last executing test programs: 2m29.963422562s ago: executing program 1 (id=2): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000), 0xff, 0x50e6, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/caI9dVHwD8zL7Gu17vbghSHoqIeQVSyeu1HQerAeGkikAgJWsR9QsKWWNvUscbbPwoOLKEMagoRQgXXBGFPmyJqE4lkFXa8gglFlWCqlo0gjYfDElpAaFKUJTiukSJ5Grm3nP3zrk7Dz/W9obfT/LOmfmfc+49Z2au77n3zrkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDb4epv3Pi5TvE3ffdLX7il713Pf/s3B9d/9r6pH4cw3Xy9loVr7zjzwzPXfeTODd+888uPnZ64+5GhvFweD8sbf/ryJ5+Mtf50RQhfq4UwkAZWjWaBwfz5aKzvhtEQrgrzgaLE7EhWIl1weHo4hCNhPlBU9Y3hEEZLgXu+/52nPtNIHB4O4c0hhHq6jOfr2TKG08BNQ1lgJA3sGMgC/3c2UwS+3pcF4ILFL0PxoT8+3ZphYuFybT5/gxdtxS6vtHn9MTHRPt8vb1/klSoZSl+YvqC3rVIdi6Ly9Tjh27YEvm2Vfj7kbSvvSOV7KGfnQ/XQt3X2/s175/bEV/rC5GR/u5oW6X0+9eL+LeeSXjKfw7gCExflc/jg4VufG/rAXS889sqT+0/Xv3jDha5mu+5dbPWQf+aWzPsYbbQ9WQJfv8pe0ko7XSGE0ydO7u8Ur4z/JzqP/+PHOT72teSOtb48lo3N4yujMfGrsWxsDgAAAEvGUjhqOrTy337Sqb7K+H9lb+f/4yn/fDCftfZECBubiU+Mh3Bt8/Us8ERc3AfHQ3h9MzXdGrg9CZwI4bpm4uaiqqTEslhiZRL4+Vge2JgEnomB6STweAwcSgKfjIHjSWBLDJxIAnfEQNjW2o7fGcvb0XNgOAZmsk48Hq9C+PVYXFrSVz8sqgIAALhI8tHhYOvT0rUOF5ohDi+PD3fLEK/AbpuhntSQjmCLYVXbGga61dDXrYai3Qc6N79Sc61bzZXLMGqtGf731DU7QgeV8f9U5/F/fYEVqVXO/4epTc2HmLsvj8wVGWamWzIAAAAAF+APXjuzuVO8Mv7f2Nv1//GYSH8pczgZD0NsHw9hqjWQVXtbNZCd9V6eBwAAAGApKM7HF+fCt+WP2SXa6Xi6mn/6HPPHE/8bF8y/43v/+mSn9a2M/6d7u/5/pPUxW4ln4lp8fjyEZaXAd+NaNgJNK2Pgx+9sDeTtfyZ2wKdjVfmFCUVVn44lZmJgKgkcaVfi2aLEta2B/M0qFv6Joh3b8hKlAAAAAFxy8XBAPC8fr/9f83d/9HSncpXx/8y5Xf/fHAdXLu+fWx7C6oEQ+tMfBpwcySYGjIHRWp74h5Gsrv60qoMjIdzWaFha1X/m8/8PpHMM/mA4qyoGrn3DsRdvaiS+NBzC6nLgufcfXd9I7E0CxcJ/fziEGxutTRf+98uyhQ+mC390WQivKwWKqrYsC6GxsKG0qn+s5/cxSKs6Xg/h6lKgqOpt9RD2BQCWqvh/6dbyi7v3Pbx989zc7K5FTMSD+MPh/m1zs5NbdsxtrbdZp63JOrfMY/Txaptq+S2BuvlRnKPo3mPjvaSLHwpOlZeVH8ivXDmYP487Q4PNdq4dbHm6Lm3yW99YXUQo7Uq1a3JfL+29gCaPlCuZfxMr9cf8Q2F5WLZ39+yuyY9u3rNn15rsb6/Z12Z/43mmrK/WpH01stC69fDxaDtdVuJ8+6q5n5f/Ivhjq/c8tHP17n0Pr9r20OYHZh+Y/dCGqXVrN9w6tf5tqxuNmsr+dmnpTcnjQi09e7THZl3Ell4/UKrkUmw0JCQkFisxHhan5qHBu0912vxUxv87O4//41Ynbvjz+Rnanf+fiKf5s9fnT/PPxMCRXs//T7Q7m19cGLAyCRyIgQNO8wMAAPDqEA9HxqOZ8aD0gbc8/45O5Srj/wO9/f7/Is3/X0xd/5520/zfHEtMtZv/P53mv5j//0C7+f/Taf6L+f+PXIb5//cWgaRLfm3+fwAA4NXg0s3/33V6//QGAZUMXaf3T28QUMnQdRr/Xm8QcM7z///tL9asDx1Uxv+Hehv/m7gfAAAArhzX3HHj9zrFK+P/I72N/y/9/H+h3fX/K9sFpttNDGj+PwAAAJaodvP/ff99O9/ZqVxl/H+8t/F/vOyiryV3rPXlsWxOu5DOaferseInAwAAALA09IXJycEe87ZMjHr7+S/zVJwKtEO67NCnjp3b7/9P9Db+b/ldxoOHb31u6AN3vfDyY688uf90/Ys3zJ//BwAAABZPr8clAAAAAAAAAAAAAACAy+/xq7+64LwAUeX3/2FT8/V2v/+P9/1ruWnimXwywANxZv3PjpvmDwAAABbXI7e/9Gj898Dn/vi/O+WtjP8nehv/x/sL5PfBy269dyLe/+8T4yE0b603kQWeiIv74HgIr2+mpmOJ7IZ674klprLAE3HCxJtjiZnp1qqWxcDxJPDzsTxwIgk8EwP5UYpj8caAfzIWwvpmalNriZ2xxEQSuDsGViaByRiYSgIrYmBjEvjFijwwnQT+OQbymw8WffXVFXlfAQAAnIt8nDXY+jSk47zjA90y1Lpl6LqIkW4Z+rplqLfJEJ//TVyHwfJ8/HmG+NJgWutwUkslQ7wZ3vk3vZiu79nWnGnByqL7Y8GJ1pwxw85/ueXzoYPK+H9lb+P/y3j///Ru/htjYGUS2BkDG5PAzKY8cOSa1oD7/wMAAHBla3f//7HX/fWhTuUq4/+p3sb/8UDEa1tyx1q73/8/f37Pe7+yr7nKJ8dCeGM5sP3g9qsaicfHQnhLOfDUvTc3R+0H0xLfeuGOnzUS96WBd696zZlG4u1JYCZ20nVpIB5VObMiCcTu/UEaiP1xPA0M5YFHVmTtqKV99V+jWV/V0r46NZpdXlFL++pro9kyamkDDyeBooEfTgOxgXflgb50rb6yPFurGBiNRf9yeXHRBwAAV6a4FzgY7t82NzuV/oT3+oHWx6jlluUfr1Zb63HxP4q3Jr/32Hgv6f50X7ReVDUY6o0mrKnsrpaz1JqtvDi1dOm617Zpcre7vfe1KZc6164bat+i4axFk1t2zG0d7Nrwdd2zrB3ommVNZbBTztLX7NIeaulhXXpoUY9908Mqx+d9YXKyP8n1uzE4EVp0+0T0er++8n3+230KynmOfuo/XupUX2X8v7G38X9sz/JQ+jh/Mtb60xUhfK02fzSiCKwazQKxuaNxeHzDaAhXlfqhKDE7kpUYShYcnh7ORqhDaVXfGM6OMcTn93z/O099ppE4PBzCm0vvVbGM5+vZMobTwE1DWWAkDewYyALxyo8i8PW+LAAXrNgoxA9U/lOXwsTC5dp8/l4t9wRNm1e5BmqBfAttcxdLPX0hv6aqcG5vW6U6FkXl63HCt20pftuCb1t5RyrfQzk7H6qHvq2z92/eO7cnvlLek61YpPe5vJfaS/oifA4PnP/adldPV2Aq2XxMLVxu4c9hLVb34OFbnxv6wF0vPPbKk/tP1794Q8+r0UYcKDz9P6+5qty9i60e8s/cktueTNueLMX/Bia8bSGEQ38x/OFO8cr4f7q38f9A8tj0UuzM3eMhvLXUuSdj9//eeLYdLAWyreTV1UB2yf1PxtpuOQEAAOBiKw53FMcLtuWP2Q/C03FyNf/0OeaPxys2Lpi/1/Xe//QfPtEpXhn/z3Qe/y9LVtP5f+f/WSTO/y/oSj8UvSx94cAFHYquVMeicP5/QVf6t835/wU5/+/8/0Kc/+/C+f8FXelvW2UvaaedrhDC2esHH+0Ur4z/d/Y2/v8tm/8/nc2/mP8/nbS/mP9/pt38/zvbzf9/wPz/AADAomoz0Xw6zqtMzl/JkE7OX8lQSzKc+y0Guk6j/yqf/79WHMDsef7/g39+257QQWX8f6C38X/8OIyWl75U5v+f2NSmxMZNratbBA7FwE53DAAAAOAyikcW4kXvvc4wCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOK666UzmzvF3/TdL33hlr53Pf/t3xxc/9n7pn4cwrbm67UsXHvHmR+eue4jd2745p1ffuz0xN2P1PNyg/njDS25Y60vj4VwpPTKaEz8aqzxZD5wz3u/sm+gkTg5FsIby4HtB7df1Ug8PhbCW8qBp+69+ZpG4mBa4lsv3PGzRuK+NPDuVa8500i8PQ/U0tX9sxXZ6tbS1f3MihDGS4FidR9c0VpVsYx35YG+dBl/NZotIwZGY9FHR7NlxMBcLLFtWQirB0LoT6v6p3pWVX9a1TfrWVX9aVUfq4dwWwhhIK3q34eyqgbSlj87lFUVA9e+4diLNzUSR4dCWF0OPPf+o+sbiV1JoFj4+4ZCuLHxkUkX/tXBbOGD6cL/dDCE15UCRVUzgyE0FjaUVnViIKtqKK3qywMhXF0KFFXdMhDCvsDlEjckW8sv7t738PbNc3OzuxYxMZQvazjcv21udnLLjrmt9WSd2qmV0mc/fv5t/9GL+7c0E/ceG+8lXazXVHldnp2uvFh+PpA/HWy2c+1gy9N1S6XJI+VK5t/ESv0x/1BYHpbt3T27a/Kjm/fs2bUm+9tr9rXZ3/48mvXVmqXSVzeVK1m956Gdq3fve3jVtoc2PzD7wOyHNkytW7vh1qn1b1vdaNRU9vditPTopW/p9QOlSi7FRkNCQmKpJfpatm5TV/p2vLKjP7+ig6He3EBXhhXlLLVmKy9Go28/j9bmzrXRlSFJpUVrKgOHSpa13bOsq4wZ5rMMZ1ma+4KVwWG5pr5ml8bnfWFysr9dP0y0Pi137y8voHtPxa7rMQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgUgAAAP//88/2Fg==") r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)=ANY=[], 0x32) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000100)={0x11, 0x22edef7e, 0xfa00, {0x0}}, 0xfd0e) fallocate(r2, 0x0, 0x10000, 0x20000) 2m25.633440968s ago: executing program 1 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) (async) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x10000, 0x44, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MAX={0x4, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x41f0, 0xffffffffffffffff, 0x8, 0x34d}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) setsockopt$inet_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "316012d40cc2031f", "7ebfaf3e4dbc07773f84335341394c19746024de4ebae49cbf1a9f4fb354c941", "45634bb7", "759c9ecbc5796741"}, 0x38) 2m25.28883078s ago: executing program 1 (id=8): r0 = syz_open_dev$video(&(0x7f0000000000), 0x81, 0x102) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0xa, @sdr={0x41416770, 0xfffffff7}}) (async) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getsockname$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) read$msr(r2, &(0x7f0000001d00)=""/4096, 0x1000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0), 0x8) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x96b, 0x2e0901) open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) 2m24.973322779s ago: executing program 1 (id=9): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000001f00)=ANY=[], 0x3, 0x210, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) getdents64(r4, 0xfffffffffffffffe, 0xffffffffffffff15) 2m23.294115453s ago: executing program 1 (id=11): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b408000f000000007311390000000000020000b8050000ff020000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$UHID_INPUT(r0, &(0x7f0000002100)={0x8, {"6a6716daa6611fe20417a0e26f4efbed6cc23cfc2b3a5c377c992e4d64c0ad64b92c0941a516de51dc867c4ac797d31681429bbfa4fbff7618574429edc1efb5273101ce0f867e8725decd78291b7776f28bc0696b6d381da6cdfeff64a3f6c8ea4c1b52ced9a975c764e9e28e8b272e584becd1d09b8688367900caa29a145319bb77c60f21f1c87afae5feff1798a397871b333329ccbfc0ebfcf2ed0bae3901ca741d8d51c008dc89f3f18478d408c77899215b22414bf2163866ee46c23d8c29726d0921b50729ef2ea7bd32f03d26bb68613ff007f90df8dfd5bfe58b945f1f91d61bf23f6f2f5fe458e951c8f39e4b0d8648477b4d81e4d1a5e37c42b933d1a88e3d51d2ff9adf507ec6655bf9d099651dcd4443723064a110fa05e930458dee451293498bf32e263d3588b50d60c71a4bee4474a76a69312878d061c91015b33f7fcf2a4ec7f965fa24ab324578f13ef2983208337dc57b84275096eb90290bcc3c17f306c37c963069b9ce78a147d690c5817490061b1a3aa479a3706845b28e6f799e217b4353be43021a35b7ea0dbc10ba24621d6764097c473fb883b3e5a9b35dff7fdf48f7ceca5e710790094960dac66ec9688a454ebc5c4a902273040c5f1519d909525c43a614bd72946015c992efe58d3a713843b4e0383e8df28c0870607c169140a617d930503698ffea28dac73ed85418c1d90d2e4cac25f91ee9afa87aee423bacc86aa42a682517fd2578042bae2b80ebeb77224135750352509614903ea5dcb9d69913a5b6f05916df60cdcbc97880821aee94c37f2f99205285909a70e128c2e93a15f2e474abc167540f948ed5e57da9a7d3729cac8ecce554b7150c4a1da8ebd3223d03adcd253706984f6f9ff1cafaf0171d88a5aa897ba6a4d250168265e1d2779025b2030457896ef0b779c06c407f33b84167b9b81c428f424940eae08d25f3be3243441c5116ec7aa54cde485b71c1265c54ac5c1739843b362e516dd4d9e48aa3db0e45d5a8e59d4f520a1cffddbb68d62e0b2725eb83b85f881f6f385b4d83cfc5a926c0313d203c028d329322876a52010c1d77799bd01b62470a4651e2371424be1a790bf0f36c047aa29a0e2de1b791988407462e0b559e5927a91d685f68f1dd6491409e0e9d3684b278bc25a804d6822f31d2a03dfb285cd86c6cb68862ca3d20699900de1c54b2cda6657cce26b51c3affb9260f2e6d2564440e02cc423512ac9929982a4571ec2da3f0bd5383909c1237ca5024439ec52fff82a6247d4fbff677bf1b4c3dba48aaddb23341a03b66438426b4bdb8b0deba90ecb1783033a5ab514f4ac3bf0fbc6e07debbde4e5b4e10596909f23d21e20eb1154039c7a42a3c2299ad144251488c114d7c54f2e88e9cb44f46071992a5c86001f7f120c03bc838df10e6d5c7ed29eb7f9a050683ab52da1d30bc0085fa5bfdf2948ffb5b4a6df83de76539a6a896c6a29c72598729cb7a8e24cafdbf60be49afcba07617a76217f62bbb45c6d69cdb8956a6ed5b7ee5d5f2bdb4a0dedd9c8ba90c5b4104c0aa0af911799114ea35e69bb963ad5be926cf1214ee2058007b384b90e5f33eb342b203e4d53aae5911dc6750384145886243aeb9d6cf222ac3c7b7957344dca77c720596199dc321e01d94462553176f127c085a8c2d657c31e4f2a418b54cfccd9794ba42929d2e8861635e4e25bfff8b000864570dddb7a7422a1cbe8c1b818517f2b879912fecddffc832c8de722da5e3c66bfe2ac4b62a5e88dea206f6ece626233ffe81daffe64893ba3958d979580ac8225a27bfa77a4edf3dcd494ba0fc69c698d609dfcd56cdbe18f1e4a7b862a67c791e948b137c6fab2d404e68cdfe73602c741c07db609b0418a2cf813fcc4d9aaf8b4465360ef7280c266c96813e171212f9b72d1070bf13135e5c4d213823a6ca2cdbd91e3087c8d3cd886c766232c00581f39bfb9b89652c47768cc2ba89e10f397393d5032f44c6b8291eaa1aa3e1bc570d54d4a27fec5f9a4ac60cd94e13429241fa9c8d4cd41ca8ef9037d9ac7de677e0e033239761c1cacdd286fb87bda3e9b0b80273966430a083376c99b49832aac9fa0a5b98ff7d9f4f282db9506716fb18575eeb60a5ecb0179e69a565ff12a9b8736f94dd92c97fdd6d39710cdbe0f7af60958fd2f90ceb6cfe85caa7558be169e32eae590abe8c29985bf96573b9d6f8eced7f6b0ef8e0960ee4dafb5390bc6fdc1725caecff1f28dd05824dba684607c2d03c6193f539630a4977ac5d808452318f218e922e13aa17e95b5c48ce137fb2890e6254a20fbaa7bb19760b0b04d3836fe5d3243b2d54b138f0f1568a03405459444b5506a35f1eeedab1b49d55004a30b18c86ebb414a7047f0c60965c35eaf05f4b8c47a19e0b7116d3608cd4a72c3082290537ca03d9b606ebc06c06d0e15b6b6e2846b508811439ff6b92de9809cadedae79c71e60c99af476e6e01ccf3bdd2122e73c17bf6a4a0bee781b3bf3a377c7fa7cb40c787b0e5adc08b400e34a5548781aa7fcbd93bd105c71e7395dee8f7f3314831aa6c8985d30cad99be218a70d875c94aa8aa1d72eb1ded4b05e4c9ed479dd6d753c3b4c8a16651bb81260776aea88f061615c32ca58db9e92106a818cf1bcd4d12dd635440ceb7a744faacde01cb5f775e4a135222f41ed7f24d0857cd7b4687b773096195f0299f8fe7ffdf9000648a9522afab501dcba60b1cb4f54863f8d5249eea3c746140e1bb365927da99ac574a95e51b911f5a4d8a465bb0725feba4eebf4495bc9d8c67adc55db74bfcd3bf36793be9c6f1415fa1cb7de5d19a6fbd41cb3c9d1a0ea506726e0cf923a0a0c69090263d9003c67c55a0963dbe72c8bd8887d0f3b40179c3ae5bc884519c4fbbd0fe605d6393386c2042583cb6494c785151d5c28ea8b0ce2b98517f5c23d2cc6817053d1d05b67693c97c237055141872d5636eda021905a264cf2a92344ded76bd691ac7b410092ff0bbe40878276c734f86d00885846849b6957b12dc063a4c98a80aaacbaf218b73a805e8bf578910ba4478c6dccb16c3e0cc7365c65bdc959b4d04b426ac997ca70cc9cc90208d679ba4fd66b864d268db5816893e9c5be06e169699f5e693134a58e7ba09ad576e33f142636032d9ff1455bd04156ea64baad9bba0c8a160ea1dab30db872928706e6a2d3f50f482b4fb0fc93ad73ecedb2fa6ee52b763a651a21f997f0e54b46d940f339d2760fb674600e2ca061367c9f99ea35340d520efdedef18a8966539487044c1dcf9a084e7caec664fdfe55f9658ad42e218749d7f5762b66f895b8d802c64dac8c078269509b8e51e317900f177622555bb6d840dae14fd15d74157527a316da53f41e3ed4454366b2f7f246af218b9726f81a4732ad89ac5a0db1a6d51e7b1757656e4316e4817bb20aff332e2d3096b327d1fb8dcd13113c9daf9f4a64ef6b06e22ebf831dba715b9736a22ac8498a1fa285d811f42832568caf3843c35665519d2a8dbf2959b319810ca28186143682382426086b22384a9c2519550b6eabca673147eafc3c314011bf4a201abb4b0bf7009e68f0582c32ad636dc66c1b4f92981edcaacafa332c659f4a53b0a152f875ea42c2f67342b5ab02270d8e5b40e0a782e64c952aed5d489ccdcf70cb3e5f2e3cd3cb618061d4bb3f213502a4e2d328f9b7e4ef9acb06bf2649ff3f575072095d23008e590119a19f17df0a2a23cf1e6434085e32eb21184413d68406aa13bf15619611fc8cb32a48441b71af3448f424b298b109ad7f2675c9ac123c81cdcdf838bf3954d78fca7dd5979c0733afb9ca35cab85f475f2a136c09642ca37b10111e7a68263398c70a8629fbd0cf0e88ec3c6e8c06043990d848e04e6d221473289d36c512190ba391c6e6fa4df00298fb04f37bd1e9942632c16759c0955863e3d853b4c9cd52cd785aee1d8174afdd60dbf67f7997c98e8dd1845d06103526ab6934928403e183d3d33b96140184d175fe977ffb88b05cf7ac00c92f23e24092a0927d71b11785b90b37fcb01c33e1e237e3949c589fa3966fc724555c467a799cd67d6fa820ba2dbb5832dc7eb16e70a424e2586014816a98b6825d6bf8f00e4212f9e8bb5175accb1823a1d5451b0d91105c76f98a0924aecef09fd1bc91cc1a29c317024337ff778ff9bfc9894f3749d34e8a37ef1fda944cbaf263ea87f9a4171a8abdbc749f3b0f1f3f7f989a4fe564bdcfd82a8b0ebaa7b592f6c829cf1ee9f7396111eb37ad665c65c48783b63f82b840c4230bd7bff317900018d39389d1078d0d8643c67c2657c5c677862367f60e2524648970a32338a8a11635b571cf1fb1cf2379c6d095dac257ae60b46b928e469e84ed25555a50cc9639a9f87d6abab84525d6764cb76f74f98b14877d9dceafb2c2d6cfda26f247bb1333804b283cc1cf0502105ddce373e8f465562467d0b19b0ec005816bfa84d5f49bb1329b97240e0b16a8782711c33d127bd75ad83ce74504ee427c3ce361010381efd9f290be4ab4ca2a5ab173d373f9b648b00ac38f1ec26980feb7e74a31d2e77337d82d4fa4d88e37ba9e77ddc2814ebb01024905acd6008775bf15ca523eadfbe6f6604a820373cf292b57eadbeaeddb68cff3a5b88887b4e3c0a3dd329280bb7578d68fcf8fa1e16f5cfb4a3fbae2095e42314fec379ab0cfe152fa40d788a59ed01c42beec6f10999ef307b72a037124fdd623ea60fcc2a71e02fdd7cbd7feeb30a4a8514115b30c4fa741cf2f35adecf93ba34c6c5798dda67704cd5d6fecdb31669b017f3b31bef7a767f798730f76caa1d38b5d92d495bae2f3a80ea0ce8bb6ebd3921fe293411780fb09a6699a49b29620d56a02c2a8415635a67ea51b69d84aedfecabdfa7a79ecff94e2e6b9d26e8fe85ded4b3af27e06cf19ed72531f2e796bb0d9ef24d9309466fba0438b971a308d64254327ee3cfce2d6b28f91cefbea05572183cc9f9860ea0f6e4c3e0c436c5ad58b28219d1acb28a66cb707042be7f6e8f087ff43dd7f6c6682c9ca8fc4030d7fef69352e294e5e34c7b3862078ccef0b61d6d5c0ef20d192da266d0a5c9ff56c49fb29b84f31eacfe0fa215b1b363834d597aa290383c7845a811680a47069cc5d18d4a723dfa759a2c3bf7ff386492a9033d4be346b3e7b5381d7e2ea578bff8befdf54f69f497d2c4ee5de957c71f705246269707d39a208c30b611afd8a587f4537ed91e41735b29fe604036adc45ace04f7a18b650c0ba0523b83788fcb0d59a98206dc1a813c86332e10f305eed5ffea816d5f1eec47e4496baf0df157a70de7090d3b4695a975175262f3f3e997acebc4f00003af5528aea6a0ae22f094563000983fa62ee915d25319c01b70ea0b682d311ed3f225db56711c7ba06b8517185b62b27b13e4df500a2bc14a7e60d2724d4a50711df8383b5896a7e78c60ce84c94d5ba731040d60c646aa622f8e01924540f390cd5bcbb62f14ec1efc0bc897b6bcce1b6590516f78f563340f86d3e8730a26e1f623cab2201b1427380c54102b5112fab1503f91fa7ff2c15786e9b897e48fd5673809d72e2b5b966d2f4c8cc816c6d54047906ae3c05c24fcc6d33518694d2b3466b608ce040a7b7499d45bef5f11c84ae30a6e1541fd38a7bec065890c8d4b84087d7d9fc83e2bbbb80339463f8c99afd654dd04da6c471345c031f8710cfbd10c3319a28bd4f14a89c3d77fea535a6b89b6ef3c3b4f8e1fac73fde7a", 0x1000}}, 0x1006) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x2, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x0, 0x1}}, {{0x4}, {0x3, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x48) 2m22.243675139s ago: executing program 1 (id=13): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x47}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x61, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x6f, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, "7faa77"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xfff, 0x3, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x1, 0xf41d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0xc, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x6, 0x64}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0xe, 0xe}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xf1, 0x0, 0x6, 0x40, 0x3}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x430}}, {0x8b, &(0x7f00000001c0)=@string={0x8b, 0x3, "19738946c9500c7978f5ca31f50e6e3f9f66333b5a60158af1df9f18d6e8a526d9242ac8e3e5b0aa5407201899f581e3f95e13ac6065a748993cf60829c05feb7d3517af0f940485ac05e2539e01411f452498c9ece1a9b76db15041ad12c94f4a9055a7aff9af579294287f037637227c7c8f31a17e5359b6d318c8a885ca2f07fbd3b76196df919d"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3401}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x0, 0x23, 0x3, {0x3, 0x21, "e6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m21.504730737s ago: executing program 32 (id=13): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x47}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x61, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x6f, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, "7faa77"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xfff, 0x3, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x1, 0xf41d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0xc, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x6, 0x64}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0xe, 0xe}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xf1, 0x0, 0x6, 0x40, 0x3}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x430}}, {0x8b, &(0x7f00000001c0)=@string={0x8b, 0x3, "19738946c9500c7978f5ca31f50e6e3f9f66333b5a60158af1df9f18d6e8a526d9242ac8e3e5b0aa5407201899f581e3f95e13ac6065a748993cf60829c05feb7d3517af0f940485ac05e2539e01411f452498c9ece1a9b76db15041ad12c94f4a9055a7aff9af579294287f037637227c7c8f31a17e5359b6d318c8a885ca2f07fbd3b76196df919d"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3401}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x0, 0x23, 0x3, {0x3, 0x21, "e6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.041357495s ago: executing program 0 (id=417): prctl$PR_SET_IO_FLUSHER(0x39, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r3, 0xc08c5102, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x5, 0x2, 0x4, 0x0, {0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0x32) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x1c}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r8, 0xffffffffffffffff, 0x0) 7.021948146s ago: executing program 2 (id=418): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r0 = userfaultfd(0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002040), 0x20000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000002080)={{0x7, 0x7}, {0x0, 0xd6}, 0x1ff, 0x6}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000000)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xcd0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x1007, 0x0, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x63, 0x0, 0xd, 0x2f, 0x0, @local, @empty}}}}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) preadv(r5, &(0x7f00000015c0), 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="20090100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 6.87732048s ago: executing program 0 (id=419): r0 = syz_open_dev$usbfs(&(0x7f0000000380), 0x3fb8, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0xfffffff8, 0x25, &(0x7f0000000040)={0x60, 0x11, 0x8001, 0x1}, 0x53, 0x6, 0xd0000, 0x0, 0x9e, 0x68e, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 6.677483848s ago: executing program 0 (id=420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 6.459038528s ago: executing program 0 (id=423): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x29, 0xfffffffffffffffe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc)=0xfffffdfd, 0x5, 0x0, 0x0, &(0x7f0000000100)=0x2, 0x2000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000080)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0xc45f5000) sched_setattr(0x0, 0x0, 0x0) memfd_create(0x0, 0xe) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x1, 'sh\x00', 0x0, 0x6, 0x39}, 0x2c) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r3, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', &(0x7f00000005c0)='//\xf2/\x06\b/\x18\x17I\x97\xa0!\x90)\x11\xc0/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmDv\xcb2W\x00\x00\x00\x00\x00}\xf3\x9d\xe4_\x05\x9cqf4Y^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeasW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x2}) fcntl$lock(r7, 0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x81}) timer_delete(r6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r8}, 0x18) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f00000000c0)={0xfffffffe, 0x1, 0x6, 0x7}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x123}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r2, 0x20, &(0x7f0000000140)={&(0x7f00000005c0)=""/255, 0xff, 0x0, &(0x7f00000006c0)=""/220, 0xdc}}, 0x10) read(r5, &(0x7f00000002c0)=""/153, 0x99) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000b80)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) 4.897424071s ago: executing program 4 (id=427): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x8000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9d) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 4.57870844s ago: executing program 4 (id=428): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000086d0404e100000000000109022400010000300f0904000004030000000921faff080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x0, 0x1, 0x6}, @global=@item_4={0x3, 0x1, 0x0, "d83f43e0"}]}}, 0x0}, 0x0) 4.498547588s ago: executing program 2 (id=429): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x31, &(0x7f0000001600), 0x4) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180), 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2b", 0xf) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 3.325413305s ago: executing program 2 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x30}}, 0x0) 3.266157531s ago: executing program 2 (id=431): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x3}, @local=@item_4={0x3, 0x2, 0x5, "f29788a7"}]}}, 0x0}, 0x0) 2.957513809s ago: executing program 3 (id=433): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='reno', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, 0x0, 0x104) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) 2.054925761s ago: executing program 3 (id=434): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x8, 'sit0\x00'}) 1.867178369s ago: executing program 0 (id=435): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = userfaultfd(0x1) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x2}) fcntl$lock(r7, 0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x81}) timer_delete(r6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r8}, 0x18) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f00000000c0)={0xfffffffe, 0x1, 0x6, 0x7}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x123}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r2, 0x20, &(0x7f0000000140)={&(0x7f00000005c0)=""/255, 0xff, 0x0, &(0x7f00000006c0)=""/220, 0xdc}}, 0x10) read(r5, &(0x7f00000002c0)=""/153, 0x99) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000b80)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) 1.866906289s ago: executing program 3 (id=436): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='btrfs\x00', 0x210818, 0x0) 1.521473661s ago: executing program 4 (id=437): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x103, 0x0, 0x0, 0x0, 0x0}) 1.192321971s ago: executing program 0 (id=438): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.123269907s ago: executing program 3 (id=439): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002b80)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000040)='@', 0x1}], 0x1, &(0x7f0000001480)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x2}}], 0x20}], 0x1, 0x40) 1.077103161s ago: executing program 4 (id=440): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0, 0x2, 0x20, 0x5, 0xe5, 0x1}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x0, 0x2, 0x8}, {0x9, 0x5, 0xe, 0x3, 0x8, 0xc0, 0x80, 0x8}}}}}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='io_uring_req_failed\x00', r1, 0x0, 0x2000000000003}, 0x18) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0xca43, 0x80, 0x1, 0x3b3}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) mknod$loop(0x0, 0x6000, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) 1.031759765s ago: executing program 3 (id=441): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) pread64(r0, &(0x7f0000002840)=""/4096, 0x1000, 0x100000001) 702.125066ms ago: executing program 2 (id=442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74f280, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x4, 0xffffffff, 0xb}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 478.684506ms ago: executing program 2 (id=443): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000aa8cc8a9"], 0x0}, 0x0) 61.650555ms ago: executing program 3 (id=444): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400000000000000000000109022400010000000009040000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 4 (id=445): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r4, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000500)={'comedi_test\x00', [0xa, 0x7fe, 0x1, 0x0, 0x0, 0x80000000, 0x8, 0xb, 0xa, 0xfc, 0x4, 0x8, 0xa, 0x4, 0x3, 0x80, 0x1, 0x1a449, 0x3, 0x40000007, 0x100, 0x2, 0xf27, 0x6, 0x2, 0x0, 0x5, 0x7, 0x4, 0x10000, 0x8]}) ioctl$COMEDI_SETRSUBD(r7, 0x6410) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x20008010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. [ 64.770961][ T5753] cgroup: Unknown subsys name 'net' [ 64.904870][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.321753][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.000974][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.009268][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.017809][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.026012][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.034232][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.042202][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.042608][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.050645][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.057884][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.066948][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.072364][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.078299][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.087715][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.094021][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.100156][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.107917][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.113527][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.121489][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.127377][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.134829][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.148538][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.149371][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.163566][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.173874][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.576618][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 68.635693][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 68.738376][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 68.828850][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.836014][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.843647][ T5764] bridge_slave_0: entered allmulticast mode [ 68.850815][ T5764] bridge_slave_0: entered promiscuous mode [ 68.870098][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 68.891055][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.898435][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.905864][ T5764] bridge_slave_1: entered allmulticast mode [ 68.913254][ T5764] bridge_slave_1: entered promiscuous mode [ 68.920776][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.928063][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.935225][ T5766] bridge_slave_0: entered allmulticast mode [ 68.942386][ T5766] bridge_slave_0: entered promiscuous mode [ 68.954230][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.961423][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.968873][ T5766] bridge_slave_1: entered allmulticast mode [ 68.975849][ T5766] bridge_slave_1: entered promiscuous mode [ 69.021157][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.028499][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.035885][ T5763] bridge_slave_0: entered allmulticast mode [ 69.044886][ T5763] bridge_slave_0: entered promiscuous mode [ 69.082104][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.089679][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.096883][ T5763] bridge_slave_1: entered allmulticast mode [ 69.104337][ T5763] bridge_slave_1: entered promiscuous mode [ 69.122732][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.134921][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.154862][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.188240][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.211218][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.255558][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.280899][ T5764] team0: Port device team_slave_0 added [ 69.309519][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.316657][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.324543][ T5765] bridge_slave_0: entered allmulticast mode [ 69.331348][ T5765] bridge_slave_0: entered promiscuous mode [ 69.342503][ T5766] team0: Port device team_slave_0 added [ 69.350233][ T5764] team0: Port device team_slave_1 added [ 69.358117][ T5766] team0: Port device team_slave_1 added [ 69.366487][ T5763] team0: Port device team_slave_0 added [ 69.373655][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.381117][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.388383][ T5765] bridge_slave_1: entered allmulticast mode [ 69.395068][ T5765] bridge_slave_1: entered promiscuous mode [ 69.422376][ T5763] team0: Port device team_slave_1 added [ 69.472210][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.479704][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.505658][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.538983][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.549150][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.556119][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.582331][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.603828][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.610904][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.637762][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.650773][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.658625][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.690504][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.702795][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.709965][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.736947][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.749990][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.756955][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.783435][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.797381][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.886731][ T5765] team0: Port device team_slave_0 added [ 69.895705][ T5765] team0: Port device team_slave_1 added [ 69.914405][ T5766] hsr_slave_0: entered promiscuous mode [ 69.920827][ T5766] hsr_slave_1: entered promiscuous mode [ 69.953299][ T5764] hsr_slave_0: entered promiscuous mode [ 69.959819][ T5764] hsr_slave_1: entered promiscuous mode [ 69.965896][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.974746][ T5764] Cannot create hsr debugfs directory [ 69.994699][ T5763] hsr_slave_0: entered promiscuous mode [ 70.001074][ T5763] hsr_slave_1: entered promiscuous mode [ 70.007926][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.015499][ T5763] Cannot create hsr debugfs directory [ 70.071554][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.078717][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.105476][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.122494][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.129555][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.155900][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.198042][ T51] Bluetooth: hci3: command tx timeout [ 70.204229][ T51] Bluetooth: hci2: command tx timeout [ 70.207709][ T5777] Bluetooth: hci0: command tx timeout [ 70.277210][ T5777] Bluetooth: hci1: command tx timeout [ 70.293851][ T5765] hsr_slave_0: entered promiscuous mode [ 70.300842][ T5765] hsr_slave_1: entered promiscuous mode [ 70.306889][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.314747][ T5765] Cannot create hsr debugfs directory [ 70.560794][ T5766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.572218][ T5766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.584815][ T5766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.595362][ T5766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.654547][ T5764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.665725][ T5764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.686266][ T5764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.699229][ T5764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.784459][ T5763] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.794967][ T5763] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.815682][ T5763] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.825806][ T5763] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.896117][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.906888][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.916747][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.938354][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.999426][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.023418][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.069140][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.076446][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.086330][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.093458][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.121272][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.153173][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.215552][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.222751][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.236532][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.243721][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.284140][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.309988][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.351318][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.390166][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.413344][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.420517][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.451251][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.458407][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.478607][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.486085][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.526996][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.534578][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.645488][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.652580][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.755399][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.876669][ T5766] veth0_vlan: entered promiscuous mode [ 71.912881][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.943316][ T5766] veth1_vlan: entered promiscuous mode [ 72.077100][ T5766] veth0_macvtap: entered promiscuous mode [ 72.091041][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.100499][ T5764] veth0_vlan: entered promiscuous mode [ 72.110618][ T5766] veth1_macvtap: entered promiscuous mode [ 72.126342][ T5764] veth1_vlan: entered promiscuous mode [ 72.161011][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.174025][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.195961][ T5766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.206506][ T5766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.215432][ T5766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.226327][ T5766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.278105][ T5777] Bluetooth: hci0: command tx timeout [ 72.278154][ T5769] Bluetooth: hci3: command tx timeout [ 72.289811][ T51] Bluetooth: hci2: command tx timeout [ 72.308313][ T5764] veth0_macvtap: entered promiscuous mode [ 72.324244][ T5763] veth0_vlan: entered promiscuous mode [ 72.333157][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.344144][ T5764] veth1_macvtap: entered promiscuous mode [ 72.358922][ T51] Bluetooth: hci1: command tx timeout [ 72.366180][ T5763] veth1_vlan: entered promiscuous mode [ 72.401404][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.414125][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.425681][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.454579][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.465641][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.477452][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.495505][ T5764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.505050][ T5764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.513967][ T5764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.524016][ T5764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.544452][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.560615][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.646228][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.654533][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.664904][ T5763] veth0_macvtap: entered promiscuous mode [ 72.699946][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.700222][ T5763] veth1_macvtap: entered promiscuous mode [ 72.728888][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.745133][ T5765] veth0_vlan: entered promiscuous mode [ 72.764078][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.775006][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.785036][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.796991][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.812922][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.845622][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.859106][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.908468][ T5765] veth1_vlan: entered promiscuous mode [ 72.932989][ T5856] syz.1.2[5856]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 72.945515][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.962022][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.973260][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.983806][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.995540][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.033333][ T5763] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.067192][ T5763] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.075934][ T5763] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.114308][ T5763] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.195903][ T5765] veth0_macvtap: entered promiscuous mode [ 73.232733][ T5765] veth1_macvtap: entered promiscuous mode [ 73.331947][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.340551][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.363109][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.363223][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.423433][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.461324][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.487121][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.527355][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.544148][ T5856] loop1: detected capacity change from 0 to 32768 [ 73.555369][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.577672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.585973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.594747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.628472][ T5856] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (5856) [ 73.717742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.805771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 73.819774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.122252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 74.130980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.145070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 74.179803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 74.227445][ T5856] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 74.338863][ T5856] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 74.399853][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.431991][ T5856] BTRFS info (device loop1): using free space tree [ 74.446106][ T51] Bluetooth: hci2: command tx timeout [ 74.451889][ T51] Bluetooth: hci3: command tx timeout [ 74.459645][ T51] Bluetooth: hci0: command tx timeout [ 74.470433][ T51] Bluetooth: hci1: command tx timeout [ 74.504652][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.581124][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.664314][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.753401][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.854744][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.985125][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.034153][ T3434] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xff1a0598 found 0x61a24615 level 0 [ 75.147491][ T5856] BTRFS error (device loop1): failed to load root extent [ 75.155388][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.163971][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.186378][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.280613][ T5856] BTRFS error (device loop1): open_ctree failed: -5 [ 75.287132][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.295948][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.305393][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.887627][ T5769] Bluetooth: hci1: command tx timeout [ 76.893647][ T5769] Bluetooth: hci0: command tx timeout [ 76.899519][ T51] Bluetooth: hci3: command tx timeout [ 76.899540][ T5777] Bluetooth: hci2: command tx timeout [ 76.952461][ T5880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.130616][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.156253][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.318128][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.343043][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.393069][ T5888] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 77.398303][ T5832] IPVS: starting estimator thread 0... [ 77.557947][ T5889] IPVS: using max 23 ests per chain, 55200 per kthread [ 79.296438][ T5898] loop1: detected capacity change from 0 to 64 [ 79.318526][ T5902] Zero length message leads to an empty skb [ 79.371220][ T5902] loop3: detected capacity change from 0 to 4096 [ 79.378563][ T5902] ======================================================= [ 79.378563][ T5902] WARNING: The mand mount option has been deprecated and [ 79.378563][ T5902] and is ignored by this kernel. Remove the mand [ 79.378563][ T5902] option from the mount to silence this warning. [ 79.378563][ T5902] ======================================================= [ 79.416709][ T5902] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 79.439057][ T786] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.542047][ T5902] ntfs3: loop3: failed to convert "c46c" to iso8859-1 [ 79.580190][ T5904] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.586449][ T5766] VFS: Lookup of '.' in minix loop1 would have caused loop [ 79.607938][ T5902] random: crng reseeded on system resumption [ 79.767233][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 79.776867][ T5766] VFS: Lookup of '.' in minix loop1 would have caused loop [ 79.807719][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.856975][ T786] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 79.889387][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.912667][ T786] usb 1-1: Product: syz [ 79.916881][ T786] usb 1-1: Manufacturer: syz [ 79.957523][ T786] usb 1-1: SerialNumber: syz [ 79.981001][ T786] usb 1-1: config 0 descriptor?? [ 80.008755][ T786] usb 1-1: bad CDC descriptors [ 80.023906][ T786] usb 1-1: unsupported MDLM descriptors [ 80.245815][ T786] usb 1-1: USB disconnect, device number 2 [ 80.508526][ T5906] loop3: detected capacity change from 0 to 40427 [ 80.585487][ T3506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.605057][ T5906] F2FS-fs (loop3): invalid crc value [ 80.616100][ T5908] loop2: detected capacity change from 0 to 32768 [ 80.711306][ T5908] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.6 (5908) [ 80.733358][ T3506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.858605][ T5908] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 80.880060][ T5906] F2FS-fs (loop3): Start checkpoint disabled! [ 80.894876][ T5908] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 80.942164][ T5908] BTRFS info (device loop2): enabling disk space caching [ 80.967319][ T3506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.967429][ T5906] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 80.978641][ T5908] BTRFS info (device loop2): use no compression [ 81.018242][ T5908] BTRFS info (device loop2): force clearing of disk cache [ 81.025423][ T5908] BTRFS info (device loop2): turning on sync discard [ 81.058657][ T5908] BTRFS info (device loop2): disabling disk space caching [ 81.189911][ T3506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.277137][ T5908] BTRFS info (device loop2): enabling ssd optimizations [ 81.311106][ T5908] BTRFS info (device loop2): rebuilding free space tree [ 81.479149][ T5908] BTRFS info (device loop2): disabling free space tree [ 81.494645][ T5908] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.533491][ T5908] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 82.045620][ T967] cfg80211: failed to load regulatory.db [ 82.383864][ T5080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.393806][ T5080] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.402285][ T5080] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.420043][ T5080] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.429852][ T5080] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.446111][ T5080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.672767][ T28] audit: type=1800 audit(1767228585.376:2): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 82.895955][ T5939] loop3: detected capacity change from 0 to 32768 [ 83.006229][ T5939] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 83.129213][ T5936] BTRFS info (device loop2): balance: start -sconvert=raid0,soft,usage=4095..0,devid=0,stripes=2865..1 [ 83.197383][ T5939] XFS (loop3): Ending clean mount [ 83.204585][ T5939] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 83.371745][ T5936] BTRFS info (device loop2): balance: ended with status: 0 [ 83.486921][ T5773] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.534804][ T5951] loop0: detected capacity change from 0 to 32768 [ 83.650454][ T5951] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.15 (5951) [ 83.769400][ T5951] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 83.798895][ T5951] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 83.850052][ T5951] BTRFS info (device loop0): using free space tree [ 83.967709][ T59] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xff1a0598 found 0x61a24615 level 0 [ 84.017220][ T5951] BTRFS error (device loop0): failed to load root extent [ 84.180762][ T5951] BTRFS error (device loop0): open_ctree failed: -5 [ 84.223301][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 84.678367][ T5777] Bluetooth: hci2: command tx timeout [ 84.721267][ T5764] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 85.408518][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.432105][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.449877][ T5938] bridge_slave_0: entered allmulticast mode [ 85.461787][ T5938] bridge_slave_0: entered promiscuous mode [ 85.531945][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.544986][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.562754][ T5938] bridge_slave_1: entered allmulticast mode [ 85.570450][ T5938] bridge_slave_1: entered promiscuous mode [ 85.723429][ T5989] loop3: detected capacity change from 0 to 32768 [ 85.783553][ T5989] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.19 (5989) [ 85.825235][ T5989] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 85.849579][ T5989] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 85.855790][ T6013] loop2: detected capacity change from 0 to 512 [ 85.879131][ T5989] BTRFS info (device loop3): enabling auto defrag [ 85.886709][ T5989] BTRFS info (device loop3): use no compression [ 85.893570][ T5989] BTRFS info (device loop3): max_inline at 4096 [ 85.900365][ T5989] BTRFS info (device loop3): using free space tree [ 85.982752][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.009855][ T6013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.057740][ T5989] BTRFS info (device loop3): enabling ssd optimizations [ 86.064750][ T5989] BTRFS info (device loop3): auto enabling async discard [ 86.178309][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.192434][ T5989] capability: warning: `syz.3.19' uses 32-bit capabilities (legacy support in use) [ 86.757270][ T5777] Bluetooth: hci2: command tx timeout [ 86.851790][ T5763] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 87.329689][ T6044] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.633325][ T5777] Bluetooth: hci2: command tx timeout [ 89.917372][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.154112][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 90.169162][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.191386][ T8] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 90.206618][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.215817][ T8] usb 4-1: Product: syz [ 90.220087][ T8] usb 4-1: Manufacturer: syz [ 90.224942][ T8] usb 4-1: SerialNumber: syz [ 90.256145][ T8] usb 4-1: config 0 descriptor?? [ 90.282003][ T8] usb 4-1: bad CDC descriptors [ 90.297636][ T8] usb 4-1: unsupported MDLM descriptors [ 90.515562][ T8] usb 4-1: USB disconnect, device number 2 [ 90.718406][ T5938] team0: Port device team_slave_0 added [ 90.753969][ T5938] team0: Port device team_slave_1 added [ 90.843226][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.903731][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.912901][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.945970][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.974888][ T3506] hsr_slave_0: left promiscuous mode [ 90.986554][ T3506] hsr_slave_1: left promiscuous mode [ 91.002352][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.010981][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.020052][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.107744][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.126775][ T3506] bridge_slave_1: left allmulticast mode [ 91.137601][ T3506] bridge_slave_1: left promiscuous mode [ 91.144674][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.163755][ T3506] bridge_slave_0: left allmulticast mode [ 91.174096][ T3506] bridge_slave_0: left promiscuous mode [ 91.184338][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.254905][ T3506] veth1_macvtap: left promiscuous mode [ 91.263475][ T3506] veth0_macvtap: left promiscuous mode [ 91.273778][ T3506] veth1_vlan: left promiscuous mode [ 91.281377][ T3506] veth0_vlan: left promiscuous mode [ 91.658340][ T6058] loop0: detected capacity change from 0 to 1024 [ 91.709325][ T6058] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.721129][ T5777] Bluetooth: hci2: command tx timeout [ 91.781720][ T6058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.684218][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.157183][ T5770] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 93.169365][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 93.239914][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 93.255594][ T6070] loop3: detected capacity change from 0 to 32768 [ 93.268596][ T6070] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.27 (6070) [ 93.312477][ T6070] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 93.332138][ T6070] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 93.342959][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.352836][ T6070] BTRFS info (device loop3): using free space tree [ 93.360929][ T5770] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 93.384662][ T5770] usb 1-1: config 0 has an invalid interface number: 195 but max is 0 [ 93.401801][ T5770] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 93.418651][ T5770] usb 1-1: config 0 has no interface number 0 [ 93.424824][ T5770] usb 1-1: config 0 has no interface number 1 [ 93.432617][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.442004][ T5770] usb 1-1: config 0 interface 146 altsetting 250 endpoint 0x7 has an invalid bInterval 72, changing to 4 [ 93.458950][ T5770] usb 1-1: config 0 interface 146 altsetting 250 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 93.473575][ T5770] usb 1-1: config 0 interface 146 altsetting 250 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 93.483616][ T49] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xff1a0598 found 0x61a24615 level 0 [ 93.488992][ T5770] usb 1-1: config 0 interface 146 altsetting 250 has a duplicate endpoint with address 0x7, skipping [ 93.516875][ T6070] BTRFS error (device loop3): failed to load root extent [ 93.538557][ T5770] usb 1-1: config 0 interface 146 altsetting 250 has a duplicate endpoint with address 0x3, skipping [ 93.563285][ T5770] usb 1-1: config 0 interface 146 altsetting 250 has an invalid endpoint descriptor of length 6, skipping [ 93.589820][ T5770] usb 1-1: config 0 interface 146 altsetting 250 has a duplicate endpoint with address 0x3, skipping [ 93.629738][ T5770] usb 1-1: config 0 interface 146 altsetting 250 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 93.650862][ T6070] BTRFS error (device loop3): open_ctree failed: -5 [ 93.672161][ T5770] usb 1-1: too many endpoints for config 0 interface 195 altsetting 108: 122, using maximum allowed: 30 [ 93.686394][ T5770] usb 1-1: config 0 interface 195 altsetting 108 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 93.708589][ T5770] usb 1-1: config 0 interface 146 has no altsetting 0 [ 93.715675][ T5770] usb 1-1: config 0 interface 195 has no altsetting 0 [ 93.734433][ T5770] usb 1-1: New USB device found, idVendor=0471, idProduct=0326, bcdDevice=8a.10 [ 93.743696][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.756564][ T5770] usb 1-1: Product: syz [ 93.771763][ T5770] usb 1-1: Manufacturer: syz [ 93.776420][ T5770] usb 1-1: SerialNumber: syz [ 93.802521][ T5770] usb 1-1: config 0 descriptor?? [ 94.078915][ T5770] usb 1-1: USB disconnect, device number 3 [ 94.374132][ T3506] bond0 (unregistering): Released all slaves [ 94.460935][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.477124][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.537248][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.711170][ T6087] loop3: detected capacity change from 0 to 32768 [ 94.761784][ T5938] hsr_slave_0: entered promiscuous mode [ 94.781050][ T5938] hsr_slave_1: entered promiscuous mode [ 94.862344][ T6087] [ 94.862344][ T6087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.862344][ T6087] [ 94.992965][ T6087] read_mapping_page failed! [ 95.021652][ T6087] ERROR: (device loop3): txCommit: [ 95.021652][ T6087] [ 95.275706][ T5763] [ 95.275706][ T5763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.275706][ T5763] [ 95.339315][ T5763] [ 95.339315][ T5763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.339315][ T5763] [ 95.384104][ T3506] IPVS: stop unused estimator thread 0... [ 95.494157][ T6122] loop0: detected capacity change from 0 to 128 [ 95.635415][ T5938] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.687229][ T5938] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.728401][ T5938] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.755450][ T5938] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.797993][ T786] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.166414][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.209225][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 97.225659][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.254161][ T786] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 97.286341][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.294540][ T786] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 97.307577][ T786] usb 1-1: Product: syz [ 97.311941][ T786] usb 1-1: Manufacturer: syz [ 97.316554][ T786] usb 1-1: SerialNumber: syz [ 97.330826][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.338153][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.340905][ T786] usb 1-1: config 0 descriptor?? [ 97.394901][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.402115][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.422220][ T786] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 97.545822][ T6127] loop2: detected capacity change from 0 to 32768 [ 97.590831][ T5938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.605251][ T6127] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.37 (6127) [ 97.778647][ T6127] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 97.831243][ T6127] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 97.897250][ T6127] BTRFS info (device loop2): using free space tree [ 98.230450][ T6127] BTRFS info (device loop2): enabling ssd optimizations [ 98.237526][ T6127] BTRFS info (device loop2): auto enabling async discard [ 98.350470][ T6171] warning: `syz.0.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.443488][ T2895] usb 1-1: Failed to submit usb control message: -110 [ 98.492916][ T6171] loop0: detected capacity change from 0 to 1024 [ 98.508324][ T2895] usb 1-1: unable to send the bmi data to the device: -110 [ 98.512329][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.515560][ T2895] usb 1-1: unable to get target info from device [ 98.515604][ T2895] usb 1-1: could not get target info (-110) [ 98.637452][ T2895] usb 1-1: could not probe fw (-110) [ 98.674532][ T6171] EXT4-fs: Ignoring removed i_version option [ 98.747470][ T6171] EXT4-fs: Ignoring removed oldalloc option [ 98.837763][ T6171] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 98.971074][ T6171] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 99.069224][ T6171] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 99.117371][ T6171] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: comm syz.0.39: inode #1: comm syz.0.39: iget: illegal inode # [ 99.188045][ T6187] netlink: 60 bytes leftover after parsing attributes in process `syz.3.38'. [ 99.197620][ T6171] EXT4-fs (loop0): no journal found [ 99.202923][ T6171] EXT4-fs (loop0): can't get journal size [ 99.221791][ T6187] netlink: 60 bytes leftover after parsing attributes in process `syz.3.38'. [ 99.249953][ T6171] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11c, mo2=0003] [ 99.268979][ T6187] netlink: 60 bytes leftover after parsing attributes in process `syz.3.38'. [ 99.349560][ T6171] EXT4-fs (loop0): failed to initialize system zone (-22) [ 99.357312][ T6171] EXT4-fs (loop0): mount failed [ 99.416545][ T6187] loop3: detected capacity change from 0 to 1024 [ 99.470383][ T6187] hfsplus: unable to parse mount options [ 99.554671][ T5981] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.850295][ T5938] veth0_vlan: entered promiscuous mode [ 99.906766][ T5938] veth1_vlan: entered promiscuous mode [ 100.023413][ T5938] veth0_macvtap: entered promiscuous mode [ 100.082350][ T5938] veth1_macvtap: entered promiscuous mode [ 100.099380][ T5764] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 100.155073][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.190946][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.201499][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.225057][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.267116][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.307100][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.334197][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.400825][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.456918][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.497123][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.527172][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.537033][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.576811][ T6187] loop3: detected capacity change from 0 to 32768 [ 100.597132][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.660437][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.739732][ T5938] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.810752][ T5938] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.813355][ T6187] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 100.827189][ T5938] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.857177][ T5938] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.488806][ T6216] loop2: detected capacity change from 0 to 40427 [ 102.053077][ T6216] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 102.093943][ T6216] F2FS-fs (loop2): invalid crc value [ 102.127927][ T6216] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.177285][ T6216] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 102.191052][ T6216] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.228249][ T786] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.475053][ T786] usb 4-1: config 0 has an invalid interface number: 87 but max is 0 [ 102.501688][ T786] usb 4-1: config 0 has no interface number 0 [ 102.512308][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.520186][ T786] usb 4-1: too many endpoints for config 0 interface 87 altsetting 28: 204, using maximum allowed: 30 [ 102.520227][ T786] usb 4-1: config 0 interface 87 altsetting 28 endpoint 0x2 has an invalid bInterval 231, changing to 7 [ 102.520250][ T786] usb 4-1: config 0 interface 87 altsetting 28 endpoint 0x2 has invalid maxpacket 25276, setting to 1024 [ 102.520273][ T786] usb 4-1: config 0 interface 87 altsetting 28 has 1 endpoint descriptor, different from the interface descriptor's value: 204 [ 102.520295][ T786] usb 4-1: config 0 interface 87 has no altsetting 0 [ 102.602593][ T786] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 102.643154][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.647521][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.727216][ T786] usb 4-1: Product: syz [ 102.753269][ T786] usb 4-1: Manufacturer: syz [ 102.781518][ T786] usb 4-1: SerialNumber: syz [ 102.800540][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.809372][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.820115][ T786] usb 4-1: config 0 descriptor?? [ 102.868098][ T27] usb 1-1: USB disconnect, device number 4 [ 102.880171][ T786] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 102.972406][ T6201] loop0: detected capacity change from 0 to 32768 [ 103.003223][ T6201] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.41 (6201) [ 103.041696][ T6201] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 103.043324][ T5764] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 103.054321][ T49] usb 4-1: Failed to submit usb control message: -71 [ 103.071205][ T5755] usb 4-1: USB disconnect, device number 3 [ 103.108047][ T6201] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 103.133830][ T49] usb 4-1: unable to send the bmi data to the device: -71 [ 103.144703][ T5764] F2FS-fs (loop2): invalid blkaddr: 1024, type: 10, run fsck to fix. [ 103.147819][ T49] usb 4-1: unable to get target info from device [ 103.223619][ T6201] BTRFS info (device loop0): enabling auto defrag [ 103.231713][ T49] usb 4-1: could not get target info (-71) [ 103.255835][ T49] usb 4-1: could not probe fw (-71) [ 103.273859][ T6201] BTRFS info (device loop0): force clearing of disk cache [ 103.979006][ T6237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.771734][ T6201] BTRFS info (device loop0): enabling disk space caching [ 104.899765][ T6201] BTRFS info (device loop0): max_inline at 0 [ 104.905811][ T6201] BTRFS info (device loop0): disk space caching is enabled [ 105.009458][ T5763] ocfs2: Unmounting device (7,3) on (node local) [ 105.067637][ T6201] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 105.068252][ T6201] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 105.100956][ T6201] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 105.285532][ T6201] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 105.400718][ T6201] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 105.515942][ T6201] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 105.558353][ T6201] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 105.613632][ T6201] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 105.646182][ T6201] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 105.727485][ T6201] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 105.836775][ T6201] BTRFS error (device loop0): open_ctree failed: -12 [ 105.887869][ T6267] fuse: Bad value for 'fd' [ 105.911310][ T6267] fuse: Bad value for 'fd' [ 105.917879][ T6267] fuse: Bad value for 'fd' [ 106.169532][ T6276] loop3: detected capacity change from 0 to 16 [ 106.240354][ T6276] erofs: (device loop3): mounted with root inode @ nid 36. [ 106.442840][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.44'. [ 107.017657][ T786] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.201493][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 107.220519][ T786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.232969][ T786] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 107.247113][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.255160][ T786] usb 4-1: Product: syz [ 107.282272][ T6291] fuse: Unknown parameter '0x00000000000000030x0000000000000004000000000000000000040000000000000000000000000000000000000000' [ 107.287125][ T786] usb 4-1: Manufacturer: syz [ 107.328965][ T786] usb 4-1: SerialNumber: syz [ 107.335975][ T786] usb 4-1: config 0 descriptor?? [ 107.407429][ T5770] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.607377][ T5770] usb 1-1: Using ep0 maxpacket: 32 [ 107.615780][ T5770] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 107.636021][ T5770] usb 1-1: config 4 has no interface number 0 [ 107.647398][ T5770] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.677096][ T5770] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.691424][ T5770] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 107.711375][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.748038][ T5770] hub 1-1:4.128: USB hub found [ 107.767735][ T786] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 108.309624][ T6320] ptrace attach of "./syz-executor exec"[5765] was attempted by " [ 108.894714][ T5770] hub 1-1:4.128: 2 ports detected [ 109.073913][ T5770] hub 1-1:4.128: Using single TT (err -22) [ 109.516337][ T786] usb 4-1: USB disconnect, device number 4 [ 111.074692][ T6341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.762259][ T5770] usb 1-1: USB disconnect, device number 5 [ 111.896882][ T6344] syz_tun: entered allmulticast mode [ 111.962775][ T6344] dvmrp6: entered allmulticast mode [ 112.031880][ T6344] pimreg: entered allmulticast mode [ 112.109937][ T6343] pimreg: left allmulticast mode [ 114.497154][ T5755] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 114.583570][ T6398] loop3: detected capacity change from 0 to 128 [ 114.611885][ T6402] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 114.643376][ T6402] loop0: detected capacity change from 0 to 512 [ 114.651304][ T5773] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.710458][ T5755] usb 5-1: config 0 has an invalid interface number: 85 but max is 2 [ 114.720381][ T6402] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.68: inode has both inline data and extents flags [ 114.744397][ T5755] usb 5-1: config 0 has an invalid interface number: 89 but max is 2 [ 114.797375][ T5755] usb 5-1: config 0 has an invalid interface number: 234 but max is 2 [ 114.810379][ T6402] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.68: couldn't read orphan inode 15 (err -117) [ 114.834397][ T5755] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 114.852279][ T6402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.877247][ T5755] usb 5-1: config 0 has no interface number 0 [ 114.884116][ T5755] usb 5-1: config 0 has no interface number 1 [ 114.910681][ T5755] usb 5-1: config 0 has no interface number 2 [ 114.916832][ T5755] usb 5-1: config 0 interface 85 altsetting 1 endpoint 0xA has invalid maxpacket 1040, setting to 64 [ 114.928415][ T5755] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 114.938210][ T5755] usb 5-1: config 0 interface 89 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 114.948972][ T5755] usb 5-1: config 0 interface 89 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 114.959755][ T5755] usb 5-1: config 0 interface 234 altsetting 4 has a duplicate endpoint with address 0x83, skipping [ 114.970981][ T5755] usb 5-1: config 0 interface 234 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 114.981815][ T5755] usb 5-1: config 0 interface 234 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 114.997850][ T5755] usb 5-1: config 0 interface 234 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 115.031884][ T5755] usb 5-1: config 0 interface 234 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 115.046222][ T5755] usb 5-1: config 0 interface 234 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 115.067415][ T5755] usb 5-1: config 0 interface 234 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 115.095744][ T5755] usb 5-1: config 0 interface 234 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 115.113065][ T5755] usb 5-1: config 0 interface 234 altsetting 4 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 115.132559][ T5755] usb 5-1: config 0 interface 234 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 115.144604][ T5755] usb 5-1: config 0 interface 234 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 115.156156][ T5755] usb 5-1: config 0 interface 234 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 115.177792][ T5755] usb 5-1: config 0 interface 85 has no altsetting 0 [ 115.184896][ T5755] usb 5-1: config 0 interface 89 has no altsetting 0 [ 115.193323][ T5755] usb 5-1: config 0 interface 234 has no altsetting 0 [ 115.203832][ T5755] usb 5-1: New USB device found, idVendor=2001, idProduct=330f, bcdDevice=32.77 [ 115.213497][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.223438][ T5755] usb 5-1: Product: syz [ 115.237334][ T5755] usb 5-1: Manufacturer: syz [ 115.242071][ T5755] usb 5-1: SerialNumber: syz [ 115.253308][ T5755] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 115.267289][ T5770] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.275418][ T5755] usb 5-1: no configuration chosen from 1 choice [ 115.480752][ T5770] usb 1-1: Using ep0 maxpacket: 8 [ 115.491934][ T5770] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 115.535867][ T5770] usb 1-1: config 0 has no interface number 0 [ 115.547383][ T6421] loop3: detected capacity change from 0 to 16 [ 115.562525][ T5770] usb 1-1: New USB device found, idVendor=0c03, idProduct=fa78, bcdDevice=71.1b [ 115.594869][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.614434][ T6421] erofs: (device loop3): mounted with root inode @ nid 36. [ 115.615288][ T5770] usb 1-1: config 0 descriptor?? [ 115.771673][ T6429] loop3: detected capacity change from 0 to 16 [ 115.783106][ T6429] erofs: (device loop3): mounted with root inode @ nid 36. [ 115.806926][ T6429] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 1 [ 115.858422][ T5770] usb 1-1: USB disconnect, device number 6 [ 115.886359][ T6431] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 116.101087][ T6431] loop3: detected capacity change from 0 to 32768 [ 116.109281][ T5755] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.136157][ T6431] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.174497][ T6431] XFS (loop3): Ending clean mount [ 116.191502][ T6431] XFS (loop3): Quotacheck needed: Please wait. [ 116.250906][ T6431] XFS (loop3): Quotacheck: Done. [ 116.274423][ T5755] usb 3-1: device descriptor read/64, error -71 [ 116.424677][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.557161][ T5755] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.691277][ T6442] loop0: detected capacity change from 0 to 32768 [ 116.698866][ T6442] xfs: Unknown parameter 'nobarrier' [ 116.709844][ T6442] overlayfs: missing 'lowerdir' [ 116.807555][ T5755] usb 3-1: device descriptor read/64, error -71 [ 116.809753][ T5763] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.947232][ T5755] usb usb3-port1: attempt power cycle [ 117.210521][ T6446] loop3: detected capacity change from 0 to 512 [ 117.225900][ T6446] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 117.253031][ T27] usb 5-1: USB disconnect, device number 2 [ 117.275398][ T6446] EXT4-fs (loop3): orphan cleanup on readonly fs [ 117.306599][ T6446] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.77: Block bitmap for bg 0 marked uninitialized [ 117.342413][ T6449] loop4: detected capacity change from 0 to 64 [ 117.381580][ T6446] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 117.397241][ T5755] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.408867][ T6446] EXT4-fs (loop3): 1 orphan inode deleted [ 117.428867][ T6446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 117.439280][ T5755] usb 3-1: device descriptor read/8, error -71 [ 117.652260][ T6444] loop0: detected capacity change from 0 to 40427 [ 117.668698][ T6444] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 117.678016][ T6444] F2FS-fs (loop0): Image doesn't support compression [ 117.684773][ T6444] F2FS-fs (loop0): Image doesn't support compression [ 117.691570][ T6444] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 117.706134][ T6444] F2FS-fs (loop0): invalid crc value [ 117.722636][ T6444] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.143715][ T5755] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.180032][ T5755] usb 3-1: device descriptor read/8, error -71 [ 118.219408][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.799498][ T5755] usb usb3-port1: unable to enumerate USB device [ 118.843183][ T6444] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 119.016766][ T6460] loop3: detected capacity change from 0 to 8 [ 119.058432][ T6460] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 119.071683][ T5773] udevd[5773]: incorrect cramfs checksum on /dev/loop3 [ 119.110512][ T6461] loop2: detected capacity change from 0 to 1024 [ 119.113823][ T5773] udevd[5773]: incorrect cramfs checksum on /dev/loop3 [ 119.164018][ T5765] syz-executor: attempt to access beyond end of device [ 119.164018][ T5765] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.166863][ T6460] cramfs: Error -5 while decompressing! [ 119.212421][ T5765] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 119.219379][ T6460] cramfs: ffffffff96fc9388(26)->ffff888044f97000(4096) [ 119.263585][ T6460] cramfs: Error -3 while decompressing! [ 119.348957][ T6468] loop4: detected capacity change from 0 to 256 [ 119.631190][ T6460] cramfs: ffffffff96fc93a2(26)->ffff888056d11000(4096) [ 119.977534][ T6460] cramfs: Error -3 while decompressing! [ 120.073186][ T6460] cramfs: ffffffff96fc93bc(16)->ffff88804a66e000(4096) [ 120.206257][ T6460] cramfs: Error -5 while decompressing! [ 120.326248][ T6460] cramfs: ffffffff96fc9388(26)->ffff888044f97000(4096) [ 120.679182][ T28] audit: type=1800 audit(1767228623.316:3): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.79" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 121.175266][ T6482] loop3: detected capacity change from 0 to 2048 [ 121.366896][ T6482] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=26504, location=26504 [ 121.410394][ T6482] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.232728][ T6470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.351882][ T5770] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.526005][ T6493] loop2: detected capacity change from 0 to 512 [ 122.557541][ T6493] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 122.586256][ T6493] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.597216][ T5770] usb 4-1: device descriptor read/64, error -71 [ 122.630267][ T28] audit: type=1326 audit(1767228625.356:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2b38f749 code=0x7ffc0000 [ 122.688974][ T6493] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 122.707882][ T28] audit: type=1326 audit(1767228625.366:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f7e2b38f749 code=0x7ffc0000 [ 122.736136][ T6493] EXT4-fs (loop2): 1 truncate cleaned up [ 122.744315][ T6493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.763950][ T28] audit: type=1326 audit(1767228625.366:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2b38f749 code=0x7ffc0000 [ 122.797390][ T6495] loop4: detected capacity change from 0 to 4096 [ 122.807558][ T28] audit: type=1326 audit(1767228625.366:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7e2b38f749 code=0x7ffc0000 [ 122.862255][ T6502] loop0: detected capacity change from 0 to 2048 [ 122.877248][ T5770] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.885075][ T6495] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 122.929149][ T6502] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 122.973385][ T6502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.040496][ T28] audit: type=1326 audit(1767228625.366:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7e2b38f783 code=0x7ffc0000 [ 123.088544][ T28] audit: type=1326 audit(1767228625.436:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7e2b38e1ff code=0x7ffc0000 [ 123.147996][ T6507] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 123.165335][ T5770] usb 4-1: device descriptor read/64, error -71 [ 123.317775][ T5770] usb usb4-port1: attempt power cycle [ 123.436761][ T28] audit: type=1326 audit(1767228625.476:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7e2b38f7d7 code=0x7ffc0000 [ 123.530763][ T28] audit: type=1326 audit(1767228625.526:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e2b38df90 code=0x7ffc0000 [ 123.580340][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.607443][ T28] audit: type=1326 audit(1767228625.526:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e2b38f34b code=0x7ffc0000 [ 123.728627][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.87'. [ 123.867439][ T5770] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.920769][ T5770] usb 4-1: device descriptor read/8, error -71 [ 123.988629][ T6495] bond0: (slave bond_slave_1): Releasing backup interface [ 124.045732][ T6521] loop0: detected capacity change from 0 to 1024 [ 124.122830][ T6521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.208708][ T5770] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.275023][ T6521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:444: comm syz.0.90: inode #398253073: comm syz.0.90: iget: illegal inode # [ 124.307227][ T5770] usb 4-1: device descriptor read/8, error -71 [ 124.385787][ T6521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:449: comm syz.0.90: error while reading EA inode 398253073 err=-117 [ 124.434047][ T5770] usb usb4-port1: unable to enumerate USB device [ 125.367235][ T786] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 125.579677][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 125.596077][ T786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.629371][ T786] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 125.665574][ T786] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.680999][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.713915][ T786] usb 1-1: SerialNumber: syz [ 126.021280][ T5770] usb 1-1: USB disconnect, device number 7 [ 127.004603][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.476222][ T6581] capability: warning: `syz.4.102' uses deprecated v2 capabilities in a way that may be insecure [ 130.306506][ T6588] syz.3.103 uses obsolete (PF_INET,SOCK_PACKET) [ 132.505729][ T6633] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 133.162520][ T5777] Bluetooth: hci0: command tx timeout [ 133.171086][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.177910][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.267319][ T786] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.451393][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 133.469205][ T786] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.687344][ T786] usb 1-1: config 7 has an invalid interface number: 29 but max is 1 [ 133.695475][ T786] usb 1-1: config 7 has an invalid interface number: 29 but max is 1 [ 133.717687][ T786] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 134.122542][ T786] usb 1-1: config 7 has no interface number 0 [ 134.160460][ T786] usb 1-1: config 7 interface 29 has no altsetting 0 [ 134.286886][ T786] usb 1-1: config 7 interface 29 has no altsetting 1 [ 134.324857][ T786] usb 1-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=5e.f0 [ 134.361291][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.409124][ T786] usb 1-1: Product: syz [ 134.443881][ T786] usb 1-1: Manufacturer: syz [ 134.469304][ T786] usb 1-1: SerialNumber: syz [ 134.780690][ T786] usb 1-1: USB disconnect, device number 8 [ 135.720742][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805df95400: rx timeout, send abort [ 135.730816][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805df97400: rx timeout, send abort [ 135.747182][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805df95400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 135.763068][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805df97400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 136.405827][ T6685] input: syz0 as /devices/virtual/input/input5 [ 137.037511][ T5755] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 137.517174][ T5755] usb 1-1: Using ep0 maxpacket: 32 [ 137.604285][ T5755] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 137.639948][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.675800][ T5755] usb 1-1: Product: syz [ 137.685034][ T5755] usb 1-1: Manufacturer: syz [ 137.690060][ T5755] usb 1-1: SerialNumber: syz [ 137.722963][ T5755] usb 1-1: config 0 descriptor?? [ 138.080929][ T5755] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 009 [ 138.694646][ T6694] i2c i2c-1: failure reading data [ 138.748385][ T6714] tmpfs: Bad value for 'mpol' [ 138.989993][ T6721] tmpfs: Bad value for 'mpol' [ 140.841319][ T786] usb 1-1: USB disconnect, device number 9 [ 141.452566][ T6755] autofs4:pid:6755:autofs_fill_super: called with bogus options [ 143.970729][ T6782] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 144.827142][ T5770] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 146.147150][ T5770] usb 1-1: Using ep0 maxpacket: 8 [ 146.163629][ T5770] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 146.187123][ T5879] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.197119][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.226087][ T5770] usb 1-1: Product: syz [ 146.237225][ T5770] usb 1-1: Manufacturer: syz [ 146.241874][ T5770] usb 1-1: SerialNumber: syz [ 146.277993][ T5770] usb 1-1: config 0 descriptor?? [ 146.286314][ T5770] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 146.407165][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 146.414604][ T5879] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 146.434933][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.461643][ T5879] usb 5-1: config 0 descriptor?? [ 146.470456][ T5879] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 147.229036][ T6814] autofs4:pid:6814:autofs_fill_super: called with bogus options [ 147.876072][ T5879] gspca_nw80x: reg_w err -71 [ 147.883964][ T5879] nw80x: probe of 5-1:0.0 failed with error -71 [ 147.996263][ T5879] usb 5-1: USB disconnect, device number 3 [ 148.137120][ T5770] gspca_sonixj: i2c_w8 err -71 [ 148.169213][ T5770] sonixj: probe of 1-1:0.0 failed with error -71 [ 148.191691][ T5770] usb 1-1: USB disconnect, device number 10 [ 148.497159][ T5832] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.687077][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 148.696709][ T5832] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 148.709790][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.726890][ T5832] usb 5-1: Product: syz [ 148.737292][ T5832] usb 5-1: Manufacturer: syz [ 148.757297][ T5832] usb 5-1: SerialNumber: syz [ 148.765923][ T5832] usb 5-1: config 0 descriptor?? [ 149.576209][ T5832] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 150.368300][ T6866] autofs4:pid:6866:autofs_fill_super: called with bogus options [ 151.138355][ T5832] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 151.822811][ T5832] usb 5-1: USB disconnect, device number 4 [ 152.199137][ T5777] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 152.207892][ T5777] Bluetooth: hci3: Injecting HCI hardware error event [ 152.217186][ T5080] Bluetooth: hci3: hardware error 0x00 [ 152.306983][ T6896] random: crng reseeded on system resumption [ 153.012947][ T5770] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 153.175851][ T6902] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 153.204835][ T6902] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 153.220140][ T6902] gretap1: entered promiscuous mode [ 153.225598][ T6902] gretap1: entered allmulticast mode [ 153.231171][ T5770] usb 1-1: Using ep0 maxpacket: 32 [ 153.269116][ T5770] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.292766][ T5770] usb 1-1: config 0 has no interface number 0 [ 153.309718][ T5770] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.333643][ T5770] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.344510][ T5770] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 153.364860][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.376000][ T5770] usb 1-1: config 0 descriptor?? [ 153.487579][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 153.487595][ T28] audit: type=1326 audit(1767228656.166:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31338f749 code=0x7ffc0000 [ 153.583081][ T28] audit: type=1326 audit(1767228656.166:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31338f749 code=0x7ffc0000 [ 153.617482][ T28] audit: type=1326 audit(1767228656.166:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31338f749 code=0x7ffc0000 [ 153.639683][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.279328][ T28] audit: type=1326 audit(1767228656.166:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31338f749 code=0x7ffc0000 [ 154.395139][ T28] audit: type=1326 audit(1767228656.166:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7fe31338f749 code=0x7ffc0000 [ 154.494316][ T28] audit: type=1326 audit(1767228656.166:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31338f749 code=0x7ffc0000 [ 154.631791][ T28] audit: type=1326 audit(1767228656.166:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31338f749 code=0x7ffc0000 [ 154.717796][ T28] audit: type=1326 audit(1767228656.166:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe31338f749 code=0x7ffc0000 [ 154.800284][ T28] audit: type=1326 audit(1767228656.166:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe31338f749 code=0x7ffc0000 [ 154.928906][ T28] audit: type=1326 audit(1767228657.416:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.4.184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e2b38f749 code=0x0 [ 155.117694][ T5080] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 155.284822][ T5770] uclogic 0003:28BD:0094.0001: failed retrieving string descriptor #100: -71 [ 155.293980][ T5770] uclogic 0003:28BD:0094.0001: failed retrieving pen parameters: -71 [ 155.302155][ T5770] uclogic 0003:28BD:0094.0001: pen probing failed: -71 [ 155.309130][ T5770] uclogic 0003:28BD:0094.0001: failed probing parameters: -71 [ 155.316673][ T5770] uclogic: probe of 0003:28BD:0094.0001 failed with error -71 [ 155.329390][ T5770] usb 1-1: USB disconnect, device number 11 [ 158.044225][ T6950] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 160.260391][ T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 160.531929][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.571062][ T27] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 160.630474][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.675386][ T27] usb 4-1: config 0 descriptor?? [ 162.568520][ T27] itetech 0003:258A:6A88.0002: ignoring exceeding usage max [ 162.609826][ T27] itetech 0003:258A:6A88.0002: item fetching failed at offset 10/11 [ 162.634526][ T27] itetech: probe of 0003:258A:6A88.0002 failed with error -22 [ 162.650004][ T6987] netlink: 116 bytes leftover after parsing attributes in process `syz.4.208'. [ 162.766327][ T27] usb 4-1: USB disconnect, device number 9 [ 163.294269][ T6997] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.211'. [ 163.331614][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 165.633280][ T7037] [U]  [ 165.646680][ T7037] [U] K{ [ 165.659413][ T7037] [U] T 1ŠFFˊ`GJǘGO/MC [ 165.687794][ T7040] process 'syz.3.225' launched './file1' with NULL argv: empty string added [ 165.730089][ T7037] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 165.799052][ T7037] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 165.870202][ T7037] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 165.970978][ T7037] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 166.028798][ T7037] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 166.055022][ T7037] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 166.092486][ T7037] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<, priority 0 [ 182.743577][ T7323] syzkaller0: entered promiscuous mode [ 182.791764][ T7323] syzkaller0: entered allmulticast mode [ 182.975294][ T7320] tipc: Resetting bearer [ 183.025926][ T7318] tipc: Resetting bearer [ 183.078213][ T7318] tipc: Disabling bearer [ 186.328297][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 186.756767][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.784182][ T8] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 186.884679][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 186.914309][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.942957][ T8] usb 1-1: config 0 descriptor?? [ 186.954230][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 187.509040][ T27] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 187.519307][ T8] pwc: send_video_command error -71 [ 187.534267][ T27] usb 4-1: config 1 has no interface number 0 [ 187.540613][ T8] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 187.547954][ T27] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 32 [ 187.559196][ T27] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 187.569827][ T27] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 187.585344][ T27] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 187.596587][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.598853][ T8] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 187.605759][ T27] usb 4-1: Product: syz [ 187.624916][ T27] usb 4-1: Manufacturer: syz [ 187.629892][ T27] usb 4-1: SerialNumber: syz [ 187.678581][ T7362] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 187.686404][ T7362] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 187.747786][ T8] usb 1-1: USB disconnect, device number 13 [ 187.768343][ T27] usb 4-1: Error in usbnet_get_endpoints (-22) [ 188.000527][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.017525][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.767345][ T27] usb 4-1: USB disconnect, device number 10 [ 188.791377][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 190.356421][ T8] usb 1-1: device descriptor read/all, error -71 [ 190.757201][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 190.944367][ T7398] tipc: Started in network mode [ 190.950685][ T7398] tipc: Node identity 663e745eb987, cluster identity 4711 [ 190.957955][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 190.958742][ T7398] tipc: Enabled bearer , priority 0 [ 190.965904][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.979622][ T7398] syzkaller0: entered promiscuous mode [ 190.986154][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.986200][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.996372][ T7398] syzkaller0: entered allmulticast mode [ 191.009651][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.019474][ T5770] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 191.031502][ T8] usb 1-1: config 0 descriptor?? [ 191.039317][ T8] hub 1-1:0.0: USB hub found [ 191.072648][ T7398] tipc: Resetting bearer [ 191.082929][ T7397] tipc: Resetting bearer [ 191.103576][ T7397] tipc: Disabling bearer [ 191.209939][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 191.227242][ T5770] usb 4-1: Using ep0 maxpacket: 16 [ 191.234031][ T5770] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 191.243447][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.251798][ T8] hub 1-1:0.0: 1 port detected [ 191.259424][ T5770] usb 4-1: config 0 descriptor?? [ 191.270724][ T5770] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 191.488759][ T5755] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 193.070767][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 193.072077][ T5770] gspca_sonixj: reg_r err -110 [ 193.076919][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 193.079078][ T5080] Bluetooth: hci2: command 0x0405 tx timeout [ 193.082198][ T5770] sonixj: probe of 4-1:0.0 failed with error -110 [ 193.143002][ T27] usb 1-1: USB disconnect, device number 15 [ 193.159120][ T5755] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 193.167874][ T5755] usb 3-1: config 0 has no interface number 0 [ 193.174103][ T5755] usb 3-1: config 0 interface 41 has no altsetting 0 [ 193.200336][ T5755] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 193.214714][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.223991][ T5755] usb 3-1: Product: syz [ 193.228546][ T5755] usb 3-1: Manufacturer: syz [ 193.233184][ T5755] usb 3-1: SerialNumber: syz [ 193.249420][ T5755] usb 3-1: config 0 descriptor?? [ 193.464270][ T7400] netlink: 'syz.2.320': attribute type 12 has an invalid length. [ 193.679185][ T5755] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 193.694285][ T5755] CoreChips: probe of 3-1:0.41 failed with error -71 [ 193.706384][ T5755] usb 3-1: USB disconnect, device number 7 [ 193.877254][ T7422] tipc: Started in network mode [ 193.882184][ T7422] tipc: Node identity ba00e4e1781f, cluster identity 4711 [ 193.890061][ T7422] tipc: Enabled bearer , priority 0 [ 193.909977][ T7422] syzkaller0: entered promiscuous mode [ 193.915497][ T7422] syzkaller0: entered allmulticast mode [ 193.965381][ T7422] tipc: Resetting bearer [ 193.981431][ T7421] tipc: Resetting bearer [ 194.020928][ T7421] tipc: Disabling bearer [ 194.598300][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.604935][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.910428][ T27] usb 4-1: USB disconnect, device number 11 [ 196.405584][ T5770] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 196.602979][ T5770] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 196.627214][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.637121][ T5770] usb 3-1: Product: syz [ 196.641318][ T5770] usb 3-1: Manufacturer: syz [ 196.645938][ T5770] usb 3-1: SerialNumber: syz [ 196.650784][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 196.702830][ T5770] usb 3-1: config 0 descriptor?? [ 196.717256][ T5770] ch341 3-1:0.0: ch341-uart converter detected [ 196.857145][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 196.879611][ T8] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 196.911356][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.921875][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.930512][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.945166][ T8] usb 1-1: Product: syz [ 196.950600][ T8] usb 1-1: Manufacturer: syz [ 196.955275][ T8] usb 1-1: SerialNumber: syz [ 196.964682][ T8] usb 1-1: config 0 descriptor?? [ 196.977597][ T8] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 197.015397][ T7451] netlink: 'syz.4.339': attribute type 2 has an invalid length. [ 197.034285][ T7450] bridge0: entered allmulticast mode [ 197.223142][ T8] gp8psk: usb in 128 operation failed. [ 197.229816][ T8] gp8psk: usb in 137 operation failed. [ 197.236692][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.588165][ T5770] usb 3-1: failed to send control message: -71 [ 197.588217][ T5770] ch341-uart: probe of ttyUSB0 failed with error -71 [ 198.033910][ T5770] usb 3-1: USB disconnect, device number 8 [ 198.036265][ T5770] ch341 3-1:0.0: device disconnected [ 198.099313][ T8] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 198.099367][ T8] usb 1-1: media controller created [ 198.117216][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.151096][ T8] gp8psk_fe: Frontend revision 1 attached [ 198.151484][ T8] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 198.152156][ T8] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 198.210066][ T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 198.210083][ T8] gp8psk: found Genpix USB device pID = 201 (hex) [ 198.382400][ T7451] tty tty29: ldisc open failed (-12), clearing slot 28 [ 198.410049][ T7457] tipc: Started in network mode [ 198.437206][ T7457] tipc: Node identity c6f086339d05, cluster identity 4711 [ 198.445461][ T7457] tipc: Enabled bearer , priority 0 [ 198.451003][ T5770] usb 1-1: USB disconnect, device number 16 [ 198.464555][ T7457] syzkaller0: entered promiscuous mode [ 198.472614][ T7457] syzkaller0: entered allmulticast mode [ 198.557464][ T7457] tipc: Resetting bearer [ 198.589918][ T7456] tipc: Resetting bearer [ 198.677620][ T5770] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 198.691256][ T7456] tipc: Disabling bearer [ 198.897823][ T7461] block device autoloading is deprecated and will be removed. [ 198.906713][ T7461] syz.3.343: attempt to access beyond end of device [ 198.906713][ T7461] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 198.997211][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 199.207203][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 199.243065][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 199.287905][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.325314][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 199.344557][ T8] pvrusb2: ********** [ 199.354179][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 199.384159][ T8] pvrusb2: Important functionality might not be entirely working. [ 199.417439][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 199.449734][ T8] pvrusb2: ********** [ 199.689171][ T2314] pvrusb2: Invalid write control endpoint [ 200.023518][ T5755] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 201.359146][ T5832] usb 3-1: USB disconnect, device number 9 [ 201.467210][ T5755] usb 1-1: Using ep0 maxpacket: 16 [ 201.474444][ T5755] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.485012][ T5755] usb 1-1: config 0 has no interface number 0 [ 201.508818][ T5755] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 201.519120][ T7488] netlink: 'syz.4.355': attribute type 1 has an invalid length. [ 201.535353][ T2314] pvrusb2: Invalid write control endpoint [ 201.547150][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.547190][ T7488] netlink: 480 bytes leftover after parsing attributes in process `syz.4.355'. [ 201.564165][ T5755] usb 1-1: Product: syz [ 201.564185][ T5755] usb 1-1: Manufacturer: syz [ 201.564197][ T5755] usb 1-1: SerialNumber: syz [ 201.578593][ T2314] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 201.600950][ T5755] usb 1-1: config 0 descriptor?? [ 201.610921][ T2314] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 201.613631][ T5755] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 201.631250][ T2314] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 201.658913][ T2314] pvrusb2: Device being rendered inoperable [ 201.685323][ T2314] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 201.705545][ T2314] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 201.738018][ T2314] pvrusb2: Attached sub-driver cx25840 [ 201.743869][ T2314] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 201.777605][ T2314] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 203.214643][ T5832] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 203.235736][ T5755] gspca_spca1528: reg_r err -71 [ 203.245564][ T5755] spca1528: probe of 1-1:0.1 failed with error -71 [ 203.276490][ T5755] usb 1-1: USB disconnect, device number 17 [ 203.434524][ T5832] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 203.443492][ T5832] usb 3-1: config 0 has no interface number 0 [ 203.450009][ T5832] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.464354][ T5832] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.474533][ T5832] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 203.483860][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.506565][ T5832] usb 3-1: config 0 descriptor?? [ 203.742344][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.750096][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.768759][ T7519] bridge0: entered allmulticast mode [ 203.842683][ T7522] netlink: 'syz.3.366': attribute type 2 has an invalid length. [ 204.124805][ T27] usb 3-1: USB disconnect, device number 10 [ 204.211704][ T7519] bridge_slave_1: left allmulticast mode [ 204.221805][ T7519] bridge_slave_1: left promiscuous mode [ 204.244191][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.391205][ T7519] bridge_slave_0: left allmulticast mode [ 204.399686][ T7519] bridge_slave_0: left promiscuous mode [ 204.426827][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.017288][ T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 206.447819][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.496783][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.524138][ T27] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 206.536403][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.563951][ T27] usb 3-1: config 0 descriptor?? [ 206.937843][ T7548] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 206.956522][ T7548] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.378'. [ 207.028598][ T27] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 207.137518][ T27] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 207.208392][ T27] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 207.262716][ T27] usb 3-1: USB disconnect, device number 11 [ 207.293727][ T27] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 207.471204][ T7549] fido_id[7549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 207.622202][ T7553] tipc: Enabled bearer , priority 0 [ 207.634223][ T7553] syzkaller0: entered promiscuous mode [ 207.641254][ T7553] syzkaller0: entered allmulticast mode [ 207.681720][ T7553] tipc: Resetting bearer [ 207.695386][ T7552] tipc: Resetting bearer [ 207.756909][ T7552] tipc: Disabling bearer [ 208.085846][ T7559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.133634][ T7562] netlink: 'syz.4.383': attribute type 10 has an invalid length. [ 208.787076][ T5832] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 208.967080][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 208.976253][ T5832] usb 5-1: config 7 has an invalid interface number: 182 but max is 0 [ 209.002535][ T5832] usb 5-1: config 7 has no interface number 0 [ 209.030290][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 209.038056][ T5832] usb 5-1: config 7 interface 182 has no altsetting 0 [ 209.057646][ T5832] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=84.27 [ 209.067068][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.078315][ T5832] usb 5-1: Product: syz [ 209.082969][ T5832] usb 5-1: Manufacturer: syz [ 209.087787][ T5832] usb 5-1: SerialNumber: syz [ 209.237124][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 209.244945][ T27] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 209.260335][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.272528][ T27] usb 4-1: config 0 descriptor?? [ 209.281729][ T27] gspca_main: sunplus-2.14.0 probing 041e:400b [ 209.309710][ T5832] snd-usb-audio: probe of 5-1:7.182 failed with error -22 [ 209.352607][ T5832] usb 5-1: USB disconnect, device number 8 [ 211.084390][ T27] gspca_sunplus: reg_w_riv err -110 [ 211.104261][ T27] sunplus: probe of 4-1:0.0 failed with error -110 [ 211.817532][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 212.007170][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 212.023052][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.044228][ T8] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 212.053723][ T5853] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 212.064835][ T8] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 212.073706][ T8] usb 5-1: Manufacturer: syz [ 212.080887][ T8] usb 5-1: SerialNumber: syz [ 212.099766][ T8] usb 5-1: config 0 descriptor?? [ 212.169286][ T8] usb 4-1: USB disconnect, device number 12 [ 212.247226][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 212.260514][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 212.273818][ T5853] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 212.284396][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.299709][ T5853] usb 3-1: config 0 descriptor?? [ 212.329596][ T7594] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 212.487827][ T5853] hub 3-1:0.0: bad descriptor, ignoring hub [ 212.518394][ T5853] hub: probe of 3-1:0.0 failed with error -5 [ 212.785143][ T5853] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 212.812741][ T27] usb 5-1: USB disconnect, device number 9 [ 213.393611][ T7617] binder: 7616:7617 ioctl 400c620e 2000000001c0 returned -22 [ 213.467149][ T5832] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 213.667172][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 213.681892][ T5832] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 213.691783][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.703174][ T5832] usb 4-1: config 0 descriptor?? [ 213.720298][ T5832] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 213.927122][ T5853] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 214.111219][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.124161][ T5853] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 214.140991][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.153082][ T5853] usb 1-1: config 0 descriptor?? [ 214.596108][ T5853] wacom 0003:056A:0094.0007: unknown main item tag 0x0 [ 214.610775][ T5853] wacom 0003:056A:0094.0007: unknown main item tag 0x0 [ 214.618668][ T5853] wacom 0003:056A:0094.0007: unknown main item tag 0x0 [ 214.626870][ T5853] wacom 0003:056A:0094.0007: unknown main item tag 0x0 [ 214.634987][ T5853] wacom 0003:056A:0094.0007: unknown main item tag 0x0 [ 214.655552][ T5853] wacom 0003:056A:0094.0007: unknown main item tag 0x0 [ 214.667935][ T5853] wacom 0003:056A:0094.0007: unknown main item tag 0x0 [ 214.675652][ T5853] wacom 0003:056A:0094.0007: Using device in hidraw-only mode [ 214.702725][ T5853] wacom 0003:056A:0094.0007: hidraw0: USB HID v0.04 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 214.794812][ T5853] usb 1-1: USB disconnect, device number 18 [ 214.949068][ T967] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 215.280142][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.377223][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.422677][ T967] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 215.452973][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.469203][ T5755] usb 3-1: USB disconnect, device number 12 [ 215.480623][ T967] usb 5-1: config 0 descriptor?? [ 215.549359][ T7643] netlink: 'syz.0.413': attribute type 4 has an invalid length. [ 215.611456][ T7643] netlink: 'syz.0.413': attribute type 4 has an invalid length. [ 215.619314][ T5832] gspca_sonixj: i2c_w8 err -71 [ 215.647536][ T5832] sonixj: probe of 4-1:0.0 failed with error -71 [ 215.666827][ T5832] usb 4-1: USB disconnect, device number 13 [ 215.920704][ T967] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 215.951962][ T967] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 215.974322][ T967] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 216.001965][ T967] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 216.028244][ T967] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 216.057942][ T967] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 216.078197][ T7658] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 216.196387][ T967] usb 5-1: USB disconnect, device number 10 [ 216.245820][ T7659] fido_id[7659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 216.298082][ T5832] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 216.489512][ T5832] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 216.499492][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.510681][ T5832] usb 3-1: config 0 descriptor?? [ 216.519933][ T5832] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 216.703194][ T7674] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20004 [ 216.757213][ T5770] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 217.545661][ T5832] gp8psk: usb in 137 operation failed. [ 217.545737][ T5770] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.567141][ T5832] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 217.567151][ T5770] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 217.567171][ T5770] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 217.603631][ T5770] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 217.614903][ T5770] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 217.676329][ T5832] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 217.697940][ T5770] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 217.716132][ T8] usb 3-1: USB disconnect, device number 13 [ 217.738838][ T967] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 217.740682][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.777685][ T5770] usb 4-1: Product: syz [ 217.784305][ T5770] usb 4-1: Manufacturer: syz [ 217.798334][ T5770] cdc_wdm 4-1:1.0: skipping garbage [ 217.804017][ T5770] cdc_wdm 4-1:1.0: skipping garbage [ 217.812632][ T5770] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 217.821131][ T5770] cdc_wdm 4-1:1.0: Unknown control protocol [ 217.955378][ T967] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.974120][ T967] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 217.984248][ T967] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 218.011547][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.018073][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 218.026458][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 218.037371][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 218.043999][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 218.051347][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 218.057955][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 218.064209][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 218.070796][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 218.077075][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 218.083693][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 218.090004][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 218.096598][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 218.103171][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 218.109789][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 218.116106][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 218.122716][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 218.129158][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 218.135764][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 218.142112][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 218.148715][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 218.155064][ T5770] usb 4-1: USB disconnect, device number 14 [ 218.161025][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 218.236285][ T7674] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 218.280272][ T967] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 218.747386][ T5770] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 219.499093][ T5770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.553570][ T5770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.565167][ T5770] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 219.578949][ T5770] usb 5-1: New USB device found, idVendor=046d, idProduct=e104, bcdDevice= 0.00 [ 219.588607][ T5770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.599475][ T5770] usb 5-1: config 0 descriptor?? [ 220.029878][ T5770] hid-generic 0003:046D:E104.0009: unbalanced collection at end of report description [ 220.043447][ T5770] hid-generic: probe of 0003:046D:E104.0009 failed with error -22 [ 220.123258][ T5853] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 220.448060][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.682508][ T8] usb 5-1: USB disconnect, device number 11 [ 220.697821][ T5853] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 220.777170][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.798974][ T5853] usb 3-1: config 0 descriptor?? [ 220.941613][ T786] usb 1-1: USB disconnect, device number 19 [ 220.955584][ T7671] delete_channel: no stack [ 221.263937][ T5853] nzxt-kraken2 0003:1E71:170E.000A: item fetching failed at offset 1/5 [ 221.295903][ T5853] nzxt-kraken2 0003:1E71:170E.000A: hid parse failed with -22 [ 221.304306][ T5853] nzxt-kraken2: probe of 0003:1E71:170E.000A failed with error -22 [ 221.631892][ T5832] usb 3-1: USB disconnect, device number 14 [ 221.997183][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 222.037397][ T5853] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 222.181205][ T7724] tipc: Enabled bearer , priority 0 [ 222.188512][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 222.190215][ T7724] syzkaller0: entered promiscuous mode [ 222.198756][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 222.199998][ T7724] syzkaller0: entered allmulticast mode [ 222.214840][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.223700][ T8] usb 1-1: Product: syz [ 222.228459][ T8] usb 1-1: Manufacturer: syz [ 222.233227][ T8] usb 1-1: SerialNumber: syz [ 222.233661][ T7724] tipc: Resetting bearer [ 222.241008][ T8] usb 1-1: config 0 descriptor?? [ 222.254331][ T7723] tipc: Resetting bearer [ 222.265755][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 222.296273][ T7723] tipc: Disabling bearer [ 222.322722][ T5853] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 222.332021][ T5853] usb 5-1: can't read configurations, error -71 [ 222.643472][ T8] gspca_sonixj: reg_r err -71 [ 222.650403][ T8] sonixj: probe of 1-1:0.0 failed with error -71 [ 222.661182][ T8] usb 1-1: USB disconnect, device number 20 [ 222.681338][ T7641] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 222.869092][ T7641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.882951][ T7641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.899390][ T7641] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 222.911031][ T7641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.923483][ T7641] usb 3-1: config 0 descriptor?? [ 223.047311][ T5755] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 223.238564][ T7734] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 223.250342][ T7734] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 223.258777][ T7734] CPU: 1 PID: 7734 Comm: syz.4.445 Not tainted syzkaller #0 [ 223.266069][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.276140][ T7734] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 223.281724][ T7734] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 223.301343][ T7734] RSP: 0018:ffffc9000cbbfa80 EFLAGS: 00010206 [ 223.307437][ T7734] RAX: 0000000000000005 RBX: ffff88802f181f00 RCX: 0000000000080000 [ 223.315448][ T7734] RDX: ffffc900196ce000 RSI: 0000000000001f90 RDI: 0000000000001f91 [ 223.323453][ T7734] RBP: 0000000000000001 R08: ffff88814b7f612f R09: 1ffff110296fec25 [ 223.331452][ T7734] R10: dffffc0000000000 R11: ffffed10296fec26 R12: 0000000000000028 [ 223.339439][ T7734] R13: dffffc0000000000 R14: ffff88814b7f6000 R15: dffffc0000000000 [ 223.347506][ T7734] FS: 00007f7e2c2796c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 223.356448][ T7734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.363126][ T7734] CR2: 000000110c3eca3d CR3: 000000002363d000 CR4: 00000000003506e0 [ 223.371110][ T7734] Call Trace: [ 223.374394][ T7734] [ 223.377368][ T7734] pcl818_detach+0x66/0xd0 [ 223.381823][ T7734] comedi_device_detach_locked+0x172/0x710 [ 223.387658][ T7734] comedi_unlocked_ioctl+0xccc/0xfe0 [ 223.392969][ T7734] ? comedi_poll+0x8c0/0x8c0 [ 223.397571][ T7734] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 223.403547][ T7734] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 223.409519][ T7734] ? trace_irq_disable+0x37/0xe0 [ 223.414472][ T7734] ? lock_chain_count+0x20/0x20 [ 223.419336][ T7734] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 223.424981][ T7734] ? lockdep_hardirqs_on+0x98/0x150 [ 223.430179][ T7734] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 223.435804][ T7734] ? comedi_poll+0x8c0/0x8c0 [ 223.440394][ T7734] ? __se_sys_ioctl+0xf1/0x170 [ 223.445154][ T7734] ? comedi_poll+0x8c0/0x8c0 [ 223.449842][ T7734] __se_sys_ioctl+0xfd/0x170 [ 223.454451][ T7734] do_syscall_64+0x55/0xb0 [ 223.458866][ T7734] ? clear_bhb_loop+0x40/0x90 [ 223.463710][ T7734] ? clear_bhb_loop+0x40/0x90 [ 223.468379][ T7734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.474258][ T7734] RIP: 0033:0x7f7e2b38f749 [ 223.478676][ T7734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.498277][ T7734] RSP: 002b:00007f7e2c279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.506689][ T7734] RAX: ffffffffffffffda RBX: 00007f7e2b5e6180 RCX: 00007f7e2b38f749 [ 223.514737][ T7734] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 223.522702][ T7734] RBP: 00007f7e2b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 223.530665][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.538623][ T7734] R13: 00007f7e2b5e6218 R14: 00007f7e2b5e6180 R15: 00007ffe8ce4cd08 [ 223.546605][ T7734] [ 223.549629][ T7734] Modules linked in: [ 223.561909][ T7734] ---[ end trace 0000000000000000 ]--- [ 223.567537][ T7734] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 223.573121][ T7734] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 223.592774][ T7734] RSP: 0018:ffffc9000cbbfa80 EFLAGS: 00010206 [ 223.598863][ T7734] RAX: 0000000000000005 RBX: ffff88802f181f00 RCX: 0000000000080000 [ 223.606929][ T7734] RDX: ffffc900196ce000 RSI: 0000000000001f90 RDI: 0000000000001f91 [ 223.615056][ T7734] RBP: 0000000000000001 R08: ffff88814b7f612f R09: 1ffff110296fec25 [ 223.623375][ T7734] R10: dffffc0000000000 R11: ffffed10296fec26 R12: 0000000000000028 [ 223.632037][ T7734] R13: dffffc0000000000 R14: ffff88814b7f6000 R15: dffffc0000000000 [ 223.640128][ T7734] FS: 00007f7e2c2796c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 223.649160][ T7734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.655763][ T7734] CR2: 00007f7e2c257f98 CR3: 000000002363d000 CR4: 00000000003506f0 [ 223.663944][ T7734] Kernel panic - not syncing: Fatal exception [ 223.665529][ T5755] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.665571][ T5755] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 223.665588][ T5755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.668055][ T5755] usb 4-1: config 0 descriptor?? [ 223.681507][ T5755] gspca_main: spca501-2.14.0 probing 0000:0000 [ 223.708497][ T7734] Kernel Offset: disabled [ 223.712819][ T7734] Rebooting in 86400 seconds..