last executing test programs: 5m34.335290153s ago: executing program 0 (id=58): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_wakeup_irq', 0xa00, 0xf8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405668, 0x0) sendto$inet6(r5, 0x0, 0x0, 0xf00, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/cpuinfo\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) read$msr(r0, &(0x7f0000000040)=""/227, 0xe3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r9, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}}, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r10, &(0x7f00000003c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x200000}}, 0x10, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x2d) 5m31.110231754s ago: executing program 0 (id=61): mknod(&(0x7f00000000c0)='./file0\x00', 0x200, 0x7fff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lremovexattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0xd, 0x800) syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_netdev_private(r3, 0x89fc, &(0x7f0000000340)="c57f90b476213dc7ff0acbc3d618d9b92e7b81c8885d08e150f77ce14d604cd18e2f7f4cc9338713e7411c127292194a07ed5ddd0034c8b25035b35c5da6") sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB="2373797a313a73797a1c2e6261636b757000"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000640)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) r8 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$mixer_OSS_GETVERSION(r8, 0x80044d76, &(0x7f0000000040)) 5m27.61673545s ago: executing program 0 (id=65): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x4, 0x6a, 0x0, 0x9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x37, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x31}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e20, @private=0xfffffffc}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) r9 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) io_uring_enter(r9, 0x2def, 0x0, 0xe, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x10003, 0x0) write$binfmt_elf64(r6, &(0x7f00000001c0)=ANY=[], 0x10034) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 5m25.200181623s ago: executing program 0 (id=70): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = io_uring_setup(0x4668, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x1, 0xa2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) recvmsg(r2, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000001ec0), r0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf251b000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20044020}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 5m23.365677501s ago: executing program 0 (id=73): r0 = socket$alg(0x26, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0xa, 0xfe93, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xd3) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000003245ac848536db3306272be590be5c710007010000f8ffffffb702000008000000b70300000000000085000000700000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x18, r6, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}, [@HEADER={0x4}]}, 0x18}}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(cast6-generic)\x00'}, 0x58) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000240)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000100000000000001000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001007379"], 0x7c}}, 0x0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000800)={0x10000004}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008c5c100b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) 5m21.284823723s ago: executing program 0 (id=78): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x200001e0, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x3}]}) getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x64f, 0x7fffffff, 0x0, 0x3, 0x1ff, 0x401, 0x9}, 0x1c) recvmmsg(r3, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000140)=""/8, 0x8}], 0x1}}], 0x1, 0x7fb10726dd8b, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) setuid(r7) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@broadcast, 0x4e23, 0x0, 0x4e24, 0x8782, 0x2, 0x0, 0x20, 0x0, r5, r7}, {0x5, 0x1, 0x14f, 0x4, 0x28d3, 0x5, 0x2, 0x1}, {0x81, 0x1, 0x1, 0x3}, 0x7fff, 0x6e6bb0, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x2b}, 0xa, @in6=@mcast2, 0x3503, 0x1, 0x2, 0x3, 0x6, 0x1, 0x1000}}, 0xe8) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0xb4e8}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x5e23, @private=0xa010100}, 0x10) 5m3.005933165s ago: executing program 32 (id=78): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x200001e0, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x3}]}) getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x64f, 0x7fffffff, 0x0, 0x3, 0x1ff, 0x401, 0x9}, 0x1c) recvmmsg(r3, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000140)=""/8, 0x8}], 0x1}}], 0x1, 0x7fb10726dd8b, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) setuid(r7) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@broadcast, 0x4e23, 0x0, 0x4e24, 0x8782, 0x2, 0x0, 0x20, 0x0, r5, r7}, {0x5, 0x1, 0x14f, 0x4, 0x28d3, 0x5, 0x2, 0x1}, {0x81, 0x1, 0x1, 0x3}, 0x7fff, 0x6e6bb0, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x2b}, 0xa, @in6=@mcast2, 0x3503, 0x1, 0x2, 0x3, 0x6, 0x1, 0x1000}}, 0xe8) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0xb4e8}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x5e23, @private=0xa010100}, 0x10) 1m15.991647869s ago: executing program 5 (id=926): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='gre0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000c7fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x829a, 0x4) 1m15.485866481s ago: executing program 5 (id=928): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000023c0)=[0x0]}) 1m14.008218092s ago: executing program 5 (id=935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 1m12.836140418s ago: executing program 5 (id=940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x88, 0x0, @remote, @broadcast}, @echo={0x8, 0x0, 0x0, 0x0, 0x88}}}}}, 0x0) 1m12.702743274s ago: executing program 5 (id=942): syz_mount_image$jfs(&(0x7f0000001cc0), &(0x7f0000001c80)='./file0\x00', 0x800000, &(0x7f00000005c0)=ANY=[], 0x1, 0x5e1d, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x114) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x1df) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 1m10.334690014s ago: executing program 5 (id=952): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) 55.277555478s ago: executing program 33 (id=952): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) 43.822567219s ago: executing program 6 (id=1077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000010100c0"]) 43.36401139s ago: executing program 6 (id=1080): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2b, &(0x7f0000000040)) 43.021294898s ago: executing program 6 (id=1082): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xe8c1, 0x7, 0x2, 0x9, 0x12, "d7d025dd213e8ab0"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295cba0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783f287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4fe5b7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e45df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x101c}}, 0x1006) 42.702809251s ago: executing program 6 (id=1086): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000380)={[{@nobh}, {@bsdgroups}, {@resuid}, {@grpquota}, {@minixdf}, {@nodiscard}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}]}, 0x1, 0x5ec, &(0x7f00000018c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) 41.815817582s ago: executing program 6 (id=1096): unshare(0x22020600) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) shutdown(r0, 0x2) 40.976174577s ago: executing program 6 (id=1106): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, 0xe) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r1, 0xffffffffffffffff}}]}, 0x28}}, 0x0) 40.555792267s ago: executing program 34 (id=1106): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, 0xe) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r1, 0xffffffffffffffff}}]}, 0x28}}, 0x0) 6.145197518s ago: executing program 3 (id=1286): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0xcb, 0x0, 0x4, 0x7}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000c80)={r1, @in={{0x2, 0x4e23, @broadcast}}, [0xfffffffffffffffe, 0x80000000, 0x9, 0x5, 0xae5, 0x0, 0x6, 0x7fffffffffffffff, 0x7, 0x9, 0x905b114, 0x4, 0x0, 0x1, 0x8000]}, &(0x7f0000000d80)=0x100) 5.810830762s ago: executing program 3 (id=1291): syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x3, 0x8000000003c) pipe2(&(0x7f00000001c0), 0x4000) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f00000001c0)={[{@volume={'volume', 0x3d, 0x3e}}, {@longad}, {@uid_forget}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {}, {}, {@dmode={'dmode', 0x3d, 0x10000}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x1, 0xc32, &(0x7f000001fd40)="$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") socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x2, 0x400, 0x1, 0x315}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socket$inet(0x2, 0x802, 0x1) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 5.465874048s ago: executing program 7 (id=1292): unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00', 0x1}, 0x18) 4.959135662s ago: executing program 2 (id=1294): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a4, &(0x7f00000001c0)="$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") r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c000000"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsmount(r6, 0x0, 0x0) tkill(0x0, 0xb) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 4.763623514s ago: executing program 3 (id=1296): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000280)) write$cgroup_devices(r1, &(0x7f0000004580)=ANY=[], 0x8) 4.649227246s ago: executing program 4 (id=1297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 4.628183699s ago: executing program 7 (id=1298): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) close(r5) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 4.400614303s ago: executing program 1 (id=1299): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4}}, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x1}) 4.357478238s ago: executing program 7 (id=1300): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c05ab", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x44) 4.253307114s ago: executing program 3 (id=1301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x8140aecc, 0x0) 4.192174016s ago: executing program 1 (id=1302): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.107221418s ago: executing program 7 (id=1303): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x101042, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x6, 0x3, 0xfb}]}) write(r0, &(0x7f0000000080)="3aa0", 0x2) 4.00215896s ago: executing program 4 (id=1304): write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf08000100050100", 0x1b) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0300002000"}) 3.968662625s ago: executing program 1 (id=1305): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000002340)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x4000, 0x80, 0x0) 3.818782643s ago: executing program 4 (id=1306): unshare(0x20000400) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) syz_usb_connect(0x0, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000200)={0x3, 0xfffffffffffffff9, 0x7407350b, 0x4, 0x401, 0x9, 0x1c0000000000}, &(0x7f0000000080)={0x21, 0x9, 0xb, 0x4, 0xfffffffffffffffd, 0x8000000000000000, 0x7ff, 0x1}, 0x0, 0x0, 0x0) 3.818072091s ago: executing program 3 (id=1307): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a4, &(0x7f00000001c0)="$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") r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c000000"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsmount(r6, 0x0, 0x0) tkill(0x0, 0xb) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 3.803871549s ago: executing program 7 (id=1308): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x29, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0xa0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x128) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 3.233316751s ago: executing program 2 (id=1309): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x44, r1, 0x801, 0x70bd25, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5a080039084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x228c755bd72ca5cf}, 0x0) 2.702490653s ago: executing program 1 (id=1310): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a4, &(0x7f00000001c0)="$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") r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c000000"]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsmount(r5, 0x0, 0x0) tkill(0x0, 0xb) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 2.599961294s ago: executing program 2 (id=1311): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYBLOB='\x00'/22], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040e070e"], 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x0) 1.978468442s ago: executing program 3 (id=1312): syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f0000000140)={[{@lazytime}, {@gqnoenforce}, {@quota}, {@filestreams}, {@bsdgroups}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@largeio}]}, 0x4, 0x96cd, &(0x7f0000009680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) truncate(&(0x7f00000000c0)='./file1\x00', 0xefff) write$FUSE_STATX(r0, &(0x7f0000000440)={0x130, 0x0, 0x0, {0x2, 0x7ff, 0x0, '\x00', {0x0, 0x401, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, '\x00', 0x101, 0x8, 0x8, 0x312c, {0x1, 0xffff}, {0xfffffffffffffffb, 0xa8000000}, {0x1, 0x5}, {0xffffffffffff0001}, 0xa, 0x2, 0x1, 0x80}}}, 0x130) chown(&(0x7f0000000000)='./file1\x00', 0xee01, 0xffffffffffffffff) 1.468458337s ago: executing program 2 (id=1313): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 904.177434ms ago: executing program 2 (id=1314): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x1504, &(0x7f0000003fc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='.\x00', 0x2042023, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 504.013317ms ago: executing program 4 (id=1315): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7ffb, 0x9, 0x1, 0x9, 0x36}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) 346.742262ms ago: executing program 1 (id=1316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x20, 0x0, 0x0, {{@in6=@dev, @in=@remote, 0x0, 0x23, 0x4e20, 0x0, 0x0, 0x0, 0x120, 0x4}, {@in6=@local, 0x0, 0x5e}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x4, 0xffffffff}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x10) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000005002"]) 283.285576ms ago: executing program 4 (id=1317): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f00000032c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 197.255228ms ago: executing program 2 (id=1318): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000040)=0xdcd3}) 63.160478ms ago: executing program 1 (id=1319): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a4, &(0x7f00000001c0)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c000000"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsmount(r6, 0x0, 0x0) tkill(0x0, 0xb) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 286.393µs ago: executing program 4 (id=1320): unshare(0x2040400) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x25, 0x0, @void}, 0x10) 0s ago: executing program 7 (id=1321): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$ppp(r0, &(0x7f00000003c0)="0000600f1c73b6875232ac6273854ac83ef81bbb4d4592ff5a0023c3bdee9f4b234c9c492d350eb553ec4f9550a69e1c3e35ddb290fa014f42c075fb9fea", 0x3e) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1) kernel console output (not intermixed with test programs): 87.718470][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.735991][ T5839] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 387.774782][ T8943] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo [ 387.893312][ T3079] m920x_read = error: -19 [ 387.911820][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 387.920680][ T5839] usb 2-1: Using ep0 maxpacket: 16 [ 387.947709][ T5839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.988379][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 388.056024][ T5839] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 388.065990][ T9011] loop2: detected capacity change from 0 to 512 [ 388.080842][ T9011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.095332][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.112349][ T5839] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 388.136303][ T5839] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 388.144814][ T5839] usb 2-1: Manufacturer: syz [ 388.150525][ T52] m920x_read = error: -19 [ 388.154915][ T52] dvb-usb: error -19 while querying for an remote control event. [ 388.241061][ T9011] EXT4-fs (loop2): 1 truncate cleaned up [ 388.253972][ T5839] usb 2-1: config 0 descriptor?? [ 388.301301][ T9011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.326546][ T52] m920x_read = error: -19 [ 388.330941][ T52] dvb-usb: error -19 while querying for an remote control event. [ 388.373950][ T8994] loop5: detected capacity change from 0 to 40427 [ 388.443947][ T8994] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 388.469433][ T8994] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 388.555876][ T977] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 388.575598][ T8994] F2FS-fs (loop5): invalid crc value [ 388.644931][ T52] m920x_read = error: -19 [ 388.653178][ T52] dvb-usb: error -19 while querying for an remote control event. [ 388.664136][ T8994] F2FS-fs (loop5): Found nat_bits in checkpoint [ 388.715747][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 388.732131][ T977] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 388.780734][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.812640][ T977] usb 4-1: Product: syz [ 388.816024][ T5839] rc_core: IR keymap rc-hauppauge not found [ 388.824616][ T5839] Registered IR keymap rc-empty [ 388.829153][ T977] usb 4-1: Manufacturer: syz [ 388.829722][ T52] m920x_read = error: -19 [ 388.842686][ T8994] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 388.850713][ T5839] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 388.857829][ T52] dvb-usb: error -19 while querying for an remote control event. [ 388.870614][ T8994] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 388.878483][ T977] usb 4-1: SerialNumber: syz [ 388.888354][ T5839] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 388.925057][ T5839] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 388.942880][ T5839] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input20 [ 388.953757][ T977] usb 4-1: config 0 descriptor?? [ 388.987723][ T5839] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 389.020965][ T5839] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 389.028684][ T52] m920x_read = error: -19 [ 389.033991][ T52] dvb-usb: error -19 while querying for an remote control event. [ 389.082644][ T5839] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 389.116329][ T5839] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 389.146453][ T5839] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 389.205922][ T5839] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 389.216439][ T52] m920x_read = error: -19 [ 389.220815][ T52] dvb-usb: error -19 while querying for an remote control event. [ 389.240585][ T977] usb 4-1: USB disconnect, device number 16 [ 389.259212][ T5839] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 389.301006][ T5909] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 389.312653][ T5839] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 389.335885][ T5839] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 389.353897][ T5909] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 389.374882][ T5839] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 389.403330][ T5839] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 389.432190][ T5839] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 389.441434][ T23] m920x_read = error: -19 [ 389.446803][ T23] dvb-usb: error -19 while querying for an remote control event. [ 389.492052][ T5839] usb 2-1: USB disconnect, device number 11 [ 389.656289][ T23] m920x_read = error: -19 [ 389.660729][ T23] dvb-usb: error -19 while querying for an remote control event. [ 389.864196][ T5839] m920x_read = error: -19 [ 389.869690][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 390.066448][ T5839] m920x_read = error: -19 [ 390.071248][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 390.094455][ T9045] overlayfs: missing 'workdir' [ 390.356597][ T5839] m920x_read = error: -19 [ 390.372606][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 390.565802][ T5839] m920x_read = error: -19 [ 390.577978][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 390.776326][ T5839] m920x_read = error: -19 [ 390.780722][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 390.794117][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 390.942463][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.965583][ T52] m920x_read = error: -19 [ 390.969983][ T52] dvb-usb: error -19 while querying for an remote control event. [ 391.143632][ T9063] netlink: 'syz.5.893': attribute type 1 has an invalid length. [ 391.156354][ T52] m920x_read = error: -19 [ 391.160744][ T52] dvb-usb: error -19 while querying for an remote control event. [ 391.256145][ T977] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 391.370984][ T52] m920x_read = error: -19 [ 391.373657][ T9070] loop5: detected capacity change from 0 to 256 [ 391.405036][ T52] dvb-usb: error -19 while querying for an remote control event. [ 391.443082][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 391.473257][ T977] usb 4-1: config 0 has no interfaces? [ 391.481336][ T977] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 391.518332][ T977] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 391.553002][ T977] usb 4-1: Manufacturer: syz [ 391.585782][ T5891] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 391.620695][ T977] usb 4-1: config 0 descriptor?? [ 391.773754][ T9072] 9pnet: Unknown protocol version 9p200 [ 391.788755][ T9072] siw: device registration error -23 [ 391.806455][ T52] m920x_read = error: -19 [ 391.825545][ T52] dvb-usb: error -19 while querying for an remote control event. [ 391.996318][ T52] m920x_read = error: -19 [ 392.105191][ T52] dvb-usb: error -19 while querying for an remote control event. [ 392.415099][ T977] usb 4-1: USB disconnect, device number 17 [ 392.459175][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.475347][ T5891] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.506546][ T5891] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 392.535546][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.545707][ T5839] m920x_read = error: -19 [ 392.550768][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 392.552716][ T5891] usb 5-1: config 0 descriptor?? [ 392.716431][ T52] m920x_read = error: -19 [ 392.720805][ T52] dvb-usb: error -19 while querying for an remote control event. [ 392.925771][ T5850] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 393.706914][ T9084] loop3: detected capacity change from 0 to 512 [ 393.715699][ T5891] usb 5-1: USB disconnect, device number 12 [ 393.744011][ T9084] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 393.766159][ T9088] dccp_invalid_packet: P.Data Offset(4) too small [ 393.785945][ T52] m920x_read = error: -19 [ 393.790386][ T52] dvb-usb: error -19 while querying for an remote control event. [ 393.804750][ T9089] loop1: detected capacity change from 0 to 164 [ 393.903013][ T9084] EXT4-fs (loop3): 1 truncate cleaned up [ 393.919366][ T9084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.396237][ T52] m920x_read = error: -19 [ 394.447346][ T52] dvb-usb: error -19 while querying for an remote control event. [ 394.627922][ T5839] m920x_read = error: -19 [ 394.633179][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 394.742216][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.847318][ T52] m920x_read = error: -19 [ 394.872095][ T52] dvb-usb: error -19 while querying for an remote control event. [ 395.076559][ T9100] syz.4.920: attempt to access beyond end of device [ 395.076559][ T9100] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 395.149780][ T9102] loop1: detected capacity change from 0 to 256 [ 395.157715][ T52] m920x_read = error: -19 [ 395.162093][ T52] dvb-usb: error -19 while querying for an remote control event. [ 395.211324][ T9100] FAT-fs (loop9): unable to read boot sector [ 395.242427][ T9099] loop5: detected capacity change from 0 to 2048 [ 395.475868][ T9104] loop3: detected capacity change from 0 to 8 [ 395.571209][ T23] m920x_read = error: -19 [ 395.575701][ T23] dvb-usb: error -19 while querying for an remote control event. [ 396.433073][ T9090] loop2: detected capacity change from 0 to 262144 [ 396.449270][ T9107] 9pnet: Unknown protocol version 9p200 [ 396.491609][ T52] m920x_read = error: -19 [ 396.719262][ T52] dvb-usb: error -19 while querying for an remote control event. [ 396.800934][ T9090] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4) [ 397.018655][ T9109] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 397.056367][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.917'. [ 397.124427][ T5887] m920x_read = error: -19 [ 397.149796][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 397.484933][ T52] m920x_read = error: -19 [ 397.524961][ T52] dvb-usb: error -19 while querying for an remote control event. [ 397.610988][ T9117] pimreg: entered allmulticast mode [ 397.674477][ T9116] pimreg: left allmulticast mode [ 397.725721][ T5887] m920x_read = error: -19 [ 397.730153][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 397.948864][ T52] m920x_read = error: -19 [ 397.974283][ T52] dvb-usb: error -19 while querying for an remote control event. [ 398.196285][ T52] m920x_read = error: -19 [ 398.200693][ T52] dvb-usb: error -19 while querying for an remote control event. [ 398.425613][ T3079] m920x_read = error: -19 [ 398.430053][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 398.637639][ T3079] m920x_read = error: -19 [ 398.642040][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 398.847500][ T3079] m920x_read = error: -19 [ 398.857523][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 398.979350][ T9135] sch_fq: defrate 2 ignored. [ 399.055876][ T52] m920x_read = error: -19 [ 399.061066][ T52] dvb-usb: error -19 while querying for an remote control event. [ 399.246091][ T52] m920x_read = error: -19 [ 399.250499][ T52] dvb-usb: error -19 while querying for an remote control event. [ 399.316465][ T9139] loop4: detected capacity change from 0 to 256 [ 399.638358][ T52] m920x_read = error: -19 [ 399.643442][ T52] dvb-usb: error -19 while querying for an remote control event. [ 399.776253][ T9147] 9pnet: Unknown protocol version 9p200 [ 399.789974][ T9147] siw: device registration error -23 [ 399.815650][ T52] m920x_read = error: -19 [ 399.931733][ T52] dvb-usb: error -19 while querying for an remote control event. [ 400.445669][ T3079] m920x_read = error: -19 [ 400.460297][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 400.569223][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'. [ 400.645794][ T9150] vlan2: entered promiscuous mode [ 400.657622][ T3079] m920x_read = error: -19 [ 400.672233][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 400.695585][ T9150] gretap0: entered promiscuous mode [ 400.878362][ T3079] m920x_read = error: -19 [ 400.882770][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 400.892350][ T9150] gretap0: left promiscuous mode [ 401.057500][ T3079] m920x_read = error: -19 [ 401.061931][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 401.275680][ T3079] m920x_read = error: -19 [ 401.280084][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 401.499151][ T52] m920x_read = error: -19 [ 401.525684][ T52] dvb-usb: error -19 while querying for an remote control event. [ 401.559686][ T9171] loop2: detected capacity change from 0 to 256 [ 401.851694][ T52] m920x_read = error: -19 [ 401.856970][ T52] dvb-usb: error -19 while querying for an remote control event. [ 401.986731][ T9178] 9pnet: Unknown protocol version 9p200 [ 401.999538][ T9178] siw: device registration error -23 [ 402.015610][ T3079] m920x_read = error: -19 [ 402.069646][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 402.355627][ T3079] m920x_read = error: -19 [ 402.480536][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 402.795912][ T5887] m920x_read = error: -19 [ 402.800527][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 402.821418][ T9157] loop5: detected capacity change from 0 to 32768 [ 402.927511][ T9157] ERROR: (device loop5): diWrite: ixpxd invalid [ 402.927511][ T9157] [ 402.963693][ T9157] ERROR: (device loop5): remounting filesystem as read-only [ 402.974553][ T9157] ERROR: (device loop5): txCommit: [ 402.974553][ T9157] [ 402.982270][ T5887] m920x_read = error: -19 [ 402.987678][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 403.230073][ T5887] m920x_read = error: -19 [ 403.235117][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 403.396598][ T5887] m920x_read = error: -19 [ 403.412278][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 403.569804][ T9188] loop2: detected capacity change from 0 to 256 [ 403.595898][ T5887] m920x_read = error: -19 [ 403.600329][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 403.620327][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'. [ 403.934438][ T52] m920x_read = error: -19 [ 403.941265][ T52] dvb-usb: error -19 while querying for an remote control event. [ 404.071636][ T9200] 9pnet: Unknown protocol version 9p200 [ 404.086159][ T9200] siw: device registration error -23 [ 404.122572][ T52] m920x_read = error: -19 [ 404.231509][ T52] dvb-usb: error -19 while querying for an remote control event. [ 404.531081][ T29] audit: type=1326 audit(1739794338.700:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d3b8cde9 code=0x7ffc0000 [ 404.634418][ T29] audit: type=1326 audit(1739794338.760:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d3b8cde9 code=0x7ffc0000 [ 404.695845][ T5887] m920x_read = error: -19 [ 404.700240][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 404.830529][ T9206] loop4: detected capacity change from 0 to 256 [ 404.892312][ T9206] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 404.904478][ T5887] m920x_read = error: -19 [ 404.922627][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 405.113314][ T5887] m920x_read = error: -19 [ 405.132392][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 405.233715][ T9192] loop3: detected capacity change from 0 to 32768 [ 405.295856][ T5887] m920x_read = error: -19 [ 405.300264][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 405.496444][ T5887] m920x_read = error: -19 [ 405.500846][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 405.687562][ T9222] loop4: detected capacity change from 0 to 256 [ 405.705859][ T52] m920x_read = error: -19 [ 405.710510][ T52] dvb-usb: error -19 while querying for an remote control event. [ 405.972497][ T52] m920x_read = error: -19 [ 405.979299][ T52] dvb-usb: error -19 while querying for an remote control event. [ 406.108830][ T9231] 9pnet: Unknown protocol version 9p200 [ 406.122285][ T9231] siw: device registration error -23 [ 406.147805][ T52] m920x_read = error: -19 [ 406.222943][ T52] dvb-usb: error -19 while querying for an remote control event. [ 406.561009][ T52] m920x_read = error: -19 [ 406.591457][ T52] dvb-usb: error -19 while querying for an remote control event. [ 406.889517][ T5850] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 407.684085][ T52] m920x_read = error: -19 [ 407.699791][ T52] dvb-usb: error -19 while querying for an remote control event. [ 407.716516][ T9240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.968'. [ 407.753236][ T9240] netlink: 844 bytes leftover after parsing attributes in process `syz.3.968'. [ 407.875672][ T52] m920x_read = error: -19 [ 407.880072][ T52] dvb-usb: error -19 while querying for an remote control event. [ 407.974044][ T9246] loop1: detected capacity change from 0 to 512 [ 408.015214][ T9246] EXT4-fs: Ignoring removed orlov option [ 408.036418][ T9246] EXT4-fs: Ignoring removed nobh option [ 408.064137][ T9246] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 408.075994][ T52] m920x_read = error: -19 [ 408.080382][ T52] dvb-usb: error -19 while querying for an remote control event. [ 408.152804][ T9246] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.976: invalid indirect mapped block 2683928664 (level 1) [ 408.209683][ T9246] EXT4-fs (loop1): 1 truncate cleaned up [ 408.219596][ T9246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.247728][ T52] m920x_read = error: -19 [ 408.253595][ T52] dvb-usb: error -19 while querying for an remote control event. [ 408.263062][ T9246] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 408.309343][ T9246] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 408.376060][ T9246] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 408.415604][ T52] m920x_read = error: -19 [ 408.419999][ T52] dvb-usb: error -19 while querying for an remote control event. [ 408.471356][ T9258] loop2: detected capacity change from 0 to 2048 [ 408.490157][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.543845][ T9258] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.615649][ T52] m920x_read = error: -19 [ 408.620042][ T52] dvb-usb: error -19 while querying for an remote control event. [ 408.976195][ T9266] loop1: detected capacity change from 0 to 256 [ 409.507042][ T5887] m920x_read = error: -19 [ 409.511450][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 409.846028][ T5887] m920x_read = error: -19 [ 409.906022][ T9266] 9pnet: Unknown protocol version 9p200 [ 409.913849][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 410.078869][ T5887] m920x_read = error: -19 [ 410.105392][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 410.305655][ T5887] m920x_read = error: -19 [ 410.316333][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 410.365386][ T9276] loop4: detected capacity change from 0 to 256 [ 410.476981][ T5887] m920x_read = error: -19 [ 410.485836][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 410.505254][ T9260] loop3: detected capacity change from 0 to 32768 [ 410.514874][ T9260] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.982 (9260) [ 410.556947][ T9260] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 410.586386][ T9260] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 410.595161][ T9260] BTRFS info (device loop3): using free-space-tree [ 410.672602][ T3079] m920x_read = error: -19 [ 410.678646][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 410.868625][ T3079] m920x_read = error: -19 [ 410.873034][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 411.075607][ T5887] m920x_read = error: -19 [ 411.082278][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 411.122449][ T5844] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 411.258594][ T9302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.276414][ T5887] m920x_read = error: -19 [ 411.281152][ T9303] loop1: detected capacity change from 0 to 256 [ 411.288846][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 411.552413][ T5887] m920x_read = error: -19 [ 411.582771][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 411.756683][ T52] m920x_read = error: -19 [ 411.784701][ T52] dvb-usb: error -19 while querying for an remote control event. [ 412.119192][ T52] m920x_read = error: -19 [ 412.123816][ T52] dvb-usb: error -19 while querying for an remote control event. [ 412.853919][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.998'. [ 412.887019][ T5887] m920x_read = error: -19 [ 412.891433][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 413.111182][ T5887] m920x_read = error: -19 [ 413.116209][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 413.275729][ T5887] m920x_read = error: -19 [ 413.284762][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 413.449669][ T9325] loop2: detected capacity change from 0 to 256 [ 413.515746][ T5887] m920x_read = error: -19 [ 413.520305][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 413.723266][ T9329] tun0: tun_chr_ioctl cmd 2147767521 [ 413.906012][ T9331] siw: device registration error -23 [ 413.919742][ T52] m920x_read = error: -19 [ 413.933852][ T52] dvb-usb: error -19 while querying for an remote control event. [ 414.186517][ T52] m920x_read = error: -19 [ 414.213572][ T52] dvb-usb: error -19 while querying for an remote control event. [ 414.484977][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 414.511164][ T9333] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1004'. [ 414.535806][ T52] m920x_read = error: -19 [ 414.585141][ T52] dvb-usb: error -19 while querying for an remote control event. [ 414.775816][ T5887] m920x_read = error: -19 [ 414.780247][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 414.858167][ T9321] loop4: detected capacity change from 0 to 32768 [ 414.904609][ T9321] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1002 (9321) [ 414.958037][ T52] m920x_read = error: -19 [ 414.962447][ T52] dvb-usb: error -19 while querying for an remote control event. [ 414.973425][ T9321] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 415.067750][ T9321] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 415.096062][ T9321] BTRFS info (device loop4): using free-space-tree [ 415.130935][ T52] m920x_read = error: -19 [ 415.135328][ T52] dvb-usb: error -19 while querying for an remote control event. [ 415.315758][ T52] m920x_read = error: -19 [ 415.320161][ T52] dvb-usb: error -19 while querying for an remote control event. [ 415.371973][ T9321] BTRFS info (device loop4): rebuilding free space tree [ 415.486908][ T52] m920x_read = error: -19 [ 415.502167][ T52] dvb-usb: error -19 while querying for an remote control event. [ 415.669545][ T9337] loop3: detected capacity change from 0 to 32768 [ 415.715718][ T52] m920x_read = error: -19 [ 415.715844][ T9337] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1005 (9337) [ 415.720108][ T52] dvb-usb: error -19 while querying for an remote control event. [ 415.781546][ T9337] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 415.823430][ T9337] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 415.875894][ T9337] BTRFS info (device loop3): using free-space-tree [ 415.975629][ T3079] m920x_read = error: -19 [ 415.981978][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 416.034777][ T5834] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 416.104080][ T9343] loop1: detected capacity change from 0 to 32768 [ 416.167673][ T3079] m920x_read = error: -19 [ 416.172081][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 416.332475][ T9337] BTRFS info (device loop3): rebuilding free space tree [ 416.410878][ T5887] m920x_read = error: -19 [ 416.415290][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 416.545168][ T9343] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 416.606440][ T3079] m920x_read = error: -19 [ 416.610854][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 416.619058][ T9343] bcachefs (loop1): initializing new filesystem [ 416.671875][ T9343] bcachefs (loop1): going read-write [ 416.748692][ T9343] bcachefs (loop1): marking superblocks [ 416.805960][ T5887] m920x_read = error: -19 [ 416.810385][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 416.984078][ T9343] bcachefs (loop1): initializing freespace [ 416.984376][ T5844] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 417.007339][ T5887] m920x_read = error: -19 [ 417.011734][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 417.032803][ T9343] bcachefs (loop1): done initializing freespace [ 417.077246][ T9343] bcachefs (loop1): reading snapshots table [ 417.099722][ T9343] bcachefs (loop1): reading snapshots done [ 417.208167][ T5887] m920x_read = error: -19 [ 417.212574][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 417.253779][ T9343] bcachefs (loop1): done starting filesystem [ 417.440686][ T9406] netlink: 'syz.3.1014': attribute type 2 has an invalid length. [ 417.450677][ T9406] netlink: 16142 bytes leftover after parsing attributes in process `syz.3.1014'. [ 417.485855][ T52] m920x_read = error: -19 [ 417.495498][ T52] dvb-usb: error -19 while querying for an remote control event. [ 417.524985][ T9343] syz.1.1009 (9343) used greatest stack depth: 13504 bytes left [ 417.604720][ T9408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.638635][ T5836] bcachefs (loop1): shutting down [ 417.643979][ T5836] bcachefs (loop1): going read-only [ 417.652357][ T5836] bcachefs (loop1): finished waiting for writes to stop [ 417.671987][ T5887] m920x_read = error: -19 [ 417.682081][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 417.705966][ T5836] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 417.855673][ T5887] m920x_read = error: -19 [ 417.860072][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 417.956158][ T9413] loop4: detected capacity change from 0 to 64 [ 418.054914][ T5836] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 418.086067][ T52] m920x_read = error: -19 [ 418.090448][ T52] dvb-usb: error -19 while querying for an remote control event. [ 418.147874][ T5836] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 418.179205][ T5836] bcachefs (loop1): marking filesystem clean [ 418.195831][ T5887] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 418.275808][ T52] m920x_read = error: -19 [ 418.285774][ T52] dvb-usb: error -19 while querying for an remote control event. [ 418.343984][ T5836] bcachefs (loop1): shutdown complete [ 418.424075][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.455596][ T5839] m920x_read = error: -19 [ 418.460123][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 418.469339][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.499394][ T5887] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 418.529502][ T9421] xt_CT: No such helper "snmp" [ 418.545528][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.564143][ T5887] usb 3-1: config 0 descriptor?? [ 418.642901][ T9428] loop3: detected capacity change from 0 to 128 [ 418.665687][ T52] m920x_read = error: -19 [ 418.676307][ T52] dvb-usb: error -19 while querying for an remote control event. [ 418.886090][ T52] m920x_read = error: -19 [ 418.895604][ T52] dvb-usb: error -19 while querying for an remote control event. [ 418.983655][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.998258][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 419.008886][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 419.018139][ T5887] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 419.019589][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 419.046660][ T5850] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 419.059485][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 419.088098][ T5839] m920x_read = error: -19 [ 419.092545][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 419.157822][ T9433] lo speed is unknown, defaulting to 1000 [ 419.180286][ T9433] lo speed is unknown, defaulting to 1000 [ 419.199111][ T5887] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 419.207590][ T5887] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 419.223813][ T5887] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -71 [ 419.241312][ T5887] usb 3-1: USB disconnect, device number 14 [ 419.275954][ T5839] m920x_read = error: -19 [ 419.281635][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 419.410386][ T9436] loop3: detected capacity change from 0 to 4096 [ 419.455660][ T5839] m920x_read = error: -19 [ 419.460087][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 419.570755][ T9436] ntfs3(loop3): ino=5, "/" mi_enum_attr [ 419.635818][ T5839] m920x_read = error: -19 [ 419.677406][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 419.782030][ T9433] chnl_net:caif_netlink_parms(): no params data found [ 419.835927][ T3079] m920x_read = error: -19 [ 419.844321][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 420.046839][ T3079] m920x_read = error: -19 [ 420.051256][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 420.151653][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 420.255633][ T3079] m920x_read = error: -19 [ 420.260612][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 420.412004][ T9458] loop4: detected capacity change from 0 to 512 [ 420.429606][ T9458] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 420.445766][ T3079] m920x_read = error: -19 [ 420.450155][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 420.502810][ T9458] EXT4-fs (loop4): 1 truncate cleaned up [ 420.541631][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.586475][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.616157][ T9433] bridge_slave_0: entered allmulticast mode [ 420.665963][ T3079] m920x_read = error: -19 [ 420.672384][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 420.678154][ T9433] bridge_slave_0: entered promiscuous mode [ 420.717615][ T9458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.728268][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.837638][ T5853] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 420.858716][ T3079] m920x_read = error: -19 [ 420.858772][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 421.015751][ T3079] m920x_read = error: -19 [ 421.032437][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 421.123149][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.409544][ T5853] Bluetooth: hci5: command tx timeout [ 422.029644][ T9433] bridge_slave_1: entered allmulticast mode [ 422.038369][ T9433] bridge_slave_1: entered promiscuous mode [ 422.048240][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.135614][ T3079] m920x_read = error: -19 [ 422.140034][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 422.288690][ T9479] block nbd1: NBD_DISCONNECT [ 422.297689][ T9433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.356397][ T5887] m920x_read = error: -19 [ 422.360791][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 422.379373][ T9433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.585693][ T5887] m920x_read = error: -19 [ 422.595853][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 422.664332][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 422.696504][ T9433] team0: Port device team_slave_0 added [ 422.711911][ T9433] team0: Port device team_slave_1 added [ 422.786292][ T5887] m920x_read = error: -19 [ 422.790725][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 422.855926][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.863567][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.885984][ T977] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 422.889633][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.918123][ T9433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.931629][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.940342][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.982546][ T9433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.993541][ T5887] m920x_read = error: -19 [ 422.998010][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 423.046166][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 423.058070][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.071202][ T977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 423.092197][ T977] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 423.110088][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.125145][ T977] usb 4-1: config 0 descriptor?? [ 423.166340][ T5887] m920x_read = error: -19 [ 423.170827][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 423.199982][ T9433] hsr_slave_0: entered promiscuous mode [ 423.208677][ T9433] hsr_slave_1: entered promiscuous mode [ 423.215317][ T9433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.223401][ T9433] Cannot create hsr debugfs directory [ 423.346217][ T5887] m920x_read = error: -19 [ 423.350614][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 423.438101][ T5850] Bluetooth: hci5: command tx timeout [ 423.516341][ T5887] m920x_read = error: -19 [ 423.544490][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 423.735902][ T5887] m920x_read = error: -19 [ 423.740360][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 423.770580][ T9433] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 423.784159][ T9433] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 423.800460][ T9433] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 424.124721][ T9433] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 424.396062][ T5853] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 424.405294][ T5850] Bluetooth: hci6: command 0x1003 tx timeout [ 424.478711][ T5887] m920x_read = error: -19 [ 424.484235][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 424.680052][ T5839] m920x_read = error: -19 [ 424.724115][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 424.863684][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.890008][ T9500] loop4: detected capacity change from 0 to 32768 [ 424.907232][ T5887] m920x_read = error: -19 [ 424.909738][ T9433] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.911607][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 424.954090][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.961301][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.978779][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.986147][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.055605][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 425.075701][ T5887] m920x_read = error: -19 [ 425.080096][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 425.205880][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 425.213976][ T9500] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 425.219652][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.245720][ T9500] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 425.270074][ T9500] bcachefs (loop4): Version upgrade required: [ 425.270074][ T9500] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 425.270074][ T9500] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.23: stripe_lru [ 425.270074][ T9500] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 425.279059][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 425.339764][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.345618][ T5887] m920x_read = error: -19 [ 425.371304][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 425.415803][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.419122][ T9500] bcachefs (loop4): dropping and reconstructing all alloc info [ 425.467750][ T9] usb 2-1: config 0 descriptor?? [ 425.518490][ T5850] Bluetooth: hci5: command tx timeout [ 425.537633][ T5887] m920x_read = error: -19 [ 425.549410][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 425.578700][ T9500] bcachefs (loop4): accounting_read... done [ 425.606576][ T9500] bcachefs (loop4): alloc_read... done [ 425.621079][ T9500] bcachefs (loop4): stripes_read... done [ 425.639552][ T9500] bcachefs (loop4): snapshots_read... done [ 425.669656][ T9500] bcachefs (loop4): done starting filesystem [ 425.677029][ T977] usbhid 4-1:0.0: can't add hid device: -71 [ 425.684146][ T9433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.697934][ T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 425.721407][ T977] usb 4-1: USB disconnect, device number 18 [ 425.772725][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 425.793985][ T52] m920x_read = error: -19 [ 425.805068][ T9528] Falling back ldisc for ptm0. [ 425.819082][ T52] dvb-usb: error -19 while querying for an remote control event. [ 426.016660][ T52] m920x_read = error: -19 [ 426.036075][ T52] dvb-usb: error -19 while querying for an remote control event. [ 426.078882][ T5834] bcachefs (loop4): shutting down [ 426.137940][ T52] usb 2-1: USB disconnect, device number 12 [ 426.197279][ T5887] m920x_read = error: -19 [ 426.201758][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 426.204927][ T5834] bcachefs (loop4): shutdown complete [ 426.385783][ T52] m920x_read = error: -19 [ 426.390243][ T52] dvb-usb: error -19 while querying for an remote control event. [ 426.525031][ T9433] veth0_vlan: entered promiscuous mode [ 426.551705][ T9433] veth1_vlan: entered promiscuous mode [ 426.585728][ T5887] m920x_read = error: -19 [ 426.590159][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 426.664928][ T9433] veth0_macvtap: entered promiscuous mode [ 426.681806][ T9433] veth1_macvtap: entered promiscuous mode [ 426.728270][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.740191][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.753096][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.783038][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.794402][ T52] m920x_read = error: -19 [ 426.814463][ T52] dvb-usb: error -19 while querying for an remote control event. [ 426.833178][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.845901][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.878187][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.944554][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.958884][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.978517][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.995752][ T5887] m920x_read = error: -19 [ 427.000142][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 427.008895][ T9539] loop3: detected capacity change from 0 to 32768 [ 427.033335][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.059036][ T9433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.070530][ T9433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.077674][ T9549] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.085493][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.110674][ T9539] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 427.213539][ T9433] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.260962][ T9433] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.305297][ T9433] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.318043][ T5887] m920x_read = error: -19 [ 427.323167][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 427.356513][ T9433] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.555246][ T9559] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 427.729045][ T5850] Bluetooth: hci5: command tx timeout [ 427.777937][ T5887] m920x_read = error: -19 [ 427.864686][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 427.962269][ T9539] XFS (loop3): Ending clean mount [ 428.043687][ T9539] XFS (loop3): Quotacheck needed: Please wait. [ 428.052008][ T9560] @: renamed from vlan0 (while UP) [ 428.146337][ T52] m920x_read = error: -19 [ 428.150896][ T52] dvb-usb: error -19 while querying for an remote control event. [ 428.190972][ T9539] XFS (loop3): Quotacheck: Done. [ 428.305014][ T6395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.322792][ T6395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.375597][ T52] m920x_read = error: -19 [ 428.379995][ T52] dvb-usb: error -19 while querying for an remote control event. [ 428.435319][ T5844] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 428.546234][ T52] m920x_read = error: -19 [ 428.550645][ T52] dvb-usb: error -19 while querying for an remote control event. [ 428.699129][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.741391][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.756400][ T52] m920x_read = error: -19 [ 428.760795][ T52] dvb-usb: error -19 while querying for an remote control event. [ 428.966257][ T52] m920x_read = error: -19 [ 428.970665][ T52] dvb-usb: error -19 while querying for an remote control event. [ 429.187209][ T5839] m920x_read = error: -19 [ 429.191615][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 429.388878][ T5839] m920x_read = error: -19 [ 429.393293][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 429.431722][ T9583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.573049][ T5887] m920x_read = error: -19 [ 429.605833][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 429.772928][ T5887] m920x_read = error: -19 [ 429.799516][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 429.955235][ T9593] loop2: detected capacity change from 0 to 4096 [ 430.044810][ T5839] m920x_read = error: -19 [ 430.053216][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 430.126031][ T9597] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 430.225615][ T5887] m920x_read = error: -19 [ 430.230021][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 430.277287][ T9601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.415792][ T5887] m920x_read = error: -19 [ 430.420204][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 430.611239][ T9518] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 430.617833][ T5887] m920x_read = error: -19 [ 430.643783][ T9518] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 430.651217][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 430.716710][ T9518] Remounting filesystem read-only [ 430.746330][ T9518] NILFS (loop2): error -5 truncating bmap (ino=12) [ 430.788558][ T9609] xt_CT: No such helper "pptp" [ 430.851592][ T5887] m920x_read = error: -19 [ 430.867191][ T9615] loop6: detected capacity change from 0 to 1024 [ 430.874531][ T9615] EXT4-fs: Ignoring removed nobh option [ 430.880531][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 431.027766][ T9615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.065577][ T5887] m920x_read = error: -19 [ 431.069984][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 431.114178][ T29] audit: type=1326 audit(1739794365.300:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cdf8cde9 code=0x7ffc0000 [ 431.211919][ T29] audit: type=1326 audit(1739794365.300:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cdf8cde9 code=0x7ffc0000 [ 431.275660][ T5887] m920x_read = error: -19 [ 431.280069][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 431.360202][ T29] audit: type=1326 audit(1739794365.350:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01cdf8cde9 code=0x7ffc0000 [ 431.465615][ T29] audit: type=1326 audit(1739794365.360:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cdf8cde9 code=0x7ffc0000 [ 431.492250][ T5887] m920x_read = error: -19 [ 431.506708][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 431.549728][ T9433] EXT4-fs error (device loop6): ext4_readdir:261: inode #11: block 64: comm syz-executor: path /4/file0/lost+found: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=3304, size=1024 fake=0 [ 431.570298][ T29] audit: type=1326 audit(1739794365.360:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cdf8cde9 code=0x7ffc0000 [ 431.608735][ T29] audit: type=1326 audit(1739794365.370:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01cdf8cde9 code=0x7ffc0000 [ 431.633500][ T29] audit: type=1326 audit(1739794365.370:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cdf8cde9 code=0x7ffc0000 [ 431.659250][ T29] audit: type=1326 audit(1739794365.370:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01cdf83da7 code=0x7ffc0000 [ 431.683045][ T29] audit: type=1326 audit(1739794365.370:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01cdf28fb9 code=0x7ffc0000 [ 431.695276][ T9433] EXT4-fs (loop6): Remounting filesystem read-only [ 431.713234][ T5887] m920x_read = error: -19 [ 431.725697][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 431.737421][ T9640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.811653][ T29] audit: type=1326 audit(1739794365.370:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.1.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01cdf83da7 code=0x7ffc0000 [ 431.886786][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 431.916019][ T5887] m920x_read = error: -19 [ 431.920516][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 431.954513][ T9646] syzkaller1: tun_chr_ioctl cmd 21731 [ 432.089530][ T5887] m920x_read = error: -19 [ 432.093951][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 432.107141][ T9650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.259667][ T9433] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.275638][ T5887] m920x_read = error: -19 [ 432.280165][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 432.309213][ T9654] loop3: detected capacity change from 0 to 64 [ 432.485909][ T5887] m920x_read = error: -19 [ 432.496398][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 432.531414][ T6395] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.686204][ T5887] m920x_read = error: -19 [ 432.690615][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 432.739475][ T6395] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.856129][ T5887] m920x_read = error: -19 [ 432.860530][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 432.962260][ T6395] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.055657][ T5887] m920x_read = error: -19 [ 433.061341][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 433.234918][ T9674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.244515][ T6395] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.278681][ T5839] m920x_read = error: -19 [ 433.283107][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 433.485592][ T5839] m920x_read = error: -19 [ 433.489999][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 433.517500][ T9681] syz.2.1118: attempt to access beyond end of device [ 433.517500][ T9681] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 433.535953][ T9680] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1117'. [ 433.580079][ T9681] syz.2.1118: attempt to access beyond end of device [ 433.580079][ T9681] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 433.630925][ T9681] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 433.656453][ T9681] syz.2.1118: attempt to access beyond end of device [ 433.656453][ T9681] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 433.685632][ T5839] m920x_read = error: -19 [ 433.693932][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 433.726349][ T9681] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 433.759632][ T9681] syz.2.1118: attempt to access beyond end of device [ 433.759632][ T9681] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 433.804586][ T9681] syz.2.1118: attempt to access beyond end of device [ 433.804586][ T9681] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 433.805753][ T6395] bridge_slave_1: left allmulticast mode [ 433.846222][ T6395] bridge_slave_1: left promiscuous mode [ 433.852910][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.858261][ T9681] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 433.875662][ T5839] m920x_read = error: -19 [ 433.885698][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 433.904084][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 433.931615][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 433.934770][ T9681] syz.2.1118: attempt to access beyond end of device [ 433.934770][ T9681] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 433.958992][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 433.967619][ T6395] bridge_slave_0: left allmulticast mode [ 433.972715][ T9681] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 433.973303][ T6395] bridge_slave_0: left promiscuous mode [ 433.973577][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.996236][ T9681] syz.2.1118: attempt to access beyond end of device [ 433.996236][ T9681] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 434.044116][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 434.062410][ T5853] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 434.071913][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 434.086540][ T5839] m920x_read = error: -19 [ 434.091018][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 434.115951][ T9681] syz.2.1118: attempt to access beyond end of device [ 434.115951][ T9681] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 434.133004][ T9671] loop4: detected capacity change from 0 to 32768 [ 434.152582][ T9681] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 434.176879][ T9681] syz.2.1118: attempt to access beyond end of device [ 434.176879][ T9681] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 434.192224][ T9671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1113 (9671) [ 434.196192][ T9681] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 434.225166][ T9681] syz.2.1118: attempt to access beyond end of device [ 434.225166][ T9681] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 434.240547][ T9681] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 434.254568][ T9681] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 434.286324][ T9671] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 434.306850][ T5887] m920x_read = error: -19 [ 434.311222][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 434.319131][ T9681] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 434.354180][ T9671] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 434.364636][ T9671] BTRFS info (device loop4): using free-space-tree [ 434.496239][ T5887] m920x_read = error: -19 [ 434.496272][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 434.665633][ T5839] m920x_read = error: -19 [ 434.665669][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 434.692295][ T5834] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 434.932568][ T5839] m920x_read = error: -19 [ 434.932601][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 435.127230][ T9721] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 435.197999][ T5839] m920x_read = error: -19 [ 435.198325][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 435.366101][ T23] m920x_read = error: -19 [ 435.366343][ T23] dvb-usb: error -19 while querying for an remote control event. [ 435.575299][ T5839] m920x_read = error: -19 [ 435.575334][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 435.726217][ T23] m920x_read = error: -19 [ 435.756607][ T23] dvb-usb: error -19 while querying for an remote control event. [ 435.844913][ T9709] loop1: detected capacity change from 0 to 32768 [ 435.916331][ T23] m920x_read = error: -19 [ 435.955555][ T23] dvb-usb: error -19 while querying for an remote control event. [ 435.975758][ T9709] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 436.012450][ T9732] loop3: detected capacity change from 0 to 512 [ 436.101129][ T9732] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 436.116048][ T23] m920x_read = error: -19 [ 436.120445][ T23] dvb-usb: error -19 while querying for an remote control event. [ 436.155811][ T5853] Bluetooth: hci5: command tx timeout [ 436.185143][ T9735] loop4: detected capacity change from 0 to 256 [ 436.213711][ T9709] XFS (loop1): Ending clean mount [ 436.230812][ T9709] XFS (loop1): Quotacheck needed: Please wait. [ 436.231483][ T9732] EXT4-fs (loop3): 1 truncate cleaned up [ 436.309841][ T9732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.427555][ T9709] XFS (loop1): Quotacheck: Done. [ 437.002912][ T5836] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 437.263469][ T23] m920x_read = error: -19 [ 437.268424][ T23] dvb-usb: error -19 while querying for an remote control event. [ 437.738812][ T9742] 9pnet: Unknown protocol version 9p200 [ 437.752548][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.855995][ T9746] loop3: detected capacity change from 0 to 760 [ 437.932354][ T23] m920x_read = error: -19 [ 437.945520][ T23] dvb-usb: error -19 while querying for an remote control event. [ 438.115127][ T23] m920x_read = error: -19 [ 438.120161][ T23] dvb-usb: error -19 while querying for an remote control event. [ 438.136138][ T9746] loop3: detected capacity change from 0 to 1024 [ 438.246173][ T5853] Bluetooth: hci5: command tx timeout [ 438.285832][ T23] m920x_read = error: -19 [ 438.290233][ T23] dvb-usb: error -19 while querying for an remote control event. [ 438.456934][ T23] m920x_read = error: -19 [ 438.461345][ T23] dvb-usb: error -19 while querying for an remote control event. [ 438.645798][ T23] m920x_read = error: -19 [ 438.651600][ T23] dvb-usb: error -19 while querying for an remote control event. [ 438.680106][ T6395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.745624][ T6395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.768002][ T6395] bond0 (unregistering): Released all slaves [ 438.820610][ T9755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.851785][ T23] m920x_read = error: -19 [ 438.856408][ T23] dvb-usb: error -19 while querying for an remote control event. [ 439.002240][ T9688] lo speed is unknown, defaulting to 1000 [ 439.015654][ T23] m920x_read = error: -19 [ 439.020052][ T23] dvb-usb: error -19 while querying for an remote control event. [ 439.039450][ T9751] loop4: detected capacity change from 0 to 32768 [ 439.040842][ T9688] lo speed is unknown, defaulting to 1000 [ 439.155251][ T9759] loop3: detected capacity change from 0 to 2048 [ 439.207246][ T23] m920x_read = error: -19 [ 439.211728][ T9759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.231224][ T23] dvb-usb: error -19 while querying for an remote control event. [ 439.401055][ T5887] m920x_read = error: -19 [ 439.407259][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 439.449629][ T9759] [syz.3.1136/9759] FS: loop3 File: /file0/memory.swap.current would truncate fibmap result [ 439.502180][ T9763] (unnamed net_device) (uninitialized): (slave veth1_to_hsr): Device is not bonding slave [ 439.523104][ T9763] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1_to_hsr) [ 439.595767][ T5887] m920x_read = error: -19 [ 439.600173][ T5887] dvb-usb: error -19 while querying for an remote control event. [ 439.786543][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 439.786561][ T29] audit: type=1326 audit(1739794373.990:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.2.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe009d8cde9 code=0x7ffc0000 [ 439.818354][ T23] m920x_read = error: -19 [ 439.822738][ T23] dvb-usb: error -19 while querying for an remote control event. [ 439.871457][ T29] audit: type=1326 audit(1739794373.990:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.2.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe009d8cde9 code=0x7ffc0000 [ 439.919759][ T29] audit: type=1326 audit(1739794374.000:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.2.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe009d8cde9 code=0x7ffc0000 [ 439.944930][ T29] audit: type=1326 audit(1739794374.060:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.2.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe009d8cde9 code=0x7ffc0000 [ 439.968177][ T29] audit: type=1326 audit(1739794374.080:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.2.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe009d8cde9 code=0x7ffc0000 [ 439.990888][ T29] audit: type=1326 audit(1739794374.090:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.2.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe009d8cde9 code=0x7ffc0000 [ 440.013312][ T23] m920x_read = error: -19 [ 440.017846][ T23] dvb-usb: error -19 while querying for an remote control event. [ 440.026145][ T29] audit: type=1326 audit(1739794374.090:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.2.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe009d8cde9 code=0x7ffc0000 [ 440.049348][ T29] audit: type=1326 audit(1739794374.090:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.2.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe009d8cde9 code=0x7ffc0000 [ 440.072049][ T29] audit: type=1326 audit(1739794374.090:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.2.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe009d8b750 code=0x7ffc0000 [ 440.106692][ T6395] hsr_slave_0: left promiscuous mode [ 440.115547][ T29] audit: type=1326 audit(1739794374.090:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.2.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe009d8c9eb code=0x7ffc0000 [ 440.138119][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 440.165464][ T6395] hsr_slave_1: left promiscuous mode [ 440.185705][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.193342][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.200876][ T23] m920x_read = error: -19 [ 440.205245][ T23] dvb-usb: error -19 while querying for an remote control event. [ 440.223257][ T9749] loop1: detected capacity change from 0 to 65536 [ 440.231212][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.238840][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.275315][ T9749] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 440.289739][ T9749] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 440.301297][ T6395] veth1_macvtap: left promiscuous mode [ 440.306244][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 440.314762][ T6395] veth0_macvtap: left promiscuous mode [ 440.319702][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 440.322343][ T5853] Bluetooth: hci5: command tx timeout [ 440.330246][ T9] usb 3-1: config 0 has no interface number 0 [ 440.347653][ T6395] veth1_vlan: left promiscuous mode [ 440.354322][ T6395] veth0_vlan: left promiscuous mode [ 440.363221][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 440.373691][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.383202][ T9] usb 3-1: Product: syz [ 440.389498][ T9] usb 3-1: Manufacturer: syz [ 440.394769][ T9] usb 3-1: SerialNumber: syz [ 440.396303][ T23] m920x_read = error: -19 [ 440.403895][ T23] dvb-usb: error -19 while querying for an remote control event. [ 440.406118][ T9] usb 3-1: config 0 descriptor?? [ 440.423852][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.424048][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 440.430216][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.493389][ T9749] XFS (loop1): Ending clean mount [ 440.554532][ T5836] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 440.617185][ T23] m920x_read = error: -19 [ 440.621584][ T23] dvb-usb: error -19 while querying for an remote control event. [ 440.652803][ T9] usb 3-1: qt2_attach - failed to power on unit: -71 [ 440.681035][ T9] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 440.765902][ T9] usb 3-1: USB disconnect, device number 15 [ 440.836150][ T23] m920x_read = error: -19 [ 440.840572][ T23] dvb-usb: error -19 while querying for an remote control event. [ 441.018449][ T23] m920x_read = error: -19 [ 441.022860][ T23] dvb-usb: error -19 while querying for an remote control event. [ 441.176030][ T23] m920x_read = error: -19 [ 441.180503][ T23] dvb-usb: error -19 while querying for an remote control event. [ 441.269428][ T9786] loop1: detected capacity change from 0 to 256 [ 441.358029][ T23] m920x_read = error: -19 [ 441.362491][ T23] dvb-usb: error -19 while querying for an remote control event. [ 441.565783][ T23] m920x_read = error: -19 [ 441.570198][ T23] dvb-usb: error -19 while querying for an remote control event. [ 441.755967][ T23] m920x_read = error: -19 [ 441.760429][ T23] dvb-usb: error -19 while querying for an remote control event. [ 441.850177][ T6395] team0 (unregistering): Port device team_slave_1 removed [ 441.916421][ T9791] 9pnet: Unknown protocol version 9p200 [ 441.925560][ T23] m920x_read = error: -19 [ 441.930047][ T23] dvb-usb: error -19 while querying for an remote control event. [ 442.004975][ T6395] team0 (unregistering): Port device team_slave_0 removed [ 442.115749][ T23] m920x_read = error: -19 [ 442.120170][ T23] dvb-usb: error -19 while querying for an remote control event. [ 442.295629][ T23] m920x_read = error: -19 [ 442.300038][ T23] dvb-usb: error -19 while querying for an remote control event. [ 442.403543][ T5853] Bluetooth: hci5: command tx timeout [ 442.476240][ T23] m920x_read = error: -19 [ 442.480812][ T23] dvb-usb: error -19 while querying for an remote control event. [ 442.558624][ T9797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.648067][ T23] m920x_read = error: -19 [ 442.652467][ T23] dvb-usb: error -19 while querying for an remote control event. [ 442.838286][ T23] m920x_read = error: -19 [ 442.842665][ T23] dvb-usb: error -19 while querying for an remote control event. [ 442.875898][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 443.015697][ T23] m920x_read = error: -19 [ 443.020114][ T23] dvb-usb: error -19 while querying for an remote control event. [ 443.053583][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 443.083234][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 443.105747][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 443.121687][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 443.132630][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.153495][ T9] usb 2-1: Product: syz [ 443.159932][ T9] usb 2-1: Manufacturer: syz [ 443.164573][ T9] usb 2-1: SerialNumber: syz [ 443.180617][ T9] usb 2-1: config 0 descriptor?? [ 443.194194][ T23] m920x_read = error: -19 [ 443.194455][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 443.199505][ T23] dvb-usb: error -19 while querying for an remote control event. [ 443.223677][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 443.389044][ T5839] m920x_read = error: -19 [ 443.393437][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 443.585919][ T23] m920x_read = error: -19 [ 443.590322][ T23] dvb-usb: error -19 while querying for an remote control event. [ 443.714515][ T9809] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1151'. [ 443.795631][ T23] m920x_read = error: -19 [ 443.800046][ T23] dvb-usb: error -19 while querying for an remote control event. [ 443.846055][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 443.864123][ T9688] chnl_net:caif_netlink_parms(): no params data found [ 443.973258][ T9817] loop3: detected capacity change from 0 to 256 [ 443.979800][ T5839] m920x_read = error: -19 [ 443.984167][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 444.042803][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 444.066603][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 444.091453][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 444.135936][ T9] usb 2-1: USB disconnect, device number 13 [ 444.143642][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 444.165641][ T5839] m920x_read = error: -19 [ 444.170032][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 444.225972][ T9] em28xx 2-1:0.0: Freeing device [ 444.367131][ T5839] m920x_read = error: -19 [ 444.372182][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 444.479448][ T9828] veth0: entered promiscuous mode [ 444.487511][ T9827] veth0: left promiscuous mode [ 444.512140][ T9688] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.525098][ T9688] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.556706][ T23] m920x_read = error: -19 [ 444.561186][ T23] dvb-usb: error -19 while querying for an remote control event. [ 444.575705][ T9688] bridge_slave_0: entered allmulticast mode [ 444.604642][ T9688] bridge_slave_0: entered promiscuous mode [ 444.630823][ T9688] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.665657][ T9688] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.675725][ T9688] bridge_slave_1: entered allmulticast mode [ 444.706305][ T9688] bridge_slave_1: entered promiscuous mode [ 444.745710][ T5839] m920x_read = error: -19 [ 444.750527][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 444.858383][ T9688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.873376][ T9688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.921574][ T9838] 9pnet: Unknown protocol version 9p200 [ 444.955817][ T5839] m920x_read = error: -19 [ 444.961367][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 445.140515][ T9688] team0: Port device team_slave_0 added [ 445.167998][ T5839] m920x_read = error: -19 [ 445.172409][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 445.205046][ T9688] team0: Port device team_slave_1 added [ 445.371217][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.387655][ T23] m920x_read = error: -19 [ 445.395810][ T23] dvb-usb: error -19 while querying for an remote control event. [ 445.423467][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.485787][ T9688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.538040][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.545039][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.581015][ T9688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.625956][ T5839] m920x_read = error: -19 [ 445.635556][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 445.706274][ T5891] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 445.815756][ T5839] m920x_read = error: -19 [ 445.818360][ T9688] hsr_slave_0: entered promiscuous mode [ 445.825450][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 445.847095][ T9688] hsr_slave_1: entered promiscuous mode [ 445.853846][ T9688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.886828][ T9688] Cannot create hsr debugfs directory [ 445.894087][ T5891] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 445.908482][ T9833] loop2: detected capacity change from 0 to 32768 [ 445.925916][ T5891] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 445.947089][ T5891] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 445.957038][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.982704][ T9833] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 445.986090][ T9845] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 446.006050][ T5839] m920x_read = error: -19 [ 446.010604][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 446.054567][ T5891] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 446.056357][ T9833] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 446.206520][ T5839] m920x_read = error: -19 [ 446.210932][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 446.240071][ T9842] loop4: detected capacity change from 0 to 40427 [ 446.261986][ T5840] ocfs2: Unmounting device (7,2) on (node local) [ 446.285140][ T9842] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 446.300677][ T9852] syzkaller1: entered promiscuous mode [ 446.313135][ T9842] F2FS-fs (loop4): invalid crc value [ 446.319142][ T9852] syzkaller1: entered allmulticast mode [ 446.331873][ T5839] usb 4-1: USB disconnect, device number 19 [ 446.358963][ T9842] F2FS-fs (loop4): Found nat_bits in checkpoint [ 446.408813][ T23] m920x_read = error: -19 [ 446.415532][ T23] dvb-usb: error -19 while querying for an remote control event. [ 446.509837][ T9842] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 446.576160][ T23] m920x_read = error: -19 [ 446.605609][ T23] dvb-usb: error -19 while querying for an remote control event. [ 446.652632][ T5834] bio_check_eod: 2 callbacks suppressed [ 446.652651][ T5834] syz-executor: attempt to access beyond end of device [ 446.652651][ T5834] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 446.680253][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted 6.14.0-rc2-next-20250217-syzkaller #0 [ 446.680279][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 446.680289][ T5834] Call Trace: [ 446.680297][ T5834] [ 446.680305][ T5834] dump_stack_lvl+0x241/0x360 [ 446.680338][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.680360][ T5834] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 446.680387][ T5834] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 446.680418][ T5834] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 446.680456][ T5834] f2fs_handle_critical_error+0x38f/0x5a0 [ 446.680497][ T5834] f2fs_write_end_io+0x674/0x9a0 [ 446.680540][ T5834] __submit_merged_bio+0x2a9/0x710 [ 446.680578][ T5834] f2fs_submit_merged_write_cond+0x28a/0x360 [ 446.680635][ T5834] f2fs_write_data_pages+0x2c5e/0x3670 [ 446.680720][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 446.680769][ T5834] ? validate_chain+0x11e/0x5920 [ 446.680906][ T5834] ? __pfx_lock_release+0x10/0x10 [ 446.680926][ T5834] ? do_raw_spin_lock+0x14f/0x370 [ 446.680966][ T5834] ? do_raw_spin_unlock+0x13c/0x8b0 [ 446.680995][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 446.681019][ T5834] do_writepages+0x35f/0x880 [ 446.681060][ T5834] ? __pfx_do_writepages+0x10/0x10 [ 446.681095][ T5834] ? filemap_fdatawrite+0x1e8/0x2a0 [ 446.681114][ T5834] ? do_raw_spin_lock+0x14f/0x370 [ 446.681136][ T5834] ? __pfx_lock_release+0x10/0x10 [ 446.681178][ T5834] ? do_raw_spin_unlock+0x13c/0x8b0 [ 446.681200][ T5834] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 446.681238][ T5834] filemap_fdatawrite+0x1f3/0x2a0 [ 446.681267][ T5834] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 446.681372][ T5834] ? do_raw_spin_unlock+0x13c/0x8b0 [ 446.681412][ T5834] f2fs_sync_dirty_inodes+0x348/0x860 [ 446.681462][ T5834] f2fs_write_checkpoint+0x8af/0x1de0 [ 446.681529][ T5834] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 446.681636][ T5834] ? kfree+0x196/0x430 [ 446.681656][ T5834] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 446.681677][ T5834] ? kill_f2fs_super+0x28e/0x6d0 [ 446.681708][ T5834] kill_f2fs_super+0x2b6/0x6d0 [ 446.681741][ T5834] ? __pfx_kill_f2fs_super+0x10/0x10 [ 446.681777][ T5834] ? shrinker_free+0x2ca/0x3d0 [ 446.681800][ T5834] deactivate_locked_super+0xc4/0x130 [ 446.681826][ T5834] cleanup_mnt+0x41f/0x4b0 [ 446.681846][ T5834] ? lockdep_hardirqs_on+0x99/0x150 [ 446.681872][ T5834] task_work_run+0x24f/0x310 [ 446.681905][ T5834] ? __pfx_task_work_run+0x10/0x10 [ 446.681920][ T5834] ? __x64_sys_umount+0x120/0x170 [ 446.681951][ T5834] ? syscall_exit_to_user_mode+0xa3/0x340 [ 446.681977][ T5834] syscall_exit_to_user_mode+0x13f/0x340 [ 446.682004][ T5834] do_syscall_64+0x100/0x230 [ 446.682025][ T5834] ? clear_bhb_loop+0x45/0xa0 [ 446.682053][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.682073][ T5834] RIP: 0033:0x7f32d3b8e117 [ 446.682092][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 446.682105][ T5834] RSP: 002b:00007ffd652725f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 446.682123][ T5834] RAX: 0000000000000000 RBX: 00007f32d3c0e08c RCX: 00007f32d3b8e117 [ 446.682135][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd652726b0 [ 446.682145][ T5834] RBP: 00007ffd652726b0 R08: 0000000000000000 R09: 0000000000000000 [ 446.682156][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd65273740 [ 446.682167][ T5834] R13: 00007f32d3c0e08c R14: 000000000006d05e R15: 00007ffd65273780 [ 446.682213][ T5834] [ 446.682220][ T5834] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 446.711462][ T9860] loop1: detected capacity change from 0 to 1024 [ 447.049692][ T23] m920x_read = error: -19 [ 447.054145][ T23] dvb-usb: error -19 while querying for an remote control event. [ 447.096529][ T9860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.144907][ T9860] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.227795][ T52] m920x_read = error: -19 [ 447.232196][ T52] dvb-usb: error -19 while querying for an remote control event. [ 447.326945][ T9860] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1170: bg 0: block 393: padding at end of block bitmap is not set [ 447.350628][ T9860] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 447.366311][ T9860] EXT4-fs (loop1): This should not happen!! Data will be lost [ 447.366311][ T9860] [ 447.453735][ T9688] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 447.470834][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.473745][ T52] m920x_read = error: -19 [ 447.494518][ T52] dvb-usb: error -19 while querying for an remote control event. [ 447.539440][ T9688] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 447.618391][ T9688] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 447.655814][ T9688] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 447.665786][ T52] m920x_read = error: -19 [ 447.675367][ T52] dvb-usb: error -19 while querying for an remote control event. [ 447.875614][ T5839] m920x_read = error: -19 [ 447.893690][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 447.930848][ T9881] loop1: detected capacity change from 0 to 4096 [ 447.953075][ T9881] ntfs3(loop1): ino=3, Correct links count -> 2. [ 448.056360][ T5839] m920x_read = error: -19 [ 448.060777][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 448.238857][ T5839] m920x_read = error: -19 [ 448.243271][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 448.258902][ T9688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.358791][ T9891] bridge0: entered promiscuous mode [ 448.387862][ T9891] bridge0: port 1(macsec1) entered blocking state [ 448.394488][ T9891] bridge0: port 1(macsec1) entered disabled state [ 448.420580][ T9891] macsec1: entered allmulticast mode [ 448.428146][ T9891] bridge0: entered allmulticast mode [ 448.440024][ T5839] m920x_read = error: -19 [ 448.446616][ T9891] macsec1: left allmulticast mode [ 448.454853][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 448.466042][ T9891] bridge0: left allmulticast mode [ 448.485040][ T9891] bridge0: left promiscuous mode [ 448.625871][ T5839] m920x_read = error: -19 [ 448.630311][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 448.656631][ T9902] loop3: detected capacity change from 0 to 256 [ 448.676852][ T9902] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 448.712664][ T9902] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 448.744720][ T9902] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 448.805760][ T23] m920x_read = error: -19 [ 448.810171][ T23] dvb-usb: error -19 while querying for an remote control event. [ 448.824995][ T9688] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.882079][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.889461][ T6505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.992342][ T6505] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.999622][ T6505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.014225][ T23] m920x_read = error: -19 [ 449.035557][ T23] dvb-usb: error -19 while querying for an remote control event. [ 449.120124][ T9906] loop2: detected capacity change from 0 to 2048 [ 449.198601][ T52] m920x_read = error: -19 [ 449.203000][ T52] dvb-usb: error -19 while querying for an remote control event. [ 449.212404][ T9912] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 449.292482][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 449.292500][ T29] audit: type=1800 audit(1739794383.490:105): pid=9906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1184" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 449.395984][ T52] m920x_read = error: -19 [ 449.400390][ T52] dvb-usb: error -19 while querying for an remote control event. [ 449.580364][ T52] m920x_read = error: -19 [ 449.591576][ T52] dvb-usb: error -19 while querying for an remote control event. [ 449.717898][ T9924] loop1: detected capacity change from 0 to 2048 [ 449.769766][ T9924] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.786101][ T23] m920x_read = error: -19 [ 449.790626][ T23] dvb-usb: error -19 while querying for an remote control event. [ 449.975725][ T52] m920x_read = error: -19 [ 449.980119][ T52] dvb-usb: error -19 while querying for an remote control event. [ 450.027165][ T9688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.166350][ T52] m920x_read = error: -19 [ 450.184512][ T52] dvb-usb: error -19 while querying for an remote control event. [ 450.366089][ T52] m920x_read = error: -19 [ 450.382315][ T52] dvb-usb: error -19 while querying for an remote control event. [ 450.567877][ T23] m920x_read = error: -19 [ 450.572279][ T23] dvb-usb: error -19 while querying for an remote control event. [ 450.612595][ T9929] loop3: detected capacity change from 0 to 32768 [ 450.776718][ T23] m920x_read = error: -19 [ 450.776753][ T23] dvb-usb: error -19 while querying for an remote control event. [ 450.936217][ T23] m920x_read = error: -19 [ 450.982009][ T23] dvb-usb: error -19 while querying for an remote control event. [ 451.250819][ T23] m920x_read = error: -19 [ 451.287224][ T23] dvb-usb: error -19 while querying for an remote control event. [ 451.378242][ T9688] veth0_vlan: entered promiscuous mode [ 451.419257][ T9688] veth1_vlan: entered promiscuous mode [ 451.521560][ T9688] veth0_macvtap: entered promiscuous mode [ 451.546213][ T52] m920x_read = error: -19 [ 451.550611][ T52] dvb-usb: error -19 while querying for an remote control event. [ 451.562611][ T9688] veth1_macvtap: entered promiscuous mode [ 451.631291][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.672879][ T9961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.680373][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.700496][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.735638][ T52] m920x_read = error: -19 [ 451.740039][ T52] dvb-usb: error -19 while querying for an remote control event. [ 451.757014][ T9964] loop1: detected capacity change from 0 to 256 [ 451.757256][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.766123][ T9964] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 451.795503][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.806293][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.818550][ T9960] loop2: detected capacity change from 0 to 4096 [ 451.828799][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.844255][ T9964] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 451.864711][ T9964] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 451.883882][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.886484][ T9964] UDF-fs: Scanning with blocksize 512 failed [ 451.904790][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.927332][ T52] m920x_read = error: -19 [ 451.931779][ T52] dvb-usb: error -19 while querying for an remote control event. [ 451.955523][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.966394][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.972480][ T9964] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 451.976456][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.997342][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.009193][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.035626][ T9688] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.044410][ T9688] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.054721][ T9688] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.065537][ T9688] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.093474][ T9964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.125611][ T52] m920x_read = error: -19 [ 452.130048][ T52] dvb-usb: error -19 while querying for an remote control event. [ 452.305676][ T23] m920x_read = error: -19 [ 452.310080][ T23] dvb-usb: error -19 while querying for an remote control event. [ 452.392270][ T6395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.421171][ T6395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.464817][ T9972] loop1: detected capacity change from 0 to 128 [ 452.506119][ T23] m920x_read = error: -19 [ 452.510519][ T23] dvb-usb: error -19 while querying for an remote control event. [ 452.699597][ T6395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.717909][ T5839] m920x_read = error: -19 [ 452.722331][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 452.731738][ T6395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.936146][ T5839] m920x_read = error: -19 [ 452.941076][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 453.083346][ T9984] loop4: detected capacity change from 0 to 256 [ 453.105806][ T23] m920x_read = error: -19 [ 453.114781][ T23] dvb-usb: error -19 while querying for an remote control event. [ 453.605631][ T9991] 9pnet: Unknown protocol version 9p200 [ 453.657281][ T9991] siw: device registration error -23 [ 454.115607][ T23] m920x_read = error: -19 [ 454.115642][ T23] dvb-usb: error -19 while querying for an remote control event. [ 454.767789][ T9992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.881832][ T9975] loop2: detected capacity change from 0 to 32768 [ 454.948898][ T9975] JBD2: Ignoring recovery information on journal [ 454.958270][ T5839] m920x_read = error: -19 [ 454.962694][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 455.106813][ T9975] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 455.185895][ T52] m920x_read = error: -19 [ 455.190397][ T52] dvb-usb: error -19 while querying for an remote control event. [ 455.262549][T10001] loop1: detected capacity change from 0 to 1024 [ 455.266663][T10002] loop3: detected capacity change from 0 to 512 [ 455.300568][T10002] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 455.346367][ T29] audit: type=1800 audit(1739794389.550:106): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1215" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 455.375935][T10002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 455.384056][T10002] System zones: 1-12 [ 455.401452][ T52] m920x_read = error: -19 [ 455.401966][ T29] audit: type=1800 audit(1739794389.600:107): pid=10001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1215" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 455.425494][ T52] dvb-usb: error -19 while querying for an remote control event. [ 455.449691][T10002] EXT4-fs (loop3): 1 truncate cleaned up [ 455.477667][T10002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.482875][ T5840] ocfs2: Unmounting device (7,2) on (node local) [ 455.620726][ T3079] m920x_read = error: -19 [ 455.635583][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 455.696907][T10008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.806123][ T52] m920x_read = error: -19 [ 455.810539][ T52] dvb-usb: error -19 while querying for an remote control event. [ 455.854593][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1220'. [ 455.885056][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.915214][T10010] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 456.023048][ T3079] m920x_read = error: -19 [ 456.036244][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 456.170088][T10018] loop3: detected capacity change from 0 to 1024 [ 456.202405][ T52] m920x_read = error: -19 [ 456.207166][ T52] dvb-usb: error -19 while querying for an remote control event. [ 456.235134][T10018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.364946][T10026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.395522][ T52] m920x_read = error: -19 [ 456.399946][ T52] dvb-usb: error -19 while querying for an remote control event. [ 456.510184][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.585918][ T3079] m920x_read = error: -19 [ 456.622409][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 456.734811][T10034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1228'. [ 456.760975][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1227'. [ 456.815632][ T52] m920x_read = error: -19 [ 456.840541][ T52] dvb-usb: error -19 while querying for an remote control event. [ 457.050198][ T3079] m920x_read = error: -19 [ 457.059365][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 457.277156][ T3079] m920x_read = error: -19 [ 457.282391][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 457.331465][T10016] loop7: detected capacity change from 0 to 32768 [ 457.411983][T10016] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 457.475753][ T3079] m920x_read = error: -19 [ 457.480177][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 457.543737][T10016] XFS (loop7): Ending clean mount [ 457.653117][ T3079] m920x_read = error: -19 [ 457.663186][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 457.815570][ T9688] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 457.855596][ T3079] m920x_read = error: -19 [ 457.860262][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 458.056040][ T3079] m920x_read = error: -19 [ 458.061272][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 458.265586][ T5839] m920x_read = error: -19 [ 458.270067][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 458.305786][ T6841] jfs_flush_journal: synclist not empty [ 458.312007][ T6841] metapage: ffff888033d60d90: 00001000 00000000 000036c8 00000000 [ 458.347342][T10049] loop4: detected capacity change from 0 to 40427 [ 458.366372][ T6841] metapage: ffff888033d60da0: 21b24228 ffff8880 21b24228 ffff8880 [ 458.396064][T10049] F2FS-fs (loop4): invalid crc value [ 458.405569][ T6841] metapage: ffff888033d60db0: 00000004 00000000 00000000 00000000 [ 458.413467][ T6841] metapage: ffff888033d60dc0: 7cae3000 ffff8880 0000001c 00000000 [ 458.444235][T10045] loop3: detected capacity change from 0 to 32768 [ 458.444533][T10049] F2FS-fs (loop4): Found nat_bits in checkpoint [ 458.457384][ T3079] m920x_read = error: -19 [ 458.461749][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 458.482248][ T6841] metapage: ffff888033d60dd0: 00000000 dead4ead ffffffff 00000000 [ 458.511118][ T6841] metapage: ffff888033d60de0: ffffffff ffffffff 9a7b6840 ffffffff [ 458.538914][ T6841] metapage: ffff888033d60df0: 93f8cff0 ffffffff 00000000 00000000 [ 458.559449][T10070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.566463][ T6841] metapage: ffff888033d60e00: 8c6358a0 ffffffff 00000300 00000000 [ 458.583453][T10045] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 458.603967][ T6841] metapage: ffff888033d60e10: 33d60e10 ffff8880 33d60e10 ffff8880 [ 458.624293][ T6841] metapage: ffff888033d60e20: 01f2b8c0 ffffea00 5ce18000 ffff8880 [ 458.656288][T10074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.663681][ T6841] metapage: ffff888033d60e30: 00001000 00003794 00000001 00000000 [ 458.671754][ T3079] m920x_read = error: -19 [ 458.677417][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 458.678520][T10045] ocfs2: Unmounting device (7,3) on (node local) [ 458.705666][ T6841] metapage: ffff888033d60e40: 21b24000 ffff8880 [ 458.716140][ T6841] page: ffffea0001f2b8c0: 00fff3800000402c ffffea0000d322c8 [ 458.723645][ T6841] page: ffffea0001f2b8d0: ffff88805db191a0 ffff88805e7a3da0 [ 458.731327][ T6841] page: ffffea0001f2b8e0: 000000000000001c ffff888033d60d90 [ 458.738842][ T6841] page: ffffea0001f2b8f0: 00000003ffffffff ffff888012574000 [ 458.741274][T10049] F2FS-fs (loop4): Start checkpoint disabled! [ 458.782385][T10049] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 458.833349][T10079] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 458.848897][T10049] syz.4.1234: attempt to access beyond end of device [ 458.848897][T10049] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 458.876652][ T5839] m920x_read = error: -19 [ 458.881527][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 458.889464][T10079] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 459.065548][ T5839] m920x_read = error: -19 [ 459.069950][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 459.098669][T10084] lo speed is unknown, defaulting to 1000 [ 459.148617][T10084] lo speed is unknown, defaulting to 1000 [ 459.222897][T10082] loop1: detected capacity change from 0 to 8192 [ 459.242356][T10082] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 459.265565][ T52] m920x_read = error: -19 [ 459.269991][ T52] dvb-usb: error -19 while querying for an remote control event. [ 459.387689][ T6395] kworker/u8:11: attempt to access beyond end of device [ 459.387689][ T6395] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 459.415038][ T6395] CPU: 1 UID: 0 PID: 6395 Comm: kworker/u8:11 Not tainted 6.14.0-rc2-next-20250217-syzkaller #0 [ 459.415064][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 459.415075][ T6395] Workqueue: writeback wb_workfn (flush-7:4) [ 459.415101][ T6395] Call Trace: [ 459.415109][ T6395] [ 459.415117][ T6395] dump_stack_lvl+0x241/0x360 [ 459.415144][ T6395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.415165][ T6395] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 459.415191][ T6395] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 459.415218][ T6395] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 459.415253][ T6395] f2fs_handle_critical_error+0x38f/0x5a0 [ 459.415292][ T6395] f2fs_write_end_io+0x674/0x9a0 [ 459.415330][ T6395] __submit_merged_bio+0x2a9/0x710 [ 459.415366][ T6395] f2fs_submit_merged_write+0x1ea/0x2c0 [ 459.415399][ T6395] f2fs_sync_node_pages+0x1a2c/0x1c90 [ 459.415453][ T6395] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 459.415526][ T6395] ? __pfx_validate_chain+0x10/0x10 [ 459.415548][ T6395] ? __pfx_validate_chain+0x10/0x10 [ 459.415573][ T6395] ? rcu_is_watching+0x15/0xb0 [ 459.415591][ T6395] ? blk_start_plug+0x53/0x1b0 [ 459.415619][ T6395] f2fs_write_node_pages+0x304/0x6d0 [ 459.415653][ T6395] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 459.415689][ T6395] ? reacquire_held_locks+0x3eb/0x690 [ 459.415714][ T6395] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 459.415739][ T6395] do_writepages+0x35f/0x880 [ 459.415784][ T6395] ? __pfx_do_writepages+0x10/0x10 [ 459.415828][ T6395] ? __pfx_lock_acquire+0x10/0x10 [ 459.415851][ T6395] ? writeback_sb_inodes+0x595/0x1360 [ 459.415872][ T6395] ? __pfx_lock_release+0x10/0x10 [ 459.415890][ T6395] ? do_raw_spin_lock+0x14f/0x370 [ 459.415927][ T6395] __writeback_single_inode+0x14f/0x10d0 [ 459.415948][ T6395] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 459.415979][ T6395] writeback_sb_inodes+0x820/0x1360 [ 459.416024][ T6395] ? __pfx_lock_acquire+0x10/0x10 [ 459.416052][ T6395] ? __pfx_lock_release+0x10/0x10 [ 459.416085][ T6395] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 459.416160][ T6395] ? rcu_is_watching+0x15/0xb0 [ 459.416182][ T6395] ? queue_io+0x3d9/0x5a0 [ 459.416217][ T6395] wb_writeback+0x413/0xb80 [ 459.416251][ T6395] ? queue_io+0x361/0x5a0 [ 459.416274][ T6395] ? __pfx_wb_writeback+0x10/0x10 [ 459.416322][ T6395] wb_workfn+0x410/0x1080 [ 459.416378][ T6395] ? __pfx_wb_workfn+0x10/0x10 [ 459.416414][ T6395] ? __pfx_lock_acquire+0x10/0x10 [ 459.416440][ T6395] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 459.416469][ T6395] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 459.416514][ T6395] ? process_scheduled_works+0x9c6/0x18e0 [ 459.416535][ T6395] process_scheduled_works+0xabe/0x18e0 [ 459.416608][ T6395] ? __pfx_process_scheduled_works+0x10/0x10 [ 459.416648][ T6395] ? assign_work+0x364/0x3d0 [ 459.416680][ T6395] worker_thread+0x870/0xd30 [ 459.416730][ T6395] ? __kthread_parkme+0x169/0x1d0 [ 459.416766][ T6395] ? __pfx_worker_thread+0x10/0x10 [ 459.416789][ T6395] kthread+0x7a9/0x920 [ 459.416803][ T6395] ? __pfx_kthread+0x10/0x10 [ 459.416824][ T6395] ? __pfx_worker_thread+0x10/0x10 [ 459.416846][ T6395] ? __pfx_kthread+0x10/0x10 [ 459.416860][ T6395] ? __pfx_kthread+0x10/0x10 [ 459.416883][ T6395] ? __pfx_kthread+0x10/0x10 [ 459.416896][ T6395] ? _raw_spin_unlock_irq+0x23/0x50 [ 459.416919][ T6395] ? lockdep_hardirqs_on+0x99/0x150 [ 459.416936][ T6395] ? __pfx_kthread+0x10/0x10 [ 459.416955][ T6395] ret_from_fork+0x4b/0x80 [ 459.416975][ T6395] ? __pfx_kthread+0x10/0x10 [ 459.416993][ T6395] ret_from_fork_asm+0x1a/0x30 [ 459.417041][ T6395] [ 459.768978][ T6395] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 459.776375][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: kworker/u8:11 Not tainted 6.14.0-rc2-next-20250217-syzkaller #0 [ 459.776403][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 459.776414][ T6395] Workqueue: writeback wb_workfn (flush-7:4) [ 459.776439][ T6395] Call Trace: [ 459.776447][ T6395] [ 459.776455][ T6395] dump_stack_lvl+0x241/0x360 [ 459.776489][ T6395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.776510][ T6395] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 459.776534][ T6395] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 459.776558][ T6395] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 459.776592][ T6395] f2fs_handle_critical_error+0x38f/0x5a0 [ 459.776630][ T6395] f2fs_write_end_io+0x674/0x9a0 [ 459.776666][ T6395] __submit_merged_bio+0x2a9/0x710 [ 459.776699][ T6395] f2fs_submit_merged_write+0x1ea/0x2c0 [ 459.776729][ T6395] f2fs_sync_node_pages+0x1a2c/0x1c90 [ 459.776790][ T6395] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 459.776854][ T6395] ? __pfx_validate_chain+0x10/0x10 [ 459.776875][ T6395] ? __pfx_validate_chain+0x10/0x10 [ 459.776900][ T6395] ? rcu_is_watching+0x15/0xb0 [ 459.776917][ T6395] ? blk_start_plug+0x53/0x1b0 [ 459.776939][ T6395] f2fs_write_node_pages+0x304/0x6d0 [ 459.776962][ T6395] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 459.776995][ T6395] ? reacquire_held_locks+0x3eb/0x690 [ 459.777019][ T6395] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 459.777044][ T6395] do_writepages+0x35f/0x880 [ 459.777082][ T6395] ? __pfx_do_writepages+0x10/0x10 [ 459.777123][ T6395] ? __pfx_lock_acquire+0x10/0x10 [ 459.777147][ T6395] ? writeback_sb_inodes+0x595/0x1360 [ 459.777169][ T6395] ? __pfx_lock_release+0x10/0x10 [ 459.777189][ T6395] ? do_raw_spin_lock+0x14f/0x370 [ 459.777227][ T6395] __writeback_single_inode+0x14f/0x10d0 [ 459.777247][ T6395] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 459.777281][ T6395] writeback_sb_inodes+0x820/0x1360 [ 459.777330][ T6395] ? __pfx_lock_acquire+0x10/0x10 [ 459.777358][ T6395] ? __pfx_lock_release+0x10/0x10 [ 459.777394][ T6395] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 459.777485][ T6395] ? rcu_is_watching+0x15/0xb0 [ 459.777506][ T6395] ? queue_io+0x3d9/0x5a0 [ 459.777541][ T6395] wb_writeback+0x413/0xb80 [ 459.777575][ T6395] ? queue_io+0x361/0x5a0 [ 459.777597][ T6395] ? __pfx_wb_writeback+0x10/0x10 [ 459.777647][ T6395] wb_workfn+0x410/0x1080 [ 459.777705][ T6395] ? __pfx_wb_workfn+0x10/0x10 [ 459.777739][ T6395] ? __pfx_lock_acquire+0x10/0x10 [ 459.777765][ T6395] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 459.777794][ T6395] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 459.777841][ T6395] ? process_scheduled_works+0x9c6/0x18e0 [ 459.777861][ T6395] process_scheduled_works+0xabe/0x18e0 [ 459.777935][ T6395] ? __pfx_process_scheduled_works+0x10/0x10 [ 459.777974][ T6395] ? assign_work+0x364/0x3d0 [ 459.778006][ T6395] worker_thread+0x870/0xd30 [ 459.778055][ T6395] ? __kthread_parkme+0x169/0x1d0 [ 459.778085][ T6395] ? __pfx_worker_thread+0x10/0x10 [ 459.778107][ T6395] kthread+0x7a9/0x920 [ 459.778121][ T6395] ? __pfx_kthread+0x10/0x10 [ 459.778141][ T6395] ? __pfx_worker_thread+0x10/0x10 [ 459.778164][ T6395] ? __pfx_kthread+0x10/0x10 [ 459.778177][ T6395] ? __pfx_kthread+0x10/0x10 [ 459.778201][ T6395] ? __pfx_kthread+0x10/0x10 [ 459.778214][ T6395] ? _raw_spin_unlock_irq+0x23/0x50 [ 459.778235][ T6395] ? lockdep_hardirqs_on+0x99/0x150 [ 459.778252][ T6395] ? __pfx_kthread+0x10/0x10 [ 459.778271][ T6395] ret_from_fork+0x4b/0x80 [ 459.778292][ T6395] ? __pfx_kthread+0x10/0x10 [ 459.778309][ T6395] ret_from_fork_asm+0x1a/0x30 [ 459.778357][ T6395] [ 459.778365][ T6395] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 460.022181][ T52] m920x_read = error: -19 [ 460.152320][ T52] dvb-usb: error -19 while querying for an remote control event. [ 460.316108][ T52] m920x_read = error: -19 [ 460.325494][ T52] dvb-usb: error -19 while querying for an remote control event. [ 460.515689][ T5839] m920x_read = error: -19 [ 460.520492][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 460.666839][ T5853] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 460.695793][ T5839] m920x_read = error: -19 [ 460.695827][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 460.859354][ T5839] m920x_read = error: -19 [ 460.881100][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 461.157111][ T5839] m920x_read = error: -19 [ 461.180938][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 461.424511][ T5839] m920x_read = error: -19 [ 461.429028][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 461.605683][ T5839] m920x_read = error: -19 [ 461.610177][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 461.673902][ T29] audit: type=1326 audit(1739794395.870:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01cdf83da7 code=0x7ffc0000 [ 461.736007][ T29] audit: type=1326 audit(1739794395.870:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01cdf28fb9 code=0x7ffc0000 [ 461.795639][ T5839] m920x_read = error: -19 [ 461.800125][ T29] audit: type=1326 audit(1739794395.870:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cdf8cde9 code=0x7ffc0000 [ 461.800138][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 461.895759][ T29] audit: type=1326 audit(1739794395.870:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01cdf83da7 code=0x7ffc0000 [ 461.910082][T10115] loop3: detected capacity change from 0 to 256 [ 461.955635][ T5839] m920x_read = error: -19 [ 461.960121][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 461.973465][ T29] audit: type=1326 audit(1739794395.870:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01cdf28fb9 code=0x7ffc0000 [ 461.999000][T10118] netlink: 'syz.4.1246': attribute type 39 has an invalid length. [ 462.008268][ T29] audit: type=1326 audit(1739794395.870:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01cdf83da7 code=0x7ffc0000 [ 462.031035][ T29] audit: type=1326 audit(1739794395.870:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01cdf28fb9 code=0x7ffc0000 [ 462.115629][ T29] audit: type=1326 audit(1739794395.870:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01cdf83da7 code=0x7ffc0000 [ 462.215038][ T5839] m920x_read = error: -19 [ 462.220252][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 462.229262][ T29] audit: type=1326 audit(1739794395.870:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01cdf28fb9 code=0x7ffc0000 [ 462.251515][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.265756][ T29] audit: type=1326 audit(1739794395.870:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f01cdf8cde9 code=0x7ffc0000 [ 462.383545][T10119] loop1: detected capacity change from 0 to 2048 [ 462.394405][ T23] m920x_read = error: -19 [ 462.444087][T10122] 9pnet: Unknown protocol version 9p200 [ 462.598826][ T23] dvb-usb: error -19 while querying for an remote control event. [ 462.667660][T10119] udf: Unknown parameter '' [ 462.888367][ T23] m920x_read = error: -19 [ 462.926449][ T23] dvb-usb: error -19 while querying for an remote control event. [ 463.120675][ T23] m920x_read = error: -19 [ 463.125086][ T23] dvb-usb: error -19 while querying for an remote control event. [ 463.214895][T10128] sctp: [Deprecated]: syz.2.1259 (pid 10128) Use of int in max_burst socket option deprecated. [ 463.214895][T10128] Use struct sctp_assoc_value instead [ 463.325626][ T23] m920x_read = error: -19 [ 463.333373][ T23] dvb-usb: error -19 while querying for an remote control event. [ 463.526307][ T23] m920x_read = error: -19 [ 463.541597][ T23] dvb-usb: error -19 while querying for an remote control event. [ 463.780590][ T5853] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 464.146678][T10141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1264'. [ 464.293730][T10141] erspan0: entered promiscuous mode [ 464.419798][ T23] m920x_read = error: -19 [ 464.424211][ T23] dvb-usb: error -19 while querying for an remote control event. [ 464.505599][T10141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1264'. [ 464.561216][T10144] loop3: detected capacity change from 0 to 16 [ 464.585558][ T23] m920x_read = error: -19 [ 464.597682][ T23] dvb-usb: error -19 while querying for an remote control event. [ 464.610172][T10144] erofs (device loop3): mounted with root inode @ nid 36. [ 464.668688][T10144] erofs (device loop3): readahead error at folio 12 @ nid 36 [ 464.698522][T10144] erofs (device loop3): readahead error at folio 10 @ nid 36 [ 464.717858][T10144] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 464.755910][T10144] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 464.773266][T10144] erofs (device loop3): invalid logical cluster 0 at nid 36 [ 464.885713][T10144] erofs (device loop3): readahead error at folio 0 @ nid 36 [ 464.945706][T10144] syz.3.1266: attempt to access beyond end of device [ 464.945706][T10144] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 464.971705][T10124] loop4: detected capacity change from 0 to 40427 [ 465.009223][T10144] syz.3.1266: attempt to access beyond end of device [ 465.009223][T10144] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 465.012111][ T52] m920x_read = error: -19 [ 465.029509][ T52] dvb-usb: error -19 while querying for an remote control event. [ 465.061220][T10124] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 465.081166][T10144] syz.3.1266: attempt to access beyond end of device [ 465.081166][T10144] loop3: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 465.221557][T10152] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 465.295146][T10144] syz.3.1266: attempt to access beyond end of device [ 465.295146][T10144] loop3: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 465.311220][ T52] m920x_read = error: -19 [ 465.346532][T10124] F2FS-fs (loop4): invalid crc value [ 465.454367][ T52] dvb-usb: error -19 while querying for an remote control event. [ 465.676790][T10124] F2FS-fs (loop4): Found nat_bits in checkpoint [ 465.715827][T10144] syz.3.1266: attempt to access beyond end of device [ 465.715827][T10144] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 465.788290][T10144] syz.3.1266: attempt to access beyond end of device [ 465.788290][T10144] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 465.810354][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 465.835861][T10144] syz.3.1266: attempt to access beyond end of device [ 465.835861][T10144] loop3: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 465.850668][ T52] m920x_read = error: -19 [ 465.856674][ T52] dvb-usb: error -19 while querying for an remote control event. [ 465.974387][T10160] loop1: detected capacity change from 0 to 2048 [ 466.022871][T10124] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 466.046111][ T52] m920x_read = error: -19 [ 466.053686][T10160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.062751][ T52] dvb-usb: error -19 while querying for an remote control event. [ 466.075169][T10163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.088207][T10126] loop7: detected capacity change from 0 to 40427 [ 466.118186][T10126] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x1fffff [ 466.137389][T10126] F2FS-fs (loop7): Image doesn't support compression [ 466.144345][T10126] F2FS-fs (loop7): heap/no_heap options were deprecated [ 466.205626][T10126] F2FS-fs (loop7): invalid crc value [ 466.211084][T10126] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-4) [ 466.225859][ T5839] m920x_read = error: -19 [ 466.230366][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 466.381310][T10172] loop3: detected capacity change from 0 to 256 [ 466.409446][T10172] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 466.429924][ T5839] m920x_read = error: -19 [ 466.458178][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 466.645572][ T5839] m920x_read = error: -19 [ 466.650008][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 466.825663][ T5839] m920x_read = error: -19 [ 466.832547][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 467.025581][ T5839] m920x_read = error: -19 [ 467.029991][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 467.055909][ T9518] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 467.215680][ T5839] m920x_read = error: -19 [ 467.223583][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 467.231476][ T9518] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 467.240556][T10193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.285486][ T9518] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 467.306936][ T9518] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 467.338406][ T9518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.381605][T10178] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 467.393633][ T9518] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 467.406074][ T5839] m920x_read = error: -19 [ 467.410460][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 467.635949][ T3079] m920x_read = error: -19 [ 467.644013][ T9518] usb 3-1: USB disconnect, device number 16 [ 467.665871][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 467.723507][T10211] loop7: detected capacity change from 0 to 1024 [ 467.733779][T10211] EXT4-fs: Ignoring removed oldalloc option [ 467.740220][T10211] EXT4-fs: Ignoring removed bh option [ 467.761048][T10210] loop3: detected capacity change from 0 to 2048 [ 467.781843][T10210] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 467.782996][T10211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.839301][ T5839] m920x_read = error: -19 [ 467.846551][T10211] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.1290: Allocating blocks 257-513 which overlap fs metadata [ 467.853935][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 467.914782][ T9688] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.012075][T10217] lo speed is unknown, defaulting to 1000 [ 468.020559][T10217] lo speed is unknown, defaulting to 1000 [ 468.045593][ T5839] m920x_read = error: -19 [ 468.050026][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 468.241818][ T52] m920x_read = error: -19 [ 468.246788][ T52] dvb-usb: error -19 while querying for an remote control event. [ 468.344720][T10217] IPVS: You probably need to specify IP address on multicast interface. [ 468.356939][T10217] IPVS: Error connecting to the multicast addr [ 468.417714][ T52] m920x_read = error: -19 [ 468.422246][ T52] dvb-usb: error -19 while querying for an remote control event. [ 468.535100][T10223] loop2: detected capacity change from 0 to 256 [ 468.595650][ T5839] m920x_read = error: -19 [ 468.603365][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 468.864837][ T5839] m920x_read = error: -19 [ 468.875457][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 468.938933][T10229] 9pnet: Unknown protocol version 9p200 [ 468.946414][T10233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.954630][T10229] siw: device registration error -23 [ 469.046987][ T5839] m920x_read = error: -19 [ 469.051391][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 469.216728][ T52] m920x_read = error: -19 [ 469.221881][ T52] dvb-usb: error -19 while querying for an remote control event. [ 469.295149][T10240] netlink: 'syz.1.1302': attribute type 10 has an invalid length. [ 469.333379][T10240] : (slave bridge0): Enslaving as an active interface with an up link [ 469.409945][ T52] m920x_read = error: -19 [ 469.429310][ T52] dvb-usb: error -19 while querying for an remote control event. [ 469.607027][ T5839] m920x_read = error: -19 [ 469.611423][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 469.620294][T10254] loop3: detected capacity change from 0 to 256 [ 469.755810][ T5853] Bluetooth: hci5: command tx timeout [ 470.093207][T10258] 9pnet: Unknown protocol version 9p200 [ 470.112302][ T5839] m920x_read = error: -19 [ 470.117324][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 470.286717][ T52] m920x_read = error: -19 [ 470.320842][ T52] dvb-usb: error -19 while querying for an remote control event. [ 470.405860][ T5839] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 470.676068][ T52] m920x_read = error: -19 [ 470.680552][ T52] dvb-usb: error -19 while querying for an remote control event. [ 470.748181][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 470.765039][ T5839] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 470.794937][ T5839] usb 5-1: config 0 has no interface number 0 [ 470.803957][ T5839] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 470.815622][ T5839] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 470.827770][ T5839] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 470.839306][ T5839] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 470.854956][ T5839] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 470.856547][T10263] loop1: detected capacity change from 0 to 256 [ 470.865190][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.881418][ T23] m920x_read = error: -19 [ 470.895608][ T23] dvb-usb: error -19 while querying for an remote control event. [ 470.914175][ T5839] usb 5-1: config 0 descriptor?? [ 470.933775][ T5839] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 471.026480][ T5853] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 471.749450][ T5839] m920x_read = error: -19 [ 471.754188][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 472.023425][ T5839] m920x_read = error: -19 [ 472.028666][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 472.155941][T10273] 9pnet: Unknown protocol version 9p200 [ 472.195759][ T5839] m920x_read = error: -19 [ 472.219328][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 472.745883][ T5839] m920x_read = error: -19 [ 472.782774][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 472.831572][ T23] usb 5-1: USB disconnect, device number 13 [ 472.844055][ T23] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 472.853617][T10275] loop2: detected capacity change from 0 to 256 [ 472.893693][T10275] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60a6adf4, utbl_chksum : 0xe619d30d) [ 473.025067][ T5839] m920x_read = error: -19 [ 473.033214][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 473.219484][ T23] m920x_read = error: -19 [ 473.234114][ T23] dvb-usb: error -19 while querying for an remote control event. [ 473.398352][T10285] loop1: detected capacity change from 0 to 256 [ 473.412000][T10287] [ 473.415101][T10287] ============================= [ 473.420382][T10287] WARNING: suspicious RCU usage [ 473.425264][T10287] 6.14.0-rc2-next-20250217-syzkaller #0 Not tainted [ 473.432249][T10287] ----------------------------- [ 473.437639][T10287] fs/kernfs/mount.c:243 suspicious rcu_dereference_check() usage! [ 473.445714][T10287] [ 473.445714][T10287] other info that might help us debug this: [ 473.445714][T10287] [ 473.456218][T10287] [ 473.456218][T10287] rcu_scheduler_active = 2, debug_locks = 1 [ 473.464304][T10287] 3 locks held by syz.4.1320/10287: [ 473.469753][T10287] #0: ffff88802a7f0870 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x9b2/0xf60 [ 473.479734][T10287] #1: ffff88814dafe0e0 (&type->s_umount_key#58){++++}-{4:4}, at: super_lock+0x196/0x400 [ 473.489793][T10287] #2: ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0 [ 473.500127][T10287] [ 473.500127][T10287] stack backtrace: [ 473.506188][T10287] CPU: 1 UID: 0 PID: 10287 Comm: syz.4.1320 Not tainted 6.14.0-rc2-next-20250217-syzkaller #0 [ 473.506213][T10287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 473.506224][T10287] Call Trace: [ 473.506233][T10287] [ 473.506241][T10287] dump_stack_lvl+0x241/0x360 [ 473.506273][T10287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.506294][T10287] ? __pfx__printk+0x10/0x10 [ 473.506309][T10287] ? do_raw_spin_lock+0x14f/0x370 [ 473.506360][T10287] lockdep_rcu_suspicious+0x226/0x340 [ 473.506384][T10287] kernfs_node_dentry+0x24b/0x2d0 [ 473.506415][T10287] cgroup_do_get_tree+0x248/0x390 [ 473.506447][T10287] cgroup_get_tree+0xbb/0x230 [ 473.506473][T10287] vfs_get_tree+0x90/0x2b0 [ 473.506501][T10287] vfs_cmd_create+0xa0/0x1f0 [ 473.506520][T10287] ? __se_sys_fsconfig+0xa29/0xf60 [ 473.506545][T10287] __se_sys_fsconfig+0xa33/0xf60 [ 473.506583][T10287] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 473.506600][T10287] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 473.506631][T10287] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 473.506659][T10287] ? do_syscall_64+0x100/0x230 [ 473.506686][T10287] ? __x64_sys_fsconfig+0x20/0xc0 [ 473.506710][T10287] do_syscall_64+0xf3/0x230 [ 473.506731][T10287] ? clear_bhb_loop+0x45/0xa0 [ 473.506759][T10287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.506780][T10287] RIP: 0033:0x7f32d3b8cde9 [ 473.506798][T10287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.506812][T10287] RSP: 002b:00007f32d4924038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 473.506830][T10287] RAX: ffffffffffffffda RBX: 00007f32d3da5fa0 RCX: 00007f32d3b8cde9 [ 473.506843][T10287] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 473.506853][T10287] RBP: 00007f32d3c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 473.506865][T10287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.506875][T10287] R13: 0000000000000000 R14: 00007f32d3da5fa0 R15: 00007ffd65273368 [ 473.506917][T10287] [ 473.717870][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.726347][ T23] m920x_read = error: -19 [ 473.730731][ T23] dvb-usb: error -19 while querying for an remote control event. [ 473.739181][T10287] [ 473.741526][T10287] ====================================================== [ 473.748534][T10287] WARNING: possible circular locking dependency detected [ 473.755627][T10287] 6.14.0-rc2-next-20250217-syzkaller #0 Not tainted [ 473.762197][T10287] ------------------------------------------------------ [ 473.769201][T10287] syz.4.1320/10287 is trying to acquire lock: [ 473.775259][T10287] ffff88807ad58650 (&type->i_mutex_dir_key#6){++++}-{4:4}, at: lookup_one_unlocked+0x159/0x2d0 [ 473.785621][T10287] [ 473.785621][T10287] but task is already holding lock: [ 473.792987][T10287] ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0 [ 473.802729][T10287] [ 473.802729][T10287] which lock already depends on the new lock. [ 473.802729][T10287] [ 473.813125][T10287] [ 473.813125][T10287] the existing dependency chain (in reverse order) is: [ 473.822154][T10287] [ 473.822154][T10287] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 473.830144][T10287] lock_acquire+0x1ed/0x550 [ 473.835169][T10287] down_read+0xb1/0xa40 [ 473.839842][T10287] kernfs_iop_lookup+0x60/0x320 [ 473.845206][T10287] path_openat+0x11cc/0x35b0 [ 473.850338][T10287] do_filp_open+0x282/0x4e0 [ 473.855352][T10287] do_sys_openat2+0x13f/0x1c0 [ 473.860541][T10287] __x64_sys_openat+0x247/0x2a0 [ 473.865904][T10287] do_syscall_64+0xf3/0x230 [ 473.870936][T10287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.877342][T10287] [ 473.877342][T10287] -> #0 (&type->i_mutex_dir_key#6){++++}-{4:4}: [ 473.885769][T10287] validate_chain+0x18ef/0x5920 [ 473.891134][T10287] __lock_acquire+0x1397/0x2100 [ 473.896497][T10287] lock_acquire+0x1ed/0x550 [ 473.901512][T10287] down_read+0xb1/0xa40 [ 473.906179][T10287] lookup_one_unlocked+0x159/0x2d0 [ 473.911799][T10287] lookup_positive_unlocked+0x2b/0xb0 [ 473.917709][T10287] kernfs_node_dentry+0x139/0x2d0 [ 473.923249][T10287] cgroup_do_get_tree+0x248/0x390 [ 473.928782][T10287] cgroup_get_tree+0xbb/0x230 [ 473.933973][T10287] vfs_get_tree+0x90/0x2b0 [ 473.938912][T10287] vfs_cmd_create+0xa0/0x1f0 [ 473.944032][T10287] __se_sys_fsconfig+0xa33/0xf60 [ 473.949494][T10287] do_syscall_64+0xf3/0x230 [ 473.954511][T10287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.960925][T10287] [ 473.960925][T10287] other info that might help us debug this: [ 473.960925][T10287] [ 473.971149][T10287] Possible unsafe locking scenario: [ 473.971149][T10287] [ 473.978586][T10287] CPU0 CPU1 [ 473.983933][T10287] ---- ---- [ 473.989283][T10287] rlock(&root->kernfs_rwsem); [ 473.994128][T10287] lock(&type->i_mutex_dir_key#6); [ 474.001845][T10287] lock(&root->kernfs_rwsem); [ 474.009126][T10287] rlock(&type->i_mutex_dir_key#6); [ 474.014422][T10287] [ 474.014422][T10287] *** DEADLOCK *** [ 474.014422][T10287] [ 474.022553][T10287] 3 locks held by syz.4.1320/10287: [ 474.027736][T10287] #0: ffff88802a7f0870 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x9b2/0xf60 [ 474.037578][T10287] #1: ffff88814dafe0e0 (&type->s_umount_key#58){++++}-{4:4}, at: super_lock+0x196/0x400 [ 474.047421][T10287] #2: ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0 [ 474.057596][T10287] [ 474.057596][T10287] stack backtrace: [ 474.063470][T10287] CPU: 1 UID: 0 PID: 10287 Comm: syz.4.1320 Not tainted 6.14.0-rc2-next-20250217-syzkaller #0 [ 474.063487][T10287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 474.063496][T10287] Call Trace: [ 474.063503][T10287] [ 474.063509][T10287] dump_stack_lvl+0x241/0x360 [ 474.063527][T10287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.063541][T10287] ? __pfx__printk+0x10/0x10 [ 474.063557][T10287] print_circular_bug+0x13a/0x1b0 [ 474.063575][T10287] check_noncircular+0x36a/0x4a0 [ 474.063590][T10287] ? __pfx_check_noncircular+0x10/0x10 [ 474.063605][T10287] ? lockdep_lock+0x123/0x2b0 [ 474.063624][T10287] ? __pfx_check_noncircular+0x10/0x10 [ 474.063641][T10287] validate_chain+0x18ef/0x5920 [ 474.063664][T10287] ? __pfx_validate_chain+0x10/0x10 [ 474.063682][T10287] ? __pfx_validate_chain+0x10/0x10 [ 474.063695][T10287] ? __pfx_validate_chain+0x10/0x10 [ 474.063708][T10287] ? __lock_acquire+0x1397/0x2100 [ 474.063733][T10287] ? mark_lock+0x9a/0x360 [ 474.063747][T10287] __lock_acquire+0x1397/0x2100 [ 474.063771][T10287] lock_acquire+0x1ed/0x550 [ 474.063788][T10287] ? lookup_one_unlocked+0x159/0x2d0 [ 474.063805][T10287] ? __pfx_lock_acquire+0x10/0x10 [ 474.063823][T10287] ? __pfx___might_resched+0x10/0x10 [ 474.063842][T10287] ? __pfx_lock_acquire+0x10/0x10 [ 474.063859][T10287] ? __d_lookup+0x64/0x7b0 [ 474.063872][T10287] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 474.063891][T10287] down_read+0xb1/0xa40 [ 474.063906][T10287] ? lookup_one_unlocked+0x159/0x2d0 [ 474.063922][T10287] ? __pfx_down_read+0x10/0x10 [ 474.063935][T10287] ? __d_lookup+0x64/0x7b0 [ 474.063949][T10287] ? __d_lookup+0x706/0x7b0 [ 474.063968][T10287] lookup_one_unlocked+0x159/0x2d0 [ 474.063983][T10287] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 474.063996][T10287] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 474.064013][T10287] ? nbcon_cpu_emergency_exit+0x6e/0xd0 [ 474.064025][T10287] ? nbcon_cpu_emergency_exit+0x77/0xd0 [ 474.064040][T10287] lookup_positive_unlocked+0x2b/0xb0 [ 474.064054][T10287] kernfs_node_dentry+0x139/0x2d0 [ 474.064071][T10287] cgroup_do_get_tree+0x248/0x390 [ 474.064088][T10287] cgroup_get_tree+0xbb/0x230 [ 474.064110][T10287] vfs_get_tree+0x90/0x2b0 [ 474.064127][T10287] vfs_cmd_create+0xa0/0x1f0 [ 474.064140][T10287] ? __se_sys_fsconfig+0xa29/0xf60 [ 474.064155][T10287] __se_sys_fsconfig+0xa33/0xf60 [ 474.064172][T10287] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 474.064186][T10287] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 474.064204][T10287] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 474.064222][T10287] ? do_syscall_64+0x100/0x230 [ 474.064238][T10287] ? __x64_sys_fsconfig+0x20/0xc0 [ 474.064252][T10287] do_syscall_64+0xf3/0x230 [ 474.064265][T10287] ? clear_bhb_loop+0x45/0xa0 [ 474.064283][T10287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.064300][T10287] RIP: 0033:0x7f32d3b8cde9 [ 474.064312][T10287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.064324][T10287] RSP: 002b:00007f32d4924038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 474.064338][T10287] RAX: ffffffffffffffda RBX: 00007f32d3da5fa0 RCX: 00007f32d3b8cde9 [ 474.064349][T10287] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 474.064357][T10287] RBP: 00007f32d3c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 474.064365][T10287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.064373][T10287] R13: 0000000000000000 R14: 00007f32d3da5fa0 R15: 00007ffd65273368 [ 474.064388][T10287] [ 474.407738][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.422531][ T5839] m920x_read = error: -19 [ 474.426992][ T5839] dvb-usb: error -19 while querying for an remote control event. [ 474.512176][T10269] loop3: detected capacity change from 0 to 32768 [ 474.537838][T10269] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 474.562426][T10285] 9pnet: Unknown protocol version 9p200 [ 474.585556][ T23] m920x_read = error: -19 [ 474.589932][ T23] dvb-usb: error -19 while querying for an remote control event. [ 474.603608][T10269] XFS (loop3): Ending clean mount [ 474.610418][T10269] XFS (loop3): Quotacheck needed: Please wait. [ 474.622914][T10269] XFS (loop3): Quotacheck: Done. [ 474.655152][ T5844] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 474.756235][ T23] m920x_read = error: -19 [ 474.760608][ T23] dvb-usb: error -19 while querying for an remote control event. [ 474.936239][ T23] m920x_read = error: -19 [ 474.940638][ T23] dvb-usb: error -19 while querying for an remote control event. [ 475.106734][ T23] m920x_read = error: -19 [ 475.111118][ T23] dvb-usb: error -19 while querying for an remote control event. [ 475.285837][ T23] m920x_read = error: -19 [ 475.290243][ T23] dvb-usb: error -19 while querying for an remote control event. [ 475.456110][ T23] m920x_read = error: -19 [ 475.460515][ T23] dvb-usb: error -19 while querying for an remote control event. [ 475.625912][ T23] m920x_read = error: -19 [ 475.632184][ T23] dvb-usb: error -19 while querying for an remote control event. [ 475.796166][ T23] m920x_read = error: -19 [ 475.800587][ T23] dvb-usb: error -19 while querying for an remote control event. [ 475.965837][ T23] m920x_read = error: -19 [ 475.970212][ T23] dvb-usb: error -19 while querying for an remote control event. [ 476.137122][ T23] m920x_read = error: -19 [ 476.141488][ T23] dvb-usb: error -19 while querying for an remote control event. [ 476.307064][ T23] m920x_read = error: -19 [ 476.311449][ T23] dvb-usb: error -19 while querying for an remote control event. [ 476.475813][ T23] m920x_read = error: -19 [ 476.480200][ T23] dvb-usb: error -19 while querying for an remote control event. [ 476.646173][ T23] m920x_read = error: -19 [ 476.650557][ T23] dvb-usb: error -19 while querying for an remote control event. [ 476.815563][ T23] m920x_read = error: -19 [ 476.819928][ T23] dvb-usb: error -19 while querying for an remote control event. [ 476.985628][ T23] m920x_read = error: -19 [ 476.990018][ T23] dvb-usb: error -19 while querying for an remote control event. [ 477.156064][ T23] m920x_read = error: -19 [ 477.160426][ T23] dvb-usb: error -19 while querying for an remote control event. [ 477.325827][ T23] m920x_read = error: -19 [ 477.330235][ T23] dvb-usb: error -19 while querying for an remote control event. [ 477.496502][ T23] m920x_read = error: -19 [ 477.500884][ T23] dvb-usb: error -19 while querying for an remote control event. [ 477.666448][ T23] m920x_read = error: -19 [ 477.670844][ T23] dvb-usb: error -19 while querying for an remote control event. [ 477.836149][ T3079] m920x_read = error: -19 [ 477.840523][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 478.005670][ T3079] m920x_read = error: -19 [ 478.010054][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 478.175496][ T3079] m920x_read = error: -19 [ 478.179876][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 478.346319][ T3079] m920x_read = error: -19 [ 478.350678][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 478.516090][ T3079] m920x_read = error: -19 [ 478.520485][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 478.686185][ T3079] m920x_read = error: -19 [ 478.690553][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 478.855511][ T3079] m920x_read = error: -19 [ 478.859916][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 479.026371][ T3079] m920x_read = error: -19 [ 479.030775][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 479.195845][ T3079] m920x_read = error: -19 [ 479.200339][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 479.366641][ T3079] m920x_read = error: -19 [ 479.371001][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 479.536167][ T3079] m920x_read = error: -19 [ 479.540552][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 479.706196][ T3079] m920x_read = error: -19 [ 479.710554][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 479.876151][ T3079] m920x_read = error: -19 [ 479.880566][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 480.045666][ T3079] m920x_read = error: -19 [ 480.050055][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 480.215963][ T3079] m920x_read = error: -19 [ 480.220322][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 480.386793][ T3079] m920x_read = error: -19 [ 480.391183][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 480.555546][ T3079] m920x_read = error: -19 [ 480.560625][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 480.727369][ T23] m920x_read = error: -19 [ 480.731814][ T23] dvb-usb: error -19 while querying for an remote control event. [ 480.896209][ T23] m920x_read = error: -19 [ 480.900581][ T23] dvb-usb: error -19 while querying for an remote control event. [ 481.067187][ T23] m920x_read = error: -19 [ 481.071551][ T23] dvb-usb: error -19 while querying for an remote control event. [ 481.235535][ T23] m920x_read = error: -19 [ 481.239967][ T23] dvb-usb: error -19 while querying for an remote control event. [ 481.406321][ T23] m920x_read = error: -19 [ 481.410729][ T23] dvb-usb: error -19 while querying for an remote control event. [ 481.585737][ T23] m920x_read = error: -19 [ 481.590120][ T23] dvb-usb: error -19 while querying for an remote control event. [ 481.756160][ T3079] m920x_read = error: -19 [ 481.760716][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 481.925885][ T3079] m920x_read = error: -19 [ 481.930295][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 482.096611][ T3079] m920x_read = error: -19 [ 482.100997][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 482.265782][ T3079] m920x_read = error: -19 [ 482.270160][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 482.435758][ T3079] m920x_read = error: -19 [ 482.440122][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 482.606037][ T3079] m920x_read = error: -19 [ 482.610409][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 482.775512][ T3079] m920x_read = error: -19 [ 482.779928][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 482.946210][ T3079] m920x_read = error: -19 [ 482.950770][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 483.116998][ T3079] m920x_read = error: -19 [ 483.121359][ T3079] dvb-usb: error -19 while querying for an remote control event. [ 483.285744][ T3079] m920x_read = error: -19 [ 483.290236][ T3079] dvb-usb: error -19 while querying for an remote control event.