last executing test programs: 1m37.478124851s ago: executing program 0 (id=310): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800) 1m37.153609728s ago: executing program 0 (id=313): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) 1m33.458418302s ago: executing program 0 (id=324): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x1, 0x65d1, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, 0x0, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800) 1m33.274127437s ago: executing program 0 (id=325): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m32.015532057s ago: executing program 0 (id=331): io_setup(0x6, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$peek(0x2, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000000b00)={0x2020}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000000201010800000000000000000a0000060c00198008000100400200897982ffb77040"], 0x20}, 0x1, 0x0, 0x0, 0x4000054}, 0x40000) io_submit(0x0, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x7, r4, &(0x7f0000000340)="f91ffada12388e99b6ba8b09e3282ce147764d0cc1c1dff89ce261d5a85c294cd8d562ab860600dbbd4581d29b1db6987be2113b694125e45ee10eaadff107c838a59e70c669c284d32e20f3692483d1e3a1981b26241f0eedaf18e01cf89518fc1f41e6b9a387961869165da5c2d18b2370793b328733ad86", 0x79, 0x7}]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x118) socket$kcm(0x2, 0xa, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r7}, 0x18) 1m31.049328734s ago: executing program 0 (id=334): vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480b6f4276433eec67beef368c238bba859d2f4f4c28ab94a65821f55045e540914677befa72c15071d", 0x353}], 0x1, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m30.570973582s ago: executing program 32 (id=334): vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x353}], 0x1, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m22.665624062s ago: executing program 2 (id=357): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m19.435483559s ago: executing program 2 (id=363): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@bridge_newneigh={0x4c, 0x1c, 0x800, 0x70bd25, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb}, [@NDA_SRC_VNI={0x8, 0xb, 0xb}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}, @NDA_PROBES={0x8, 0x4, 0x8}, @NDA_FDB_EXT_ATTRS={0x18, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) pwrite64(r6, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x3, 0x10100, 0x400000, 0x0, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000000)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0}]}, 0x3}, 0x1) socket(0x10, 0x3, 0x0) syz_io_uring_submit(r8, r9, 0x0) close(r5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000", @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) 1m18.445593438s ago: executing program 2 (id=365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000140)=0x401, 0x4) 1m18.315547209s ago: executing program 2 (id=366): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="e9", 0x1}], 0x1, 0x7fff, 0x0, 0x0) 1m17.91086692s ago: executing program 2 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x1051, &(0x7f0000001080)="$eJzsz80JwkAQBeBnfog5WIEteLaT9BM78WwFVmUJWVmNaAMiwvcdhrfDDMuEnzqkS4Z0+2b30T21tY7rq6kzWR75mqSvoQyv4bn0780uaZ9pu3ZuxymbulBLzmMyZyml1G+ny5fPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/cA8AAP//gmMN8Q==") ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x3ff, 0x3, 0x7ff, 0x400a, 0xfffffffffffffffc, 0x9, 0x466}, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x8, 0xc, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m16.925372069s ago: executing program 2 (id=368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x4}}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) 1m16.477441025s ago: executing program 33 (id=368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x4}}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) 13.18373453s ago: executing program 5 (id=550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) syz_open_dev$dri(0x0, 0x7, 0x58d083) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x80, 0x0, 0x68}, 0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)}, 0x0, 0x40000103, 0x0, {0x2}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x601c2, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, 0x0) r6 = openat$comedi(0xffffff9c, 0x0, 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'pcl818\x00', [0x3c4, 0x10, 0x2, 0xa, 0x7fc, 0xb, 0xfffffffb, 0x1, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x3238, 0x120000, 0xffffffa7, 0x9, 0x1000034d, 0x1, 0x3ff, 0x9, 0x2, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x3]}) 12.18373699s ago: executing program 5 (id=552): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = socket$pptp(0x18, 0x1, 0x2) getpeername(r3, 0x0, &(0x7f00000000c0)) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200000000000000) syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa6c, &(0x7f0000000900)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) 11.312905989s ago: executing program 3 (id=555): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x1, 0x65d1, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, 0x0, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800) 11.005103264s ago: executing program 3 (id=557): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) 10.102448166s ago: executing program 1 (id=559): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e00504003f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304897c9b707970f", 0x53}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d10", 0x25}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40) 9.635581463s ago: executing program 1 (id=561): r0 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) finit_module(r0, 0x0, 0x3) socket(0x10, 0x803, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 8.722170455s ago: executing program 3 (id=563): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r0, &(0x7f00000001c0)=""/190, 0xbe, 0x0, 0x0, 0x0) 7.679226709s ago: executing program 3 (id=566): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x44, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x0, 0x3}, {0xa, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xc}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0xc0) r0 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) finit_module(r0, 0x0, 0x3) socket(0x10, 0x803, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 7.552078809s ago: executing program 4 (id=568): r0 = io_uring_setup(0x3717, &(0x7f0000000680)={0x0, 0x1673, 0x80, 0x3, 0x318}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7.270876921s ago: executing program 6 (id=569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) 6.893544831s ago: executing program 5 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008001600c053000018000180140002006e657464657673696d3000000000000008001700365e0000"], 0x44}}, 0x0) 6.893178091s ago: executing program 6 (id=571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x1051, &(0x7f0000001080)="$eJzsz80JwkAQBeBnfog5WIEteLaT9BM78WwFVmUJWVmNaAMiwvcdhrfDDMuEnzqkS4Z0+2b30T21tY7rq6kzWR75mqSvoQyv4bn0780uaZ9pu3ZuxymbulBLzmMyZyml1G+ny5fPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/cA8AAP//gmMN8Q==") ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x3ff, 0x3, 0x7ff, 0x400a, 0xfffffffffffffffc, 0x9, 0x466}, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x8, 0xc, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.499475772s ago: executing program 5 (id=572): timer_create(0x0, &(0x7f0000000040)={0x0, 0x20, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x3c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x0, 0x3}, {0xa, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xc}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x7, 0x26}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0xc0) r0 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) finit_module(r0, 0x0, 0x3) socket(0x10, 0x803, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 5.472096554s ago: executing program 1 (id=573): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) 5.187625137s ago: executing program 4 (id=574): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x400, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x8, "afacd2119ca94c6b377526aeb5ab2a81fc0e3d99f20900"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x1a0, 0x4c, 0x1a, 0x1a0, 0x73, 0x300, 0x258, 0x258, 0x300, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0x0, 0x0, 0xff], [0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xb, 0xc, 0xc07, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "fc84"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8000, 0x7, 0x18d, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) getrusage(0x0, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa28dd19e59cd50f4, 0x110, 0xffffffffffffffff, 0xffffe000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) socket$netlink(0x10, 0x3, 0x14) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r4, 0x101, 0x10}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="100a05002312010014001280090001007665746800000000040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000040), &(0x7f00000000c0)=@v1={0x1000000, [{0x10000, 0x3f3}]}, 0xc, 0x1) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 5.005837432s ago: executing program 6 (id=575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) syz_open_dev$dri(0x0, 0x7, 0x58d083) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x80, 0x0, 0x68}, 0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)}, 0x0, 0x40000103, 0x0, {0x2}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x601c2, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, 0x0) r6 = openat$comedi(0xffffff9c, 0x0, 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'pcl818\x00', [0x3c4, 0x10, 0x2, 0xa, 0x7fc, 0xb, 0xfffffffb, 0x1, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x3238, 0x120000, 0xffffffa7, 0x9, 0x1000034d, 0x1, 0x3ff, 0x9, 0x2, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x3]}) 4.454695826s ago: executing program 1 (id=576): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e00504003f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304897c9b707970f", 0x53}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d10", 0x25}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40) 3.848448254s ago: executing program 5 (id=577): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$eJzs3U1vHVf9B/DfffC147RpVP1V5R+xcFMeWkrznEB5asqCBSxAQl2TyHWrlBRQEhCtIuLKC8QGeAmw6YZFJV4BL6CvASGxJVLSVReUQWOf44xvrn3tJp659vl8pJuZ35w7vmfyveOZ65m5EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PznXi4irv04Tjkc8FYOIfsSRul6KeuRKfv4wIk7EenM8FxGD+Yh6/vV/nom4GBEfH4u4/+DOcj35/C77cens7Zuf/fB7//jdH9dOvPPmTz8cb//x/1346Pd3I47/6NWPPrv7ZJYdAAAASlFVVdVLH/NPps/3/a47BQC0Im//qyRPV6vVavUTrf/Q38vznzradX/Vh7Ruqia72ywiYrU5T73P4HA8ABwwq/Fp112gQ/Iv2jAijnbdCWCm9bruAPvi/oM7y72Ub6+5PVjaaM9/p9yS/2pv8/qO7YbTjJ9j0tb7ay0G8ew2/TnSUh9mSc6/P57/1Y32UXrefufflu3yH21c+lScnP9gPP8xW/L/U0Qc2Pz7E/MvVc5/uJf8VwcHeP2XPwAAAAAAh1/++//xjo//zj/+ouzKTsd/l1rqAwAAAAAAAAA8aY97/79N7v8HAAAAM6v+rF7787GH07b7LrZ6+hu9iKfHng8UZqnx5YAAAAAAAAAAAAAAQDuGEYvpvP65iHh6cbGqqvrRNF7v1ePOf9CVvvxQsq5/yQMAwIaPj41dy9+LWIiIN9J3/c0tLi5W1VxELFZH5vP+7Gh+oTrS+Fybh/W0+dEudoiHo6r+YQuN+ZqmfV6e1j7+8+rXGlWDXXSsHR0GDgARsbE1um+LdMhU1TPR9V4OB4P1//Cx/rMbXb9PAQAAgP1XVVXVS1/nfTId8+933SkAoBV5+z9+XECtVquLqT/ZmDgz/VGr97Fuqia72ywiYrU5T73P4Hb8AHDArManXXeBDsm/aMOIONF1J4CZ1uu6A+yL+w/uLPdSvr3m9mBpoz2fC7Il/9Xe+nx5/knDacbPMWnr/bUWg3h2m/4811IfZknOvz+e/9WN9nyL/818FvYn/7Zsl3+9nMc76E/Xcv6D8fzH7Pf635a16E/Mv1Q5/+Ge8h/IHwAAAAAAZlj++/9xx3/zIgMAAAAAAADAgXP/wZ3lfN1rPv7/hQnP6zXHXP95aOT8e7vO3/W/h0nOvz+e/9gJOYPG+L3XH+b/yYM7yx/e/vf/5+HM5z83GNWvPdfrD4bpnJ9q7q24HjdiJc4+8vzhlvZzj7TPbWk/P6X9wiPto7r9SG4/Hcvxi7gRb262z085MWphSns1pT3nP7D+FynnP2w86vwXU3tvbFi790H/kfW+OZz0Olf++p8vP7p2tWG4pVqLweayNRyr/znVWp8eWv8/OTqKX91auXn6N9du3755LtJgy9TzkQZPWM5/Lj1y/i++sNGef+8319d7H4z2nP+sWIvhpPzX398vNMbr5X2p5b51Iec/So+cf94CTV7/D3L+E9f/9eV7uYP+AAAAAAAAAAAAAAAAwE6qqlq/RPRKRFxO1/90dW0mANCuvP2vkjxdre6g/tffZqs/arVavbXuzVh/PkfdVE32WrOIiL8356n3GX476YcBALPsvxHxz647QWfkX7D8fX/18ItddwZo1a333v/ZtRs3Vm7e6ronAAAAAAAAAMDnle//udS4//P6eUBj943ecv/X12PpwN7/sz8arN/rPC3Q87Hz/b9Pxc73/x5Oeb25Ke2jKe3zU9oXprRPvNCjIef/fMo4538yLVhJ9399sYP+dC3nfyrd6znn/5Wx5zXzr/5ykPPvb8n/zO13f3nm1nvvv3L93Wtvr7y98vNzZy9fvHDp4oVLl868df3GytmNfzvs8f7K+ed7XzsPtCw5/5y5/MuS8/9SquVflpT/5m6o/MuS1/+8vyf/suT882cf+Zcl5/9SquVflpz/V1Mt/7Lk/F9OtfzLkvP/WqrlX5ac/yupln9Zcv6nUy3/suT8z6Ra/mXJ+ecjXPIvS84/n9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl538p1fIvS87/cqrlX5ac/9dTLf+y5Py/kWr5lyXn/2qq5V+WnP83Uy3/suT8v5Vq+Zcl5//tVO+U/zst9ot25Py/k2rrf1ly/t9NtfzLkvN/LdXyL8vD7/83sueRxdnoRpsjVRUxA90wsu8jXf9mAgAAAAAAAAAAAADGtXE6cdfLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/izV6+TQPwnIYQQiO1cMGST3fUtMcFgrv809JIGQksLdYy9dgy+1buGBKFmaWgLAqmR2hf0RSkgQEhtlahCKpUoilSk9k1VXhVFlVArIdWVoDIRVKICtjpznufZmdnZmV3vrj1zzueD4p+9M2fmmTNnZve76DsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABotuNts380FEIo/mv8sS2E64q/bw2Hin8u7L/aKwQAAADW6+eNP//q+vyFQ6vYqOk6//iaf/n64uLiYvjgixd/8SeLi/mC7SGMbAmhcVnyTz/9yWLzdaKnw8TQcNO/h3vc/UiPy0d7XD7W4/LxHpdv6XH5RI/Ll+2AZbaWv49p3Ngdjb9uK3dpuDGMNS67o8NWTw9tGR5Ov8tpGGpsszh2PJwMp8JsmF62zVDjfyF8c0dxXw+GdF/DTfd1awjh0o8+fjStYSju4ztCy501ND93P3xL2P7ijz5+9KvzP3hlp9lzNyxbaQi7dhbr/GQIS7+uCkNhS94naZ3DTeu8tcM6R1rWOdTYrvh7+zovrXKd6XFPxHV+p8s6b41fe+L2EMJCWPE67Z4Ow+GatnvN+3uiPCKK2yieypeF0TUdJztWcZwU23z/9tbjpP2YTPt/R9wnoyusofnp+OEnxpft98s9TopH3Q/HanHbDxd3OjHR/KvVlmO1uM7H71z5GOj43HU4BvKx3HQM7Ox1DAyPjzSOgeGlNe9sOQZmlm0zHIYa93Xxzu7HwNT86XNTc09+7J6Tp4+cmD0xe2Zmev/ePfv27tm3b+r4yVOz0+Wfa9ulA+SaMJyPwZ3xvSYdg69tu27zIbn4xY17HUz0yeugeOzvuatY0HXDYYVjvLjOJ3et/3WQv+83vQ5Gm14HHd9TO7wORlfxOiiuc2nX6r5njjb912kNm/VeuK3pGLia3w+L+3z/61Z+L7w1rutTr1/r98ORZcdAelhD8bVXfCX/vDdxf9wvy4+LW4oLrh0PF+Zmz9/7xJH5+fMzIY4r4oam56r9eLmm6TGFZcfL8JqPl0N/+bO7bunw9W1xX03cvfRcjXd4Horr7J3s/lw13t0778+Wr+4OcWywK70/O303K/ZnzhJdjv3iOp+8Z/0/C+Zc0vT+N9br/W9kbLR8/xvJe2Os5f1v+VMz0lhZCJfuWd3731j870q//93YJ+9/xb56/73dj4HiOp+aWusxMNr1/e/2OIfiel4XE8NEU+7/RePyhfIwbXouex43o6Nj8bgZTffYetzsWbZNcWvFfe+avrzjZtftrc9Vy88tFTxuin31p9Pdj5viOs/PrP+9Y2v6a9N7x3ivY2BsZLxY71g+CMr3u8Wt6Ri4NxwNZ8OpcCxvUzzLxX1N7l7dMTAe/7vS7x0398kxUOyrz+3ufgwU1/n2no392WlX/Eq+TtPPTu2/X1gp898yunR77bttozN/sc637+3+u6HiOj/Yu9ac0X0/3R2/cm2H/dT++lnpmD4Wrsx+ujmu89S+7r+bKq5z4/5VHk+HQggvzLzQ+H1X/P3u31z416+3/N630++UX5h54aGpR767lvUDAHD5ftH4c2G8/Fmz6f+xXs3//w8AAAAMhJT7h+PM5H8AAACojJT7R+LM5H8AAACojJT7R+PMapL/H7//wLM/fyrkTwNcjNLlaTc8/KbyeqnjvRD/vX1xSfH1t3557NlPP7W6+x4OIfzsoVd1vP7jb0rrKp1L63xD69eXufm2Vd3/Y48uXa/58xMuHShvPz2e1R4Gqav8zandjdvd/uRMYz7/UGjMRxY+9XR5++W/0/Uv7imv/+fxQ0sOHR9q2X5XXM8dcW6Pnynz8KGl/VDMtN2zt77mH25479L9pe2Gdr608TA/93vl7abPiHrmhvL66XGvtP6//8zXni2u/8Sdndf/1HDn9V+Mt/v9OH96sLx+8z7/dNP6/yCuP91f2u7eL32r4/qfe0V5/eficfGFONvX/5Y/fvXPOz1f6X4OPVBul+5/+n/2NrZLt5duv339E0/NtOyP9tt//sXydg5+5McjzddPX0/3kzz2QOvxPRSf35YeeQjha38YWvZzeGO53d+1rT/d3rkHOq//7rZ1nhu6rbH90uPZ1vK4Pv+V3R0fb1rPob/e1vJ4nnlH3H8vTn27uN2Lj8TjMV7+v98pb6/9s0yfe0fr+026/he2la/bdHtTbet/pm39C7cV+673+h98sVz/c2/e0rL+Q++Mx9OD5ey1/hN/cX3L9l/8avl8nP/o5JmzcxdOHosPZlvb63jLxNZrrr3uJS+9Pr6Xtv/78Nn5x2fPb5/ePh3C9gH8yMDNXv+X4vzvcixs/D2Uvvvj8rj77LvK71uv/Un572fi1x+Lz2f6/vj5PxtrOV7bn/eFN5dzvet/fVzHar3iM/9xW4cv/+eyz/y9+IFvXvjb3/9B+88F6fGce/lE4/F9bsdNjcuGni8vb3+/6uXfX976uv7e6HRjfiPu18X4ycw7byrvr/3202eTfPbd5es3/SSXtg9tnyeybaT1cax3/d+LP8d86+bW9790fHzjqbZPc94WhoolLMT3h7BQXp6ulfb3Zy/d1PH+0ufwhIVXrmWZK5p7cm7q1MkzF56Ymp+dm5+ae/Jjh0+fvXBm/nDjs0sPf6jX9kuv72sar+9js/v3hsar/Ww5NtnVXv+5R48eu2/6rmOzx49cOD7/6LnZ8yeOzs0dnT02d9eR48dnP9pr+5PHDs7sPrDnvt2TJ04eO3j/gQN7DkyePHO2WEa5qB72T3948sz5w41N5g7uPTCzb9/e6cnTZ4/NHrxvenryQq/tG9+bJoutPzJ5fvbUkfmTp2cn505+bPbgzIH9+3f3/PTH0+eOz22fOn/hzNSFudnzU+Vj2T7f+HLxva/X9tTD3Nn4ftdmKP50/r679+fPxy18+RMr3lR5ldYfT8MP42dBpe9vvf6dcv9YnFlN8j8AAADUQcr98YP/ly6Q/wEAAKAyUu7fEmcm/wMAAEBlpNw/EWdWk/yv/6//r/+v/6//fwX7/0H/f6Pp/29I/385/f9V0f/X/9f/1/+nu37r/6fcvzWEWuZ/AAAAqIOU+6+JM5P/AQAAoDJS7r82zkz+BwAAgMpIuf+6OLN65P+x9r/q/+v/6/839//TdfX/g/6//v9l0v/X/+9G/1//f5DX34f9/636//Sbfuv/p9z/kjizeuR/AAAAqIWU+18aZyb/AwAAQGWk3H99nJn8DwAAAJWRcv+2OLOa5P8NPP//Z+JF+v/6/4Pe/z+djmPn/9f/1/9fP/1//f9u9P/1/wd5/X3Y/3f+f/pOv/X/U+7/f3FmNcn/AAAAUAcp978szkz+BwAAgMpIuf+GODP5HwAAACoj5f4b48xqkv83sP/v/P/6/1Xp/zed/1//v5n+v/7/5dD/1//vRv9f/3/j1z8Uf0zQ/++1vf4/V0K/9f9T7n95nFlN8j8AAADUQcr9N8WZyf8AAABQGSn3vyLOTP4HAACAyki5/+Y4s5rkf/1//X/9f/1//X/9/82k/6//343+v/7/IK9f/1//n976rf+fcv8r48xqkv8BAACgDlLuvyXOTP4HAACAyki5/1VxZvI/AAAAVEbK/bfGmdUk/+v/91X//8mg/7+8/z+s/6//X1pr/79hoff69f8312D1/4dXvET/v6T/30r/X/9f/1//n+76rf+fcv+r48xqkv8BAACgDlLuf02cmfwPAAAAlZFy/21xZvI/AAAAVEbK/dvjzGqS//X/+6r/7/z/zv+v/+/8/0v9//kh/f9VcP5//f+g/3/ZrnZ/ftDXr/+v/09v/db/T7l/R5xZTfI/AAAA1EHK/TvjzOR/AAAAqIyU+2+PM5P/AQAAoDJS7r8jzqwm+V///zL7/1tb/6n/33n9+v/6//r/zv+v/6//343+v/7/IK9f/391/f/xXjdEpfVb/z/l/jvjzGqS/wEAAKAOUu6/K85M/gcAAIDKSLn/tXFm8j8AAABURsr9u+LMapL/9f+d/1//X/9f/1//fzPp/6+6/7/1cta1Kf3/9Car/9+T/r/+/6D0/yc6bO/8/1wJ/db/T7n/dXFmNcn/AAAAUAcp978+zkz+BwAAgMpIuf/uODP5HwAAACoj5f7JOLOa5H/9f/1//X/9f/1//f/NVNX+f34fdf5//X/9f/3/Te7/f2WF7Qfl/P/UW7/1/1PuvyfOrCb5HwAAAOog5f5748zkfwAAAKiMlPun4szkfwAAAKiMlPun48xqkv+r3/9vbxaX9P9L+v/6/0H/X/9/k1W1/99+/v8Qgv6//n+m/6//32/n/+9E/58rYf39//G8SePPdfb/U+6fiTOrSf4HAACAOki5f3ecmfwPAAAAlZFy/544M/kfAAAAKiPl/r1xZjXJ/9Xv/3em/1/S/9f/D/r/+v+brC79f+f/Ly/X/y/p/+v/6//r/9fRcIevrb//v7RJ48919v9T7t8XZ1aT/A8AAAB1kHL//jgz+R8AAAAqI+X+++LM5H8AAACojJT7748zq0n+1//X/9f/1//v3/5/6/1vXv//v/T/N5H+v/5/N/r/+v+DvH79f/1/etvY/v/16+7/p9x/IM6sJvkfAAAA6iDl/jfEmcn/AAAAUBkp9z8QZyb/AwAAwEDpdB7CJOX+N8aZ1ST/6/9Xvf+/uEX/X/9/cPv/rfvT+f/1/zuJb5/6/6tUr/7/1mX3p//f6mr35wd9/fr/+v/0trH9/2U/nq65/59y/8E4s5rkfwAAAKiDlPvfFGcm/wMAAEBlpNz/5jgz+R8AAAAqI+X+Q3FmNcn/+v9V7//33/n/h8Lg9v9H9f/1//X/18z5//X/u3H+/8Hs/6fP3dD/75/+f3EM6f/Tj/qt/59y/1vizGqS/wEAAKAOUu5/a5yZ/A8AAACVkXL/2+LM5H8AAACojJT73x5nVpP8r/+v/+/8/87/r/+v/7+Z9P/1/7vR/x/M/n+i/98//X/n/6df9Vv/P+X+d8SZ1ST/AwAAQB2k3P/OODP5HwAAACoj5f7/H2cm/wMAAEBlpNz/YJxZTfJ/hfr/Y3Hq/+v/6//r/zfo//cH/X/9/270//X/B3n9+v/6//TWb/3/lPt/Kc6sJvkfAAAA6iDl/ofizOR/AAAAqIyU+98VZyb/AwAAQGWk3P/LcWY1yf8V6v+X+vT8/8P59vX/9f/1//X/9f830oD2/yf0/0v6//r/g7x+/X/9f3rrt/5/yv2/EmdWk/wPAAAAdZBy/6/Gmcn/AAAAUBkp9/9anJn8DwAAAJWRcv/DcWY1yf/6/87/r/+v/9+3/f/R1v2p/6//38mA9v+d/z/S/9f/H+T16//r/9Nbv/X/U+7/9TizmuR/AAAAqIOU+x+JM5P/AQAAoDJS7n93nJn8DwAAAJWRcv974sxqkv/1//X/9f/1//u2/9+2P/X/+7X//29dL9X/1//vRv9f/3+Q16//r/9Pb/3W/0+5/9E4s5rkfwAAAKiDlPvfG2cm/wMAAEBlpNz/G3Fm8j8AAABURsr9vxlnNpj5f3itG+j/6//r/+v/r7r/vxBC0P/X/18j/f/l/f/iPexq9v/HV3NF/f9V0f/X/9f/1/+nu37r/6fc/744s8HM/wAAAEAHKff/VpyZ/A8AAACVkXL/b8eZyf8AAABQGSn3vz/OrCb5X/9f/1//X//f+f/1/zeT/n+9zv8/HvT/g/6//r/+v/4/Wb/1/1Pu/0CcWU3yPwAAANRByv2/E2cm/wMAAEBlpNx/OM5M/gcAAIDKSLn/sTizmuR//f+r1P/fWl5f/1//vzr9/0X9f/3/jvT/69X/d/7/kv6//r/+v/4/pX7r/6fcfyTOrCb5HwAAAOog5f4PxpnJ/wAAAFAZKfcfjTOT/wEAAKAyUu4/FmdWk/yv/+/8//r/+v/O/6//v5n0//X/u9H/1/8f5PXr/+v/01u/9f9T7p+NM6tJ/gcAAIA6SLn/eJyZ/A8AAACVkXL/iTgz+R8AAAAqI+X+x+PMapL/9f/1/1fV/x8L+v/6//r/+v+XRf9f/78b/X/9/0Fev/6//j+9bVz//583pP+fcv/JOLOa5H8AAACog5T7PxRnJv8DAABAZaTc/+E4M/kfAAAAKiPl/lNxZjXJ//r/+v/O/1/B/v+o/n/Q/+8b+v/6/93o/+v/D/L69f/1/+ltKGxU/z9sSP8/5f7TcWY1yf8AAABQByn3n4kzk/8BAACgMlLuPxtnJv8DAABAZaTcfy7OrCb5X/9f/1//v4L9f+f/b9D/7w/6//r/3ej/6/8P8vr1//X/6W3jzv+/Mf3/lPt/N86sJvkfAAAA6iDl/v9j7z6a5LyrPY63riWPVK5bd3X3vAV27OAd+DWwYUuRc44GTE4m55yTiSbnnIPJORlMBkOVKWvOOfZIPd2t0fT08/zP57PgMGaseayhxvUr1beee8ct9j8AAAAMI3f/feIW+x8AAACGkbv/vnFLk/2v/9f/6//1//p//f826f/1/6vo/+fT/59Z8vfr//X/+n/WmVr/n7v/fnFLk/0PAAAAHeTuv3/cYv8DAADAMHL3PyBusf8BAABgGLn7Hxi3NNn/+n/9v/5/Mv3/fuen/9f/6/8vif5f/7/Ydf9/Lj4YvP9fRv+v/9f/s87U+v/c/Q+KW5rsfwAAAOggd/+D4xb7HwAAAIaRu/8hcYv9DwAAAMPI3f/QuKXJ/tf/6//H7f/35tb/e/9/fl9H7P9P3f5l9f/HS/+v/1/suv9v8v7/ZfT/+n/9P+tMrf/P3f+wuKXJ/gcAAIAOcvc/PG6x/wEAAGAYufsfEbfY/wAAADCM3P2PjFua7H/9v/5/3P5/du//1//n93WI/v9c/Tre/6//1/8fTv+v/5/z8+v/9f+sN7X+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuf0zcYv8DAADAMHL3PzZuabL/9f/6f/2//l//fwLv/9f/6//1/0vp//X/c35+/b/+n/Wm1v/n7n9c3NJk/wMAAEAHufsfH7fY/wAAADCM3P1PiFvsfwAAABhG7v4nxi1N9v+l9f+n9P+H0P8vf379v/5f/6//1//r/1fR/+v/5/z8+n/9P+ttvf+/+przd9P+P3f/NXFLk/0PAAAAHeTuf1LcYv8DAADAMHL3Pzlusf8BAABgGLn7nxK3NNn/S/r/KxYzfv//2c2+tP4/vv7B/v/WU/p//f80+/9b4qeM/l//f7F59/9n9f876//39P8r+/nNfif0//p//T/rbL3/X9P7X/hx7v5r45Ym+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv8v7f3/0+//vf9/t+//z193C/3/mWXPr//v0v/v8/5//f8y8+7/vf9/i/3/PfI30/v/D7frfn7uz7+q/7/rBs+v/6eDqfX/ufufEbc02f8AAADQQe7+Z8Yt9j8AAAAMI3f/s+IW+x8AAACGkbv/2XFLg/1/Wv9fz5H0/97/v1H/f27/79f/H3we/b/+fxn9v/5/ld29/1//v5hAPz/35/f+//X9/1XrfhGGN7X+P3f/c+KWBvsfAAAAusjd/9y4xf4HAACAYeTuf17cYv8DAADAMHL3Pz9uabL/9f/6f/2/9/9fVv9/xTb6/9NLfz/1//r/ZfT/+v+F/v/Idt3Pz/359f/e/896U+v/c/dfF7fU8Dt9hH9KAAAAYEpy978gbmny5/8AAADQQe7+F8Yt9j8AAAAMI3f/i+KWJvtf/6//1//r/73/X/+/Tfr/4fr/U/r/2+n/9f/6f/0/q02t/8/d/+K4pcn+BwAAgA5y978kbrH/AQAAYBi5+18at9j/AAAAMIzc/S+LW5rsf/2//l//r//X/+v/t0n/P1z/7/3/d6D/1//r//X/rDa1/j93/8vjlib7HwAAADrI3f+KuMX+BwAAgGHk7n9l3GL/AwAAwDBy978qbpnd/r+woN2M/l//r//X/+v/9f/bNP3+/8xGn6X/36f/P2hb/f/ZQ76e/n9az388/X9+9/X/jGkC/f/d7vhx7v5Xxy2z2/8AAADAYXL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/w/r/m6/a/9/X9P/5G6b/j6v/1/8v9P9F/6//X8yi/9+M/n+f/v8g7//X/3v/v/6f1SbQ/x/4OHf/6+OWJvsfAAAAOsjd/4a4xf4HAACAYeTuf2PcYv8DAADAMHL3vyluabL/vf9f/6//1//r//X/26T/1/+vMqP+f2/ZX9T/6//1//p/Vpta/5+7/81xS5P9DwAAAB3k7n9L3GL/AwAAwDBy9781brH/AQAAYBi5+98WtzTZ//p//f/O+///GbL/P/+I+n/9v/5f/6//X21G/f9S+n/9v/5f/89qU+v/c/e/PW5psv8BAACgg9z974hb7H8AAAAYRu7+d8Yt9j8AAAAMI3f/u+KWJvtf/6//33n/7/3/Rf8f31f9v/7/Euj/9f8L/f+R7bqfn/vz6//1/6w3tf4/d/+745Ym+x8AAAA6yN3/nrjF/gcAAIBh5O6/Pm6x/wEAAGAYufvfG7c02f/6f/2//l//r//X/2+T/l//v8rJ9v/X3qz/P2jX/fzcn1//r/9nvan1/7n73xe3NNn/AAAA0EHu/vfHLfY/AAAADCN3/wfiFvsfAAAAhpG7/4NxS5P9r/+fe/9/95viCabW/+en6P/1/yv7/73FxfT/+v9Lof/X/y+28v7/C39SLKf/1//r//X/rHZi/f89r77XXW77L2v6/9z9H4pbmux/AAAA6CB3/w1xi/0PAAAAw8jd/+G4xf4HAACAYeTu/0jc0mT/9+j/z1z0aeP0/97/r/+fdP+fP1S9/1//r//X/y813f5/M/p//b/+X//PalN7/3/u/o/GLU32PwAAAHSQu/9jcYv9DwAAAMPI3f/xuMX+BwAAgGHk7v9E3NJk//fo/y+m/9937P3/rf+n/9f/l03e/6//1/9fLv2//n+h/z+yXffzc3/+ofv/Uwv9P8diav1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNxw5//d3SOdKP2//t/7//X/+n/9/zbp/4/Q/586vfFz6f/36f+PZtf9/Nyff+j+3/v/OSZT6/9z9382bvHn/wAAADCM3P2fi1vsfwAAABhG7v7Pxy32PwAAAAxgv3fP3f+FuKXJ/l/T/+/l5x25/z93+NfW/+v/F/p//b/+X/9/mYbs/y+B/n+f/v9odt3Pz/35Z9f/X3/wQ/0/J2FJ/3/+J/Gu+v/c/V+MW5rsfwAAAOggd/+X4hb7HwAAAIaRu//LcYv9DwAAAMPI3f+VuKXJ/l/a/+95/7/+X/+v/1/o//X/x0L/r/9fRf+v/5/z88+u/7+A/p+TMLX3/+fu/2rc0mT/AwAAQAe5+78Wt9j/AAAAMIzc/V+PW+x/AAAAGEbu/m/ELU32/5r3/+v/N/tH0f/r/5f+/0H/r//fsP8/s9D/H5n+X/+/0P8f2a77+bk//+X0/+f0/zQxtf4/d/8345Ym+x8AAAA6yN3/rbjF/gcAAIBh5O7/dtxi/wMAAMAwcvd/J25psv9H7v9XfZr+f5/+X/+/0P9Pof/3/v/LoP/X/y/0/0e2635+7s/v/f/6f9abWv+fu/+7cUuT/Q8AAAAd5O7/Xtxi/wMAAMAwcvffuFjcYP8DAADAmG48/59nF9+PW5rs/5H7/1X0//v0//r/hf5f/79l+n/9/yr6f/3/nJ9f/6//Z72p9f+5+38QtzTZ/wAAANBB7v4fxi32PwAAAAwjd/+P4hb7HwAAAIaRu//HcUuT/a//1//r//X/+n/9/zbp//X/q+j/9f9zfn79v/6f9abW/+fu/0nc0mT/AwAAQAe5+38at9j/AAAAMIzc/T+LW+x/AAAAGEbu/p/HLU32v/5f/6//1//r//X/26T/1/+vov/X/8/5+fX/+n/Wm1r/n7v/F3FLk/0PAAAAHeTu/2XcYv8DAADAMHL3/ypusf8BAABgGLn7fx23NNn/+v/bnuNc/XX9v/5f/6//T/r/49G2/7/tX6v6/7X0//r/OT+//l//z3pT6/9z9/8mbmmy/wEAAKCD3P2/jVvsfwAAABhG7v7fxS32PwAAAAwjd//v45Ym+1//7/3/+n/9/zz6/yv1//r/pSbb/3v//0b0//r/OT+//l//z3pT6/9z998UtzTZ/wAAANBB7v4/xC32PwAAAAwjd/8f4xb7HwAAAIaRu//muKXJ/tf/6/+H7P/39P/j9f/e/z/L/v9O+n/9/2r6f/3/nJ9f/6//Z72p9f+5+/8UtzTZ/wAAANBB7v4/xy32PwAAAAwjd/9f4hb7HwAAAIaRu/+vcUuT/a//1/8P2f97/7/+X/8/Gfp//f8q+n/9/5yfX/+v/2e9qfX/ufv/Frc02f8AAADQQe7+v8ct9j8AAAAMI3f/P+IW+x8AAACGkbv/n3FLk/2v/9f/6//1//p//f826f/n2/9fuThC/3/dQv+v/9f/6//1/5Sp9f+5+/8VtzTZ/wAAANBB7v5b4pal+///T+ipAAAAgOOUu//fcYs//wcAAIBh5O7/T9zSZP/r//X/+n/9v/5f/79N+v/59v/e/7+e/l//r//X/7Pa1Pr/3P3/DQAA///E7/7M") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 3.787786798s ago: executing program 4 (id=578): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1c}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0) r3 = socket$pptp(0x18, 0x1, 0x2) getpeername(r3, 0x0, &(0x7f00000000c0)) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200000000000000) syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa6c, &(0x7f0000000900)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) 2.959774915s ago: executing program 1 (id=581): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x1, 0x65d1, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, 0x0, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800) 2.918104088s ago: executing program 6 (id=582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) 2.842294044s ago: executing program 6 (id=583): r0 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) finit_module(r0, 0x0, 0x3) socket(0x10, 0x803, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.219287224s ago: executing program 4 (id=584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008001600c053000018000180140002006e657464657673696d3000000000000008001700365e0000"], 0x44}}, 0x0) 2.218793074s ago: executing program 1 (id=585): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sequencer(0xffffff9c, 0x0, 0x88302, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1.792817608s ago: executing program 4 (id=586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x1051, &(0x7f0000001080)="$eJzsz80JwkAQBeBnfog5WIEteLaT9BM78WwFVmUJWVmNaAMiwvcdhrfDDMuEnzqkS4Z0+2b30T21tY7rq6kzWR75mqSvoQyv4bn0780uaZ9pu3ZuxymbulBLzmMyZyml1G+ny5fPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/cA8AAP//gmMN8Q==") ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x3ff, 0x3, 0x7ff, 0x400a, 0xfffffffffffffffc, 0x9, 0x466}, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x8, 0xc, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 343.634263ms ago: executing program 5 (id=587): timer_create(0x0, &(0x7f0000000040)={0x0, 0x20, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x44, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x0, 0x3}, {0xa, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xc}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0xc0) r0 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) finit_module(r0, 0x0, 0x3) socket(0x10, 0x803, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 66.551195ms ago: executing program 4 (id=588): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x400, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x8, "afacd2119ca94c6b377526aeb5ab2a81fc0e3d99f20900"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x1a0, 0x4c, 0x1a, 0x1a0, 0x73, 0x300, 0x258, 0x258, 0x300, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0x0, 0x0, 0xff], [0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xb, 0xc, 0xc07, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "fc84"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8000, 0x7, 0x18d, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) getrusage(0x0, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa28dd19e59cd50f4, 0x110, 0xffffffffffffffff, 0xffffe000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) socket$netlink(0x10, 0x3, 0x14) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r4, 0x101, 0x10}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="100a05002312010014001280090001007665746800000000040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000040), &(0x7f00000000c0)=@v1={0x1000000, [{0x10000, 0x3f3}]}, 0xc, 0x1) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 0s ago: executing program 3 (id=589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) syz_open_dev$dri(0x0, 0x7, 0x58d083) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x80, 0x0, 0x68}, 0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)}, 0x0, 0x40000103, 0x0, {0x2}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x601c2, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) kernel console output (not intermixed with test programs): ): veth0_virt_wifi: link becomes ready [ 58.488059][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.500993][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 58.501030][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 58.507021][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 58.527260][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.543738][ T4278] device veth0_vlan entered promiscuous mode [ 58.556901][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.564865][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.573005][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.581392][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 58.588570][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.597502][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.605578][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.614461][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.645319][ T4278] device veth1_vlan entered promiscuous mode [ 58.681277][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.700017][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.708224][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.716177][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.742456][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.751261][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.758457][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.771135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.797740][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.833417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.851482][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.870782][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.888934][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.896197][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.931519][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.950965][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.971007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.990639][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.024219][ T4278] device veth0_macvtap entered promiscuous mode [ 59.043050][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.051854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.062986][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.072473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.086101][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.094996][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.104742][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.131110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.139143][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.148672][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.159026][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.167718][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.176204][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.184678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.202683][ T4278] device veth1_macvtap entered promiscuous mode [ 59.214380][ T4265] device veth0_vlan entered promiscuous mode [ 59.225372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.232998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.255216][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.267728][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.281285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.290067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.310243][ T4265] device veth1_vlan entered promiscuous mode [ 59.329682][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.343334][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.358249][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.372576][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.386592][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.396905][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.413150][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.425478][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.437634][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.457675][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.465053][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.475589][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.489458][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.503739][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.523835][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.535678][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.545084][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.554907][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.571581][ T4265] device veth0_macvtap entered promiscuous mode [ 59.594091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.603249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.613444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.631216][ T4265] device veth1_macvtap entered promiscuous mode [ 59.642655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.656843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.665633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.680038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.688449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.696693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.706936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.740384][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.748127][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.768434][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.781004][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.795713][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.803818][ T4266] device veth0_vlan entered promiscuous mode [ 59.819591][ T4266] device veth1_vlan entered promiscuous mode [ 59.828539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.837428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.846492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.858127][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.872066][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.883903][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.895955][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.918475][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.927775][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.936920][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.949449][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.958801][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.967924][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.977084][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.082178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.093083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.103239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.112246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.121804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.129736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.140646][ T4266] device veth0_macvtap entered promiscuous mode [ 60.158772][ T4273] device veth0_vlan entered promiscuous mode [ 60.159714][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.173457][ T4273] device veth1_vlan entered promiscuous mode [ 60.183273][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.201381][ T4266] device veth1_macvtap entered promiscuous mode [ 60.220107][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.230865][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.239048][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.248546][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.298403][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.316632][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.333544][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.343241][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.355355][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.365863][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.378419][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.388684][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.399810][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.410175][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.421112][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.436538][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.450462][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.459223][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.469315][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.478822][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.490838][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.499571][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.507123][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 60.515253][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.527715][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.538911][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.555280][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.580643][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 60.581042][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 60.586828][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 60.636931][ T4273] device veth0_macvtap entered promiscuous mode [ 60.661182][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 60.667375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.678972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.688136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.709478][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.725397][ T4273] device veth1_macvtap entered promiscuous mode [ 60.743692][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.768231][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.790770][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.811483][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.828971][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.839224][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.855219][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.867637][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.883282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.895702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.907602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.927404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.976006][ T4272] device veth0_vlan entered promiscuous mode [ 61.002528][ T4272] device veth1_vlan entered promiscuous mode [ 61.048518][ T4272] device veth0_macvtap entered promiscuous mode [ 61.057615][ T4375] loop3: detected capacity change from 0 to 32768 [ 61.067257][ T4375] XFS: ikeep mount option is deprecated. [ 61.094606][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.114218][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.126831][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.140092][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.150027][ T4375] XFS (loop3): Mounting V5 Filesystem [ 61.156798][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.168090][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.201668][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.216352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.219280][ T4375] XFS (loop3): Ending clean mount [ 61.235811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.253518][ T4375] XFS (loop3): Quotacheck needed: Please wait. [ 61.253576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.282303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.291987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.320602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.328828][ T4375] XFS (loop3): Quotacheck: Done. [ 61.362316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.383063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.400586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.403009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.420707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.434446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.448269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.482494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.536281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.871216][ T4272] device veth1_macvtap entered promiscuous mode [ 61.892999][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.902122][ T4278] XFS (loop3): Unmounting Filesystem [ 61.905999][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.918989][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.928135][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.008365][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.029538][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.034412][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.050963][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.051486][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.060071][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.076466][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.087613][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.098551][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.111791][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.124197][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.134976][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.147427][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.188539][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.202572][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.221285][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.230168][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.243789][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.263788][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.270315][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.274341][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.303593][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.319148][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.329335][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.340570][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.352675][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.365820][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.378419][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.393175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.411825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.422201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.464415][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.479593][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.488569][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.498448][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.580565][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 62.661232][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 62.661292][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 62.667315][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 62.676689][ T4392] loop0: detected capacity change from 0 to 512 [ 62.699276][ T4392] ======================================================= [ 62.699276][ T4392] WARNING: The mand mount option has been deprecated and [ 62.699276][ T4392] and is ignored by this kernel. Remove the mand [ 62.699276][ T4392] option from the mount to silence this warning. [ 62.699276][ T4392] ======================================================= [ 62.740646][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 62.753029][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.767706][ T4392] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.787939][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.796010][ T4392] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.846530][ T4392] EXT4-fs (loop0): 1 truncate cleaned up [ 63.175567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.184020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.192364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.192407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.200626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.209167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.217335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 63.225513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 63.233758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 64.161603][ T4392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 64.180809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.215363][ T4388] loop3: detected capacity change from 0 to 32768 [ 64.282839][ T27] audit: type=1800 audit(1756189948.350:2): pid=4392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 64.301138][ T4388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.6 (4388) [ 64.353891][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.377485][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.407060][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.440691][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.445931][ T4388] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.470971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.501838][ T4388] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 64.518170][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 64.520393][ T4388] BTRFS info (device loop3): using free space tree [ 64.529533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.577749][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.589746][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.609803][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.997478][ T4388] BTRFS info (device loop3): enabling ssd optimizations [ 65.102082][ T22] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 65.211755][ T4426] loop2: detected capacity change from 0 to 1024 [ 65.735715][ T4278] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.759367][ T22] usb 5-1: unable to get BOS descriptor or descriptor too short [ 65.799914][ T22] usb 5-1: not running at top speed; connect to a high speed hub [ 65.878244][ T22] usb 5-1: config 129 has an invalid interface number: 145 but max is 0 [ 65.923501][ T22] usb 5-1: config 129 has no interface number 0 [ 65.951464][ T22] usb 5-1: config 129 interface 145 has no altsetting 0 [ 66.020863][ T22] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 66.029954][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.047483][ T22] usb 5-1: Product: syz [ 66.056936][ T22] usb 5-1: Manufacturer: syz [ 66.065585][ T22] usb 5-1: SerialNumber: syz [ 66.089790][ T4434] loop2: detected capacity change from 0 to 128 [ 66.245649][ T4317] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4317) [ 66.318511][ T4434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 66.442696][ T4434] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.269890][ T4411] loop0: detected capacity change from 0 to 32768 [ 67.278122][ T4434] fscrypt: Error allocating hmac(sha512): -2 [ 67.304078][ T4411] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.8 (4411) [ 67.449911][ T4411] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 67.475929][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 67.589217][ T4411] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 67.602814][ T4464] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.669789][ T4411] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 67.734780][ T4411] BTRFS info (device loop0): use zstd compression, level 3 [ 67.774806][ T4411] BTRFS info (device loop0): using free space tree [ 67.994100][ T4439] loop3: detected capacity change from 0 to 32768 [ 68.096863][ T4411] BTRFS error (device loop0): open_ctree failed: -12 [ 68.147021][ T4439] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.161412][ T4439] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 68.202706][ T4439] BTRFS info (device loop3): using free space tree [ 68.287323][ T22] usb 5-1: USB disconnect, device number 2 [ 68.497725][ T4439] BTRFS info (device loop3): enabling ssd optimizations [ 68.943340][ T4516] loop2: detected capacity change from 0 to 512 [ 68.961647][ T4278] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.811777][ T4516] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.037610][ T4516] EXT4-fs (loop2): 1 truncate cleaned up [ 70.043473][ T4516] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.190818][ T27] audit: type=1800 audit(1756189954.260:3): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 71.304860][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.311532][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.942054][ T4538] loop3: detected capacity change from 0 to 128 [ 72.158126][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 72.197464][ T4541] loop4: detected capacity change from 0 to 128 [ 72.272469][ T4317] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.370576][ T4541] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 72.413952][ T4541] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.532666][ T4537] loop3: detected capacity change from 0 to 256 [ 72.539467][ T4537] exfat: Deprecated parameter 'utf8' [ 72.565112][ T4537] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 73.026586][ T4541] fscrypt: Error allocating hmac(sha512): -2 [ 73.125871][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 73.538045][ T4573] loop4: detected capacity change from 0 to 512 [ 73.557025][ T4576] loop0: detected capacity change from 0 to 256 [ 73.587794][ T4573] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.641074][ T4576] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.660394][ T4573] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 73.681543][ T4573] EXT4-fs (loop4): DAX unsupported by block device. [ 73.689212][ T4576] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 73.719915][ T4576] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 73.763809][ T4551] loop2: detected capacity change from 0 to 32768 [ 73.785700][ T4551] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.26 (4551) [ 74.573572][ T4551] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 74.629456][ T4583] loop1: detected capacity change from 0 to 512 [ 74.640351][ T4551] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 74.649814][ T4551] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 74.793374][ T4588] netlink: 'syz.3.36': attribute type 4 has an invalid length. [ 74.840364][ T4551] BTRFS info (device loop2): use zstd compression, level 3 [ 74.857661][ T4551] BTRFS info (device loop2): using free space tree [ 74.925908][ T4583] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.953896][ T4551] BTRFS info (device loop2): enabling ssd optimizations [ 75.043390][ T4609] loop4: detected capacity change from 0 to 2048 [ 75.090792][ T4583] EXT4-fs (loop1): 1 truncate cleaned up [ 75.096649][ T4583] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 75.108214][ T27] audit: type=1800 audit(1756189959.170:4): pid=4551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.26" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 75.237007][ T4609] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.265964][ T27] audit: type=1800 audit(1756189959.330:5): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.38" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 75.295278][ T4609] NILFS (loop4): mounting unchecked fs [ 75.318738][ T4317] udevd[4317]: incorrect nilfs2 checksum on /dev/loop4 [ 75.395380][ T4609] NILFS (loop4): recovery complete [ 75.411016][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 75.454520][ T4616] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.590360][ T4273] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 76.425806][ T953] cfg80211: failed to load regulatory.db [ 76.599654][ T4620] loop0: detected capacity change from 0 to 8192 [ 77.651678][ T4646] netlink: 'syz.2.47': attribute type 4 has an invalid length. [ 77.890661][ T4648] netlink: 'syz.2.47': attribute type 4 has an invalid length. [ 78.634615][ T4658] loop1: detected capacity change from 0 to 4096 [ 78.688924][ T4658] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 79.846660][ T4676] ntfs3: loop1: ino=5, "/" directory corrupted [ 79.975702][ T4265] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 80.026878][ T4680] netlink: 'syz.3.59': attribute type 4 has an invalid length. [ 80.049478][ T4265] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 80.062068][ T4660] loop0: detected capacity change from 0 to 32768 [ 80.068559][ T4265] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 80.098499][ T4660] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.53 (4660) [ 80.112367][ T4627] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.220308][ T4660] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 80.278006][ T4660] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 80.308829][ T4660] BTRFS info (device loop0): using free space tree [ 80.316202][ T4627] usb 5-1: Using ep0 maxpacket: 32 [ 80.324265][ T4627] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.351313][ T4627] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.372134][ T4627] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 80.406010][ T4627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.485939][ T4627] usb 5-1: config 0 descriptor?? [ 80.496189][ T4660] BTRFS info (device loop0): enabling ssd optimizations [ 81.015068][ T4705] ALSA: mixer_oss: invalid OSS volume 'DIGITA' [ 81.176506][ T4627] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 81.188696][ T4627] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 81.196821][ T4266] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.207938][ T4627] ft260 0003:0403:6030.0001: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 81.389523][ T4627] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 81.803718][ T4627] usb 5-1: USB disconnect, device number 3 [ 81.819356][ T4716] fido_id[4716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 82.000561][ T953] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.020127][ T4720] loop0: detected capacity change from 0 to 8192 [ 82.134167][ T4316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.220275][ T953] usb 3-1: Using ep0 maxpacket: 8 [ 82.255649][ T953] usb 3-1: unable to get BOS descriptor or descriptor too short [ 82.320345][ T4316] usb 2-1: Using ep0 maxpacket: 8 [ 82.375953][ T953] usb 3-1: config 4 interface 0 has no altsetting 0 [ 82.435542][ T4316] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 82.486056][ T4733] process 'syz.3.71' launched './file0' with NULL argv: empty string added [ 82.585498][ T953] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 82.616851][ T953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.632950][ T953] usb 3-1: Product: à ¬ [ 82.637487][ T953] usb 3-1: SerialNumber: 펻묒㷫éŽäŠ‹ãŠ·è‘¢à¯ï‰‹ã¦‡æ¨†×ˆç¼‰é¶ [ 83.073748][ T4316] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 83.204487][ T4732] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.212716][ T4316] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.235467][ T4316] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.255557][ T4316] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.268556][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.308480][ T953] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 83.377438][ T953] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 83.420629][ T953] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 83.439865][ T953] usb 3-1: media controller created [ 83.503512][ T4739] loop3: detected capacity change from 0 to 2048 [ 83.507867][ T953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.547779][ T4316] usb 2-1: GET_CAPABILITIES returned 0 [ 83.554189][ T4316] usbtmc 2-1:16.0: can't read capabilities [ 83.622107][ T953] zl10353_read_register: readreg error (reg=127, ret==0) [ 83.628383][ T4739] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 83.708269][ T4437] udevd[4437]: incorrect nilfs2 checksum on /dev/loop3 [ 83.753959][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 83.773370][ T953] usb 3-1: USB disconnect, device number 2 [ 83.785492][ T4747] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.799210][ T4722] usbtmc 2-1:16.0: Unable to send data, error -71 [ 83.865704][ T4447] usb 2-1: USB disconnect, device number 2 [ 85.832965][ T4769] netlink: 'syz.2.81': attribute type 4 has an invalid length. [ 86.245205][ T4752] loop0: detected capacity change from 0 to 40427 [ 86.315293][ T4752] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 86.359622][ T4752] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 86.469367][ T4752] F2FS-fs (loop0): invalid crc value [ 86.546432][ T4752] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.611479][ T4770] loop1: detected capacity change from 0 to 32768 [ 87.925138][ T4783] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 87.954397][ T4783] CIFS mount error: No usable UNC path provided in device string! [ 87.954397][ T4783] [ 87.964919][ T4783] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 88.691083][ T4770] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 88.996446][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 89.777261][ T4810] netlink: 'syz.2.94': attribute type 4 has an invalid length. [ 89.788770][ T4810] netlink: 'syz.2.94': attribute type 4 has an invalid length. [ 89.867353][ T4790] loop3: detected capacity change from 0 to 32768 [ 89.910630][ T4790] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 0 transid 8 /dev/loop3 scanned by syz.3.87 (4790) [ 89.988059][ T4813] loop0: detected capacity change from 0 to 8192 [ 90.014982][ T4790] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.025678][ T4790] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 90.034974][ T4790] BTRFS error (device loop3): superblock checksum mismatch [ 90.056758][ T4790] BTRFS error (device loop3): open_ctree failed: -22 [ 90.158554][ T4317] udevd[4317]: incorrect btrfs checksum on /dev/loop3 [ 90.182256][ T4813] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.629282][ T4804] loop1: detected capacity change from 0 to 40427 [ 90.697629][ T4804] F2FS-fs (loop1): invalid crc value [ 90.723464][ T4804] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.880465][ T4804] F2FS-fs (loop1): Start checkpoint disabled! [ 90.922999][ T4804] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 91.268984][ T4828] CIFS mount error: No usable UNC path provided in device string! [ 91.268984][ T4828] [ 91.279886][ T4828] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 91.821044][ T4818] loop4: detected capacity change from 0 to 32768 [ 91.930457][ T4818] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.98 (4818) [ 92.109445][ T4818] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.134434][ T4818] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 92.168995][ T4818] BTRFS info (device loop4): using free space tree [ 92.276941][ T11] kworker/u4:1: attempt to access beyond end of device [ 92.276941][ T11] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 92.307327][ T4822] loop3: detected capacity change from 0 to 32768 [ 92.347208][ T4822] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.100 (4822) [ 92.384154][ T4845] netlink: 'syz.2.102': attribute type 4 has an invalid length. [ 92.518366][ T4818] BTRFS info (device loop4): enabling ssd optimizations [ 92.950972][ T4257] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4257) [ 92.991906][ T4272] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.664435][ T4878] CIFS mount error: No usable UNC path provided in device string! [ 93.664435][ T4878] [ 93.675106][ T4878] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 94.435613][ T4873] netlink: 'syz.3.111': attribute type 4 has an invalid length. [ 94.998536][ T4891] loop0: detected capacity change from 0 to 1024 [ 95.099187][ T4891] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.112: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 95.319764][ T4891] EXT4-fs error (device loop0): ext4_quota_enable:7025: comm syz.0.112: Bad quota inode: 3, type: 0 [ 95.358394][ T4891] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 95.471849][ T4891] EXT4-fs (loop0): mount failed [ 95.695810][ T4887] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.867603][ T4904] loop1: detected capacity change from 0 to 32768 [ 95.875746][ T4479] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.960552][ T4904] XFS (loop1): Mounting V5 Filesystem [ 96.080461][ T4479] usb 5-1: Using ep0 maxpacket: 8 [ 96.098872][ T4479] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 96.134187][ T4479] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.166034][ T4479] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.166078][ T4479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.175815][ T4904] XFS (loop1): Ending clean mount [ 96.180373][ T4904] XFS (loop1): Quotacheck needed: Please wait. [ 96.201219][ T4479] usbtmc 5-1:16.0: bulk endpoints not found [ 96.267923][ T4904] XFS (loop1): Quotacheck: Done. [ 96.671942][ T4929] CIFS mount error: No usable UNC path provided in device string! [ 96.671942][ T4929] [ 96.672345][ T4929] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 97.299726][ T4265] XFS (loop1): Unmounting Filesystem [ 97.584617][ T4934] loop0: detected capacity change from 0 to 128 [ 97.827363][ T4257] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.857800][ T4274] Bluetooth: hci2: Malformed Event: 0x2f [ 98.091975][ T4933] loop0: detected capacity change from 0 to 256 [ 98.098846][ T4933] exfat: Deprecated parameter 'utf8' [ 98.115490][ T4933] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 98.213277][ T4947] netlink: 'syz.2.128': attribute type 4 has an invalid length. [ 98.868537][ T4479] usb 5-1: USB disconnect, device number 4 [ 99.296689][ T4963] netlink: 'syz.3.133': attribute type 4 has an invalid length. [ 99.702874][ T4968] loop0: detected capacity change from 0 to 32768 [ 99.805311][ T4968] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.135 (4968) [ 99.931725][ T4974] syz.1.125 uses obsolete (PF_INET,SOCK_PACKET) [ 99.941046][ T4974] device syzkaller1 entered promiscuous mode [ 100.787830][ T4968] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.838834][ T4968] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 101.110379][ T4968] BTRFS info (device loop0): using free space tree [ 101.513859][ T4968] BTRFS info (device loop0): enabling ssd optimizations [ 101.552434][ T4978] CIFS mount error: No usable UNC path provided in device string! [ 101.552434][ T4978] [ 101.565081][ T4978] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 101.818578][ T4266] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.084727][ T5007] delete_channel: no stack [ 103.519052][ T5020] loop4: detected capacity change from 0 to 32768 [ 103.526095][ T5020] gfs2: Bad value for 'quota' [ 103.632827][ T4257] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.840316][ T4447] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.040290][ T4447] usb 4-1: Using ep0 maxpacket: 8 [ 104.047392][ T4447] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 104.058196][ T4447] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.073125][ T4447] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.083184][ T4447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.126957][ T4447] usbtmc 4-1:16.0: bulk endpoints not found [ 104.513725][ T5037] random: crng reseeded on system resumption [ 105.666023][ T5047] CIFS mount error: No usable UNC path provided in device string! [ 105.666023][ T5047] [ 105.676712][ T5047] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 106.391458][ T4479] usb 4-1: USB disconnect, device number 2 [ 106.582616][ T5034] loop0: detected capacity change from 0 to 32768 [ 106.604966][ T5034] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.150 (5034) [ 106.700870][ T5051] loop2: detected capacity change from 0 to 40427 [ 106.719689][ T5051] F2FS-fs (loop2): invalid crc value [ 106.818517][ T5034] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.828982][ T5034] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 106.840608][ T5051] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.865626][ T5051] F2FS-fs (loop2): Start checkpoint disabled! [ 106.880691][ T5034] BTRFS info (device loop0): using free space tree [ 106.887405][ T5051] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 107.648527][ T5055] netlink: 'syz.1.154': attribute type 4 has an invalid length. [ 107.685755][ T5055] netlink: 'syz.1.154': attribute type 4 has an invalid length. [ 107.995384][ T5034] BTRFS error (device loop0): open_ctree failed: -12 [ 108.559136][ T5086] netlink: 'syz.3.157': attribute type 4 has an invalid length. [ 108.576211][ T4317] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4317) [ 108.659724][ T5092] loop4: detected capacity change from 0 to 1024 [ 108.684098][ T5092] EXT4-fs: Ignoring removed bh option [ 108.695494][ T5092] EXT4-fs: inline encryption not supported [ 108.720565][ T5092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 108.876163][ T5092] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.161: lblock 2 mapped to illegal pblock 2 (length 1) [ 109.014810][ T5092] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 109.110425][ T5092] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.161: lblock 0 mapped to illegal pblock 48 (length 1) [ 109.155877][ T5092] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 109.173969][ T38] kworker/u4:2: attempt to access beyond end of device [ 109.173969][ T38] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 109.200807][ T5092] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.161: Failed to acquire dquot type 0 [ 109.223296][ T5092] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 109.283204][ T5092] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.161: mark_inode_dirty error [ 109.536589][ T5103] CIFS mount error: No usable UNC path provided in device string! [ 109.536589][ T5103] [ 109.547766][ T5103] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 110.164690][ T5092] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 110.175507][ T5092] EXT4-fs (loop4): 1 orphan inode deleted [ 110.181456][ T5092] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.212815][ T9] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.296635][ T9] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 110.315745][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:0: Failed to release dquot type 0 [ 110.333715][ T5092] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.161: lblock 0 mapped to illegal pblock 48 (length 1) [ 110.361085][ T5092] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 110.492111][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 111.546874][ T5118] device syzkaller1 entered promiscuous mode [ 113.501774][ T5120] loop2: detected capacity change from 0 to 4096 [ 113.671533][ T5129] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.395670][ T5138] netlink: 'syz.1.170': attribute type 4 has an invalid length. [ 114.525653][ T5120] syz.2.163 (5120) used greatest stack depth: 19456 bytes left [ 114.811899][ T5145] netlink: 'syz.1.170': attribute type 4 has an invalid length. [ 115.180514][ T4479] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 115.385370][ T4479] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.403834][ T4479] usb 4-1: not running at top speed; connect to a high speed hub [ 115.511286][ T4479] usb 4-1: config 129 has an invalid interface number: 145 but max is 0 [ 115.519883][ T4479] usb 4-1: config 129 has no interface number 0 [ 115.526428][ T4479] usb 4-1: config 129 interface 145 has no altsetting 0 [ 115.545207][ T4479] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 115.568997][ T4479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.582833][ T4479] usb 4-1: Product: syz [ 115.587056][ T4479] usb 4-1: Manufacturer: syz [ 115.599489][ T4479] usb 4-1: SerialNumber: syz [ 117.821953][ T5164] loop2: detected capacity change from 0 to 32768 [ 117.863983][ T5164] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.183 (5164) [ 117.924472][ T5164] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.533319][ T5164] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 118.549845][ T5164] BTRFS info (device loop2): using free space tree [ 118.660353][ T4479] usb 4-1: USB disconnect, device number 3 [ 118.870310][ T4436] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.877113][ T5169] loop0: detected capacity change from 0 to 32768 [ 118.936844][ T5169] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.185 (5169) [ 118.970328][ T5164] BTRFS info (device loop2): enabling ssd optimizations [ 119.152492][ T5169] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.160295][ T4436] usb 5-1: Using ep0 maxpacket: 8 [ 119.180835][ T4436] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 119.190361][ T5169] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 119.201075][ T4436] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.214956][ T4436] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.227788][ T5169] BTRFS info (device loop0): setting nodatacow, compression disabled [ 119.252344][ T4273] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.260437][ T4436] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 119.266492][ T5169] BTRFS info (device loop0): max_inline at 0 [ 119.276971][ T4436] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.292424][ T4436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.310742][ T4436] usbtmc 5-1:16.0: bulk endpoints not found [ 119.320378][ T5169] BTRFS info (device loop0): enabling disk space caching [ 119.328102][ T5169] BTRFS info (device loop0): turning off barriers [ 119.334662][ T5169] BTRFS info (device loop0): doing ref verification [ 119.341693][ T5169] BTRFS info (device loop0): force clearing of disk cache [ 119.348865][ T5169] BTRFS info (device loop0): enabling ssd optimizations [ 119.356052][ T5169] BTRFS info (device loop0): max_inline at 4096 [ 119.362418][ T5169] BTRFS info (device loop0): disk space caching is enabled [ 119.626828][ T4257] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (4257) [ 119.637453][ T5169] BTRFS info (device loop0): rebuilding free space tree [ 120.287846][ T5169] BTRFS info (device loop0): disabling free space tree [ 120.303917][ T5169] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.315873][ T5169] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.286101][ T953] usb 5-1: USB disconnect, device number 5 [ 121.328444][ T4266] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.744098][ T5279] fuse: Bad value for 'fd' [ 125.581408][ T5283] loop0: detected capacity change from 0 to 64 [ 125.671472][ T4440] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.890350][ T4440] usb 2-1: Using ep0 maxpacket: 8 [ 125.971081][ T4440] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 126.081751][ T4440] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.170752][ T4440] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.281978][ T4440] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 126.299865][ T5287] loop2: detected capacity change from 0 to 1024 [ 126.312238][ T4440] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.516771][ T5289] Trying to free block not in datazone [ 126.890334][ T4440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.911131][ T4440] usbtmc 2-1:16.0: bulk endpoints not found [ 127.021547][ T5287] hfsplus: xattr searching failed [ 127.025498][ T5294] hfsplus: bad catalog folder thread [ 128.415357][ T5291] loop3: detected capacity change from 0 to 32768 [ 128.473888][ T5291] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.212 (5291) [ 128.553065][ T5291] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.563546][ T5291] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 128.570559][ T4529] usb 2-1: USB disconnect, device number 3 [ 128.572451][ T5291] BTRFS info (device loop3): setting nodatacow, compression disabled [ 128.717206][ T5291] BTRFS info (device loop3): turning on sync discard [ 128.805943][ T5291] BTRFS info (device loop3): enabling disk space caching [ 129.059923][ T5291] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 129.147140][ T5291] BTRFS info (device loop3): trying to use backup root at mount time [ 129.171604][ T5291] BTRFS error (device loop3): cannot disable free space tree [ 129.310397][ T5291] BTRFS error (device loop3): open_ctree failed: -22 [ 129.393384][ T5322] loop4: detected capacity change from 0 to 8 [ 129.417285][ T5322] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 129.703871][ T5325] block device autoloading is deprecated and will be removed. [ 130.075583][ T4317] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4317) [ 130.269600][ T5322] loop4: detected capacity change from 0 to 32768 [ 130.606571][ T5322] XFS (loop4): Mounting V5 Filesystem [ 130.943706][ T5322] XFS (loop4): Ending clean mount [ 130.952913][ T5322] XFS (loop4): Quotacheck needed: Please wait. [ 131.019681][ T5322] XFS (loop4): Quotacheck: Done. [ 132.808060][ T5352] sched: RT throttling activated [ 132.823069][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850520][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.043136][ T4272] XFS (loop4): Unmounting Filesystem [ 135.320705][ T5006] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.580457][ T5006] usb 1-1: Using ep0 maxpacket: 8 [ 135.592491][ T5006] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.754473][ T5006] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.887021][ T5006] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 136.032885][ T5006] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.195475][ T5006] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.371698][ T5006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.461208][ T5006] usbtmc 1-1:16.0: bulk endpoints not found [ 138.425522][ T5384] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 138.514187][ T5401] loop4: detected capacity change from 0 to 8 [ 138.562994][ T5401] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 138.940891][ T5006] usb 1-1: USB disconnect, device number 2 [ 140.275610][ T5403] netlink: 'syz.2.241': attribute type 4 has an invalid length. [ 140.786338][ T5411] loop1: detected capacity change from 0 to 8 [ 140.843558][ T5411] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 141.015457][ T4317] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.175547][ T5411] loop1: detected capacity change from 0 to 32768 [ 142.158620][ T5411] XFS (loop1): Mounting V5 Filesystem [ 142.220299][ T4527] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 142.312412][ T5411] XFS (loop1): Ending clean mount [ 142.318969][ T5411] XFS (loop1): Quotacheck needed: Please wait. [ 142.396556][ T5411] XFS (loop1): Quotacheck: Done. [ 142.410506][ T4527] usb 1-1: Using ep0 maxpacket: 16 [ 142.429500][ T4527] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 142.580207][ T5432] use of bytesused == 0 is deprecated and will be removed in the future, [ 142.589463][ T5432] use the actual size instead. [ 142.954740][ T4527] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 143.251142][ T4527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.510289][ T4527] usb 1-1: Product: syz [ 143.514602][ T4527] usb 1-1: Manufacturer: syz [ 143.519204][ T4527] usb 1-1: SerialNumber: syz [ 143.573024][ T4527] usb 1-1: config 0 descriptor?? [ 143.581758][ T4527] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 143.618414][ T4527] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 143.824934][ T4265] XFS (loop1): Unmounting Filesystem [ 144.205586][ T4527] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 144.643123][ T4527] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 144.654996][ T4527] em28xx 1-1:0.0: board has no eeprom [ 144.914302][ T5453] loop3: detected capacity change from 0 to 8 [ 144.960580][ T5453] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 145.051559][ T5006] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.447087][ T5453] loop3: detected capacity change from 0 to 32768 [ 145.524262][ T5453] XFS (loop3): Mounting V5 Filesystem [ 145.560431][ T5006] usb 3-1: Using ep0 maxpacket: 8 [ 145.591407][ T5453] XFS (loop3): Ending clean mount [ 145.599362][ T5453] XFS (loop3): Quotacheck needed: Please wait. [ 145.631177][ T5006] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.665868][ T5006] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.734909][ T5006] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 145.754946][ T5006] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.769489][ T5006] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.780032][ T5006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.837481][ T5453] XFS (loop3): Quotacheck: Done. [ 146.311881][ T5417] em28xx 1-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 146.320753][ T4527] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 146.328598][ T4527] em28xx 1-1:0.0: dvb set to bulk mode. [ 146.341436][ T5006] usbtmc 3-1:16.0: bulk endpoints not found [ 146.375132][ T5006] em28xx 1-1:0.0: Binding DVB extension [ 146.428525][ T4527] usb 1-1: USB disconnect, device number 3 [ 146.435211][ T4527] em28xx 1-1:0.0: Disconnecting em28xx [ 146.642327][ T5470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.256'. [ 147.092207][ T5006] em28xx 1-1:0.0: Registering input extension [ 147.100966][ T4527] em28xx 1-1:0.0: Closing input extension [ 147.132291][ T4527] em28xx 1-1:0.0: Freeing device [ 147.189570][ T4278] XFS (loop3): Unmounting Filesystem [ 147.844646][ T5477] loop1: detected capacity change from 0 to 2048 [ 148.590608][ T5477] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.624624][ T22] usb 3-1: USB disconnect, device number 3 [ 149.204001][ T4317] udevd[4317]: incorrect nilfs2 checksum on /dev/loop1 [ 149.230856][ T5490] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.902326][ T5049] block nbd0: Attempted send on invalid socket [ 151.908816][ T5049] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 151.921292][ T5512] efs: cannot read volume header [ 152.256352][ T5520] CIFS mount error: No usable UNC path provided in device string! [ 152.256352][ T5520] [ 152.268810][ T5520] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 153.085129][ T5524] loop0: detected capacity change from 0 to 64 [ 154.867192][ T5542] loop2: detected capacity change from 0 to 64 [ 157.447910][ T5562] CIFS mount error: No usable UNC path provided in device string! [ 157.447910][ T5562] [ 157.458491][ T5562] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 158.503873][ T5575] netlink: 'syz.1.289': attribute type 1 has an invalid length. [ 158.535068][ T5575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.632014][ T5575] bond1: (slave gretap1): making interface the new active one [ 158.721793][ T5581] loop3: detected capacity change from 0 to 64 [ 159.394926][ T5575] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 159.500504][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 159.607663][ T5585] loop0: detected capacity change from 0 to 2048 [ 160.191010][ T5585] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 161.035650][ T5596] sctp: failed to load transform for md5: -2 [ 161.174022][ T4257] udevd[4257]: incorrect nilfs2 checksum on /dev/loop0 [ 161.326497][ T5610] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.717733][ T5617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'. [ 161.948842][ T5620] CIFS mount error: No usable UNC path provided in device string! [ 161.948842][ T5620] [ 161.959590][ T5620] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 162.129618][ T27] audit: type=1326 audit(1756190046.190:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf6d8ebe9 code=0x7ffc0000 [ 162.285393][ T27] audit: type=1326 audit(1756190046.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5cf6d90a7c code=0x7ffc0000 [ 162.417454][ T27] audit: type=1326 audit(1756190046.240:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5cf6d909b4 code=0x7ffc0000 [ 162.459729][ T5617] team0: Port device team_slave_0 removed [ 162.606739][ T27] audit: type=1326 audit(1756190046.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5cf6d909b4 code=0x7ffc0000 [ 162.709077][ T27] audit: type=1326 audit(1756190046.240:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf6d8ebe9 code=0x7ffc0000 [ 162.756701][ T27] audit: type=1326 audit(1756190046.250:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5cf6d8ebe9 code=0x7ffc0000 [ 162.890316][ T27] audit: type=1326 audit(1756190046.260:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf6d8ebe9 code=0x7ffc0000 [ 163.015964][ T27] audit: type=1326 audit(1756190046.260:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5cf6d8ebe9 code=0x7ffc0000 [ 163.087109][ T5632] loop4: detected capacity change from 0 to 64 [ 163.107313][ T27] audit: type=1326 audit(1756190046.260:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf6d8ebe9 code=0x7ffc0000 [ 163.235440][ T27] audit: type=1326 audit(1756190046.270:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5622 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5cf6d8ebe9 code=0x7ffc0000 [ 163.988142][ T5630] loop1: detected capacity change from 0 to 40427 [ 164.033572][ T5630] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 164.052746][ T5636] loop3: detected capacity change from 0 to 32768 [ 164.062547][ T5636] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 164.077523][ T5630] F2FS-fs (loop1): invalid crc value [ 164.116154][ T5630] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.328708][ T5630] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 164.506862][ T4257] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 164.574196][ T4265] syz-executor: attempt to access beyond end of device [ 164.574196][ T4265] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.159722][ T5674] loop4: detected capacity change from 0 to 2048 [ 165.313597][ T5674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 165.355714][ T5674] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.319: bg 0: block 234: padding at end of block bitmap is not set [ 165.392906][ T5674] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 165.407654][ T5674] EXT4-fs (loop4): This should not happen!! Data will be lost [ 165.407654][ T5674] [ 165.425674][ T5674] EXT4-fs (loop4): Total free blocks count 0 [ 165.431925][ T5674] EXT4-fs (loop4): Free/Dirty block details [ 165.440432][ T5674] EXT4-fs (loop4): free_blocks=0 [ 165.445612][ T5674] EXT4-fs (loop4): dirty_blocks=48 [ 165.450880][ T5674] EXT4-fs (loop4): Block reservation details [ 165.457073][ T5674] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 165.478865][ T5670] loop3: detected capacity change from 0 to 2048 [ 165.632279][ T4427] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 165.714719][ T4317] udevd[4317]: incorrect nilfs2 checksum on /dev/loop3 [ 166.519424][ T5670] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 166.673855][ T5681] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.010435][ T5249] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.760641][ T5683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.840402][ T5249] usb 5-1: Using ep0 maxpacket: 16 [ 167.847078][ T5249] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 167.889014][ T5249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.934802][ T5249] usb 5-1: config 0 descriptor?? [ 167.958967][ T5249] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 168.660522][ T5249] gspca_sonixj: reg_r err -110 [ 168.665411][ T5249] sonixj: probe of 5-1:0.0 failed with error -110 [ 168.873211][ T5697] loop0: detected capacity change from 0 to 512 [ 168.969282][ T5697] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.325: bg 0: block 393: padding at end of block bitmap is not set [ 169.006930][ T5697] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 169.038894][ T5697] EXT4-fs (loop0): 2 truncates cleaned up [ 169.050397][ T5697] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 169.150736][ T5697] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.325: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 169.181376][ T5697] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 169.217979][ T5707] loop3: detected capacity change from 0 to 512 [ 169.328001][ T5707] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.329: inode #1: comm syz.3.329: iget: illegal inode # [ 169.635682][ T5707] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.329: error while reading EA inode 1 err=-117 [ 169.747264][ T5707] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 169.876433][ T5707] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.329: inode #1: comm syz.3.329: iget: illegal inode # [ 169.964217][ T5707] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.329: error while reading EA inode 1 err=-117 [ 170.034584][ T5707] EXT4-fs (loop3): 1 orphan inode deleted [ 170.041145][ T5707] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 170.189112][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 170.195462][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 170.287807][ T5006] usb 5-1: USB disconnect, device number 6 [ 170.368616][ T5357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.581498][ T5357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.640279][ T5249] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.724846][ T5357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.844337][ T5249] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 170.882516][ T5249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.936949][ T5249] usb 4-1: Product: syz [ 170.972797][ T5249] usb 4-1: Manufacturer: syz [ 171.018002][ T5249] usb 4-1: SerialNumber: syz [ 171.035289][ T5249] usb 4-1: config 0 descriptor?? [ 171.076575][ T5357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.384725][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.396771][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.407759][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.423404][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.435639][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 173.452513][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.579165][ T5745] netlink: 'syz.1.340': attribute type 4 has an invalid length. [ 174.097124][ T5249] usb 4-1: USB disconnect, device number 4 [ 175.432029][ T5006] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 175.541500][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 175.913456][ T5006] usb 5-1: Using ep0 maxpacket: 8 [ 175.941305][ T5006] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.021754][ T5006] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.858395][ T5006] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 176.942929][ T5006] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 176.962671][ T5006] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.052228][ T5006] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.134836][ T5006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.208759][ T5006] usbtmc: probe of 5-1:16.0 failed with error -22 [ 177.628378][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 178.480476][ T5006] usb 5-1: USB disconnect, device number 7 [ 178.617433][ T5746] chnl_net:caif_netlink_parms(): no params data found [ 179.025861][ T5811] loop4: detected capacity change from 0 to 8192 [ 179.061550][ T4529] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 179.228595][ T5817] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.270286][ T4529] usb 3-1: Using ep0 maxpacket: 32 [ 179.277528][ T4529] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.309472][ T4529] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.340691][ T4529] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 179.370424][ T4529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.399869][ T5357] device hsr_slave_0 left promiscuous mode [ 179.418783][ T4529] usb 3-1: config 0 descriptor?? [ 179.436422][ T5357] device hsr_slave_1 left promiscuous mode [ 179.528174][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.556516][ T5357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.635830][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.684723][ T5357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.700305][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 179.708102][ T5815] loop1: detected capacity change from 0 to 40427 [ 179.731740][ T5815] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 179.753122][ T5815] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 179.757661][ T5357] device bridge_slave_1 left promiscuous mode [ 179.770238][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.811085][ T5357] device bridge_slave_0 left promiscuous mode [ 179.824106][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.959788][ T5815] F2FS-fs (loop1): invalid crc value [ 179.966653][ T4529] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 179.997983][ T4529] ft260 0003:0403:6030.0002: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 180.021432][ T5815] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.160034][ T4529] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 180.230800][ T5357] device veth1_macvtap left promiscuous mode [ 180.262557][ T5357] device veth0_macvtap left promiscuous mode [ 180.268746][ T5357] device veth1_vlan left promiscuous mode [ 180.315400][ T5815] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 180.335342][ T5357] device veth0_vlan left promiscuous mode [ 180.395889][ T5815] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 180.573599][ T4529] ft260 0003:0403:6030.0002: failed to retrieve status: -32 [ 180.900974][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 180.901569][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 180.917412][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 181.331212][ T4529] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 181.780444][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 182.207614][ T7] usb 3-1: USB disconnect, device number 4 [ 182.580589][ T4529] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 182.770912][ T4529] usb 2-1: Using ep0 maxpacket: 8 [ 182.783202][ T4529] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.794098][ T4529] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.804246][ T4529] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 182.815589][ T4529] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 182.825794][ T4529] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.839218][ T4529] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.848556][ T4529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.863435][ T4529] usbtmc: probe of 2-1:16.0 failed with error -22 [ 183.104490][ T5870] loop2: detected capacity change from 0 to 1024 [ 183.114440][ T5870] EXT4-fs: Ignoring removed oldalloc option [ 183.206561][ T5357] team0 (unregistering): Port device team_slave_1 removed [ 183.215261][ T5870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 183.260125][ T5357] team0 (unregistering): Port device team_slave_0 removed [ 183.313899][ T5357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.336557][ T5870] loop2: detected capacity change from 1024 to 64 [ 183.358133][ T5874] EXT4-fs error (device loop2): ext4_xattr_ibody_get:603: inode #15: comm syz.2.366: corrupted in-inode xattr [ 183.388797][ T5874] EXT4-fs error (device loop2): get_max_inline_xattr_value_size:69: inode #15: comm syz.2.366: corrupt xattr in inline inode [ 183.395515][ T5357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.423305][ T5874] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.366: corrupted in-inode xattr [ 183.485914][ T4273] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /77/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 183.585208][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 183.606103][ T5871] kmmpd-loop2: attempt to access beyond end of device [ 183.606103][ T5871] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 183.634081][ T5871] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 183.991104][ T5357] bond0 (unregistering): Released all slaves [ 184.085244][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.092651][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.100698][ T5746] device bridge_slave_0 entered promiscuous mode [ 184.109156][ T5843] netlink: 'syz.4.358': attribute type 4 has an invalid length. [ 184.144710][ T5863] netlink: 'syz.3.362': attribute type 4 has an invalid length. [ 184.220602][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.235572][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.249528][ T5746] device bridge_slave_1 entered promiscuous mode [ 184.354357][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.397514][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.515995][ T5746] team0: Port device team_slave_0 added [ 184.537813][ T5746] team0: Port device team_slave_1 added [ 184.638597][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.649275][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.703303][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.724850][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.740844][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.797322][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.977074][ T5746] device hsr_slave_0 entered promiscuous mode [ 185.006624][ T5746] device hsr_slave_1 entered promiscuous mode [ 185.032248][ T5746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.057030][ T5746] Cannot create hsr debugfs directory [ 185.388706][ T5249] usb 2-1: USB disconnect, device number 4 [ 185.623095][ T5357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.635780][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 185.635793][ T27] audit: type=1326 audit(1756190069.710:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134178ebe9 code=0x7ffc0000 [ 185.737307][ T27] audit: type=1326 audit(1756190069.710:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134178ebe9 code=0x7ffc0000 [ 185.766879][ T27] audit: type=1326 audit(1756190069.790:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f134178ebe9 code=0x7ffc0000 [ 185.789926][ T27] audit: type=1326 audit(1756190069.800:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134178ebe9 code=0x7ffc0000 [ 185.812591][ T27] audit: type=1326 audit(1756190069.800:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134178ebe9 code=0x7ffc0000 [ 185.835778][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.845868][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.854937][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.886403][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.894115][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 185.901619][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.013344][ T5357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.148884][ T5746] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 186.168234][ T5913] loop3: detected capacity change from 0 to 64 [ 186.321001][ T5746] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 186.428112][ T5746] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 186.567127][ T5746] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 186.949606][ T5357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.193742][ T5357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.414528][ T5924] loop3: detected capacity change from 0 to 8192 [ 187.642325][ T5939] netlink: 'syz.4.378': attribute type 4 has an invalid length. [ 187.683865][ T5942] netlink: 'syz.1.379': attribute type 4 has an invalid length. [ 187.715196][ T5924] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 187.738322][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.940298][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 187.958103][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.983188][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.068893][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.207017][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.230938][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.273129][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.280341][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.335667][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.385462][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.427529][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.434740][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.448345][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.461626][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.470406][ T4529] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 188.506164][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 188.550479][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.583172][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.618376][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.660489][ T4529] usb 4-1: Using ep0 maxpacket: 8 [ 188.677625][ T4529] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.707445][ T4529] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.727623][ T4529] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 188.758075][ T4529] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 188.788635][ T4529] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.822425][ T4529] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.856114][ T4529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.898784][ T4529] usbtmc: probe of 4-1:16.0 failed with error -22 [ 188.994656][ T5746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.015782][ T5746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.040801][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.061448][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.097862][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.121817][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.147925][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.181390][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.198528][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.328490][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.562497][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.570116][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.579091][ T5904] device bridge_slave_0 entered promiscuous mode [ 189.868595][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.877243][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.903844][ T5904] device bridge_slave_1 entered promiscuous mode [ 190.020766][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 190.146249][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.158490][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.240854][ T5904] team0: Port device team_slave_0 added [ 190.249476][ T5904] team0: Port device team_slave_1 added [ 190.305884][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.313790][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.340594][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.356697][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.364278][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.390956][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.686997][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.717663][ T5904] device hsr_slave_0 entered promiscuous mode [ 190.741668][ T5904] device hsr_slave_1 entered promiscuous mode [ 190.750444][ T5904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.783010][ T5904] Cannot create hsr debugfs directory [ 191.386584][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.410481][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.493790][ T4529] usb 4-1: USB disconnect, device number 5 [ 191.980418][ T4529] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 192.100834][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 192.175676][ T5357] device hsr_slave_0 left promiscuous mode [ 192.190646][ T4529] usb 4-1: Using ep0 maxpacket: 16 [ 192.197544][ T4529] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.219217][ T5357] device hsr_slave_1 left promiscuous mode [ 192.221384][ T4529] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.238703][ T4529] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 192.275980][ T4529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.301813][ T4529] usb 4-1: config 0 descriptor?? [ 192.308177][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.318335][ T5357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.448622][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.476846][ T5357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.497858][ T5357] device bridge_slave_1 left promiscuous mode [ 192.532299][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.586382][ T5357] device bridge_slave_0 left promiscuous mode [ 192.615872][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.718082][ T4529] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0 [ 192.730334][ T4529] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0 [ 192.754824][ T4529] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0 [ 192.765509][ T4529] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0 [ 192.772953][ T4529] corsair 0003:1B1C:1B02.0003: unknown main item tag 0x0 [ 192.782242][ T4529] corsair 0003:1B1C:1B02.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 192.803947][ T5357] device veth1_macvtap left promiscuous mode [ 192.810095][ T5357] device veth0_macvtap left promiscuous mode [ 192.825482][ T5357] device veth1_vlan left promiscuous mode [ 192.877670][ T5357] device veth0_vlan left promiscuous mode [ 192.917021][ T4529] corsair 0003:1B1C:1B02.0003: Read invalid backlight brightness: 88. [ 193.124671][ T4869] usb 4-1: USB disconnect, device number 6 [ 194.187462][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 194.196152][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204055][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.989009][ T6043] CIFS mount error: No usable UNC path provided in device string! [ 194.989009][ T6043] [ 194.999446][ T6043] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 195.636699][ T6050] loop1: detected capacity change from 0 to 2048 [ 195.793536][ T6050] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 195.853256][ T4257] udevd[4257]: incorrect nilfs2 checksum on /dev/loop1 [ 195.968405][ T6056] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.395838][ T5357] team0 (unregistering): Port device team_slave_1 removed [ 196.551648][ T5357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.762175][ T5357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.599228][ T5357] bond0 (unregistering): Released all slaves [ 197.717864][ T6028] netlink: 'syz.4.393': attribute type 4 has an invalid length. [ 197.733423][ T6029] netlink: 'syz.4.393': attribute type 4 has an invalid length. [ 197.743767][ T6055] netlink: 'syz.3.400': attribute type 4 has an invalid length. [ 197.795648][ T5904] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 197.846260][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.891138][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.954773][ T5904] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 197.983425][ T6062] netlink: 'syz.1.401': attribute type 4 has an invalid length. [ 198.027471][ T5904] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 198.110911][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.185599][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.207282][ T5904] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 198.311411][ T5746] device veth0_vlan entered promiscuous mode [ 198.326623][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.351132][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.419925][ T5746] device veth1_vlan entered promiscuous mode [ 198.536871][ T6068] loop4: detected capacity change from 0 to 8192 [ 198.627440][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.667433][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.705236][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.731294][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.757715][ T6068] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 198.772220][ T5746] device veth0_macvtap entered promiscuous mode [ 198.856778][ T5746] device veth1_macvtap entered promiscuous mode [ 198.952961][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.995068][ T5746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.024717][ T5746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.065643][ T5746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.125300][ T5746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.178914][ T5746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.234608][ T5746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.288405][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.496147][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.516334][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.551444][ T5746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.728155][ T5746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.738268][ T5746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.749123][ T5746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.759453][ T5746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.770351][ T5746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.782011][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.875937][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.886183][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.941276][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.978123][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.104310][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.161606][ T5746] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.183070][ T5746] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.215173][ T5746] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.247661][ T5746] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.264913][ T6102] CIFS mount error: No usable UNC path provided in device string! [ 200.264913][ T6102] [ 200.275668][ T6102] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 200.356761][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.387620][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.430394][ T4869] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.453731][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.460950][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.596879][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.630935][ T4869] usb 4-1: Using ep0 maxpacket: 8 [ 200.663466][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.672281][ T4869] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.717106][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.729853][ T4869] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.793005][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.801475][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.809354][ T4869] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.835139][ T4869] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.895143][ T4869] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.969031][ T4869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.016644][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.049136][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.089325][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.121399][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.149700][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.165194][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.211634][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.228688][ T4869] usb 4-1: usb_control_msg returned -32 [ 201.239026][ T4869] usbtmc 4-1:16.0: can't read capabilities [ 201.251125][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.286442][ T6113] loop4: detected capacity change from 0 to 2048 [ 201.287891][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.318646][ T4869] usb 4-1: USB disconnect, device number 7 [ 201.379663][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.394836][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.406784][ T6113] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 201.430117][ T4257] udevd[4257]: incorrect nilfs2 checksum on /dev/loop4 [ 201.442847][ T5904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.513785][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.530551][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.584955][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.749215][ T5533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.765027][ T6120] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.776620][ T5533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.823262][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 202.025957][ T6122] netlink: 'syz.1.410': attribute type 4 has an invalid length. [ 202.063291][ T6122] netlink: 'syz.1.410': attribute type 4 has an invalid length. [ 202.654362][ T6134] netlink: 'syz.3.411': attribute type 4 has an invalid length. [ 202.875728][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.912389][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.964496][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.154342][ T6148] netlink: 'syz.5.414': attribute type 4 has an invalid length. [ 204.648690][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.700855][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.808861][ T5904] device veth0_vlan entered promiscuous mode [ 204.845999][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.865975][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.891641][ T5904] device veth1_vlan entered promiscuous mode [ 204.912616][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.921553][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.931967][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.989602][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.020886][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.090398][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.124769][ T5904] device veth0_macvtap entered promiscuous mode [ 205.167749][ T5904] device veth1_macvtap entered promiscuous mode [ 205.205222][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.225917][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.272064][ T6169] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.290109][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.488421][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.519444][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.641538][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.705705][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.741414][ T6164] loop5: detected capacity change from 0 to 8192 [ 205.790257][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.851746][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.884851][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.945529][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.999871][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.018807][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.030508][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.048983][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.063974][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.113664][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.349976][ T6184] CIFS mount error: No usable UNC path provided in device string! [ 206.349976][ T6184] [ 206.360539][ T6184] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 206.686133][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.964375][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.110059][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.120739][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.132589][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.161218][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.170133][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.211116][ T5904] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.234829][ T5904] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.270285][ T4440] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 207.288822][ T5904] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.320899][ T5904] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.490736][ T4440] usb 4-1: Using ep0 maxpacket: 8 [ 207.507254][ T4440] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.548890][ T4440] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.576338][ T5014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.589349][ T4440] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.596364][ T5014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.658793][ T4440] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.665570][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.696658][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.711178][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.738325][ T4440] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.771292][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.780650][ T4440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.690807][ T4440] usb 4-1: usb_control_msg returned -32 [ 208.696449][ T4440] usbtmc 4-1:16.0: can't read capabilities [ 208.726769][ T6207] netlink: 'syz.4.426': attribute type 4 has an invalid length. [ 208.758019][ T4440] usb 4-1: USB disconnect, device number 8 [ 208.885811][ T6208] loop1: detected capacity change from 0 to 2048 [ 209.056423][ T6208] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 209.940838][ T4257] udevd[4257]: incorrect nilfs2 checksum on /dev/loop1 [ 210.167615][ T6225] CIFS mount error: No usable UNC path provided in device string! [ 210.167615][ T6225] [ 210.177767][ T6225] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 210.842539][ T4317] udevd[4317]: incorrect nilfs2 checksum on /dev/loop1 [ 211.692705][ T6208] NILFS (loop1): error -4 creating segctord thread [ 211.733573][ T6220] netlink: 'syz.6.428': attribute type 4 has an invalid length. [ 211.757599][ T6220] netlink: 'syz.6.428': attribute type 4 has an invalid length. [ 212.116383][ T6238] netlink: 'syz.5.430': attribute type 4 has an invalid length. [ 212.706873][ T6245] loop3: detected capacity change from 0 to 8192 [ 212.782536][ T6245] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.455204][ T6283] CIFS mount error: No usable UNC path provided in device string! [ 214.455204][ T6283] [ 214.466322][ T6283] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 214.580259][ T4444] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 215.220361][ T4444] usb 7-1: Using ep0 maxpacket: 8 [ 215.226976][ T4444] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.272632][ T4444] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.334658][ T4444] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.351892][ T6280] loop4: detected capacity change from 0 to 2048 [ 215.417013][ T6280] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 215.427959][ T4444] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.451908][ T6289] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.525938][ T4444] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.576929][ T4444] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.880503][ T4444] usb 7-1: usb_control_msg returned -32 [ 215.886140][ T4444] usbtmc 7-1:16.0: can't read capabilities [ 216.048536][ T4444] usb 7-1: USB disconnect, device number 2 [ 216.154153][ T6297] netlink: 'syz.5.445': attribute type 4 has an invalid length. [ 216.372356][ T6299] netlink: 'syz.3.444': attribute type 4 has an invalid length. [ 216.392546][ T6300] netlink: 'syz.5.445': attribute type 4 has an invalid length. [ 216.770041][ T6303] netlink: 16 bytes leftover after parsing attributes in process `syz.6.446'. [ 219.074546][ T6339] CIFS mount error: No usable UNC path provided in device string! [ 219.074546][ T6339] [ 219.085215][ T6339] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 219.676665][ T6336] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.885395][ T6342] netlink: 'syz.6.455': attribute type 4 has an invalid length. [ 220.340313][ T4324] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 220.498336][ T6351] loop3: detected capacity change from 0 to 2048 [ 220.535647][ T4324] usb 6-1: Using ep0 maxpacket: 8 [ 220.552965][ T4324] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.578439][ T6351] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 220.653539][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.460'. [ 220.682801][ T4324] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.734806][ T4324] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.816921][ T4317] udevd[4317]: incorrect nilfs2 checksum on /dev/loop3 [ 220.835859][ T4324] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.892512][ T4324] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.902192][ T6362] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.004137][ T4324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.302345][ T4324] usb 6-1: usb_control_msg returned -32 [ 221.307971][ T4324] usbtmc 6-1:16.0: can't read capabilities [ 221.336130][ T4324] usb 6-1: USB disconnect, device number 2 [ 223.491844][ T6402] CIFS mount error: No usable UNC path provided in device string! [ 223.491844][ T6402] [ 223.502401][ T6402] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 224.495520][ T6399] netlink: 'syz.5.468': attribute type 4 has an invalid length. [ 224.557751][ T6399] netlink: 'syz.5.468': attribute type 4 has an invalid length. [ 224.578273][ T6408] netlink: 'syz.6.469': attribute type 4 has an invalid length. [ 224.841694][ T6411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.472'. [ 224.885287][ T6409] loop3: detected capacity change from 0 to 8192 [ 224.919043][ T6416] loop4: detected capacity change from 0 to 512 [ 225.098948][ T6416] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 225.139321][ T6416] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 225.174865][ T6409] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 225.520360][ T4869] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 225.688469][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 225.730297][ T4869] usb 2-1: Using ep0 maxpacket: 8 [ 225.760558][ T4869] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.843651][ T6435] 9pnet_fd: Insufficient options for proto=fd [ 225.849883][ T4869] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.864002][ T4869] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.878745][ T6433] loop3: detected capacity change from 0 to 2048 [ 225.885476][ T4869] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.942221][ T6433] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 225.949644][ T4869] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.999195][ T4869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.038198][ T4317] udevd[4317]: incorrect nilfs2 checksum on /dev/loop3 [ 226.854726][ T6439] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.898469][ T4317] udevd[4317]: incorrect nilfs2 checksum on /dev/loop3 [ 227.451948][ T4869] usb 2-1: usb_control_msg returned -32 [ 227.457570][ T4869] usbtmc 2-1:16.0: can't read capabilities [ 227.478506][ T4869] usb 2-1: USB disconnect, device number 5 [ 227.530861][ T6443] netlink: 'syz.6.479': attribute type 4 has an invalid length. [ 228.084060][ T6461] CIFS mount error: No usable UNC path provided in device string! [ 228.084060][ T6461] [ 228.094515][ T6461] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 228.800630][ T6470] netlink: 16 bytes leftover after parsing attributes in process `syz.6.485'. [ 229.207616][ T6478] netlink: 'syz.5.484': attribute type 4 has an invalid length. [ 229.321809][ T6477] loop4: detected capacity change from 0 to 8192 [ 229.447766][ T6488] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.488687][ T6487] 9pnet_fd: Insufficient options for proto=fd [ 229.570531][ T6485] netlink: 'syz.5.484': attribute type 4 has an invalid length. [ 231.097908][ T6504] netlink: 'syz.3.489': attribute type 4 has an invalid length. [ 231.510262][ T4324] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 231.754586][ T4324] usb 7-1: Using ep0 maxpacket: 8 [ 231.767429][ T4324] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.809441][ T4324] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.837412][ T4324] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.886464][ T4324] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.927810][ T4324] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.954908][ T6520] netlink: 'syz.4.495': attribute type 4 has an invalid length. [ 231.993321][ T4324] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.289145][ T4324] usb 7-1: usb_control_msg returned -32 [ 232.298790][ T4324] usbtmc 7-1:16.0: can't read capabilities [ 232.347512][ T6526] CIFS mount error: No usable UNC path provided in device string! [ 232.347512][ T6526] [ 232.357960][ T6526] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 232.942531][ T4324] usb 7-1: USB disconnect, device number 3 [ 233.087424][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.498'. [ 233.168637][ T6535] loop2: detected capacity change from 0 to 7 [ 233.254614][ T4317] Dev loop2: unable to read RDB block 7 [ 233.261450][ T4317] loop2: unable to read partition table [ 233.288684][ T4317] loop2: partition table beyond EOD, truncated [ 233.318140][ T6535] Dev loop2: unable to read RDB block 7 [ 233.343175][ T6535] loop2: unable to read partition table [ 233.366786][ T6535] loop2: partition table beyond EOD, truncated [ 233.400375][ T6535] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 233.475300][ T3638] Dev loop2: unable to read RDB block 7 [ 233.521109][ T3638] loop2: unable to read partition table [ 233.545285][ T3638] loop2: partition table beyond EOD, truncated [ 233.614281][ T6538] loop1: detected capacity change from 0 to 2048 [ 233.656303][ T6538] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 233.884807][ T6548] 9pnet_fd: Insufficient options for proto=fd [ 233.891143][ T6547] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.498415][ T6575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.510'. [ 235.761891][ T6583] CIFS mount error: No usable UNC path provided in device string! [ 235.761891][ T6583] [ 235.772460][ T6583] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 236.998563][ T6597] netlink: 'syz.6.511': attribute type 4 has an invalid length. [ 237.042819][ T6602] random: crng reseeded on system resumption [ 237.058197][ T6597] netlink: 'syz.6.511': attribute type 4 has an invalid length. [ 237.206520][ T6604] netlink: 'syz.4.514': attribute type 4 has an invalid length. [ 239.111429][ T6608] netlink: 'syz.1.516': attribute type 4 has an invalid length. [ 239.128671][ T6613] 9pnet_fd: Insufficient options for proto=fd [ 239.994400][ T6626] loop3: detected capacity change from 0 to 8192 [ 242.041290][ T6660] 9pnet_fd: Insufficient options for proto=fd [ 242.066981][ T6652] loop4: detected capacity change from 0 to 2048 [ 242.106142][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.529'. [ 242.158986][ T6652] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 242.194999][ T4317] udevd[4317]: incorrect nilfs2 checksum on /dev/loop4 [ 242.805376][ T6666] netlink: 'syz.5.530': attribute type 4 has an invalid length. [ 242.825489][ T6677] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.844709][ T6645] CIFS mount error: No usable UNC path provided in device string! [ 242.844709][ T6645] [ 242.854824][ T6645] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 243.669510][ T6697] loop5: detected capacity change from 0 to 256 [ 243.790356][ T6697] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.821440][ T6697] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 244.586163][ T6693] netlink: 'syz.6.535': attribute type 4 has an invalid length. [ 244.631844][ T6697] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 244.693827][ T6691] netlink: 'syz.3.534': attribute type 4 has an invalid length. [ 244.835216][ T6699] netlink: 'syz.3.534': attribute type 4 has an invalid length. [ 244.919643][ T6703] loop1: detected capacity change from 0 to 8192 [ 245.431923][ T6714] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.899640][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 245.974173][ T6720] 9pnet_fd: Insufficient options for proto=fd [ 246.764807][ T6735] CIFS mount error: No usable UNC path provided in device string! [ 246.764807][ T6735] [ 246.776270][ T6735] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 248.529486][ T6748] loop1: detected capacity change from 0 to 40427 [ 249.079711][ T6748] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 249.217353][ T6755] netlink: 'syz.4.548': attribute type 4 has an invalid length. [ 250.173527][ T6774] 9pnet_fd: Insufficient options for proto=fd [ 250.243212][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 250.259802][ T6761] loop5: detected capacity change from 0 to 2048 [ 250.284301][ T6761] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 250.326964][ T6777] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.588947][ T6772] loop6: detected capacity change from 0 to 8192 [ 250.840875][ T6784] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.150861][ T6772] loop6: unable to read partition table [ 251.156650][ T6772] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 252.121353][ T6805] CIFS mount error: No usable UNC path provided in device string! [ 252.121353][ T6805] [ 252.131888][ T6805] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 253.525013][ T27] audit: type=1326 audit(1756190137.590:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bbd8ebe9 code=0x7ffc0000 [ 253.562266][ T6815] netlink: 'syz.1.561': attribute type 4 has an invalid length. [ 253.652265][ T27] audit: type=1326 audit(1756190137.590:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bbd8ebe9 code=0x7ffc0000 [ 253.840563][ T27] audit: type=1326 audit(1756190137.590:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fd2bbd8ebe9 code=0x7ffc0000 [ 253.992715][ T27] audit: type=1326 audit(1756190137.590:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bbd8ebe9 code=0x7ffc0000 [ 254.031551][ T6827] 9pnet_fd: Insufficient options for proto=fd [ 254.162906][ T27] audit: type=1326 audit(1756190137.590:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bbd8ebe9 code=0x7ffc0000 [ 254.365534][ T6830] netlink: 'syz.3.566': attribute type 4 has an invalid length. [ 254.494986][ T6834] netlink: 'syz.3.566': attribute type 4 has an invalid length. [ 254.692640][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.570'. [ 255.175593][ T6843] loop6: detected capacity change from 0 to 8192 [ 255.227629][ T6849] netlink: 'syz.5.572': attribute type 4 has an invalid length. [ 255.632011][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.697076][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.820564][ T6843] loop6: unable to read partition table [ 255.851150][ T6843] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 256.775351][ T6863] CIFS mount error: No usable UNC path provided in device string! [ 256.775351][ T6863] [ 256.786006][ T6863] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 258.588590][ T6887] 9pnet_fd: Insufficient options for proto=fd [ 259.336708][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 259.338751][ T6885] loop3: detected capacity change from 0 to 2048 [ 259.360525][ T6885] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 259.553397][ T6902] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.566941][ T4317] udevd[4317]: incorrect nilfs2 checksum on /dev/loop3 [ 259.760244][ T6903] netlink: 'syz.6.583': attribute type 4 has an invalid length. [ 260.161691][ T6878] loop5: detected capacity change from 0 to 32768 [ 260.231271][ T6911] loop4: detected capacity change from 0 to 8192 [ 260.884133][ T27] audit: type=1800 audit(1756190144.950:27): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.577" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 261.787533][ T6931] CIFS mount error: No usable UNC path provided in device string! [ 261.787533][ T6931] [ 261.798018][ T6931] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 262.738537][ T6941] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 262.750487][ T6941] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 262.758925][ T6941] CPU: 1 PID: 6941 Comm: syz.3.589 Not tainted 6.1.148-syzkaller #0 [ 262.766916][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.776990][ T6941] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 262.782576][ T6941] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 dd 56 16 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 bc 56 16 fa 4d 8b 24 24 48 83 c3 [ 262.802215][ T6941] RSP: 0018:ffffc90004d0fa78 EFLAGS: 00010206 [ 262.808286][ T6941] RAX: 0000000000000005 RBX: ffff888056cc2480 RCX: 0000000000080000 [ 262.816256][ T6941] RDX: ffffc90011001000 RSI: 00000000000006dc RDI: 00000000000006dd [ 262.824260][ T6941] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005e71d26 [ 262.832236][ T6941] R10: ffffed1005e71d26 R11: 1ffff11005e71d25 R12: 0000000000000028 [ 262.840304][ T6941] R13: dffffc0000000000 R14: ffff88802f38e800 R15: dffffc0000000000 [ 262.848467][ T6941] FS: 00007f134260b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 262.857406][ T6941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.863990][ T6941] CR2: 0000000000000040 CR3: 00000000565d0000 CR4: 00000000003506e0 [ 262.871948][ T6941] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 262.879921][ T6941] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.887874][ T6941] Call Trace: [ 262.891132][ T6941] [ 262.894041][ T6941] pcl818_detach+0x62/0xd0 [ 262.898438][ T6941] comedi_device_detach+0x12d/0x6e0 [ 262.903617][ T6941] comedi_unlocked_ioctl+0xb6b/0xf20 [ 262.908878][ T6941] ? comedi_poll+0x8b0/0x8b0 [ 262.913451][ T6941] ? __fget_files+0x28/0x4d0 [ 262.918023][ T6941] ? bpf_lsm_file_ioctl+0x5/0x10 [ 262.922945][ T6941] ? security_file_ioctl+0x7c/0xa0 [ 262.928038][ T6941] ? comedi_poll+0x8b0/0x8b0 [ 262.932606][ T6941] __se_sys_ioctl+0xfa/0x170 [ 262.937176][ T6941] do_syscall_64+0x4c/0xa0 [ 262.941570][ T6941] ? clear_bhb_loop+0x60/0xb0 [ 262.946223][ T6941] ? clear_bhb_loop+0x60/0xb0 [ 262.950875][ T6941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.956749][ T6941] RIP: 0033:0x7f134178ebe9 [ 262.961153][ T6941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.980745][ T6941] RSP: 002b:00007f134260b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.989139][ T6941] RAX: ffffffffffffffda RBX: 00007f13419b6180 RCX: 00007f134178ebe9 [ 262.997092][ T6941] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008 [ 263.005040][ T6941] RBP: 00007f1341811e19 R08: 0000000000000000 R09: 0000000000000000 [ 263.012990][ T6941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.020947][ T6941] R13: 00007f13419b6218 R14: 00007f13419b6180 R15: 00007ffdc8660ed8 [ 263.028920][ T6941] [ 263.031929][ T6941] Modules linked in: [ 263.039709][ T6941] ---[ end trace 0000000000000000 ]--- [ 263.045344][ T6941] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 263.050921][ T6941] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 dd 56 16 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 bc 56 16 fa 4d 8b 24 24 48 83 c3 [ 263.070563][ T6941] RSP: 0018:ffffc90004d0fa78 EFLAGS: 00010206 [ 263.076651][ T6941] RAX: 0000000000000005 RBX: ffff888056cc2480 RCX: 0000000000080000 [ 263.084692][ T6941] RDX: ffffc90011001000 RSI: 00000000000006dc RDI: 00000000000006dd [ 263.092705][ T6941] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005e71d26 [ 263.100706][ T6941] R10: ffffed1005e71d26 R11: 1ffff11005e71d25 R12: 0000000000000028 [ 263.108690][ T6941] R13: dffffc0000000000 R14: ffff88802f38e800 R15: dffffc0000000000 [ 263.116696][ T6941] FS: 00007f134260b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 263.125668][ T6941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.132299][ T6941] CR2: 0000000000000040 CR3: 00000000565d0000 CR4: 00000000003506e0 [ 263.140319][ T6941] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 263.148382][ T6941] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 263.156411][ T6941] Kernel panic - not syncing: Fatal exception [ 263.162683][ T6941] Kernel Offset: disabled [ 263.167002][ T6941] Rebooting in 86400 seconds..