promiscuous mode [ 239.468367][ T7769] veth1_macvtap: entered promiscuous mode [ 239.487091][ T8060] fuse: Bad value for 'fd' [ 239.585326][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.626836][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.649468][ T7769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.706834][ T7769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.741407][ T7769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.750346][ T7769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.829843][ T8062] ipvlan2: entered promiscuous mode [ 239.849122][ T8062] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 239.892745][ T8068] use of bytesused == 0 is deprecated and will be removed in the future, [ 239.937791][ T8068] use the actual size instead. [ 240.347707][ T8078] syz_tun: entered allmulticast mode [ 240.375019][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.413577][ T8076] syz_tun: left allmulticast mode [ 240.432968][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.613215][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.625984][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.709651][ T8089] overlayfs: failed to resolve './file0': -2 [ 240.790467][ T8092] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 241.227731][ T24] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 241.399239][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 241.426876][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.447716][ T24] usb 5-1: Product: syz [ 241.457972][ T24] usb 5-1: Manufacturer: syz [ 241.465054][ T24] usb 5-1: SerialNumber: syz [ 241.484463][ T8110] netlink: 20 bytes leftover after parsing attributes in process `syz.6.629'. [ 241.503236][ T24] usb 5-1: config 0 descriptor?? [ 241.753149][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 242.084667][ T6227] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.271852][ T6227] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.552379][ T6227] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.651446][ T6227] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.912368][ T6227] bridge_slave_1: left allmulticast mode [ 242.918129][ T6227] bridge_slave_1: left promiscuous mode [ 242.938268][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.960424][ T6227] bridge_slave_0: left allmulticast mode [ 242.969848][ T6227] bridge_slave_0: left promiscuous mode [ 242.979604][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.727238][ T8161] xt_hashlimit: size too large, truncated to 1048576 [ 244.572065][ T6227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.634145][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 244.655291][ T24] usb 5-1: USB disconnect, device number 17 [ 244.671819][ T6227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.727949][ T6227] bond0 (unregistering): Released all slaves [ 244.878683][ T5160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.890886][ T5160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.899423][ T5160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.908255][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.919195][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.751775][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 245.857823][ T8215] netlink: 20 bytes leftover after parsing attributes in process `syz.5.655'. [ 245.961346][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 246.014715][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 246.041092][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 246.088575][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.137814][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 246.151897][ T2145] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 246.211320][ T24] usb 1-1: config 1 has no interface number 1 [ 246.217492][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 246.311898][ T24] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.352194][ T2145] usb 5-1: Using ep0 maxpacket: 32 [ 246.376480][ T2145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.401666][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.420922][ T2145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.432906][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.440933][ T24] usb 1-1: Product: syz [ 246.457746][ T2145] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 246.469302][ T24] usb 1-1: Manufacturer: syz [ 246.490526][ T24] usb 1-1: SerialNumber: syz [ 246.497245][ T2145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.552293][ T2145] usb 5-1: config 0 descriptor?? [ 246.661605][ T2145] hub 5-1:0.0: USB hub found [ 246.814547][ T2145] hub 5-1:0.0: 1 port detected [ 246.880738][ T6227] hsr_slave_0: left promiscuous mode [ 246.906549][ T6227] hsr_slave_1: left promiscuous mode [ 246.926767][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.953517][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.979121][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.993257][ T51] Bluetooth: hci2: command tx timeout [ 247.008649][ T24] usb 1-1: USB disconnect, device number 18 [ 247.029088][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.128428][ T6227] veth1_macvtap: left promiscuous mode [ 247.135709][ T6227] veth0_macvtap: left promiscuous mode [ 247.142839][ T6227] veth1_vlan: left promiscuous mode [ 247.148526][ T6227] veth0_vlan: left promiscuous mode [ 247.255335][ T7899] udevd[7899]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.423237][ T2145] hub 5-1:0.0: activate --> -90 [ 247.660119][ T8239] fuse: Bad value for 'group_id' [ 247.687442][ T8236] loop0: detected capacity change from 0 to 2048 [ 247.694082][ T8239] fuse: Bad value for 'group_id' [ 247.769875][ T8236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.839477][ T2145] usb 5-1-port1: cannot reset (err = -71) [ 247.886364][ T30] audit: type=1800 audit(1751694127.262:29): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.661" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 247.910951][ T2145] usb 5-1-port1: cannot reset (err = -71) [ 247.944703][ T2145] usb 5-1-port1: Cannot enable. Maybe the USB cable is bad? [ 247.960918][ T24] usb 5-1: USB disconnect, device number 18 [ 247.979722][ T2145] usb 5-1-port1: attempt power cycle [ 248.114821][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.351351][ T6002] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 248.489861][ T8255] overlayfs: upper fs does not support file handles, falling back to index=off. [ 248.547299][ T6002] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 248.581412][ T6002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.599741][ T6002] usb 6-1: Product: syz [ 248.609932][ T6002] usb 6-1: Manufacturer: syz [ 248.616309][ T6002] usb 6-1: SerialNumber: syz [ 248.629436][ T8259] netlink: 'syz.0.669': attribute type 9 has an invalid length. [ 248.673469][ T6002] usb 6-1: config 0 descriptor?? [ 248.848727][ T8263] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2 [ 248.901332][ T6002] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 249.061816][ T51] Bluetooth: hci2: command tx timeout [ 249.150004][ T8273] fuse: Bad value for 'group_id' [ 249.156225][ T8273] fuse: Bad value for 'group_id' [ 249.313630][ T6227] team0 (unregistering): Port device team_slave_1 removed [ 249.385170][ T6227] team0 (unregistering): Port device team_slave_0 removed [ 249.563749][ T5962] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 249.749586][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.761302][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.771105][ T5962] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.784894][ T5962] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.795286][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.811316][ T5962] usb 1-1: config 0 descriptor?? [ 249.845222][ T8226] netlink: 'syz.6.658': attribute type 5 has an invalid length. [ 249.887925][ T8182] chnl_net:caif_netlink_parms(): no params data found [ 250.264722][ T5962] usbhid 1-1:0.0: can't add hid device: -71 [ 250.280016][ T5962] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 250.316226][ T5962] usb 1-1: USB disconnect, device number 19 [ 250.521542][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.542363][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.559826][ T8182] bridge_slave_0: entered allmulticast mode [ 250.587404][ T8182] bridge_slave_0: entered promiscuous mode [ 250.618311][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.631651][ T2145] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 250.659894][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.680107][ T8182] bridge_slave_1: entered allmulticast mode [ 250.721879][ T8182] bridge_slave_1: entered promiscuous mode [ 250.821370][ T2145] usb 7-1: Using ep0 maxpacket: 32 [ 250.854108][ T2145] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.890403][ T2145] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.923714][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.946152][ T2145] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 250.985665][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.001243][ T2145] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.031046][ T2145] usb 7-1: config 0 descriptor?? [ 251.076931][ T2145] hub 7-1:0.0: USB hub found [ 251.141538][ T51] Bluetooth: hci2: command tx timeout [ 251.277718][ T8182] team0: Port device team_slave_0 added [ 251.292535][ T2145] hub 7-1:0.0: 1 port detected [ 251.315622][ T8182] team0: Port device team_slave_1 added [ 251.516590][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.539677][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.619246][ T8182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.645805][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.662059][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.718841][ T8182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.826513][ T6002] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 251.900521][ T6002] usb 6-1: USB disconnect, device number 15 [ 251.917540][ T5951] hub 7-1:0.0: activate --> -90 [ 252.131975][ T5951] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 252.139360][ T2145] usb 7-1: USB disconnect, device number 12 [ 252.174784][ T8182] hsr_slave_0: entered promiscuous mode [ 252.198777][ T8182] hsr_slave_1: entered promiscuous mode [ 252.212045][ T8182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.219638][ T8182] Cannot create hsr debugfs directory [ 252.573837][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.7.691'. [ 252.620064][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.221714][ T51] Bluetooth: hci2: command tx timeout [ 254.143516][ T8182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.205671][ T8182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.304118][ T8182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 254.362634][ T8182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.676059][ T2145] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 254.784478][ T8182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.817148][ T24] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 254.828553][ T8182] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.846314][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.853572][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.866291][ T2145] usb 5-1: unable to get BOS descriptor or descriptor too short [ 254.876610][ T2145] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 254.889929][ T2145] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 254.907068][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.914272][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.934220][ T2145] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.974562][ T2145] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 255.024533][ T2145] usb 5-1: config 1 has no interface number 1 [ 255.032737][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 255.072596][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.080840][ T2145] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 255.103794][ T24] usb 7-1: Product: syz [ 255.121000][ T24] usb 7-1: Manufacturer: syz [ 255.127199][ T2145] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.159315][ T24] usb 7-1: SerialNumber: syz [ 255.183297][ T24] usb 7-1: config 0 descriptor?? [ 255.189529][ T2145] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 255.222261][ T2145] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.236579][ T2145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.259870][ T2145] usb 5-1: Product: syz [ 255.285347][ T2145] usb 5-1: Manufacturer: syz [ 255.290042][ T2145] usb 5-1: SerialNumber: syz [ 255.374419][ T5929] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 255.399545][ T24] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 255.561322][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 255.574640][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.594982][ T2145] usb 5-1: USB disconnect, device number 23 [ 255.608125][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.638237][ T5929] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 255.678275][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.748203][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.772587][ T5929] usb 6-1: config 0 descriptor?? [ 255.798678][ T5929] hub 6-1:0.0: USB hub found [ 255.839146][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.983198][ T8182] veth0_vlan: entered promiscuous mode [ 256.011358][ T5929] hub 6-1:0.0: 1 port detected [ 256.043187][ T8182] veth1_vlan: entered promiscuous mode [ 256.149006][ T8182] veth0_macvtap: entered promiscuous mode [ 256.205622][ T8182] veth1_macvtap: entered promiscuous mode [ 256.339106][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.413404][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.455175][ T8182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.480422][ T8182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.497805][ T8182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.524246][ T8182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.561469][ T8425] nbd7: detected capacity change from 0 to 12 [ 256.583445][ T5860] block nbd7: Send control failed (result -89) [ 256.600063][ T5860] block nbd7: Request send failed, requeueing [ 256.617708][ T5160] block nbd7: Receive control failed (result -32) [ 256.628682][ T55] block nbd7: Dead connection, failed to find a fallback [ 256.629599][ T5929] hub 6-1:0.0: activate --> -90 [ 256.635838][ T55] block nbd7: shutting down sockets [ 256.635872][ T55] blk_print_req_error: 25 callbacks suppressed [ 256.635893][ T55] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.635937][ T55] buffer_io_error: 25 callbacks suppressed [ 256.636003][ T55] Buffer I/O error on dev nbd7, logical block 0, async page read [ 256.683203][ T5860] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.701416][ T5860] Buffer I/O error on dev nbd7, logical block 0, async page read [ 256.721387][ T5860] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.781552][ T5860] Buffer I/O error on dev nbd7, logical block 0, async page read [ 256.841643][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.852655][ T5908] usb 6-1: USB disconnect, device number 16 [ 256.857860][ T5860] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.858668][ T5929] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 256.872708][ T5860] Buffer I/O error on dev nbd7, logical block 0, async page read [ 256.889091][ T5860] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.894973][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.929012][ T5860] Buffer I/O error on dev nbd7, logical block 0, async page read [ 256.951425][ T5860] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.972224][ T5860] Buffer I/O error on dev nbd7, logical block 0, async page read [ 256.982765][ T5860] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.998470][ T5860] Buffer I/O error on dev nbd7, logical block 0, async page read [ 257.016408][ T5860] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.048911][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.071279][ T5860] Buffer I/O error on dev nbd7, logical block 0, async page read [ 257.079232][ T5860] ldm_validate_partition_table(): Disk read failed. [ 257.108501][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.131376][ T5860] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.140508][ T5860] Buffer I/O error on dev nbd7, logical block 0, async page read [ 257.163586][ T5160] Bluetooth: hci5: command 0x0406 tx timeout [ 257.191484][ T5860] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.200612][ T5860] Buffer I/O error on dev nbd7, logical block 0, async page read [ 257.230263][ T5860] Dev nbd7: unable to read RDB block 0 [ 257.236693][ T5860] nbd7: unable to read partition table [ 257.242655][ T5860] nbd7: partition table beyond EOD, truncated [ 257.333193][ T5860] ldm_validate_partition_table(): Disk read failed. [ 257.422054][ T5860] Dev nbd7: unable to read RDB block 0 [ 257.453854][ T5860] nbd7: unable to read partition table [ 257.483799][ T5860] nbd7: partition table beyond EOD, truncated [ 258.100426][ T8458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.717'. [ 258.324096][ T24] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 258.395797][ T24] usb 7-1: USB disconnect, device number 13 [ 258.478966][ T76] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.703235][ T76] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.136653][ T76] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.203555][ T76] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.377498][ T76] bridge_slave_1: left allmulticast mode [ 259.386005][ T76] bridge_slave_1: left promiscuous mode [ 259.392930][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.405886][ T76] bridge_slave_0: left allmulticast mode [ 259.411706][ T76] bridge_slave_0: left promiscuous mode [ 259.417486][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.902565][ T5951] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 260.111789][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.161999][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.195565][ T5951] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.254975][ T5951] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.295399][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.345621][ T5951] usb 7-1: config 0 descriptor?? [ 260.800671][ T5951] usbhid 7-1:0.0: can't add hid device: -71 [ 260.832364][ T5160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.840274][ T5951] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 260.841662][ T8516] netlink: 20 bytes leftover after parsing attributes in process `syz.5.730'. [ 260.858215][ T5160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.869260][ T5951] usb 7-1: USB disconnect, device number 14 [ 260.871415][ T5160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.888957][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.909295][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.115279][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.178972][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.193165][ T76] bond0 (unregistering): Released all slaves [ 261.223814][ T8511] IPVS: Error connecting to the multicast addr [ 261.986327][ T8546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.052466][ T8546] netlink: 'syz.7.738': attribute type 10 has an invalid length. [ 262.247584][ T8546] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 262.313527][ T76] hsr_slave_0: left promiscuous mode [ 262.319597][ T76] hsr_slave_1: left promiscuous mode [ 262.328272][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.371409][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.383338][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.390739][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.411271][ T5951] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 262.456597][ T76] veth1_macvtap: left promiscuous mode [ 262.471713][ T76] veth0_macvtap: left promiscuous mode [ 262.477399][ T76] veth1_vlan: left promiscuous mode [ 262.492789][ T76] veth0_vlan: left promiscuous mode [ 262.585121][ T5951] usb 1-1: unable to get BOS descriptor or descriptor too short [ 262.614830][ T5951] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 262.636313][ T5951] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 262.662916][ T5951] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.680857][ T5951] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 262.698860][ T5951] usb 1-1: config 1 has no interface number 1 [ 262.726546][ T5951] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 262.771487][ T5951] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.827731][ T5951] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.875164][ T8565] 9pnet_virtio: no channels available for device syz [ 262.903464][ T5951] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.919963][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.948398][ T5951] usb 1-1: Product: syz [ 262.955144][ T5951] usb 1-1: Manufacturer: syz [ 262.974734][ T5951] usb 1-1: SerialNumber: syz [ 262.981350][ T51] Bluetooth: hci2: command tx timeout [ 263.081637][ T8567] netlink: 'syz.7.744': attribute type 1 has an invalid length. [ 263.117665][ T8567] netlink: 208 bytes leftover after parsing attributes in process `syz.7.744'. [ 263.332871][ T5951] usb 1-1: USB disconnect, device number 20 [ 263.403012][ T8573] netlink: 'syz.4.747': attribute type 1 has an invalid length. [ 263.409399][ T7899] udevd[7899]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.458052][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 263.468818][ T5829] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 263.632268][ T5829] usb 6-1: Using ep0 maxpacket: 32 [ 263.645241][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.658792][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.669182][ T5829] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 263.679752][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.699313][ T5829] usb 6-1: config 0 descriptor?? [ 263.727270][ T5829] hub 6-1:0.0: USB hub found [ 263.738042][ T76] team0 (unregistering): Port device team_slave_1 removed [ 263.764707][ T24] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 263.803019][ T76] team0 (unregistering): Port device team_slave_0 removed [ 263.914082][ T5829] hub 6-1:0.0: 1 port detected [ 263.944143][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.955715][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.966426][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.982447][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.992248][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.008128][ T24] usb 7-1: config 0 descriptor?? [ 264.312831][ T8573] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 264.441736][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 264.483957][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 264.500625][ T24] usb 7-1: USB disconnect, device number 15 [ 264.547099][ T5829] hub 6-1:0.0: activate --> -90 [ 264.758432][ T8587] lo speed is unknown, defaulting to 1000 [ 264.758491][ T24] usb 6-1: USB disconnect, device number 17 [ 264.771875][ T5829] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 264.855603][ T8587] lo speed is unknown, defaulting to 1000 [ 264.891370][ T8587] lo speed is unknown, defaulting to 1000 [ 264.980843][ T8515] chnl_net:caif_netlink_parms(): no params data found [ 265.061497][ T51] Bluetooth: hci2: command tx timeout [ 265.318571][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.421385][ T5908] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 265.601188][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 265.613202][ T5908] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 265.627156][ T5908] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 265.651221][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 265.691391][ T5908] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.740060][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.771194][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 265.831345][ T5908] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 265.889742][ T5908] usb 1-1: config 168 interface 0 has no altsetting 0 [ 265.914096][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.928181][ T5908] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 265.951315][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.966422][ T5908] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 265.978872][ T8515] bridge_slave_0: entered allmulticast mode [ 265.999665][ T8515] bridge_slave_0: entered promiscuous mode [ 266.020657][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.037207][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 266.060764][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.100088][ T5908] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.101522][ T8515] bridge_slave_1: entered allmulticast mode [ 266.151217][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.164727][ T8515] bridge_slave_1: entered promiscuous mode [ 266.171210][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 266.220087][ T5908] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 266.266838][ T5908] usb 1-1: config 168 interface 0 has no altsetting 0 [ 266.288049][ T5908] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 266.307994][ T5908] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 266.352603][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 266.378445][ T8515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.396086][ T8515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.396360][ T5908] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.417719][ T8587] infiniband syz0: set active [ 266.417786][ T8587] infiniband syz0: added lo [ 266.421050][ T8587] syz0: rxe_create_cq: returned err = -12 [ 266.443641][ T5829] lo speed is unknown, defaulting to 1000 [ 266.480533][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.494376][ T8587] infiniband syz0: Couldn't create ib_mad CQ [ 266.519627][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 266.531239][ T8587] infiniband syz0: Couldn't open port 1 [ 266.573244][ T5908] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 266.631996][ T5908] usb 1-1: config 168 interface 0 has no altsetting 0 [ 266.658913][ T8515] team0: Port device team_slave_0 added [ 266.660985][ T5908] usb 1-1: string descriptor 0 read error: -22 [ 266.681191][ T5908] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 266.691885][ T8587] RDS/IB: syz0: added [ 266.698407][ T8515] team0: Port device team_slave_1 added [ 266.708107][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.723211][ T8587] smc: adding ib device syz0 with port count 1 [ 266.746219][ T8587] smc: ib device syz0 port 1 has pnetid [ 266.791317][ T5908] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 266.862441][ T5829] lo speed is unknown, defaulting to 1000 [ 266.869727][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.886336][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.942794][ T8515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.974057][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.997680][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.042569][ T8515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.081932][ T8587] lo speed is unknown, defaulting to 1000 [ 267.141700][ T51] Bluetooth: hci2: command tx timeout [ 267.254230][ T5829] usb 1-1: USB disconnect, device number 21 [ 267.483396][ T8515] hsr_slave_0: entered promiscuous mode [ 267.518637][ T8515] hsr_slave_1: entered promiscuous mode [ 267.529045][ T8515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.546388][ T8515] Cannot create hsr debugfs directory [ 268.715014][ T8587] lo speed is unknown, defaulting to 1000 [ 268.715810][ T8669] tipc: Started in network mode [ 268.771254][ T8669] tipc: Node identity ac1414aa, cluster identity 4711 [ 268.817878][ T8669] tipc: Enabled bearer , priority 10 [ 269.001530][ T8676] Bluetooth: MGMT ver 1.23 [ 269.018924][ T8673] tipc: Enabled bearer , priority 0 [ 269.221601][ T51] Bluetooth: hci2: command tx timeout [ 269.369299][ T8686] overlayfs: failed to resolve './file0': -2 [ 269.738001][ T8515] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.762894][ T8515] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.795023][ T8515] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.870313][ T8515] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.907747][ T8587] lo speed is unknown, defaulting to 1000 [ 270.063025][ T5929] tipc: Node number set to 2886997162 [ 270.159244][ T8714] 9pnet_virtio: no channels available for device syz [ 270.209208][ T8515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.273845][ T8515] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.363637][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.370837][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.448647][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.455883][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.602962][ T8720] overlayfs: failed to resolve './file0': -2 [ 270.958418][ T8587] lo speed is unknown, defaulting to 1000 [ 271.565975][ T8515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.765262][ T8749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.801921][ T8515] veth0_vlan: entered promiscuous mode [ 271.858735][ T8515] veth1_vlan: entered promiscuous mode [ 271.883618][ T8749] netlink: 'syz.6.791': attribute type 10 has an invalid length. [ 271.929960][ T8749] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 271.989375][ T8587] lo speed is unknown, defaulting to 1000 [ 272.057727][ T8515] veth0_macvtap: entered promiscuous mode [ 272.115426][ T8515] veth1_macvtap: entered promiscuous mode [ 272.194299][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.220893][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.265185][ T8515] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.299284][ T8515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.328722][ T8515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.360661][ T8515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.487385][ T8765] overlayfs: failed to resolve './file0': -2 [ 273.089305][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.124381][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.156365][ T8587] lo speed is unknown, defaulting to 1000 [ 273.259287][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.287756][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.301325][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 273.516683][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 273.554954][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 273.582228][ T10] usb 1-1: can't read configurations, error -71 [ 274.330410][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.493200][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.614520][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.699318][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.894540][ T12] bridge_slave_1: left allmulticast mode [ 274.900255][ T12] bridge_slave_1: left promiscuous mode [ 274.908187][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.920174][ T12] bridge_slave_0: left allmulticast mode [ 274.926383][ T12] bridge_slave_0: left promiscuous mode [ 274.932867][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.297836][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.316702][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.328754][ T12] bond0 (unregistering): Released all slaves [ 275.874016][ T8831] overlayfs: failed to resolve './file0': -2 [ 276.782813][ T5915] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 276.846144][ T5160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.857477][ T5160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.866173][ T5160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.875619][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.885005][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.958871][ T8860] rdma_rxe: rxe_newlink: failed to add lo [ 276.992610][ T5915] usb 6-1: unable to get BOS descriptor or descriptor too short [ 277.032754][ T5915] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 277.040371][ T5915] usb 6-1: can't read configurations, error -71 [ 277.128357][ T8854] lo speed is unknown, defaulting to 1000 [ 277.490760][ T12] hsr_slave_0: left promiscuous mode [ 277.517295][ T12] hsr_slave_1: left promiscuous mode [ 277.532491][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.539915][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.641840][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.670930][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.780320][ T12] veth1_macvtap: left promiscuous mode [ 277.837036][ T12] veth0_macvtap: left promiscuous mode [ 277.856682][ T12] veth1_vlan: left promiscuous mode [ 277.877514][ T12] veth0_vlan: left promiscuous mode [ 278.981371][ T5160] Bluetooth: hci2: command tx timeout [ 279.204458][ T12] team0 (unregistering): Port device team_slave_1 removed [ 279.264132][ T12] team0 (unregistering): Port device team_slave_0 removed [ 279.682514][ T8895] tipc: Started in network mode [ 279.687679][ T8895] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 279.695741][ T8895] tipc: Enabled bearer , priority 0 [ 280.458512][ T8854] chnl_net:caif_netlink_parms(): no params data found [ 280.831360][ T5915] tipc: Node number set to 11578026 [ 281.067117][ T5160] Bluetooth: hci2: command tx timeout [ 281.090781][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.124759][ T5829] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 281.163604][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.170883][ T8854] bridge_slave_0: entered allmulticast mode [ 281.228719][ T8854] bridge_slave_0: entered promiscuous mode [ 281.258304][ T8854] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.277128][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.292109][ T8854] bridge_slave_1: entered allmulticast mode [ 281.313971][ T8854] bridge_slave_1: entered promiscuous mode [ 281.384270][ T5829] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 281.409973][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.438600][ T5829] usb 7-1: Product: syz [ 281.452475][ T5829] usb 7-1: Manufacturer: syz [ 281.457144][ T5829] usb 7-1: SerialNumber: syz [ 281.482382][ T5829] usb 7-1: config 0 descriptor?? [ 281.502551][ T8854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.551054][ T8854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.743808][ T5829] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 281.854414][ T8854] team0: Port device team_slave_0 added [ 281.958129][ T8854] team0: Port device team_slave_1 added [ 281.979450][ T8974] tipc: Enabled bearer , priority 10 [ 282.047702][ T8979] tipc: Enabling of bearer rejected, already enabled [ 282.070117][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.089400][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.180646][ T8854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.208429][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.224490][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.309167][ T8854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.560221][ T8854] hsr_slave_0: entered promiscuous mode [ 282.592589][ T8854] hsr_slave_1: entered promiscuous mode [ 282.598976][ T8854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.637420][ T8854] Cannot create hsr debugfs directory [ 283.141348][ T5160] Bluetooth: hci2: command tx timeout [ 284.605099][ T5829] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 284.629362][ T5829] usb 7-1: USB disconnect, device number 16 [ 284.774904][ T8854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 284.815355][ T8854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 284.855738][ T8854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 284.940512][ T8854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 285.204907][ T9037] block nbd4: shutting down sockets [ 285.221370][ T5160] Bluetooth: hci2: command tx timeout [ 285.521466][ T5962] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 285.542583][ T8854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.634377][ T8854] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.704796][ T5962] usb 6-1: Using ep0 maxpacket: 8 [ 285.749938][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.756738][ T5962] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 285.757185][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.772615][ T5962] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 285.844136][ T5962] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 285.868732][ T5962] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 285.881000][ T5962] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 285.892695][ T5962] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.894282][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.905881][ T5962] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 285.912869][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.958925][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.229390][ T5962] usb 6-1: GET_CAPABILITIES returned 0 [ 286.257002][ T5962] usbtmc 6-1:16.0: can't read capabilities [ 286.321524][ T5908] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 286.474503][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 286.491996][ T9040] usbtmc 6-1:16.0: Unable to send data, error -71 [ 286.494147][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 286.538990][ T5915] usb 6-1: USB disconnect, device number 20 [ 286.547791][ T5908] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 286.573896][ T5908] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 286.622795][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 286.661841][ T5908] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.697840][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 286.753741][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 286.779304][ T5908] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 286.839349][ T5908] usb 1-1: config 168 interface 0 has no altsetting 0 [ 286.866452][ T5908] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 286.876376][ T5908] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 286.904125][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 286.937338][ T5908] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.002598][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 287.021081][ T8854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.048550][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 287.093561][ T5908] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 287.112632][ T9077] block nbd4: shutting down sockets [ 287.136020][ T5908] usb 1-1: config 168 interface 0 has no altsetting 0 [ 287.165687][ T5908] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 287.192534][ T5908] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 287.251255][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 287.285103][ T8854] veth0_vlan: entered promiscuous mode [ 287.334582][ T5908] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.374070][ T8854] veth1_vlan: entered promiscuous mode [ 287.420010][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 287.475411][ T5908] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 287.534296][ T5908] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 287.566557][ T8854] veth0_macvtap: entered promiscuous mode [ 287.595989][ T8854] veth1_macvtap: entered promiscuous mode [ 287.602090][ T5908] usb 1-1: config 168 interface 0 has no altsetting 0 [ 287.627430][ T5908] usb 1-1: string descriptor 0 read error: -22 [ 287.635540][ T5908] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 287.730418][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.738973][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.766576][ T5908] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 287.786769][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.824034][ T8854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.899666][ T8854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.927775][ T8854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.955202][ T8854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.394555][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.436429][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.626834][ T6227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.653434][ T6227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.395768][ T6227] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.656057][ T6227] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.856280][ T6227] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.958433][ T6227] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.120305][ T6227] bridge_slave_1: left allmulticast mode [ 290.130853][ T6227] bridge_slave_1: left promiscuous mode [ 290.138542][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.149754][ T6227] bridge_slave_0: left allmulticast mode [ 290.158093][ T6227] bridge_slave_0: left promiscuous mode [ 290.164055][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.545346][ T6227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.570661][ T6227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.587364][ T6227] bond0 (unregistering): Released all slaves [ 290.800866][ T5505] veth0_virt_wifi: left promiscuous mode [ 291.223974][ T5908] usb 1-1: USB disconnect, device number 24 [ 291.763513][ T9176] netlink: 'syz.6.921': attribute type 5 has an invalid length. [ 292.609459][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.620608][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.631812][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.643957][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.649233][ T6227] hsr_slave_0: left promiscuous mode [ 292.670680][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.733748][ T6227] hsr_slave_1: left promiscuous mode [ 292.775226][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.801448][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.873495][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.880943][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.981989][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 293.019803][ T6227] veth1_macvtap: left promiscuous mode [ 293.051385][ T6227] veth0_macvtap: left promiscuous mode [ 293.057084][ T6227] veth1_vlan: left promiscuous mode [ 293.113834][ T6227] veth0_vlan: left promiscuous mode [ 294.743270][ T5160] Bluetooth: hci2: command tx timeout [ 294.919305][ T6227] team0 (unregistering): Port device team_slave_1 removed [ 295.024750][ T6227] team0 (unregistering): Port device team_slave_0 removed [ 296.424866][ T5929] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 296.607311][ T5929] usb 6-1: Using ep0 maxpacket: 8 [ 296.649475][ T5929] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 296.678469][ T5929] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 296.732178][ T9215] lo speed is unknown, defaulting to 1000 [ 296.742672][ T5929] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 296.808862][ T5929] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 296.821649][ T5160] Bluetooth: hci2: command tx timeout [ 296.869214][ T5929] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 296.927857][ T5929] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.993722][ T5929] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 297.071697][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.393101][ T5929] usb 6-1: GET_CAPABILITIES returned 0 [ 297.398669][ T5929] usbtmc 6-1:16.0: can't read capabilities [ 297.551295][ T5915] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 297.610217][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 297.641220][ T9324] usbtmc 6-1:16.0: Unable to send data, error -71 [ 297.649606][ T5929] usb 6-1: USB disconnect, device number 21 [ 297.711348][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 297.729149][ T5915] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.750520][ T5915] usb 7-1: config 0 has no interface number 0 [ 297.773795][ T5915] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 297.812831][ T5915] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 297.833304][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.880178][ T5915] usb 7-1: config 0 descriptor?? [ 297.894555][ T5915] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 298.178355][ T5915] usb 7-1: USB disconnect, device number 17 [ 298.543146][ T5929] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 298.558660][ T9215] chnl_net:caif_netlink_parms(): no params data found [ 298.575873][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 298.628707][ T24] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 298.710123][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 298.760370][ T5929] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.805612][ T5929] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.854636][ T5929] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.901425][ T5160] Bluetooth: hci2: command tx timeout [ 298.921066][ T5929] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.001330][ T5929] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.011458][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.022029][ T9381] fido_id[9381]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 299.118850][ T9360] loop7: detected capacity change from 0 to 32768 [ 299.155828][ T9398] tipc: Started in network mode [ 299.160837][ T9398] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 299.200703][ T9360] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.969 (9360) [ 299.218608][ T9398] tipc: Enabled bearer , priority 0 [ 299.279882][ T5929] usb 5-1: GET_CAPABILITIES returned 0 [ 299.303540][ T9394] block nbd5: NBD_DISCONNECT [ 299.310882][ T9394] block nbd5: Disconnected due to user request. [ 299.329230][ T5929] usbtmc 5-1:16.0: can't read capabilities [ 299.360900][ T9394] block nbd5: shutting down sockets [ 299.376050][ T9360] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 299.420159][ T9360] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm [ 299.461932][ T9360] BTRFS info (device loop7): using free-space-tree [ 299.502283][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.515375][ T5929] usb 5-1: USB disconnect, device number 24 [ 299.537399][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.586609][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.621607][ T9215] bridge_slave_0: entered allmulticast mode [ 299.684558][ T9215] bridge_slave_0: entered promiscuous mode [ 299.746976][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.766586][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.774918][ T9215] bridge_slave_1: entered allmulticast mode [ 299.799093][ T9215] bridge_slave_1: entered promiscuous mode [ 300.022728][ T5915] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 300.184658][ T9215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.226468][ T5915] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 300.254515][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.254639][ T9215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.317738][ T5915] usb 6-1: Product: syz [ 300.327853][ T5915] usb 6-1: Manufacturer: syz [ 300.334876][ T10] tipc: Node number set to 11578026 [ 300.371265][ T5915] usb 6-1: SerialNumber: syz [ 300.413600][ T5915] usb 6-1: config 0 descriptor?? [ 300.562314][ T5829] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 300.649790][ T5915] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 300.723034][ T9215] team0: Port device team_slave_0 added [ 300.761343][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 300.780342][ T9215] team0: Port device team_slave_1 added [ 300.806260][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.876551][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.948258][ T5829] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 300.971187][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.981239][ T5160] Bluetooth: hci2: command tx timeout [ 301.000189][ T5829] usb 5-1: config 0 descriptor?? [ 301.029609][ T5829] hub 5-1:0.0: USB hub found [ 301.097265][ T9449] loop6: detected capacity change from 0 to 2048 [ 301.124395][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.133845][ T9449] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=2362, location=2362 [ 301.145918][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.215017][ T9449] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 301.256782][ T5829] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 301.272543][ T9449] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 301.283099][ T9215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.327651][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.365497][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.431553][ T9449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.489127][ T9215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.524433][ T5829] usbhid 5-1:0.0: can't add hid device: -71 [ 301.532689][ T30] audit: type=1800 audit(1751694180.932:30): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.980" name="file1" dev="loop6" ino=1346 res=0 errno=0 [ 301.564209][ T5829] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 301.623125][ T5829] usb 5-1: USB disconnect, device number 25 [ 301.917557][ T9215] hsr_slave_0: entered promiscuous mode [ 301.961214][ T2145] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 301.980263][ T9215] hsr_slave_1: entered promiscuous mode [ 302.006993][ T9215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.038829][ T9215] Cannot create hsr debugfs directory [ 302.307062][ T9441] loop0: detected capacity change from 0 to 32768 [ 302.820752][ T9441] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,grpquota,prjquota,nochanges,nojournal_transaction_names,read_only,version_upgrade=incompatible [ 302.820805][ T9441] allowing incompatible features above 0.0: (unknown version) [ 302.820829][ T9441] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 303.071282][ T9441] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 303.080880][ T9441] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing [ 303.094510][ T5915] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 303.116471][ T9441] bcachefs (loop0): invalid bkey in superblock btree=xattrs level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 0 crc: c_size 1 size 1 offset 0 nonce 0 csum none 12010b:c0004000b compress none [ 303.116523][ T9441] has non ptr field, deleting [ 303.238426][ T9441] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 303.272304][ T9441] bcachefs (loop0): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete [ 303.272304][ T9441] Doing compatible version upgrade from 1.3: rebalance_work to 1.28: inode_has_case_insensitive [ 303.272304][ T9441] running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents [ 303.407409][ T9441] bcachefs (loop0): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 0.0: (unknown version) [ 303.407409][ T9441] [ 303.500022][ T9441] syz.0.979: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 303.589717][ T9441] CPU: 0 UID: 0 PID: 9441 Comm: syz.0.979 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 303.589773][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.589797][ T9441] Call Trace: [ 303.589809][ T9441] [ 303.589823][ T9441] dump_stack_lvl+0x16c/0x1f0 [ 303.589892][ T9441] warn_alloc+0x248/0x3a0 [ 303.589942][ T9441] ? __pfx_warn_alloc+0x10/0x10 [ 303.590009][ T9441] ? bch2_fs_journal_start+0x2ce/0x1390 [ 303.590053][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.590100][ T9441] ? __vmalloc_node_noprof+0xad/0xf0 [ 303.590182][ T9441] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 303.590268][ T9441] ? bch2_fs_journal_start+0x2ce/0x1390 [ 303.590327][ T9441] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 303.590397][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.590445][ T9441] ? __alloc_pages_noprof+0xb/0x1b0 [ 303.590491][ T9441] ? ___kmalloc_large_node+0x84/0x1e0 [ 303.590557][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.590613][ T9441] __kvmalloc_node_noprof+0x30a/0x620 [ 303.590659][ T9441] ? bch2_fs_journal_start+0x2ce/0x1390 [ 303.590703][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.590755][ T9441] ? bch2_printbuf_exit+0x75/0xc0 [ 303.590791][ T9441] ? bch2_fs_journal_start+0x2ce/0x1390 [ 303.590832][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.590880][ T9441] ? __bch2_fs_log_msg+0x39e/0x700 [ 303.590925][ T9441] ? bch2_fs_journal_start+0x2ce/0x1390 [ 303.590966][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.591014][ T9441] bch2_fs_journal_start+0x2ce/0x1390 [ 303.591077][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.591124][ T9441] ? bch2_journal_log_msg+0xcc/0x100 [ 303.591174][ T9441] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 303.591221][ T9441] ? enumerated_ref_put+0xc3/0x270 [ 303.591268][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.591328][ T9441] bch2_fs_recovery+0x1f46/0x48a0 [ 303.591406][ T9441] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 303.591471][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.591530][ T9441] ? find_held_lock+0x2b/0x80 [ 303.591595][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.591645][ T9441] ? find_held_lock+0x2b/0x80 [ 303.591697][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.591745][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.591791][ T9441] ? find_held_lock+0x2b/0x80 [ 303.591842][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.591891][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.591941][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.591991][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.592038][ T9441] ? up_write+0x1b2/0x520 [ 303.592086][ T9441] bch2_fs_start+0xda0/0x1410 [ 303.592148][ T9441] bch2_fs_get_tree+0xda6/0x1b10 [ 303.592218][ T9441] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 303.592269][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.592353][ T9441] ? __pfx_aa_get_newest_label+0x10/0x10 [ 303.592401][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.592448][ T9441] ? trace_cap_capable+0x18d/0x200 [ 303.592493][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.592539][ T9441] ? apparmor_capable+0x114/0x1d0 [ 303.592583][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.592629][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.592685][ T9441] vfs_get_tree+0x8e/0x340 [ 303.592724][ T9441] path_mount+0x1414/0x2020 [ 303.592784][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.592831][ T9441] ? kmem_cache_free+0x2d1/0x4d0 [ 303.592875][ T9441] ? __pfx_path_mount+0x10/0x10 [ 303.592938][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.592985][ T9441] ? putname+0x154/0x1a0 [ 303.593048][ T9441] __x64_sys_mount+0x28d/0x310 [ 303.593108][ T9441] ? __pfx___x64_sys_mount+0x10/0x10 [ 303.593169][ T9441] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.593232][ T9441] do_syscall_64+0xcd/0x4c0 [ 303.593302][ T9441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.593341][ T9441] RIP: 0033:0x7f58fdf900ca [ 303.593371][ T9441] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.593412][ T9441] RSP: 002b:00007f58fed48e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 303.593448][ T9441] RAX: ffffffffffffffda RBX: 00007f58fed48ef0 RCX: 00007f58fdf900ca [ 303.593475][ T9441] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 00007f58fed48eb0 [ 303.593501][ T9441] RBP: 00002000000000c0 R08: 00007f58fed48ef0 R09: 0000000000818001 [ 303.593526][ T9441] R10: 0000000000818001 R11: 0000000000000246 R12: 0000200000000080 [ 303.593552][ T9441] R13: 00007f58fed48eb0 R14: 0000000000005978 R15: 0000200000000480 [ 303.593603][ T9441] [ 303.802003][ T9449] [ 303.833780][ T6744] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 303.837767][ T9449] ============================================ [ 303.837781][ T9449] WARNING: possible recursive locking detected [ 303.849538][ T9441] Mem-Info: [ 303.852335][ T9449] 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 Not tainted [ 303.852360][ T9449] -------------------------------------------- [ 303.852373][ T9449] syz.6.980/9449 is trying to acquire lock: [ 303.852393][ T9449] ffff888054cfed28 [ 303.857371][ T9441] active_anon:20438 inactive_anon:0 isolated_anon:0 [ 303.857371][ T9441] active_file:12995 inactive_file:40580 isolated_file:0 [ 303.857371][ T9441] unevictable:768 dirty:81 writeback:0 [ 303.857371][ T9441] slab_reclaimable:10812 slab_unreclaimable:166952 [ 303.857371][ T9441] mapped:35447 shmem:13906 pagetables:1560 [ 303.857371][ T9441] sec_pagetables:0 bounce:0 [ 303.857371][ T9441] kernel_misc_reclaimable:0 [ 303.857371][ T9441] free:1215130 free_pcp:17172 free_cma:0 [ 303.862634][ T9449] (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_free_blocks+0x879/0x11c0 [ 303.868398][ T9441] Node 0 active_anon:81752kB inactive_anon:0kB active_file:51928kB inactive_file:162116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141736kB dirty:324kB writeback:0kB shmem:54088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13236kB pagetables:6104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 303.873917][ T9449] [ 303.873917][ T9449] but task is already holding lock: [ 303.873932][ T9449] ffff888054cfed28 (&sbi->s_alloc_mutex){+.+.}-{4:4} [ 303.879650][ T9441] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 303.884736][ T9449] , at: udf_new_block+0x38f/0x1780 [ 303.884782][ T9449] [ 303.884782][ T9449] other info that might help us debug this: [ 303.890467][ T9441] Node 0 [ 303.895377][ T9449] Possible unsafe locking scenario: [ 303.895377][ T9449] [ 303.895392][ T9449] CPU0 [ 303.895401][ T9449] ---- [ 303.895410][ T9449] lock(&sbi->s_alloc_mutex); [ 303.901095][ T9441] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.906625][ T9449] lock(&sbi->s_alloc_mutex); [ 303.906654][ T9449] [ 303.906654][ T9449] *** DEADLOCK *** [ 303.906654][ T9449] [ 303.911072][ T9441] lowmem_reserve[]: [ 303.915507][ T9449] May be due to missing lock nesting notation [ 303.915507][ T9449] [ 303.915522][ T9449] 4 locks held by syz.6.980/9449: [ 303.915545][ T9449] #0: ffff8880253e2428 (sb_writers#16){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 303.915656][ T9449] #1: ffff8880541d02a0 (&sb->s_type->i_mutex_key#31){+.+.}-{4:4}, at: udf_file_write_iter+0x6d/0x7b0 [ 303.915768][ T9449] #2: ffff8880541d00d0 (&ei->i_data_sem#2){++++}-{4:4}, at: udf_map_block+0x159/0x5b0 [ 303.915884][ T9449] #3: ffff888054cfed28 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_new_block+0x38f/0x1780 [ 303.915989][ T9449] [ 303.915989][ T9449] stack backtrace: [ 303.916007][ T9449] CPU: 1 UID: 0 PID: 9449 Comm: syz.6.980 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 303.916056][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.916080][ T9449] Call Trace: [ 303.916091][ T9449] [ 303.916104][ T9449] dump_stack_lvl+0x116/0x1f0 [ 303.916164][ T9449] print_deadlock_bug+0x1e9/0x240 [ 303.916225][ T9449] __lock_acquire+0x1106/0x1c90 [ 303.916295][ T9449] lock_acquire+0x179/0x350 [ 303.916328][ T9449] ? udf_free_blocks+0x879/0x11c0 [ 303.916372][ T9449] ? __pfx___might_resched+0x10/0x10 [ 303.916421][ T9449] ? mark_held_locks+0x49/0x80 [ 303.916484][ T9449] __mutex_lock+0x199/0xb90 [ 303.916541][ T9449] ? udf_free_blocks+0x879/0x11c0 [ 303.916585][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.916631][ T9449] ? __dequeue_entity+0x696/0x1830 [ 303.916685][ T9449] ? udf_free_blocks+0x879/0x11c0 [ 303.916729][ T9449] ? __pfx___mutex_lock+0x10/0x10 [ 303.916803][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.916847][ T9449] ? __lock_acquire+0xb8a/0x1c90 [ 303.916919][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.916964][ T9449] ? __lock_acquire+0xb8a/0x1c90 [ 303.917026][ T9449] ? udf_free_blocks+0x879/0x11c0 [ 303.917067][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.917112][ T9449] udf_free_blocks+0x879/0x11c0 [ 303.917162][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.917206][ T9449] ? find_held_lock+0x2b/0x80 [ 303.917253][ T9449] ? __pfx_udf_free_blocks+0x10/0x10 [ 303.917294][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.917339][ T9449] ? udf_get_fileshortad+0x90/0x160 [ 303.917385][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.917429][ T9449] ? udf_current_aext+0x3f3/0xa10 [ 303.917481][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.917528][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.917573][ T9449] ? udf_next_aext+0x33b/0x4c0 [ 303.917628][ T9449] udf_delete_aext+0x461/0xd80 [ 303.917681][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.917726][ T9449] ? __pfx_udf_delete_aext+0x10/0x10 [ 303.917777][ T9449] ? __pfx___might_resched+0x10/0x10 [ 303.917825][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.917871][ T9449] ? udf_get_fileshortad+0x111/0x160 [ 303.917929][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.917972][ T9449] ? udf_next_aext+0x33b/0x4c0 [ 303.918027][ T9449] udf_new_block+0x1336/0x1780 [ 303.918075][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.918126][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.918172][ T9449] ? __pfx_udf_new_block+0x10/0x10 [ 303.918215][ T9449] ? preempt_count_sub+0xa3/0x160 [ 303.918264][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.918312][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.918356][ T9449] ? udf_current_aext+0x3f3/0xa10 [ 303.918408][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.918455][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.918500][ T9449] ? udf_next_aext+0x33b/0x4c0 [ 303.918556][ T9449] inode_getblk+0xc6f/0x4100 [ 303.918618][ T9449] ? __pfx_inode_getblk+0x10/0x10 [ 303.918668][ T9449] ? __entry_text_end+0x1020b7/0x1020b9 [ 303.918711][ T9449] ? __kernel_text_address+0xd/0x40 [ 303.918751][ T9449] ? __entry_text_end+0x1020b7/0x1020b9 [ 303.918794][ T9449] ? unwind_get_return_address+0x59/0xa0 [ 303.918831][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.918875][ T9449] ? arch_stack_walk+0x92/0x100 [ 303.918920][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.918967][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.919014][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.919063][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.919107][ T9449] ? xas_load+0x49/0x5b0 [ 303.919138][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.919186][ T9449] ? __lock_acquire+0xb8a/0x1c90 [ 303.919258][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.919314][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.919366][ T9449] udf_map_block+0x2dd/0x5b0 [ 303.919417][ T9449] ? __pfx_udf_map_block+0x10/0x10 [ 303.919486][ T9449] __udf_get_block+0x98/0x330 [ 303.919541][ T9449] ? __pfx___udf_get_block+0x10/0x10 [ 303.919595][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.919639][ T9449] ? _raw_spin_unlock+0x28/0x50 [ 303.919688][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.919732][ T9449] ? create_empty_buffers+0x3a5/0x480 [ 303.919790][ T9449] ? __pfx_udf_get_block+0x10/0x10 [ 303.919842][ T9449] __block_write_begin_int+0x4f4/0x16d0 [ 303.919906][ T9449] ? __pfx_udf_get_block+0x10/0x10 [ 303.919965][ T9449] ? timestamp_truncate+0x21e/0x2d0 [ 303.920018][ T9449] ? __pfx___block_write_begin_int+0x10/0x10 [ 303.920086][ T9449] ? __pfx_udf_get_block+0x10/0x10 [ 303.920137][ T9449] block_write_begin+0x9a/0x1d0 [ 303.920197][ T9449] udf_write_begin+0x1c7/0x270 [ 303.920248][ T9449] generic_perform_write+0x3d0/0x930 [ 303.920297][ T9449] ? __pfx_generic_perform_write+0x10/0x10 [ 303.920335][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.920384][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.920428][ T9449] ? generic_update_time+0xcf/0xf0 [ 303.920481][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.920525][ T9449] ? mnt_put_write_access_file+0x45/0xf0 [ 303.920574][ T9449] __generic_file_write_iter+0x1f7/0x240 [ 303.920635][ T9449] udf_file_write_iter+0x233/0x7b0 [ 303.920679][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.920727][ T9449] iter_file_splice_write+0x91f/0x1150 [ 303.920786][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.920832][ T9449] ? __pfx_iter_file_splice_write+0x10/0x10 [ 303.920883][ T9449] ? __pfx_copy_splice_read+0x10/0x10 [ 303.920959][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.921005][ T9449] ? __pfx_iter_file_splice_write+0x10/0x10 [ 303.921053][ T9449] direct_splice_actor+0x192/0x6c0 [ 303.921100][ T9449] splice_direct_to_actor+0x345/0xa30 [ 303.921145][ T9449] ? __pfx_direct_splice_actor+0x10/0x10 [ 303.921194][ T9449] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 303.921241][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.921290][ T9449] do_splice_direct+0x174/0x240 [ 303.921332][ T9449] ? __pfx_do_splice_direct+0x10/0x10 [ 303.921376][ T9449] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 303.921422][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.921465][ T9449] ? rw_verify_area+0xcf/0x680 [ 303.921503][ T9449] do_sendfile+0xb06/0xe50 [ 303.921546][ T9449] ? __pfx_do_sendfile+0x10/0x10 [ 303.921589][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.921633][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.921677][ T9449] ? __x64_sys_futex+0x1e9/0x4c0 [ 303.921739][ T9449] __x64_sys_sendfile64+0x1d8/0x220 [ 303.921792][ T9449] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 303.921850][ T9449] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.921902][ T9449] do_syscall_64+0xcd/0x4c0 [ 303.921969][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.922008][ T9449] RIP: 0033:0x7fec4b98e929 [ 303.922036][ T9449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.922075][ T9449] RSP: 002b:00007fec4c8e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 303.922110][ T9449] RAX: ffffffffffffffda RBX: 00007fec4bbb5fa0 RCX: 00007fec4b98e929 [ 303.922137][ T9449] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 303.922160][ T9449] RBP: 00007fec4ba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 303.922184][ T9449] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 303.922209][ T9449] R13: 0000000000000000 R14: 00007fec4bbb5fa0 R15: 00007ffde1564218 [ 303.922247][ T9449] [ 303.984121][ T9465] loop4: detected capacity change from 0 to 32768 [ 303.992686][ T9441] 0 [ 304.444065][ T24] usb 6-1: USB disconnect, device number 22 [ 304.446721][ T9441] 2480 [ 304.651982][ T9215] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.678901][ T9441] 2482 2482 2482 [ 305.144880][ T9441] Node 0 DMA32 free:937756kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81632kB inactive_anon:0kB active_file:51928kB inactive_file:160628kB unevictable:1536kB writepending:340kB present:3129332kB managed:2540252kB mlocked:0kB bounce:0kB free_pcp:41168kB local_pcp:22960kB free_cma:0kB [ 305.158430][ T9215] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.189390][ T9441] lowmem_reserve[]: 0 0 1 1 1 [ 305.200289][ T9441] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 305.248400][ T9215] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.257625][ T9441] lowmem_reserve[]: 0 0 0 0 0 [ 305.262473][ T9441] Node 1 Normal free:3893196kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:24224kB local_pcp:16768kB free_cma:0kB [ 305.280894][ T9465] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 305.293924][ T9441] lowmem_reserve[]: 0 0 0 0 0 [ 305.293997][ T9441] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 305.329228][ T9441] Node 0 DMA32: 102*4kB (ME) 28*8kB (UME) 66*16kB (ME) 21*32kB (M) 29*64kB (UME) 2*128kB (ME) 2*256kB (UE) 9*512kB (UM) 11*1024kB (UME) 2*2048kB (UM) 222*4096kB (M) = 934264kB [ 305.347198][ T9441] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 305.363681][ T9215] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.375049][ T9465] allowing incompatible features above 0.0: (unknown version) [ 305.386106][ T9465] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 305.404174][ T9441] Node 1 Normal: 201*4kB (UME) 47*8kB (UME) 33*16kB (UME) 75*32kB (UME) 25*64kB (UME) 9*128kB (UME) 7*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3893196kB [ 305.425977][ T9465] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 305.435478][ T9465] bcachefs (loop4): recovering from clean shutdown, journal seq 33554432 [ 305.455831][ T9441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.503965][ T9465] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 305.503965][ T9465] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 305.528716][ T9441] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 305.548385][ T9441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.580786][ T9441] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 305.584356][ T9465] bcachefs (loop4): error reallocating journal fifo (32768 open entries) [ 305.604285][ T9441] 63370 total pagecache pages [ 305.614211][ T9441] 0 pages in swap cache [ 305.624768][ T9215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.625662][ T9441] Free swap = 124996kB [ 305.632851][ T9465] bcachefs (loop4): error in recovery: ENOMEM_journal_pin_fifo [ 305.650919][ T9465] emergency read only at seq 0 [ 305.652201][ T9441] Total swap = 124996kB [ 305.659792][ T9215] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.672694][ T9441] 2097051 pages RAM [ 305.678106][ T9465] bcachefs (loop4): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 305.682038][ T9441] 0 pages HighMem/MovableOnly [ 305.690332][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.699578][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.709532][ T9465] bcachefs (loop4): shutting down [ 305.714133][ T9441] 430010 pages reserved [ 305.723231][ T9441] 0 pages cma reserved [ 305.725182][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.734405][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.745182][ T9441] bcachefs (loop0): error reallocating journal fifo (32768 open entries) [ 305.756467][ T9465] bcachefs (loop4): shutdown complete [ 305.775967][ T9441] bcachefs (loop0): error in recovery: ENOMEM_journal_pin_fifo [ 305.775992][ T9441] emergency read only at seq 0 [ 305.807576][ T9441] bcachefs (loop0): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 305.818310][ T9441] bcachefs (loop0): shutting down [ 305.837516][ T9441] bcachefs (loop0): shutdown complete [ 306.051635][ T9215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.147481][ T9215] veth0_vlan: entered promiscuous mode [ 306.165844][ T9215] veth1_vlan: entered promiscuous mode [ 306.178225][ T9465] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo [ 306.201622][ T9215] veth0_macvtap: entered promiscuous mode [ 306.220039][ T9215] veth1_macvtap: entered promiscuous mode [ 306.240020][ T9215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.256640][ T9215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.272686][ T9215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.311175][ T9215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.319949][ T9215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.351377][ T9215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.418986][ T9215] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 306.495040][ T9215] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 306.495857][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.522543][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.559644][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.585264][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.141435][ T2145] usb 7-1: unable to get BOS descriptor or descriptor too short [ 307.155327][ T2145] usb 7-1: unable to read config index 0 descriptor/start: -32 [ 307.164541][ T2145] usb 7-1: chopping to 0 config(s) [ 307.169694][ T2145] usb 7-1: can't read configurations, error -32 [ 307.178712][ T9441] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo [ 307.301282][ T2145] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 307.451320][ T2145] usb 7-1: device descriptor read/64, error -32 [ 307.561479][ T2145] usb usb7-port1: attempt power cycle [ 307.819477][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.911303][ T2145] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 307.942044][ T2145] usb 7-1: device descriptor read/8, error -32 [ 308.182242][ T2145] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 308.213684][ T2145] usb 7-1: device descriptor read/8, error -32 [ 308.342173][ T2145] usb usb7-port1: unable to enumerate USB device [ 309.158915][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.244354][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.309089][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.419673][ T36] bridge_slave_1: left allmulticast mode [ 309.427843][ T36] bridge_slave_1: left promiscuous mode [ 309.433791][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.445839][ T36] bridge_slave_0: left allmulticast mode [ 309.451802][ T36] bridge_slave_0: left promiscuous mode [ 309.457453][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.576622][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.587682][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.597438][ T36] bond0 (unregistering): Released all slaves [ 309.916820][ T36] hsr_slave_0: left promiscuous mode [ 309.932437][ T36] hsr_slave_1: left promiscuous mode [ 309.938278][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.945893][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.954620][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.962934][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.975116][ T36] veth1_macvtap: left promiscuous mode [ 309.980696][ T36] veth0_macvtap: left promiscuous mode [ 309.986478][ T36] veth1_vlan: left promiscuous mode [ 309.991860][ T36] veth0_vlan: left promiscuous mode [ 310.146242][ T36] team0 (unregistering): Port device team_slave_1 removed [ 310.164544][ T36] team0 (unregistering): Port device team_slave_0 removed