last executing test programs: 3m41.126156691s ago: executing program 4 (id=247): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3m38.401766423s ago: executing program 4 (id=273): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r3, @ANYBLOB="000000000000000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x8}, 0x0) 3m37.893869792s ago: executing program 4 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000100)='./file2\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="002afdae3565781009f76e97b48ab97bfb17214266c0e5b703257a3d77ba65f617bee62a9d1612402e69cc86c8fce5989be545ce26a9c4f5f2165f08000000b40d94de59edbb0507bf01e357e13bef384234e823d8137beac1c0afb4464b4d16006b7691ea638989f6f567a2817567b9c1606c0a15f5a0dbce62f673cd22ef303bcddff402dacf8c1372a5e8ff5bc596a5375037cf99b4ee7eb6f41587c2904d5cc071c32bc429a286bddc094a"], 0x1, 0x10617, &(0x7f0000010640)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 3m36.079483742s ago: executing program 4 (id=288): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180)={[{@nombcache}, {@nobarrier}, {@nodiscard}, {@orlov}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') 3m33.964480609s ago: executing program 4 (id=294): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 3m32.555411784s ago: executing program 4 (id=305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3m32.481946833s ago: executing program 5 (id=306): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000008f00)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0xb, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3m31.651737274s ago: executing program 32 (id=305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3m31.562651515s ago: executing program 5 (id=313): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="8403ad059a592008ed7e5c76ec0f66b42e092ae8444c1d8fb3749ea0f6452dc7164374b233321a115b99887899612523d9be3792a4feed78d86d2389712c156d8b4cd219f576eee6157caa5a516052f7cf71ec1cb6a5f934be61c7a6ff05b777feb5dad6f8e2996c2bbb2d75315ff7a10ee381504c8d"]}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) capset(0xffffffffffffffff, 0x0) 3m29.429089542s ago: executing program 5 (id=324): r0 = creat(&(0x7f00000006c0)='./bus\x00', 0xbc) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000140)='./bus\x00', 0x3) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000380)=@md5={0x1, "3c1fe0e17dd4e04499b20cef43c9fe9e"}, 0x11, 0x0) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) 3m29.299362317s ago: executing program 5 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f00000001c0)='./file0/../file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 3m29.213304291s ago: executing program 5 (id=326): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 3m28.841811169s ago: executing program 5 (id=332): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) 3m28.317980386s ago: executing program 33 (id=332): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) 3m6.388588385s ago: executing program 1 (id=526): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 3m5.874332076s ago: executing program 1 (id=532): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @tick=0x10000, {}, {}, @result}], 0x1c) 3m5.117561304s ago: executing program 1 (id=540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000fa7f0000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_emit_ethernet(0xfdef, 0x0, 0x0) 3m4.760951643s ago: executing program 1 (id=543): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYRES8, @ANYBLOB="eae535d4c5cd41b584d3bdb8d3fb3e37666220165c8aec9c235bc9af137d4058a50551a5b228bbbcf6cd1275ef3732adfeaebdf711988cbe9d1da671f8bbaac371392e227f548006163fc9aaf3d55e97410ccacb7df3444c03ac4170da3fbc69ae1c8a590318a7a33a774debbcc54bb6d6025bc65458b94791d5a8bcd898b75cce569e2c6fd55928c5084aab22c8196fb436916cff76302fd8c4b69ca674271f5db630ffad103ad9286287759d0d5470d0b54f701a713e8803665b87799065f31bb0cff21d9c109c1fbfffb640facdacd569f158f694c34ffb4c405b186aa90e8be7b47c56e6e439ae953605d89c131c711ff56f0adb96e5ee0d269b4cfc9d089794f60bdd06e845b5ffdccfefee032ecfd92f6cba5920130f685e807f88de4a2e595ea37f39a92dcbaeb2de15dab62a5a199d4666578eb1707e88ebb0b98140fdb62d60005fd6721f18a2054b2ba2ed308813164f8dbc7e1d26a11a707adc6978a25cca2fca5d62e51794447f656b92f8372ebf98934a0bc057b901080da81ef02ccfa18a29c9b82c90fd38eb554b83428948f3608cd8fd5845bed25a0d96b146f09bd4cce20efc1ecc7bf64bd88e7a460b372a298cb776eb1d78cc334da71dc6056b2d1119cdad3af9092a42c184e9d487076399f0be65a442fdc06901089e6b5178ecb57aa4b98ff1f538696e8510551dbb5cbd36b125efa2a3e719f22b96eeec80a178dae9c894a7dd170419c33817baedfc132cde868a1c55192b9c8a332772fc40fed9f6fee1aea0e2001752caeb58afb55ea7c421cd0eb5e6ea301f8e2f6b68484849f5d3e7bd1b4aa865d2cd049dfc773bb4281f5f8dd2a3f1563c8cd3655dd9e391424151dadf7415afb242cb99b9b9541b6780beafc6a8c2c0bd109749dde1e8535040d8d2cda8393abaa6cdae24e13917e867d6d301f6f39619bcbd70acc747e093ef3c22f0b1a8b8a4d8bd11bc19c7102e11a8603d563507423c96d1653a42d02ff1ee390934927f037d2022cbbf86cb605e82e2b6e2c2fa1d523f72b47738f318836defed1f898271bdd4fcbe7863e5aa7c7e468d9bad908de3c6851c696df710da87771840f46e63fc4c3d5d9b13b663ed2fef2e56a8690cdee9e6ac0a9824c9fe458ad29614f9485f9c18caf2d5c229f24a220ab84daa26ddb2a0d4059b43e073b703148d82fe4d91ae24db7224df2ee4e10d596846466d6a62faa9da7d24f9dd1e3b5cc291f4840b6603d1173204a452a9b05a5efcf4f9e09c2a3c38f2fd49322e718ddc8278ea182a359043387705c0be61be7e62ba7bb85dfa0f24400f89087f78d84d2296844944d186fb55045eb016dd3d602c85211d7b19dbebe3247313283da5bcbba09a3a74c590fdce8cdbef49a73b11413a9df4aaefc356e94f838cef801ba2380d7e5fdc8865140311f071c82bc1482c2033b8ad70d08a5a71e1c949f93cd8743b0bd4eefdaf45f5246efcf800444c8e9b8c2a01b76b6eb4e0639ee7381971172c53e165f14946fb56896e40424a3b981d97b4b01504806d797bb9e3405a7326d2ba7bfa6efc923c4c68d0165aea2d80ae953c7e2ec6534d0da7c28bbe255d81097e84254ff7bd065caa84fa7455885e1b28ab7d6243d0f02903860049935a764ebfe5384bdf9ae0b71f1641e457780da2071a84937dd88d2e4aec7ddaab66e335887f555a724ad9692ee996521ccaa35e2358aea1ab6a8c9845af8af552520fdec7ecb635d230074aa532c3efe6677c79b1328451a779501eccb4c11750744cfce16ba2ced0fc6dd2b75a5ff1770f3851c93bcf8850adf496012d94b8dd6a00d1f9f0c96989979b89838a29875072e0b678a2a55338f21625165c350134d7cb9119ac4dcc77f13a153fe6819d1bdc6b357e93531a68813913daf65d2e62d4bd09da6bb16e8d686518f6faff70dc0804b4b6810117d8698a4d27f0482f9adf9be3aae179dbcad90ab1fbd6b1ba15cdc78ee7686bd15a8fe1cf5af00fcc0a6981a77ac5c3485518921a1b4ea90b02e0059c2c71850d517bddc12bd61a5571da765a34b53e5f06a2b8bb122bf9d642f1ad50a0eb7afe34ef6fd2474d25f314adbf276a895b80b8de6e31eaee5fe4544f4709bf6416f26ec52d517dd3a350cb68df6791dc671495e0f056de8b158095b32ec8b43f65b1f3110cf7da37d2383e99a5bd9a0e0d5684a5b15246170bd11909ef22ee740aa5556dbc0f9dacc8ce440c137bf0ec673651067ef1146004701376116986c49b10226141bea12f679c3f53eaea945b1bb92e6c922a85a2221f768ff4f1c188dc82f9e8d947e140f43c4950430f88a47fb15dcd8ef8491ff08d7b287b280eab99e44a7fba6d4fe20fcb2c2cfa1a6f4d59b51755e66a3d9a325a08a286185c2bdac8c8c2910ed3ff8e047f28b2bf1827e0829f8ec8459241300583f1880c96b2e405b253af5f7e9ee91e34c3fa2cd5c53a71bc3b4b1a5741c17a7b73c8e7d3e8ec9e51a90772b8eb38f23fcb9e07eff8b0f68d4f7d4d68bfb8fbc8d90be681166fe5ed220e3a425c65c0e678e8b7470a99d7fccc7a3be07189ee02e1f8c81549b0b8c0113ef602d10d5d2429e8b60fa5aaddd55cb86141609bae35c185c5ad743d0fb0a1244ba6d67755e46073f3d428926c0d9033f8180120deab78a4b42664e36b6723039457195bff897760ede28bf2661a95715dd20bc744ae2a06bcb12ef8b7a373f3a5557f20256446ba95d45b7810d68494f954d1802aa8986279adc368c2365168c0619bc8952ec6ac60840d9968302edb8809d36f6b0c83dc6941193fb8eb2adcef36db70cbe51fd533ee108eaedebc05ab363058feecfb51e294419695019d0ba50a660ecbe3fd1b43ac973141b7e4c423c062f63ad24468ca79740502716b10a823821429d53f34409cc0757587a5de21663c33a8b194c988a3c209cec76b9fc18805649d9cc109635271c968972f4328e561b562ad6c32a71b269718a303ae3635e5b06717152817a11589d3efa0f803d7bb560c08132827333ada867d1a870e2feb3a5e7851363fc333bb681018764aab63eb740978994f62ec3147d4d6a40e099ada0c50c1a5f6a8196549be226508055aef349c76af40596f6c9b7217423628bb6dc07d9382f6d4c87c962ec97bee6384ba3e2522b76ee8619093500a75bcc8fd0fb9bb5093650ec0ca9c867a22260e2668ecf46047e3df87f5d82d992a558e45fb852be616c030edf6aeeae70848403dc1166e6a16776e8660f90449f297224f667563850480f259f6a59039b1a3ea5488971b5e4bcbf380c527c937055dbf4f5a676bacc09f4dde33c50a1286f6024980df1064a9dc4b3f101b129fa1fc141e54f52d4b7322a0cb1c2567205016f5ede0794122fcaa2d11fa77f5fddb3a5f3c7b3d85f0cb6f32cd11d752f755687fb8d93d40711a4c8873ec7c794f0f781bb9c10f9df22fa8f40cca06a48c37e66ea4480fcdd686526be62915ebe36e0bdf7dafd3940f698469ecdc792ca6105a37499a19382247a85bb734e4ba325dd307be8444b5860f99f9dbc7aa28c26747c89041bde3c10c459406786e10792078a52f4bcc32aff61b3f5798cb5dc2927f260f70a41d8e5fc38498b02d0053a86ae408d2efdc1aca9a8508ef9128dfd1fc6a92ba72f940ee469a3111e2cf6c28e77e5a206db6f09139db812fa4e4cfe33c8d184e4763bd8e54e0e473346215b8905d101463dd2ca855747c81c7ffd6c2625e0b59273a9516ec96a5cd8d9078c974980a16b6b87563986ba287821cd41f417792e42dd24e796e313b9cd943f1b9dd6ee35676ff4ad46dbd52db83abbc78f5dad11b6e7bd09a4ace8c246d0a52c36dcb1f0c6025f6ed2868f4b918b6e4e645c63689b7e7bc369dbe44725993b3b43f4572a7136b6e610adc161f45fc307c0937f2338ebc4fd571852b229b80ccd071e1a29c927f88b8b45efa503691758125d29463e742e2ef508babf30ae39ff8bb3a94cfee379f84348c002fdef77b410bee9f47f8119388b3fc159b409b9d9c9af97a4b75c38ca5fc0665cd975df293370de64714cefdd470c1d05a5d3e0f257182889d7a2d797ebf42d6935d1c6b5ef8cd1e2783cef3a316dbd4768510f26ee5b1c481bcac3e1608458d4b5ec6411cb3c921a131140440561931ca51b92231de91d1f950d992eec74c6500a6ecc9e8bc26eec367dba82720accd6dee234db88c132ec649baeef23a16ebb18c8e5b68b95aac984d8322a01b39636baf16911e458242730ea8b22c686bd01bc451e91c34f81fafe88485bbe97ec99299940ca897c3f802d080ecf8ca7e5032c728b8b33f162ab26a6805db239b88103c19ff8160a28268f8f7ac66593c67251fb0f3fa3004d5ad08107f48e0ecc1e4e910554f49ca72e3fd7e212d828fc3c0c40203e4642a3a372f36cfd13a037fd4dd107d6b386659b379c4c41813c8599cb71fd08e4b80f22dbb088d3d0257f30493b1c4d54201a00e049d998d291ecb659e65e2eed9776b367afc9b84b03957701bcbef289b0eea8e5722a63e1bd748d5af209c5ebff7df185d0d68e7ceabbf9a63bba55946cd3b52a09383fd9b9d2d956dc4e5af16986c5600dfd0db89e0e478420557d001c3716350c3e6ba0bbec1e5888435d296d8666f455d22205ea407a95eb60bc68a184e95ae3259f3783c594d3e550c018369df677ea11a37c757a3bd3c19eb257f5e228ad760562e431754a0c620004548962c3a4fb42d49259dafc1b9d365323fa2ace81876728a24f70b06e1198d5f863bfd00a04d5393b3adb15f4191d374c607c7ccb6b7ef84303454b6655392a23dccca41f55cb314a3bfbb637f57178cc9df4fe0645a8dc1ca0386d1fb0ff2cfc3e149991f97264d893fba0b013c027ce753c3e1f907a2988b1507eecd0e5e26368155ff5c55f616ffec31a613be450ee048955a46d68c272aa53f1db6ce199e2765f4be20933799d96f13b3a65f33cb60da1929023ff5d820172c423f83210a992264a37854033cd43c88129fabb5146367d2b748d84be96dc3a4ad95279ec7ed78dcb57056597a9f46a948708b0e9915b22f28216d94554db2082f4b9782a5802bf6700ef9017168a68304b6573f46c78a0a3be302e096b4f5b87313a2ef9a2b5f51956d9e315b08ee89a59aeec225227f3ece808c451e1103df7887f944138af1b93235bc93121fb84591d065d5f245c035c238a1c30d510be5db14725148919e8d57f1e3a36ead8be870e2505e3c9935c4461741c4a8dc4dff7e0e042167a7228bf218c9d8dd9c0be9e5ff4a79968d8f34cfc3206e0ade5889e9c5e44c918ed3755063d4148e7f1da9d2ce7aa45b9fc873f85cb92160b8a4d5b219884d0c43cc1194259ec4a6127887470d2fabbc1983b1bcc51e931f131d1238333c09740b43802fc5b1c01a942c5d08693b81e59429cb7d49f454f517cddc160d563a243182083008f2481e35312b4b35a2688468f18f4733f4b40d2f298c0b88ec2ad51e2efa509905233e3bbb9e172a1e697ab379f500c8c791aa97623bc8faa7f0468e02e6bc6f9bc40c75b4c01b92731fc371ad7c90928bead62a74580bb2d0aa1d8972fa857766ebe8aa00cd9eae79a591ea3e87a5ce636dc865b992c98a6fafe478973665936ad477558dac400fe179e86e6fef41aa074d0812f0c14f3992edb76358d02a2b763512ca9abc0940dd711670deb4d9abf196de9106efa5e1c14a673de86193908206ab9f72afd6ef1b05355f06ad0b9bc83750bb196654566b56e13e6e820d12bc34920b45c3"], 0xfd, 0x1fc, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x3, 0x1) 3m4.333949099s ago: executing program 1 (id=548): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000005c0)="6eb0aeffb2", 0x5}], 0x1}, 0x2404c814) 3m3.961575716s ago: executing program 1 (id=552): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) truncate(&(0x7f0000000300)='./file0\x00', 0x7fff) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000008e80)={0x2020}, 0x2020) 3m3.402331628s ago: executing program 34 (id=552): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) truncate(&(0x7f0000000300)='./file0\x00', 0x7fff) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000008e80)={0x2020}, 0x2020) 2m48.780596808s ago: executing program 7 (id=674): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m47.020468879s ago: executing program 7 (id=688): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x404, 0x1, 0x80d6, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) 2m45.829490774s ago: executing program 7 (id=695): r0 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00002b3000/0x2000)=nil, 0x800000}) 2m45.697682426s ago: executing program 7 (id=697): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2m44.138829524s ago: executing program 7 (id=709): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @empty, 0x3}, 0x1c) listen(r0, 0xb) 2m43.654198215s ago: executing program 7 (id=714): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 2m43.038429094s ago: executing program 35 (id=714): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 16.259473016s ago: executing program 6 (id=1677): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file3\x00', 0x380cc52, &(0x7f00000020c0)=ANY=[@ANYBLOB='nocompress,session=0x0000000000000013,nocompress,showassoc,check=strict,iocharset=cp437,cruft,unhide,norock,sbsector=0x00\x00\x00\x00\x00\n\x00\x00\x00000001,map=off,mode=0x0000000000000006,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,'], 0x3, 0x9bf, &(0x7f0000001640)="$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") mount$nfs(&(0x7f0000000100)='\xd2\xa6.', 0x0, 0x0, 0x44, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) creat(&(0x7f0000000100)='./file3\x00', 0x0) getpid() openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 15.78736529s ago: executing program 6 (id=1680): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086203, 0x0) 15.39801348s ago: executing program 6 (id=1684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x100) syz_emit_ethernet(0x5a, &(0x7f0000000c40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff10f5", 0x24, 0x6, 0xff, @local, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x4, {[@mptcp=@synack={0x1e, 0x10, 0x6, 0x2, 0x6, 0x3ff, 0x2}]}}}}}}}}, 0x0) 15.006142641s ago: executing program 6 (id=1687): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@errors_remount}, {@noload}, {@noinit_itable}, {@noquota}, {@noblock_validity}, {@acl}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x68, 0x51c, &(0x7f0000000200)="$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") 14.389343735s ago: executing program 6 (id=1695): r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x32, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x22080c2, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x1, 0xaa7, &(0x7f000000b800)="$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") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) 14.023380406s ago: executing program 6 (id=1699): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000040)=[{r1, 0x8080}], 0x1, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x15, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 13.472740735s ago: executing program 36 (id=1699): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000040)=[{r1, 0x8080}], 0x1, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x15, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 9.838019779s ago: executing program 9 (id=1728): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r0, r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) read$FUSE(r2, 0x0, 0x0) 9.477788106s ago: executing program 9 (id=1730): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x8, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x40000000, 0x0, 0x2}, 0xc}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 8.956330206s ago: executing program 9 (id=1731): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d04b1082a6d000000040902"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x14, 0xc2}, &(0x7f00000007c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.347493522s ago: executing program 3 (id=1736): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x13}}}, 0x24}}, 0x20044810) 7.523757777s ago: executing program 3 (id=1738): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r0]) 7.255117112s ago: executing program 0 (id=1740): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x1484, 0x0, 0x1, 0x3d6}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.090894767s ago: executing program 0 (id=1742): unshare(0x22020600) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='cgroup.stat\x00', 0x300, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 7.069738989s ago: executing program 9 (id=1743): creat(&(0x7f0000000300)='./file0\x00', 0x108) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011"], 0x4a) 6.627369837s ago: executing program 0 (id=1744): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7370617273652c666d61736b3d30303030303030303030303030303030303030303031312c61636c2c696f636861727365743d69736f383835392d362c73686f776d6574612c707265616c6c6f632c7370617273652c646d61736b3d30303030303030303030303030303030303030373737372c00daf73638f72658d3c556c112a9839c19", @ANYBLOB="71f7f4d8a2ec96e109c21437d148f91d247192b1a8b63569a797b1ac4892720b57fdb8242d91e5b2b4af4f2ecb77153f2ec0a6490ae4b8d2a4f627989be9b5207687f42779b8adf566d077002bd6ca842bbbc28832f732325f44de77738b9db0e40f94877ce71c6668fc80e407543b206d48f38f5ea8c27c903eac24e40a505b9187682c0334868e507f0d7153943aea5976f8febdf0d4e87eb3877d3939a989d7354ba645"], 0x2, 0x1f770, &(0x7f0000020b00)="$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") r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 5.919517485s ago: executing program 2 (id=1746): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002780)=""/4102, 0x850}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002740)=@newqdisc={0xc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x9}}}, 0x24}}, 0x0) 5.643835845s ago: executing program 0 (id=1747): r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 3.634004109s ago: executing program 9 (id=1748): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) 3.623258599s ago: executing program 0 (id=1759): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.622225676s ago: executing program 8 (id=1749): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 3.622032605s ago: executing program 2 (id=1750): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = dup(r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.621802078s ago: executing program 3 (id=1751): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x40}}, 0x44) syz_emit_ethernet(0x66, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @empty, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010102}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x7, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x7, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 2.887513724s ago: executing program 2 (id=1752): r0 = io_uring_setup(0x2e34, &(0x7f0000000100)) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.887095147s ago: executing program 3 (id=1753): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000000)=0x46, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.71989978s ago: executing program 0 (id=1754): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d040ec20000000000010902"], 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 1.787672446s ago: executing program 8 (id=1755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@multicast, @random="866304000800", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3a, 0x20, 0x0, 0x0, 0xf9, 0x11, 0x0, @empty, @multicast1}, {0xfffe, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x100, @void}}}}}}}, 0x0) 1.268677812s ago: executing program 8 (id=1756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 1.13134806s ago: executing program 3 (id=1757): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) 947.108475ms ago: executing program 2 (id=1758): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 906.707677ms ago: executing program 8 (id=1760): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) accept(r1, &(0x7f0000000140)=@xdp, &(0x7f00000001c0)=0x80) 839.627297ms ago: executing program 9 (id=1761): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) dup2(r1, r0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 664.666156ms ago: executing program 2 (id=1762): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={r3, 0x0, 0x9, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x0, 0x100, 0x3], [0x1000000000000, 0x0, 0xa, 0x200]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000001080)={0x0, 0x7ff, 0x1641, 0x30315559, 0x0, [r4], [], [0x0, 0x4], [0x7ffffffc, 0x0, 0x0, 0x1]}) 659.898274ms ago: executing program 3 (id=1763): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f00000002c0)={0x40, 0x12, 0x8, "3e15f1be0e4044f0"}, 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 355.253883ms ago: executing program 2 (id=1764): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 329.010384ms ago: executing program 8 (id=1765): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=1766): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) kernel console output (not intermixed with test programs): es=0 errno=0 [ 258.988891][ T8765] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4112: comm syz.0.1022: Allocating blocks 481-513 which overlap fs metadata [ 259.068630][ T8765] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4112: comm syz.0.1022: Allocating blocks 497-513 which overlap fs metadata [ 259.100176][ T8765] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4112: comm syz.0.1022: Allocating blocks 497-513 which overlap fs metadata [ 259.175334][ T8765] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 259.195799][ T8765] EXT4-fs (loop0): This should not happen!! Data will be lost [ 259.195799][ T8765] [ 259.392911][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.602123][ T30] audit: type=1326 audit(1749110332.952:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.0.1028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4593b8e929 code=0x0 [ 259.680807][ T8783] loop8: detected capacity change from 0 to 2048 [ 259.713776][ T8784] loop9: detected capacity change from 0 to 1024 [ 259.789165][ T8784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.883908][ T5818] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 259.942151][ T8783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.063874][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 260.085796][ T30] audit: type=1800 audit(1749110333.432:94): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1023" name="bus" dev="loop8" ino=1438 res=0 errno=0 [ 260.085990][ T5818] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 260.184451][ T5818] usb 3-1: config 0 has no interface number 0 [ 260.206808][ T7917] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.222959][ T5818] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.301149][ T5818] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 260.314836][ T5818] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.326548][ T5818] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.340020][ T5818] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 260.349519][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.413089][ T5818] usb 3-1: config 0 descriptor?? [ 260.454038][ T5818] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 260.635005][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1034'. [ 260.792681][ T5818] usb 3-1: USB disconnect, device number 17 [ 260.812055][ T5818] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 260.819998][ T8805] mac80211_hwsim hwsim19 `ëÿÿ: renamed from wlan1 (while UP) [ 261.209853][ T8810] netlink: 'syz.0.1041': attribute type 39 has an invalid length. [ 261.546077][ T8802] loop6: detected capacity change from 0 to 32768 [ 261.728648][ T8802] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 261.732525][ T30] audit: type=1800 audit(1749110335.082:95): pid=8825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1045" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 261.945675][ T10] libceph: connect (1)[c::]:6789 error -101 [ 261.951969][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 261.986178][ T10] libceph: connect (1)[c::]:6789 error -101 [ 261.992472][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 261.998683][ T9] kernel read not supported for file /vbi0 (pid: 9 comm: kworker/0:0) [ 262.199483][ T6884] ocfs2: Unmounting device (7,6) on (node local) [ 262.216142][ T9] libceph: connect (1)[c::]:6789 error -101 [ 262.225908][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 262.273227][ T9] libceph: connect (1)[c::]:6789 error -101 [ 262.279869][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 262.421035][ T8843] loop2: detected capacity change from 0 to 2048 [ 262.452699][ T8843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.504292][ T8822] loop3: detected capacity change from 0 to 32768 [ 262.583999][ T30] audit: type=1800 audit(1749110335.912:96): pid=8843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1050" name="bus" dev="loop2" ino=1438 res=0 errno=0 [ 262.640638][ T8822] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1044 (8822) [ 262.738513][ T8834] ceph: No mds server is up or the cluster is laggy [ 262.757759][ T8837] ceph: No mds server is up or the cluster is laggy [ 262.829466][ T9] libceph: connect (1)[c::]:6789 error -101 [ 262.854275][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 262.865743][ T8822] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 262.882114][ T10] libceph: connect (1)[c::]:6789 error -101 [ 262.919099][ T8822] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 262.928866][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 262.950874][ T8822] BTRFS info (device loop3): disk space caching is enabled [ 262.959610][ T8822] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 263.233860][ T30] audit: type=1326 audit(1749110336.582:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.6.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5018e929 code=0x7fc00000 [ 263.278999][ T8822] BTRFS info (device loop3): rebuilding free space tree [ 263.302556][ T8822] BTRFS info (device loop3): disabling free space tree [ 263.314687][ T8822] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 263.359990][ T8822] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 263.776273][ T30] audit: type=1326 audit(1749110337.112:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.6.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c5018e929 code=0x7fc00000 [ 263.955644][ T8896] netlink: 'syz.9.1060': attribute type 39 has an invalid length. [ 264.315598][ T5834] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 265.171194][ T8913] loop6: detected capacity change from 0 to 512 [ 265.210345][ T9] libceph: connect (1)[c::]:6789 error -101 [ 265.226987][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 265.261047][ T5818] libceph: connect (1)[c::]:6789 error -101 [ 265.285447][ T5818] libceph: mon0 (1)[c::]:6789 connect error [ 265.335367][ T8913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.387919][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.395618][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.409610][ T8913] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.415835][ T5818] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 265.497388][ T9] libceph: connect (1)[c::]:6789 error -101 [ 265.513649][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 265.548434][ T3400] libceph: connect (1)[c::]:6789 error -101 [ 265.554670][ T3400] libceph: mon0 (1)[c::]:6789 connect error [ 265.573643][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 265.615096][ T5818] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 265.643622][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.651780][ T5818] usb 1-1: Product: syz [ 265.664111][ T5818] usb 1-1: Manufacturer: syz [ 265.668787][ T5818] usb 1-1: SerialNumber: syz [ 265.681641][ T6884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.701390][ T5818] usb 1-1: config 0 descriptor?? [ 265.716534][ T5818] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 265.832438][ T8934] loop6: detected capacity change from 0 to 1024 [ 265.841757][ T8934] EXT4-fs: Ignoring removed orlov option [ 265.849261][ T8934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.883491][ T8934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.988174][ T8918] ceph: No mds server is up or the cluster is laggy [ 266.024476][ T9] libceph: connect (1)[c::]:6789 error -101 [ 266.033809][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 266.034587][ T8923] ceph: No mds server is up or the cluster is laggy [ 266.073292][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 266.093096][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 266.488636][ T8942] bond0: (slave bond_slave_0): Releasing backup interface [ 266.508187][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 266.734477][ T6884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.956927][ T8958] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 266.974772][ T5818] gspca_sonixj: reg_w1 err -71 [ 267.083673][ T5818] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 267.122236][ T5818] usb 1-1: USB disconnect, device number 14 [ 267.579998][ T8970] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1084'. [ 267.878382][ T8977] loop9: detected capacity change from 0 to 64 [ 267.990763][ T8977] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 268.004458][ T8977] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 268.374263][ T5818] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 268.444083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 268.453092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.506225][ T10] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 268.583184][ T5818] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 268.602845][ T5818] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 268.642159][ T8994] loop6: detected capacity change from 0 to 512 [ 268.643303][ T5818] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 268.663350][ T5818] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 268.694032][ T8994] EXT4-fs (loop6): Test dummy encryption mode enabled [ 268.704355][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 268.717890][ T5818] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 268.724426][ T10] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 268.763272][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.787157][ T10] usb 10-1: config 0 descriptor?? [ 268.793003][ T5818] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 268.794073][ T8988] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 268.809773][ T8994] EXT4-fs error (device loop6): __ext4_iget:5379: inode #11: block 1: comm syz.6.1096: invalid block [ 268.833825][ T8994] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1096: couldn't read orphan inode 11 (err -117) [ 268.845923][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 268.867566][ T5818] usb 3-1: Product: syz [ 268.876343][ T5818] usb 3-1: Manufacturer: syz [ 268.878900][ T8994] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.945037][ T5818] cdc_wdm 3-1:1.0: skipping garbage [ 268.990376][ T5818] cdc_wdm 3-1:1.0: skipping garbage [ 269.006234][ T5818] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 269.012385][ T5818] cdc_wdm 3-1:1.0: Unknown control protocol [ 269.176965][ T5932] usb 3-1: USB disconnect, device number 18 [ 269.303460][ T10] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 269.373675][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 269.517211][ T5932] usb 10-1: USB disconnect, device number 11 [ 269.536335][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.573421][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.591106][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 269.606683][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 269.628317][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.676567][ T9] usb 9-1: config 0 descriptor?? [ 270.177923][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 270.212275][ T9] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 270.255542][ T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 270.330687][ T9017] loop9: detected capacity change from 0 to 256 [ 270.343661][ T8998] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 270.497294][ T9017] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 270.541454][ T5891] usb 9-1: USB disconnect, device number 4 [ 271.039443][ T6884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.244980][ T9053] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 272.694740][ T9064] loop9: detected capacity change from 0 to 512 [ 272.755892][ T9064] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 272.833285][ T9064] EXT4-fs (loop9): 1 truncate cleaned up [ 272.850200][ T9064] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.203922][ T7917] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.823704][ T9] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 273.872214][ T9084] loop3: detected capacity change from 0 to 4096 [ 273.890157][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.031053][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 274.056611][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 274.079568][ T9] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 274.090060][ T9] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 274.118138][ T9] usb 10-1: Product: syz [ 274.122527][ T9] usb 10-1: Manufacturer: syz [ 274.133105][ T9] usb 10-1: SerialNumber: syz [ 274.152972][ T9] usb 10-1: config 0 descriptor?? [ 274.159823][ T9087] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 274.192452][ T9] hub 10-1:0.0: bad descriptor, ignoring hub [ 274.206752][ T9] hub 10-1:0.0: probe with driver hub failed with error -5 [ 274.264251][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.399514][ T9084] ntfs3(loop3): ino=23, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_rename [ 274.614681][ T9] usb 10-1: USB disconnect, device number 12 [ 274.750466][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.844116][ T5818] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 274.969429][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.996478][ T5818] usb 7-1: Using ep0 maxpacket: 32 [ 275.013340][ T5818] usb 7-1: config 0 has an invalid interface number: 14 but max is 0 [ 275.027872][ T5818] usb 7-1: config 0 has no interface number 0 [ 275.043979][ T5818] usb 7-1: config 0 interface 14 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 275.073089][ T5818] usb 7-1: New USB device found, idVendor=04a5, idProduct=4027, bcdDevice=ca.f0 [ 275.099628][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.128016][ T5818] usb 7-1: Product: syz [ 275.139862][ T5818] usb 7-1: Manufacturer: syz [ 275.158483][ T5818] usb 7-1: SerialNumber: syz [ 275.186665][ T5818] usb 7-1: config 0 descriptor?? [ 275.193728][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 275.243394][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.262506][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.284936][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.313861][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.331974][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.365953][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 275.389810][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 275.418929][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 275.433232][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 275.487678][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 275.524391][ T36] bridge_slave_1: left allmulticast mode [ 275.530815][ T36] bridge_slave_1: left promiscuous mode [ 275.554513][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 275.568206][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.609260][ T9] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 275.622736][ T36] bridge_slave_0: left allmulticast mode [ 275.641735][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.649407][ T9112] loop9: detected capacity change from 0 to 512 [ 275.659841][ T36] bridge_slave_0: left promiscuous mode [ 275.679670][ T9112] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 275.681746][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.701370][ T9] usb 4-1: Product: syz [ 275.703394][ T5818] pl2303 7-1:0.14: required endpoints missing [ 275.710942][ T9] usb 4-1: Manufacturer: syz [ 275.722190][ T9] usb 4-1: SerialNumber: syz [ 275.734226][ T5818] usb 7-1: USB disconnect, device number 8 [ 275.751359][ T9112] EXT4-fs (loop9): 1 truncate cleaned up [ 275.763378][ T9] usb 4-1: config 0 descriptor?? [ 275.770927][ T9112] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.899435][ T30] audit: type=1800 audit(1749110349.252:99): pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1136" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 276.306722][ T7917] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.340795][ T9] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 276.353666][ T9] input input24: Device does not respond to id packet M [ 276.371877][ T9] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 276.379665][ T9] input input24: Device does not respond to id packet P [ 276.394709][ T9] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 276.402965][ T9] input input24: Device does not respond to id packet B [ 276.442800][ T9] input input24: Limiting number of effects to 32 (device reports 141) [ 276.474532][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 276.641914][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.656254][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 276.679674][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.689196][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 276.699315][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 276.706979][ T10] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 276.723319][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 276.739189][ T9] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 276.755673][ T10] usb 9-1: SerialNumber: syz [ 276.761754][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24 [ 276.842927][ T9] usb 4-1: USB disconnect, device number 16 [ 277.007078][ T10] usb 9-1: 0:2 : does not exist [ 277.012130][ T10] usb 9-1: unit 2 not found! [ 277.071504][ T10] usb 9-1: USB disconnect, device number 5 [ 277.373944][ T51] Bluetooth: hci3: command tx timeout [ 277.528074][ T9140] input: syz0 as /devices/virtual/input/input25 [ 277.652859][ T5891] IPVS: starting estimator thread 0... [ 277.787029][ T9144] IPVS: using max 23 ests per chain, 55200 per kthread [ 278.344038][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.396029][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.431214][ T36] bond0 (unregistering): Released all slaves [ 278.483024][ T9138] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 278.491987][ T9138] macsec1: entered allmulticast mode [ 278.502270][ T9138] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 278.563034][ T9138] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 278.580585][ T9138] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 278.783922][ T9164] loop8: detected capacity change from 0 to 32768 [ 278.809881][ T9164] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1158 (9164) [ 278.834231][ T9164] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 278.844512][ T9164] BTRFS info (device loop8): using sha256 (sha256-x86_64) checksum algorithm [ 278.853676][ T9164] BTRFS info (device loop8): using free-space-tree [ 278.979509][ T9164] BTRFS info (device loop8): rebuilding free space tree [ 279.075565][ T9164] BTRFS info (device loop8): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 279.143198][ T9183] loop6: detected capacity change from 0 to 1024 [ 279.249966][ T9183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.369645][ T7486] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 279.459264][ T51] Bluetooth: hci3: command tx timeout [ 279.861044][ T36] hsr_slave_0: left promiscuous mode [ 279.939535][ T36] hsr_slave_1: left promiscuous mode [ 279.948910][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.960394][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.996768][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.019950][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.036555][ T6884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.142746][ T36] veth1_macvtap: left promiscuous mode [ 280.169320][ T36] veth0_macvtap: left promiscuous mode [ 280.386949][ T9212] loop9: detected capacity change from 0 to 2048 [ 280.434989][ T9212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.800134][ T7917] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.533684][ T51] Bluetooth: hci3: command tx timeout [ 282.444084][ T970] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 282.634076][ T970] usb 4-1: Using ep0 maxpacket: 16 [ 282.644072][ T5891] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 282.645369][ T970] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.679574][ T36] team0 (unregistering): Port device team_slave_1 removed [ 282.692711][ T970] usb 4-1: config 0 has no interface number 0 [ 282.747878][ T970] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 282.763711][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.775121][ T970] usb 4-1: Product: syz [ 282.785972][ T9251] loop0: detected capacity change from 0 to 2048 [ 282.796224][ T970] usb 4-1: Manufacturer: syz [ 282.802257][ T970] usb 4-1: SerialNumber: syz [ 282.810551][ T970] usb 4-1: config 0 descriptor?? [ 282.811238][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.830962][ T9251] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051 [ 282.831452][ T970] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 282.861908][ T5891] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.871882][ T5891] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.887938][ T5891] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.898493][ T9251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.907378][ T5891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.921972][ T5891] usb 10-1: config 0 descriptor?? [ 282.984048][ T36] team0 (unregistering): Port device team_slave_0 removed [ 283.348852][ T5891] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd [ 283.532457][ T5891] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 283.589833][ T5891] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 283.627081][ T51] Bluetooth: hci3: command tx timeout [ 283.683661][ T5891] usb 10-1: USB disconnect, device number 13 [ 284.103889][ T970] gspca_spca1528: reg_w err -71 [ 284.110596][ T970] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 284.157961][ T970] usb 4-1: USB disconnect, device number 17 [ 285.008057][ T9275] netlink: 'syz.0.1193': attribute type 10 has an invalid length. [ 285.083847][ T5890] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 285.225067][ T970] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 285.261772][ T5890] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 285.307585][ T5890] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.363085][ T5890] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 285.385413][ T9275] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.386810][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.409721][ T5890] usb 10-1: config 1 has no interface number 1 [ 285.419602][ T9275] bond0: (slave team0): Enslaving as an active interface with an up link [ 285.434861][ T5890] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 285.444719][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.464179][ T5890] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 204, changing to 4 [ 285.503935][ T970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.527410][ T5890] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 31856, setting to 1023 [ 285.548063][ T970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.596996][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.623630][ T5890] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 285.632009][ T970] usb 4-1: config 0 descriptor?? [ 285.632796][ T5890] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.747117][ T5890] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 285.793926][ T5890] usb 10-1: found format II with max.bitrate = 0, frame size=0 [ 285.813576][ T5890] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 285.868567][ T5932] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 286.048115][ T5890] usb 10-1: USB disconnect, device number 14 [ 286.049533][ T5932] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.112635][ T970] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 286.120857][ T5932] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.147189][ T5932] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 286.164234][ T9105] chnl_net:caif_netlink_parms(): no params data found [ 286.171516][ T970] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 286.192864][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 286.221518][ T5932] usb 7-1: SerialNumber: syz [ 286.273213][ T9290] loop0: detected capacity change from 0 to 512 [ 286.311256][ T9290] EXT4-fs: inline encryption not supported [ 286.348497][ T9290] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 286.420057][ T9290] EXT4-fs (loop0): 1 truncate cleaned up [ 286.458413][ T9290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.470139][ T5932] usb 7-1: 0:2 : does not exist [ 286.490490][ T5932] usb 7-1: USB disconnect, device number 9 [ 286.593402][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.612630][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.627964][ T9105] bridge_slave_0: entered allmulticast mode [ 286.655454][ T9105] bridge_slave_0: entered promiscuous mode [ 286.687751][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.715985][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.716185][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.747288][ T9105] bridge_slave_1: entered allmulticast mode [ 286.776466][ T9105] bridge_slave_1: entered promiscuous mode [ 286.916704][ T9300] input: syz1 as /devices/virtual/input/input27 [ 286.920605][ T9105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.943152][ T9285] loop8: detected capacity change from 0 to 32768 [ 286.965939][ T9105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.986796][ T9285] XFS (loop8): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 287.014672][ T9298] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 287.022101][ T9298] macsec1: entered allmulticast mode [ 287.036094][ T9298] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 287.082074][ T9298] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 287.124050][ T9298] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 287.127685][ T9285] XFS (loop8): Ending clean mount [ 287.286553][ T30] audit: type=1800 audit(1749110360.632:100): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1196" name="file2" dev="loop8" ino=5767 res=0 errno=0 [ 287.357833][ T9311] loop9: detected capacity change from 0 to 4096 [ 287.394726][ T9105] team0: Port device team_slave_0 added [ 287.418214][ T9105] team0: Port device team_slave_1 added [ 287.450623][ T9311] ntfs3(loop9): ino=1a, mi_enum_attr [ 287.465846][ T9311] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 287.587663][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.613909][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.701934][ T9105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.748813][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.768453][ T7486] XFS (loop8): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 287.776491][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.853660][ T9105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.937432][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 288.158020][ T9325] loop0: detected capacity change from 0 to 1024 [ 288.281539][ T9331] loop3: detected capacity change from 0 to 512 [ 288.288552][ T9325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.298225][ T9105] hsr_slave_0: entered promiscuous mode [ 288.318222][ T9105] hsr_slave_1: entered promiscuous mode [ 288.325853][ T5890] usb 4-1: USB disconnect, device number 18 [ 288.349177][ T9105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.368936][ T9105] Cannot create hsr debugfs directory [ 288.382705][ T9331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.444752][ T9331] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.516797][ T30] audit: type=1800 audit(1749110361.872:101): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1212" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 288.554934][ T9338] loop8: detected capacity change from 0 to 1024 [ 288.609144][ T30] audit: type=1800 audit(1749110361.882:102): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1212" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 288.615777][ T9338] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.672748][ T30] audit: type=1800 audit(1749110361.912:103): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1212" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 288.715820][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.952719][ T7486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.582233][ T9356] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 289.761099][ T9105] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.840988][ T9105] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.908326][ T9105] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.938331][ T9105] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.268983][ T9105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.299474][ T9105] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.324444][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.331707][ T5911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.376050][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.383356][ T5911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.530077][ T9373] loop6: detected capacity change from 0 to 1024 [ 290.552063][ T9373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 290.754254][ T5891] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 290.925268][ T5891] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 290.954486][ T5891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.986329][ T5891] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 291.004783][ T5891] usb 1-1: config 1 has no interface number 1 [ 291.019715][ T5891] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 291.099278][ T5891] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 204, changing to 4 [ 291.136165][ T5891] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 31856, setting to 1023 [ 291.164156][ T5891] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 291.185718][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.248316][ T5891] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 291.258692][ T9105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.280563][ T5891] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 291.320303][ T5891] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 291.420726][ T9105] veth0_vlan: entered promiscuous mode [ 291.478745][ T9105] veth1_vlan: entered promiscuous mode [ 291.505998][ T5891] usb 1-1: USB disconnect, device number 15 [ 291.632523][ T9105] veth0_macvtap: entered promiscuous mode [ 291.658644][ T9105] veth1_macvtap: entered promiscuous mode [ 291.721740][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.752769][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.780599][ T9105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.797685][ T9105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.811875][ T9105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.828844][ T9105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.960186][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.978183][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.009946][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.018938][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.407342][ T9399] loop2: detected capacity change from 0 to 32768 [ 292.449154][ T9399] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 292.651516][ T9105] ocfs2: Unmounting device (7,2) on (node local) [ 293.640949][ T9438] loop6: detected capacity change from 0 to 512 [ 293.661513][ T9438] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 293.707582][ T9438] EXT4-fs (loop6): 1 truncate cleaned up [ 293.716687][ T9438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.828494][ T30] audit: type=1800 audit(1749110367.182:104): pid=9438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1265" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 294.210839][ T9448] Bluetooth: Short BCSP packet [ 294.322553][ T6884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.473784][ T5891] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 294.663648][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 294.689599][ T5891] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 294.718267][ T5891] usb 4-1: config 179 has no interface number 0 [ 294.740772][ T5891] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 294.782630][ T9444] loop8: detected capacity change from 0 to 32768 [ 294.787960][ T5891] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 294.821525][ T5891] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 294.841005][ T5891] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 294.854721][ T5891] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 294.873266][ T5891] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 294.882934][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.903083][ T9444] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 294.933458][ T9450] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 295.309976][ T3400] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input28 [ 295.371285][ T7486] ocfs2: Unmounting device (7,8) on (node local) [ 295.522796][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 295.531193][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 295.542830][ T3400] usb 4-1: USB disconnect, device number 19 [ 295.556347][ T3400] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 296.253974][ T5840] Bluetooth: hci6: command 0x1003 tx timeout [ 296.260795][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 296.735698][ T9505] loop3: detected capacity change from 0 to 64 [ 296.778596][ T9507] loop8: detected capacity change from 0 to 512 [ 296.804827][ T9508] loop2: detected capacity change from 0 to 7 [ 296.815696][ T9507] EXT4-fs: Ignoring removed bh option [ 296.833002][ T9507] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 296.844993][ T9508] Dev loop2: unable to read RDB block 7 [ 296.850585][ T9508] loop2: AHDI p2 p3 [ 296.875590][ T9508] loop2: partition table partially beyond EOD, truncated [ 296.885829][ T30] audit: type=1800 audit(1749110370.242:105): pid=9505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1279" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 296.894137][ T9508] loop2: p3 start 335544320 is beyond EOD, truncated [ 296.925840][ T9507] EXT4-fs (loop8): 1 truncate cleaned up [ 297.025824][ T9507] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.046814][ T9513] mmap: syz.6.1284 (9513) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 297.230666][ T7486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.239349][ T9518] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 297.272125][ T9518] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 297.334159][ T9519] loop2: detected capacity change from 0 to 512 [ 297.382119][ T9519] EXT4-fs (loop2): Test dummy encryption mode enabled [ 297.750151][ T9526] IPv4: Oversized IP packet from 127.202.26.0 [ 297.988352][ T9519] EXT4-fs error (device loop2): __ext4_iget:5379: inode #11: block 1: comm syz.2.1283: invalid block [ 298.059608][ T9519] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1283: couldn't read orphan inode 11 (err -117) [ 298.354835][ T9532] Bluetooth: Short BCSP packet [ 298.713943][ T9511] loop0: detected capacity change from 0 to 32768 [ 298.806231][ T9511] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 299.042345][ T9519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.376096][ T9105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.487643][ T5832] ocfs2: Unmounting device (7,0) on (node local) [ 300.033757][ T3400] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 300.229568][ T3400] usb 9-1: Using ep0 maxpacket: 8 [ 300.285245][ T3400] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 300.304783][ T3400] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.325753][ T3400] usb 9-1: Product: syz [ 300.334194][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 300.341158][ T5840] Bluetooth: hci6: command 0x1003 tx timeout [ 300.360002][ T3400] usb 9-1: Manufacturer: syz [ 300.370135][ T3400] usb 9-1: SerialNumber: syz [ 300.383486][ T3400] usb 9-1: config 0 descriptor?? [ 300.393074][ T3400] gspca_main: sq930x-2.14.0 probing 2770:930c [ 300.453271][ T9553] loop2: detected capacity change from 0 to 32768 [ 300.520954][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1301'. [ 300.548984][ T9553] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 300.619074][ T9553] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 300.676530][ T9555] loop3: detected capacity change from 0 to 32768 [ 300.726010][ T9555] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 300.809599][ T9555] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 300.865008][ T1331] (kworker/u8:6,1331,1):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 301.022204][ T9105] ocfs2: Unmounting device (7,2) on (node local) [ 301.130575][ T5834] ocfs2: Unmounting device (7,3) on (node local) [ 301.592458][ T9586] Trying to write to read-only block-device nullb0 [ 301.643925][ T3400] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 301.649998][ T3400] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 301.700017][ T3400] usb 9-1: USB disconnect, device number 6 [ 302.062628][ T9582] loop0: detected capacity change from 0 to 32768 [ 302.092381][ T9582] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1308 (9582) [ 302.119893][ T9597] loop2: detected capacity change from 0 to 256 [ 302.142780][ T9582] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 302.187108][ T9582] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 302.223692][ T9582] BTRFS info (device loop0): using free-space-tree [ 302.259997][ T9600] input: syz0 as /devices/virtual/input/input29 [ 302.740524][ T5832] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 303.561329][ T9644] loop0: detected capacity change from 0 to 47 [ 304.383689][ T3400] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 304.555367][ T9656] loop9: detected capacity change from 0 to 8192 [ 304.585874][ T3400] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 304.621654][ T3400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.660339][ T3400] usb 7-1: config 0 descriptor?? [ 305.736691][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1344'. [ 305.907431][ T3400] pegasus 7-1:0.0: can't reset MAC [ 305.913146][ T3400] pegasus 7-1:0.0: probe with driver pegasus failed with error -5 [ 305.924554][ T9687] input: syz0 as /devices/virtual/input/input30 [ 305.949117][ T3400] usb 7-1: USB disconnect, device number 10 [ 306.112333][ T9674] loop8: detected capacity change from 0 to 32768 [ 306.129876][ T9674] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1341 (9674) [ 306.164611][ T9674] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.194643][ T9674] BTRFS info (device loop8): using sha256 (sha256-x86_64) checksum algorithm [ 306.215473][ T9674] BTRFS info (device loop8): disk space caching is enabled [ 306.243915][ T9674] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 306.420590][ T9674] BTRFS info (device loop8): rebuilding free space tree [ 306.532196][ T9674] BTRFS info (device loop8): disabling free space tree [ 306.561719][ T9674] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 306.593690][ T9674] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 306.691971][ T9718] loop3: detected capacity change from 0 to 1024 [ 306.740394][ T9718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 306.920626][ T36] BTRFS info (device loop8): qgroup scan completed (inconsistency flag cleared) [ 306.933056][ T9701] loop0: detected capacity change from 0 to 32768 [ 306.987198][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 307.016198][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 307.027448][ T9701] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 307.039604][ T7486] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.197592][ T30] audit: type=1800 audit(1749110380.552:106): pid=9701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1349" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 307.519427][ T5832] ocfs2: Unmounting device (7,0) on (node local) [ 307.685938][ T9739] loop9: detected capacity change from 0 to 512 [ 307.723150][ T9739] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 307.762056][ T9739] EXT4-fs (loop9): 1 truncate cleaned up [ 307.801734][ T9739] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.882404][ T9745] loop3: detected capacity change from 0 to 4096 [ 307.973965][ T9739] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 308.031052][ T9749] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.268704][ T9744] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 308.318007][ T7917] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.357985][ T9744] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 308.466158][ T9744] Remounting filesystem read-only [ 308.471267][ T9744] NILFS (loop3): error -5 truncating bmap (ino=12) [ 308.801927][ T5834] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 309.117334][ T9767] loop9: detected capacity change from 0 to 1024 [ 309.197208][ T9767] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.223924][ T9767] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.362828][ T9767] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #15: block 3: comm syz.9.1371: lblock 3 mapped to illegal pblock 3 (length 13) [ 309.398842][ T9767] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 309.433877][ T9767] EXT4-fs (loop9): This should not happen!! Data will be lost [ 309.433877][ T9767] [ 309.478647][ T9775] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #15: block 3: comm syz.9.1371: lblock 3 mapped to illegal pblock 3 (length 1) [ 309.556560][ T9766] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #15: block 3: comm syz.9.1371: lblock 3 mapped to illegal pblock 3 (length 1) [ 309.618952][ T9766] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #15: block 3: comm syz.9.1371: lblock 3 mapped to illegal pblock 3 (length 1) [ 309.689831][ T9775] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #15: block 3: comm syz.9.1371: lblock 3 mapped to illegal pblock 3 (length 1) [ 309.755600][ T9775] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #15: block 3: comm syz.9.1371: lblock 3 mapped to illegal pblock 3 (length 1) [ 309.784286][ T9766] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #15: block 3: comm syz.9.1371: lblock 3 mapped to illegal pblock 3 (length 1) [ 309.829421][ T9775] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #15: block 3: comm syz.9.1371: lblock 3 mapped to illegal pblock 3 (length 1) [ 309.889241][ T9767] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #15: block 3: comm syz.9.1371: lblock 3 mapped to illegal pblock 3 (length 1) [ 309.938294][ T9775] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #15: block 3: comm syz.9.1371: lblock 3 mapped to illegal pblock 3 (length 1) [ 310.044509][ T9762] loop6: detected capacity change from 0 to 32768 [ 310.128855][ T30] audit: type=1800 audit(1749110383.462:107): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1369" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 310.177409][ T9787] ERROR: (device loop6): dbAdjCtl: the maximum free buddy is not the old root [ 310.177409][ T9787] [ 310.213253][ T7917] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.224577][ T9787] ERROR: (device loop6): remounting filesystem as read-only [ 310.281454][ T9789] loop2: detected capacity change from 0 to 1024 [ 310.325535][ T9789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.430544][ T9105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.504640][ T5890] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 310.526890][ T9774] loop3: detected capacity change from 0 to 32768 [ 310.553490][ T9774] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 310.571258][ T9796] loop9: detected capacity change from 0 to 2048 [ 310.618455][ T9796] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.626890][ T9774] XFS (loop3): Ending clean mount [ 310.660417][ T9796] EXT4-fs: Ignoring removed nobh option [ 310.693905][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 310.699490][ T9796] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.727502][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.746196][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.758977][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 310.771877][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.789241][ T5890] usb 1-1: config 0 descriptor?? [ 310.798092][ T5890] hub 1-1:0.0: USB hub found [ 310.890676][ T30] audit: type=1804 audit(1749110384.242:108): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1373" name="/newroot/242/bus/file1" dev="loop3" ino=9286 res=1 errno=0 [ 310.965367][ T5834] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 311.027129][ T5890] hub 1-1:0.0: 1 port detected [ 311.048140][ T7917] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.682144][ T5890] hub 1-1:0.0: activate --> -90 [ 311.982840][ T9827] loop3: detected capacity change from 0 to 16 [ 312.044664][ T9827] erofs (device loop3): mounted with root inode @ nid 36. [ 312.101857][ T3400] usb 1-1: USB disconnect, device number 16 [ 312.292492][ T9814] loop6: detected capacity change from 0 to 32768 [ 312.327750][ T9814] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1384 (9814) [ 312.394674][ T9814] BTRFS info (device loop6): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 312.432426][ T9814] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 312.454508][ T9814] BTRFS info (device loop6): using free-space-tree [ 312.584338][ T970] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 312.778692][ T970] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 312.800246][ T970] usb 9-1: config 1 has no interface number 0 [ 312.854678][ T970] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.873586][ T30] audit: type=1800 audit(1749110386.222:109): pid=9859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1384" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 312.919374][ T970] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 312.933000][ T30] audit: type=1800 audit(1749110386.262:110): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1384" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 312.947192][ T970] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 313.018293][ T970] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 313.136741][ T970] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.136791][ T970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.136829][ T970] usb 9-1: Product: syz [ 313.136858][ T970] usb 9-1: Manufacturer: syz [ 313.136899][ T970] usb 9-1: SerialNumber: syz [ 313.213326][ T6884] BTRFS info (device loop6): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 313.346914][ T9834] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 313.949999][ T9872] loop0: detected capacity change from 0 to 1024 [ 313.971893][ T9834] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 314.020704][ T970] cdc_ncm 9-1:1.1: bind() failure [ 314.032062][ T9872] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 314.167719][ T9872] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.1400: lblock 1 mapped to illegal pblock 1 (length 1) [ 314.209963][ T9872] Quota error (device loop0): write_blk: dquota write failed [ 314.217472][ T9872] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 314.228456][ T5932] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 314.237845][ T9872] EXT4-fs error (device loop0): ext4_acquire_dquot:6931: comm syz.0.1400: Failed to acquire dquot type 0 [ 314.256189][ T9872] EXT4-fs error (device loop0): ext4_free_blocks:6586: comm syz.0.1400: Freeing blocks not in datazone - block = 0, count = 4096 [ 314.282963][ T5818] usb 9-1: USB disconnect, device number 7 [ 314.283380][ T9872] EXT4-fs error (device loop0): ext4_read_inode_bitmap:138: comm syz.0.1400: Invalid inode bitmap blk 0 in block_group 0 [ 314.316964][ T9872] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 314.325853][ T5911] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 314.326223][ T9872] EXT4-fs (loop0): 1 orphan inode deleted [ 314.355323][ T9872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.368310][ T970] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 314.396867][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1022, setting to 64 [ 314.408553][ T5932] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 314.418101][ T5911] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 314.418854][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.441178][ T5932] usb 3-1: config 0 descriptor?? [ 314.447631][ T9874] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 314.451495][ T5911] EXT4-fs error (device loop0): ext4_release_dquot:6967: comm kworker/u8:7: Failed to release dquot type 0 [ 314.556677][ T970] usb 10-1: config 0 has no interfaces? [ 314.568634][ T970] usb 10-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 314.620509][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.641220][ T970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.716467][ T970] usb 10-1: config 0 descriptor?? [ 314.909333][ T5932] uclogic 0003:5543:0003.0013: No inputs registered, leaving [ 315.003907][ T5932] uclogic 0003:5543:0003.0013: hidraw0: USB HID v4.01 Device [HID 5543:0003] on usb-dummy_hcd.2-1/input0 [ 315.048313][ T5932] usb 10-1: USB disconnect, device number 15 [ 315.182115][ T3400] usb 3-1: USB disconnect, device number 19 [ 315.653732][ T970] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 315.694481][ T3400] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 315.843937][ T3400] usb 7-1: Using ep0 maxpacket: 8 [ 315.874095][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.898316][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.901829][ T3400] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 315.954058][ T970] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 315.979587][ T3400] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 315.979593][ T970] usb 1-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 315.979629][ T970] usb 1-1: Manufacturer: syz [ 316.069601][ T970] usb 1-1: config 0 descriptor?? [ 316.075001][ T3400] usb 7-1: Product: syz [ 316.077984][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 316.108598][ T970] hub 1-1:0.0: USB hub found [ 316.113326][ T3400] usb 7-1: Manufacturer: syz [ 316.123437][ T3400] usb 7-1: SerialNumber: syz [ 316.155541][ T3400] usb 7-1: config 0 descriptor?? [ 316.216742][ T9909] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.226093][ T9909] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.234921][ T9909] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.243790][ T9909] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.272364][ T9909] vxlan0: entered promiscuous mode [ 316.318715][ T970] hub 1-1:0.0: 1 port detected [ 316.658917][ T3400] usb 7-1: USB disconnect, device number 11 [ 317.023286][ T970] hub 1-1:0.0: activate --> -90 [ 317.439661][ T3400] usb 1-1: USB disconnect, device number 17 [ 317.659878][ T970] usb 1-1-port1: config error [ 317.799512][ T9915] loop2: detected capacity change from 0 to 8192 [ 318.324618][ T3400] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 318.531792][ T3400] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.586525][ T3400] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.620295][ T3400] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 318.658181][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 318.669510][ T3400] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.700807][ T3400] usb 9-1: config 0 descriptor?? [ 319.189384][ T3400] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 319.222995][ T3400] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 319.258847][ T3400] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0D8C:0022.0014/input/input31 [ 319.467559][ T3400] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 319.628767][ T3400] usb 9-1: USB disconnect, device number 8 [ 320.633610][ T5818] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 320.867726][ T5818] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 320.915342][ T5818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.948843][ T5818] usb 9-1: config 0 descriptor?? [ 321.149600][ T9] libceph: connect (1)[c::]:6789 error -101 [ 321.156585][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 321.414999][ T970] libceph: connect (1)[c::]:6789 error -101 [ 321.429928][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 321.539997][ T9985] loop9: detected capacity change from 0 to 32768 [ 321.549301][ T9985] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1446 (9985) [ 321.590326][ T9985] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 321.613137][ T9985] BTRFS info (device loop9): using sha256 (sha256-x86_64) checksum algorithm [ 321.622929][ T9985] BTRFS info (device loop9): disk space caching is enabled [ 321.631255][ T9985] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 321.719135][ T9985] BTRFS info (device loop9): rebuilding free space tree [ 321.741464][ T9985] BTRFS info (device loop9): disabling free space tree [ 321.750561][ T9985] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 321.767845][ T9985] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 321.877958][ T9987] ceph: No mds server is up or the cluster is laggy [ 322.117367][ T49] BTRFS info (device loop9): qgroup scan completed (inconsistency flag cleared) [ 322.187162][ T7917] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 322.241973][ T5818] usb 9-1: Cannot set autoneg [ 322.265741][ T5818] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 322.367647][ T5818] usb 9-1: USB disconnect, device number 9 [ 322.603194][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1455'. [ 323.447460][T10041] use of bytesused == 0 is deprecated and will be removed in the future, [ 323.518958][T10041] use the actual size instead. [ 324.150214][ T30] audit: type=1800 audit(1749110397.502:111): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1465" name="dmabuf" dev="dmabuf" ino=4 res=0 errno=0 [ 324.403285][T10056] loop0: detected capacity change from 0 to 1024 [ 324.432396][T10056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.447134][T10037] loop8: detected capacity change from 0 to 32768 [ 324.603964][T10037] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 324.612423][T10056] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.869586][T10037] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 325.706187][T10043] loop9: detected capacity change from 0 to 32768 [ 325.782688][T10043] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 325.847347][T10043] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode. [ 325.884571][T10056] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 3: comm syz.0.1466: lblock 3 mapped to illegal pblock 3 (length 13) [ 325.928866][T10074] loop3: detected capacity change from 0 to 2048 [ 325.940708][ T30] audit: type=1800 audit(1749110399.292:112): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1461" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 325.992888][T10056] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 325.997196][T10074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.028267][T10056] EXT4-fs (loop0): This should not happen!! Data will be lost [ 326.028267][T10056] [ 326.058515][T10077] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.1466: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.101648][ T7486] ocfs2: Unmounting device (7,8) on (node local) [ 326.106160][T10054] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.1466: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.155932][T10054] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.1466: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.167738][ T7917] ocfs2: Unmounting device (7,9) on (node local) [ 326.232419][T10054] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.1466: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.295978][T10077] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.1466: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.380339][T10056] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.1466: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.400535][T10077] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.1466: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.441194][T10056] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.1466: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.469689][T10077] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.1466: lblock 3 mapped to illegal pblock 3 (length 1) [ 326.620154][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.832556][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.839254][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.302066][T10109] loop2: detected capacity change from 0 to 2048 [ 327.332492][T10109] EXT4-fs: Ignoring removed mblk_io_submit option [ 327.363765][T10109] EXT4-fs: Ignoring removed nobh option [ 327.407059][T10108] loop9: detected capacity change from 0 to 4096 [ 327.438862][T10109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.512655][T10117] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.638330][ T30] audit: type=1800 audit(1749110400.992:113): pid=10108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1486" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 327.658920][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.982130][T10101] loop6: detected capacity change from 0 to 32768 [ 328.009229][ T9105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.124969][T10101] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 328.212489][T10103] loop0: detected capacity change from 0 to 32768 [ 328.229266][ T30] audit: type=1800 audit(1749110401.582:114): pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1481" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 328.343801][T10103] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 328.355307][T10140] loop3: detected capacity change from 0 to 47 [ 328.435802][T10103] XFS (loop0): Ending clean mount [ 328.570572][ T6884] ocfs2: Unmounting device (7,6) on (node local) [ 328.888283][T10146] loop8: detected capacity change from 0 to 32768 [ 328.897978][T10146] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1495 (10146) [ 328.919553][T10146] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 328.930768][T10146] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 328.940837][T10146] BTRFS info (device loop8): using free-space-tree [ 329.041602][ T5832] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 329.544119][ T7486] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 329.605485][T10128] loop9: detected capacity change from 0 to 32768 [ 329.625573][T10170] [U] . [ 329.688396][ T30] audit: type=1800 audit(1749110916.044:115): pid=10128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1490" name="file1" dev="loop9" ino=4 res=0 errno=0 [ 329.764931][T10173] ERROR: (device loop9): dbAdjCtl: the maximum free buddy is not the old root [ 329.764931][T10173] [ 329.807194][T10173] ERROR: (device loop9): remounting filesystem as read-only [ 330.293126][T10167] loop3: detected capacity change from 0 to 32768 [ 330.321681][T10167] [ 330.321681][T10167] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.321681][T10167] [ 330.350916][T10182] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(Íë…èo¢N ááí«QhQI¸¥ [ 330.401614][T10167] ERROR: (device loop3): diWrite: ixpxd invalid [ 330.401614][T10167] [ 330.414576][T10167] ERROR: (device loop3): remounting filesystem as read-only [ 330.422013][T10167] ERROR: (device loop3): txAbort: [ 330.422013][T10167] [ 330.513022][T10167] ERROR: (device loop3): dtReadFirst: btstack overrun [ 330.513022][T10167] [ 330.526752][T10167] ERROR: (device loop3): remounting filesystem as read-only [ 330.534985][T10184] loop0: detected capacity change from 0 to 4096 [ 330.570676][T10184] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 330.571684][T10167] btstack dump: [ 330.631487][T10167] bn = 0, index = 0 [ 330.639178][T10184] ntfs3(loop0): ino=b, mi_enum_attr [ 330.648317][T10167] bn = 30, index = 0 [ 330.652247][T10167] bn = 0, index = 0 [ 330.656449][T10184] ntfs3(loop0): Failed to load $Extend (-22). [ 330.685298][T10184] ntfs3(loop0): Failed to initialize $Extend. [ 330.696741][T10167] bn = 30, index = 0 [ 330.701242][T10167] bn = 0, index = 0 [ 330.707105][T10167] bn = 30, index = 0 [ 330.711189][T10167] bn = 0, index = 0 [ 330.718069][T10167] bn = 0, index = 0 [ 330.727714][T10187] ERROR: (device loop3): dtSearch: stack overrun! [ 330.727714][T10187] [ 330.789713][T10187] btstack dump: [ 330.793239][T10187] bn = 0, index = 0 [ 330.817337][T10187] bn = 30, index = 0 [ 330.829401][T10187] bn = 0, index = 0 [ 330.848026][T10187] bn = 30, index = 0 [ 330.852034][T10187] bn = 0, index = 0 [ 330.869129][T10187] bn = 30, index = 0 [ 330.873059][T10187] bn = 0, index = 0 [ 330.893157][T10187] bn = 0, index = 0 [ 330.912815][T10187] jfs_lookup: dtSearch returned -5 [ 330.949344][T10199] loop2: detected capacity change from 0 to 512 [ 330.960153][T10199] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 331.025781][T10199] EXT4-fs (loop2): 1 truncate cleaned up [ 331.100633][T10199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.429682][ T9105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.614043][ T51] Bluetooth: hci6: command 0x1003 tx timeout [ 331.622943][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 333.135659][T10197] loop8: detected capacity change from 0 to 32768 [ 333.216940][T10197] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 333.263141][ T30] audit: type=1800 audit(1749110919.614:116): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1509" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 333.366129][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 333.374075][ T970] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 333.533717][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 333.548791][ T970] usb 7-1: Using ep0 maxpacket: 8 [ 333.574239][ T970] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 333.593658][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.628755][ T970] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 333.642663][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 333.652115][ T970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.682463][ T970] usb 7-1: Product: syz [ 333.691183][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.712054][ T970] usb 7-1: Manufacturer: syz [ 333.727904][ T970] usb 7-1: SerialNumber: syz [ 333.745731][ T9] usb 3-1: config 0 descriptor?? [ 333.772207][ T970] usb 7-1: config 0 descriptor?? [ 333.805904][ T970] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 333.806519][ T7486] ocfs2: Unmounting device (7,8) on (node local) [ 333.976012][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 334.159470][T10214] loop3: detected capacity change from 0 to 32768 [ 334.204637][T10220] loop9: detected capacity change from 0 to 32768 [ 334.235118][T10220] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1516 (10220) [ 334.277794][T10220] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 334.311959][T10220] BTRFS info (device loop9): using crc32c (crc32c-x86_64) checksum algorithm [ 334.341841][T10220] BTRFS info (device loop9): using free-space-tree [ 334.382573][ T10] usb 3-1: USB disconnect, device number 20 [ 334.543131][T10249] loop0: detected capacity change from 0 to 1024 [ 334.665283][T10249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.835849][ T970] gspca_zc3xx: reg_w_i err -71 [ 334.848733][T10220] BTRFS warning (device loop9): failed to trim 2 block group(s), last error -512 [ 334.998514][T10249] EXT4-fs error (device loop0): mb_free_blocks:1945: group 0, inode 15: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 335.122385][T10220] BTRFS warning (device loop9): failed to trim 1 device(s), last error -512 [ 335.293831][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.324555][ T7917] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 335.388979][T10262] loop3: detected capacity change from 0 to 512 [ 335.442645][T10264] loop2: detected capacity change from 0 to 47 [ 335.453748][ T970] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 335.460082][ T970] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 335.520483][T10262] EXT4-fs (loop3): Test dummy encryption mode enabled [ 335.535980][ T970] usb 7-1: USB disconnect, device number 12 [ 335.982288][T10262] EXT4-fs error (device loop3): __ext4_iget:5379: inode #11: block 1: comm syz.3.1523: invalid block [ 336.027491][T10262] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1523: couldn't read orphan inode 11 (err -117) [ 336.443784][ T5890] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 336.460941][T10262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.498454][T10280] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 336.533983][T10280] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 336.602812][T10280] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 336.635770][ T5890] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.647143][T10280] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 336.661837][T10280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 336.675655][ T5890] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.702110][ T5890] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 336.703439][T10280] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 336.711422][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 336.725733][ T5890] usb 9-1: SerialNumber: syz [ 336.806413][T10280] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 336.861587][T10280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 336.919048][T10280] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 336.946271][T10280] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 336.978365][ T5890] usb 9-1: 0:2 : does not exist [ 337.347892][ T5890] usb 9-1: USB disconnect, device number 10 [ 337.598071][T10295] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1540'. [ 338.494005][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 338.653998][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 339.009126][T10319] loop2: detected capacity change from 0 to 32768 [ 339.032437][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 339.039156][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 339.063699][T10274] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 339.084646][T10319] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 339.092861][T10319] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 339.104885][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.115906][T10319] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 339.144330][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 339.151175][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 339.261109][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 109ms [ 339.268886][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 339.274793][T10319] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 339.462767][T10319] gfs2: fsid=syz:syz.0: found 1 quota changes [ 339.597595][ T30] audit: type=1800 audit(1749110925.954:117): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1550" name="file1" dev="loop2" ino=2406 res=0 errno=0 [ 339.804518][T10336] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 339.804749][T10336] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 339.804952][T10336] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 339.805150][T10336] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 340.769687][T10349] loop9: detected capacity change from 0 to 128 [ 340.832149][T10349] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 340.871011][T10349] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 340.903025][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.612715][ T7917] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.863991][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 341.872716][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 341.878827][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 341.883459][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 342.155654][T10342] loop6: detected capacity change from 0 to 32768 [ 342.228231][T10342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1558 (10342) [ 342.329289][T10369] Invalid ELF header magic: != ELF [ 342.383758][T10342] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 342.407440][T10342] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 342.459057][T10342] BTRFS info (device loop6): disk space caching is enabled [ 342.484699][T10342] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 342.557824][T10347] loop0: detected capacity change from 0 to 32768 [ 342.637244][T10347] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1561 (10347) [ 342.788208][T10347] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 342.830141][T10347] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 342.860704][T10388] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 342.874691][T10342] BTRFS info (device loop6): rebuilding free space tree [ 342.896584][T10347] BTRFS info (device loop0): using free-space-tree [ 342.904594][T10388] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 342.934101][T10388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 342.960550][T10342] BTRFS info (device loop6): disabling free space tree [ 342.967777][T10342] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 342.977839][T10388] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.978293][T10342] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 343.153273][T10412] loop9: detected capacity change from 0 to 2048 [ 343.265954][T10412] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.306978][ T30] audit: type=1800 audit(1749110929.664:118): pid=10347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1561" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 343.331911][T10412] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.387620][ T30] audit: type=1800 audit(1749110929.714:119): pid=10421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1561" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 343.530567][T10425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.531999][ T6884] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 343.646270][ T7917] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.893351][T10432] loop8: detected capacity change from 0 to 64 [ 343.921242][ T5832] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 344.387550][ T7486] Trying to free block not in datazone [ 344.507401][ T7486] Trying to free block not in datazone [ 344.560621][ T7486] Trying to free block not in datazone [ 344.569975][T10443] loop9: detected capacity change from 0 to 512 [ 344.580174][ T7486] Trying to free block not in datazone [ 344.600422][ T7486] Trying to free block not in datazone [ 344.631063][ T7486] Trying to free block not in datazone [ 344.673838][ T7486] minix_free_inode: bit 6 already cleared [ 344.709449][ T7486] Trying to free block not in datazone [ 344.720494][ T7486] minix_free_inode: bit 7 already cleared [ 344.725837][T10443] EXT4-fs (loop9): orphan cleanup on readonly fs [ 344.767879][ T3400] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 344.778963][T10443] EXT4-fs error (device loop9): ext4_validate_block_bitmap:440: comm syz.9.1586: bg 0: block 248: padding at end of block bitmap is not set [ 344.802078][T10443] Quota error (device loop9): write_blk: dquota write failed [ 344.832042][T10443] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 344.893712][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 344.914143][T10443] EXT4-fs error (device loop9): ext4_acquire_dquot:6931: comm syz.9.1586: Failed to acquire dquot type 1 [ 344.933393][T10443] EXT4-fs (loop9): 1 truncate cleaned up [ 344.956337][T10443] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.973687][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 344.974304][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 344.993627][ T3400] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 345.002227][ T3400] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.031467][ T3400] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 345.041021][ T3400] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 345.049241][ T3400] usb 7-1: Manufacturer: syz [ 345.054109][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 345.065807][ T3400] usb 7-1: config 0 descriptor?? [ 345.344096][ T5932] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 345.355730][ T3400] rc_core: IR keymap rc-hauppauge not found [ 345.361689][ T3400] Registered IR keymap rc-empty [ 345.383122][ T3400] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 345.442722][T10459] loop2: detected capacity change from 0 to 128 [ 345.462232][ T3400] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input32 [ 345.466206][T10459] EXT4-fs: Ignoring removed nobh option [ 345.493214][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 345.523767][ T5932] usb 10-1: Using ep0 maxpacket: 16 [ 345.543167][ T10] usb 7-1: USB disconnect, device number 13 [ 345.554351][ T5932] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.572808][T10459] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.594462][ T5932] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.598224][T10459] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 345.604898][ T5932] usb 10-1: config 0 interface 0 has no altsetting 0 [ 345.622122][ T5932] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 345.635176][ T5932] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.668865][ T5932] usb 10-1: config 0 descriptor?? [ 345.776126][ T30] audit: type=1800 audit(1749110932.124:120): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1591" name="file2" dev="loop2" ino=13 res=0 errno=0 [ 345.889209][ T9105] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.063810][ T3400] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 346.084801][ T5932] hid (null): unknown global tag 0xe [ 346.100832][ T5932] hid (null): unknown global tag 0xe [ 346.110920][ T5932] hid (null): unknown global tag 0xc [ 346.123477][ T5932] hid (null): report_id 13250 is invalid [ 346.131243][ T5932] hid (null): unknown global tag 0xe [ 346.204611][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 346.243716][ T3400] usb 1-1: Using ep0 maxpacket: 8 [ 346.251423][ T3400] usb 1-1: config 0 has an invalid interface number: 104 but max is 0 [ 346.260091][ T3400] usb 1-1: config 0 has no interface number 0 [ 346.284207][ T3400] usb 1-1: config 0 interface 104 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 346.305594][ T5932] usb 10-1: USB disconnect, device number 16 [ 346.309373][ T3400] usb 1-1: config 0 interface 104 altsetting 11 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 346.363074][ T3400] usb 1-1: config 0 interface 104 altsetting 11 bulk endpoint 0xF has invalid maxpacket 16 [ 346.387548][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.398496][ T3400] usb 1-1: config 0 interface 104 altsetting 11 has a duplicate endpoint with address 0x2, skipping [ 346.423745][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 346.432877][ T3400] usb 1-1: config 0 interface 104 has no altsetting 0 [ 346.451219][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.456163][ T3400] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=85.b3 [ 346.465380][ T10] usb 4-1: config 0 descriptor?? [ 346.479670][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 346.497091][ T3400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.515115][ T3400] usb 1-1: Product: syz [ 346.523666][ T3400] usb 1-1: Manufacturer: syz [ 346.536420][ T3400] usb 1-1: SerialNumber: syz [ 346.560758][ T3400] usb 1-1: config 0 descriptor?? [ 346.573262][T10466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 346.703135][ T10] pwc: send_video_command error -71 [ 346.712454][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 346.733248][ T10] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 346.755763][ T10] usb 4-1: USB disconnect, device number 21 [ 346.798303][ T3400] i2c-tiny-usb 1-1:0.104: version 85.b3 found at bus 001 address 018 [ 346.827862][ T5890] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 346.835733][ T3400] (null): failure setting delay to 10us [ 346.857300][ T3400] i2c-tiny-usb 1-1:0.104: probe with driver i2c-tiny-usb failed with error -5 [ 346.875136][ T3400] usb 1-1: USB disconnect, device number 18 [ 346.946678][ T7917] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.988675][T10489] loop6: detected capacity change from 0 to 4096 [ 347.000640][T10489] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 347.023661][ T5890] usb 9-1: Using ep0 maxpacket: 8 [ 347.040002][ T5890] usb 9-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 347.050393][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 347.062038][ T5890] usb 9-1: Product: syz [ 347.067147][ T5890] usb 9-1: Manufacturer: syz [ 347.071981][ T5890] usb 9-1: SerialNumber: syz [ 347.081825][ T5890] usb 9-1: config 0 descriptor?? [ 347.127714][ T5911] ntfs3(loop6): ino=1e, ni_find_attr [ 347.176105][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 347.345849][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.372891][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 347.401438][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.429175][ T10] usb 4-1: config 0 descriptor?? [ 347.457928][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 347.478070][T10497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1608'. [ 347.487186][ T970] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 347.537196][ T5890] usb 9-1: USB disconnect, device number 11 [ 347.673876][ T970] usb 10-1: Using ep0 maxpacket: 32 [ 347.696074][ T970] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 347.710192][ T970] usb 10-1: config 0 has no interface number 0 [ 347.716776][ T970] usb 10-1: config 0 interface 184 has no altsetting 0 [ 347.727605][ T970] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 347.741324][ T970] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.750864][ T970] usb 10-1: Product: syz [ 347.790418][ T970] usb 10-1: Manufacturer: syz [ 347.802071][ T970] usb 10-1: SerialNumber: syz [ 347.827577][ T970] usb 10-1: config 0 descriptor?? [ 347.840419][ T970] smsc75xx v1.0.0 [ 347.927634][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 348.136770][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 348.155923][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 348.174017][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 348.189544][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 348.200267][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 348.224694][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 348.231753][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 348.251221][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 348.281419][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 348.298291][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 348.307835][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 348.319767][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 348.336921][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 348.352149][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 348.387662][ T10] pwc: Registered as video103. [ 348.457868][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 348.501073][T10516] loop8: detected capacity change from 0 to 512 [ 348.514259][ T10] usb 4-1: USB disconnect, device number 22 [ 348.620259][T10516] EXT4-fs (loop8): Test dummy encryption mode enabled [ 348.668960][T10516] EXT4-fs error (device loop8): __ext4_iget:5379: inode #11: block 1: comm syz.8.1616: invalid block [ 348.690429][T10516] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1616: couldn't read orphan inode 11 (err -117) [ 348.824549][T10516] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.910133][ T970] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 349.121885][ T970] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 349.156855][ T970] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 349.183645][ T970] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 349.197403][T10527] tls_set_device_offload_rx: netdev not found [ 349.361789][ T970] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 349.399121][ T970] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 349.458499][ T970] usb 10-1: USB disconnect, device number 17 [ 349.941265][T10535] loop3: detected capacity change from 0 to 512 [ 350.060011][T10535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 350.073682][T10535] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.694482][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 350.939718][ T7486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.424031][ T3400] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 351.637888][ T3400] usb 1-1: Using ep0 maxpacket: 8 [ 351.677784][ T3400] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 351.723785][ T3400] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 351.759943][ T3400] usb 1-1: Product: syz [ 351.783581][ T3400] usb 1-1: Manufacturer: syz [ 351.834520][ T3400] usb 1-1: SerialNumber: syz [ 351.905015][ T3400] usb 1-1: config 0 descriptor?? [ 352.184289][T10559] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1631'. [ 352.409218][ T3400] usb 1-1: USB disconnect, device number 19 [ 352.431724][T10546] loop3: detected capacity change from 0 to 32768 [ 352.539275][T10546] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1626 (10546) [ 352.592936][T10546] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 352.617537][T10564] input: syz0 as /devices/virtual/input/input34 [ 352.619747][T10546] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 352.683690][T10546] BTRFS info (device loop3): using free-space-tree [ 353.347347][ T5834] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 353.814251][ T970] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 354.019904][T10601] netlink: 'syz.3.1640': attribute type 3 has an invalid length. [ 354.042643][T10601] netlink: 'syz.3.1640': attribute type 3 has an invalid length. [ 354.055536][ T970] usb 10-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 354.055719][ T970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.065466][ T970] usb 10-1: config 0 descriptor?? [ 354.332556][ T970] kaweth 10-1:0.0: Firmware present in device. [ 354.346630][T10567] loop2: detected capacity change from 0 to 32768 [ 354.389009][T10567] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 354.415307][T10567] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 354.489477][T10567] XFS (loop2): Ending clean mount [ 354.530534][T10567] XFS (loop2): Quotacheck needed: Please wait. [ 354.543144][ T970] kaweth 10-1:0.0: Statistics collection: 0 [ 354.554347][ T970] kaweth 10-1:0.0: Multicast filter limit: 0 [ 354.565438][ T970] kaweth 10-1:0.0: MTU: 0 [ 354.569816][ T970] kaweth 10-1:0.0: Read MAC address 00:00:00:00:00:00 [ 354.627315][T10567] XFS (loop2): Quotacheck: Done. [ 354.785657][ T9105] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 354.928117][T10615] loop3: detected capacity change from 0 to 128 [ 354.979445][T10616] input: syz0 as /devices/virtual/input/input35 [ 355.014677][T10615] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 355.028532][T10615] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.128976][T10611] loop0: detected capacity change from 0 to 4096 [ 355.212404][ T970] kaweth 10-1:0.0: kaweth interface created at eth17 [ 355.289558][T10621] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 355.398303][ T970] usb 10-1: USB disconnect, device number 18 [ 355.615172][ T3400] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 355.783876][ T3400] usb 7-1: Using ep0 maxpacket: 8 [ 355.833689][ T3400] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.866112][T10627] loop8: detected capacity change from 0 to 512 [ 355.872851][ T3400] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 355.888182][T10627] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 355.917486][ T3400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.951421][T10627] Quota error (device loop8): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 355.964170][ T3400] usb 7-1: config 0 descriptor?? [ 356.001800][T10627] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 356.012527][T10627] EXT4-fs error (device loop8): ext4_acquire_dquot:6931: comm syz.8.1651: Failed to acquire dquot type 1 [ 356.038955][ T5834] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 356.049761][T10627] EXT4-fs (loop8): 1 truncate cleaned up [ 356.078790][T10627] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.095547][T10627] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.218878][ T3400] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 356.507948][ T7486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.708034][ T10] usb 7-1: USB disconnect, device number 14 [ 356.938160][T10647] loop0: detected capacity change from 0 to 2048 [ 356.991156][T10647] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 357.150369][T10651] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.686974][ T5832] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 147 [ 357.722978][ T5832] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 357.771949][ T3400] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 357.826410][ T5832] Remounting filesystem read-only [ 357.831746][ T5832] NILFS (loop0): error -5 truncating bmap (ino=15) [ 357.851776][ T5832] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 357.907739][T10642] loop9: detected capacity change from 0 to 32768 [ 357.924046][ T3400] usb 9-1: Using ep0 maxpacket: 32 [ 357.932904][ T3400] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.981863][ T3400] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.989071][T10642] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1653 (10642) [ 358.060518][ T3400] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 358.061602][T10642] BTRFS info (device loop9): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 358.150191][T10642] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 358.153293][ T3400] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.176230][T10642] BTRFS info (device loop9): using free-space-tree [ 358.284170][ T3400] usb 9-1: config 0 descriptor?? [ 358.332274][ T3400] hub 9-1:0.0: USB hub found [ 358.546520][ T3400] hub 9-1:0.0: 1 port detected [ 359.222234][ T3400] hub 9-1:0.0: activate --> -90 [ 359.257180][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 359.495013][ T7917] BTRFS info (device loop9): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 359.661226][ T5818] usb 9-1: USB disconnect, device number 12 [ 359.668048][ T3400] usb 9-1-port1: config error [ 360.112228][T10708] loop6: detected capacity change from 0 to 1764 [ 360.213799][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 360.374106][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 360.389028][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.430527][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.457648][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 360.487326][T10713] loop8: detected capacity change from 0 to 128 [ 360.500714][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 360.519854][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.538933][T10713] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 360.539703][ T9] usb 3-1: config 0 descriptor?? [ 360.641969][T10713] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.016533][ T9] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 361.017958][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 361.055942][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0016/input/input36 [ 361.097312][ T9] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 361.244851][ T9] usb 3-1: USB disconnect, device number 21 [ 361.401187][ T7486] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.433040][T10733] loop6: detected capacity change from 0 to 512 [ 361.452855][T10733] EXT4-fs: Ignoring removed mblk_io_submit option [ 361.481588][T10733] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 361.530655][T10733] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 361.539642][T10733] EXT4-fs (loop6): orphan cleanup on readonly fs [ 361.556055][T10733] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:482: comm syz.6.1687: Invalid block bitmap block 0 in block_group 0 [ 361.596096][T10733] EXT4-fs (loop6): Remounting filesystem read-only [ 361.603221][T10733] Quota error (device loop6): write_blk: dquota write failed [ 361.611145][T10733] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 361.623233][T10733] EXT4-fs (loop6): 1 orphan inode deleted [ 361.649408][T10733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 361.826243][ T6884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.189141][T10749] loop0: detected capacity change from 0 to 4096 [ 362.232583][T10749] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 362.400292][T10749] ntfs3(loop0): ino=19, mi_enum_attr [ 362.406143][T10749] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 362.466300][ T5911] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.567095][T10749] ntfs3(loop0): failed to convert "c46c" to cp874 [ 362.618313][ T5911] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.630692][T10749] ntfs3(loop0): ino=20, mi_enum_attr [ 362.755932][ T5911] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.990492][ T5911] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.124099][T10766] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1706'. [ 363.167337][T10766] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.178118][T10766] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.753705][ T3400] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 363.924347][ T3400] usb 9-1: Using ep0 maxpacket: 8 [ 363.930037][ T5911] dummy0: left allmulticast mode [ 363.974322][ T5911] bridge0: port 3(dummy0) entered disabled state [ 363.989392][ T3400] usb 9-1: config 0 has no interfaces? [ 364.030750][ T3400] usb 9-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 364.045623][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.059758][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.070827][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.079347][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.087799][ T5911] bridge_slave_1: left allmulticast mode [ 364.089945][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.093491][ T5911] bridge_slave_1: left promiscuous mode [ 364.127316][ T3400] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.136055][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.146849][ T3400] usb 9-1: Product: syz [ 364.172168][ T3400] usb 9-1: Manufacturer: syz [ 364.184084][ T5911] bridge_slave_0: left allmulticast mode [ 364.189818][ T5911] bridge_slave_0: left promiscuous mode [ 364.196215][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.205847][ T3400] usb 9-1: SerialNumber: syz [ 364.255020][ T3400] usb 9-1: config 0 descriptor?? [ 364.264000][ T5964] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 364.469541][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.492203][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.551180][ T10] usb 9-1: USB disconnect, device number 13 [ 364.563428][ T5964] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 364.584352][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.604713][ T5964] usb 3-1: config 0 descriptor?? [ 364.962199][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.966441][ T5818] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 365.021304][ T5818] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.049705][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.163510][T10796] loop0: detected capacity change from 0 to 32768 [ 365.183815][T10796] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1726 (10796) [ 365.258702][T10796] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 365.281752][T10796] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 365.287153][ T5964] usb 3-1: string descriptor 0 read error: -22 [ 365.335911][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.391858][T10796] BTRFS info (device loop0): using free-space-tree [ 365.501406][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.711050][ T5964] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #100: -71 [ 365.733730][ T5964] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 365.741924][ T5964] uclogic 0003:256C:006D.0018: failed probing pen v1 parameters: -71 [ 365.770769][ T5964] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 365.801450][ T5964] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 365.849219][ T5964] usb 3-1: USB disconnect, device number 22 [ 366.072995][ T5832] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 366.253811][ T5842] Bluetooth: hci5: command tx timeout [ 366.546690][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.640685][T10839] loop3: detected capacity change from 0 to 512 [ 366.734468][ T5964] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 366.860679][T10839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.874638][T10839] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.903905][ T5964] usb 3-1: Using ep0 maxpacket: 32 [ 366.912003][ T5964] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 366.920779][ T5964] usb 3-1: config 0 has no interface number 0 [ 366.927785][ T5964] usb 3-1: config 0 interface 184 has no altsetting 0 [ 366.938783][ T5964] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 366.958631][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.967240][ T5964] usb 3-1: Product: syz [ 366.971656][ T5964] usb 3-1: Manufacturer: syz [ 366.976893][ T5964] usb 3-1: SerialNumber: syz [ 367.004402][ T5964] usb 3-1: config 0 descriptor?? [ 367.030594][ T5964] smsc75xx v1.0.0 [ 367.215002][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.263588][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.362439][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.387786][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.515252][T10852] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 367.548319][ T5911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.582150][ T5911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.616237][ T5911] bond0 (unregistering): Released all slaves [ 367.711284][ T3400] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 367.717049][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.795310][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.884654][ T3400] usb 10-1: Using ep0 maxpacket: 8 [ 367.892886][ T3400] usb 10-1: config 0 has no interfaces? [ 367.900351][ T3400] usb 10-1: config 0 has no interfaces? [ 367.921634][ T3400] usb 10-1: config 0 has no interfaces? [ 367.932067][ T3400] usb 10-1: config 0 has no interfaces? [ 367.938955][ T3400] usb 10-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 367.965402][ T3400] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.979890][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.986145][ T3400] usb 10-1: config 0 descriptor?? [ 368.004389][ T30] audit: type=1326 audit(1749110954.354:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.0.1737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4593b8e929 code=0x0 [ 368.009594][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'. [ 368.129915][ T5964] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 368.215957][ T5911] bond1 (unregistering): (slave veth3): Releasing active interface [ 368.228258][ T5911] bond1 (unregistering): Released all slaves [ 368.272570][T10862] hsr0: entered promiscuous mode [ 368.299926][T10865] hsr_slave_0: left promiscuous mode [ 368.334073][ T5842] Bluetooth: hci5: command tx timeout [ 368.345870][ T5964] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 368.362896][ T5964] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 368.378874][ T5964] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 368.390374][ T5964] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 368.400934][T10865] hsr_slave_1: left promiscuous mode [ 368.407848][ T5964] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 368.431073][ T5964] usb 3-1: USB disconnect, device number 23 [ 368.495718][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.508870][T10865] hsr0 (unregistering): left promiscuous mode [ 368.509602][ T5892] usb 10-1: USB disconnect, device number 19 [ 368.868221][T10870] loop8: detected capacity change from 0 to 1024 [ 368.925759][T10870] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.024111][ T3400] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 369.139643][ T5911] hsr_slave_0: left promiscuous mode [ 369.168291][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1741'. [ 369.186901][ T5911] hsr_slave_1: left promiscuous mode [ 369.193385][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.224116][ T3400] usb 4-1: Using ep0 maxpacket: 32 [ 369.239158][T10877] loop2: detected capacity change from 0 to 512 [ 369.242397][ T3400] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 369.254395][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.272630][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 369.277848][ T3400] usb 4-1: config 0 has no interface number 0 [ 369.308168][ T3400] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 369.339152][ T3400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.359154][ T3400] usb 4-1: Product: syz [ 369.367242][ T3400] usb 4-1: Manufacturer: syz [ 369.382617][ T3400] usb 4-1: SerialNumber: syz [ 369.389490][T10877] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 369.454867][ T3400] usb 4-1: config 0 descriptor?? [ 369.478064][ T3400] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 369.479702][ T10] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 369.502117][ T5911] veth1_macvtap: left promiscuous mode [ 369.535583][ T5911] veth0_macvtap: left promiscuous mode [ 369.543051][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.573910][ T5911] veth1_vlan: left promiscuous mode [ 369.585757][ T5911] veth0_vlan: left promiscuous mode [ 369.592727][ T10] usb 9-1: config 0 descriptor?? [ 369.615429][ T10] cp210x 9-1:0.0: cp210x converter detected [ 369.691962][ T3400] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 369.757293][ T3400] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 369.909811][T10890] loop2: detected capacity change from 0 to 256 [ 369.938665][T10888] loop0: detected capacity change from 0 to 4096 [ 369.947746][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 370.020954][ T10] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 370.047355][T10890] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 370.113672][ T10] usb 9-1: cp210x converter now attached to ttyUSB2 [ 370.156787][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 370.168267][ T3400] usb 4-1: USB disconnect, device number 23 [ 370.200719][ T3400] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 370.259252][ T3400] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 370.278404][ T10] usb 9-1: USB disconnect, device number 14 [ 370.289833][ T3400] quatech2 4-1:0.51: device disconnected [ 370.308267][ T10] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 370.434545][ T10] cp210x 9-1:0.0: device disconnected [ 370.435659][ T5842] Bluetooth: hci5: command tx timeout [ 370.868548][ T7486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.325248][ T5911] team0 (unregistering): Port device team_slave_1 removed [ 371.445889][ T5911] team0 (unregistering): Port device team_slave_0 removed [ 372.524533][ T5842] Bluetooth: hci5: command tx timeout [ 372.815407][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1759'. [ 372.846834][T10791] chnl_net:caif_netlink_parms(): no params data found [ 373.114635][ T5892] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 373.230482][T10908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.287206][ T5892] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.297866][ T5892] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.325148][ T5892] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 373.334946][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 373.343021][ T5892] usb 9-1: SerialNumber: syz [ 373.596173][ T5892] usb 9-1: 0:2 : does not exist [ 373.637989][ T5892] usb 9-1: USB disconnect, device number 15 [ 373.645029][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 373.684026][ T970] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 373.786160][T10791] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.803972][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 373.814187][T10791] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.826644][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 373.854220][T10791] bridge_slave_0: entered allmulticast mode [ 373.862119][ T970] usb 4-1: config 0 has no interfaces? [ 373.870593][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 373.882211][ T970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.892663][T10791] bridge_slave_0: entered promiscuous mode [ 373.911809][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.946004][T10791] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.953887][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.970785][T10791] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.995071][ T970] usb 4-1: config 0 descriptor?? [ 374.000342][T10791] bridge_slave_1: entered allmulticast mode [ 374.008150][ T10] usb 3-1: config 0 descriptor?? [ 374.033802][T10791] bridge_slave_1: entered promiscuous mode [ 374.179175][T10791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.234215][ T10] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 374.255152][T10791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.309632][T10920] Bluetooth: hci0: too big key_count value 16384 [ 374.384018][ T970] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 374.406830][ T5890] usb 4-1: USB disconnect, device number 24 [ 374.448884][ T5932] usb 3-1: USB disconnect, device number 24 [ 374.552135][T10791] team0: Port device team_slave_0 added [ 374.577510][ T970] usb 1-1: Using ep0 maxpacket: 8 [ 374.590500][ T970] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 374.601073][T10791] team0: Port device team_slave_1 added [ 374.609150][ T970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.640434][ T970] usb 1-1: config 0 has no interfaces? [ 374.649899][ T970] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 374.659832][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.677925][ T970] usb 1-1: config 0 descriptor?? [ 374.706098][T10791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.713748][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.761362][T10791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.778815][T10791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.792008][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.825347][T10791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.217260][T10791] hsr_slave_0: entered promiscuous mode [ 375.257038][T10791] hsr_slave_1: entered promiscuous mode [ 375.322710][T10791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.379502][T10791] Cannot create hsr debugfs directory [ 375.484377][ T5964] usb 1-1: USB disconnect, device number 20 [ 375.559879][ T5932] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 375.607195][ T5932] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 375.953717][ T5932] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 376.136649][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.153821][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.175213][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.198344][ T5932] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 376.224792][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.277845][ T5932] usb 4-1: config 0 descriptor?? [ 376.369944][T10952] [ 376.372460][T10952] ===================================================== [ 376.379509][T10952] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 376.387040][T10952] 6.15.0-syzkaller-12058-g64980441d269 #0 Not tainted [ 376.393953][T10952] ----------------------------------------------------- [ 376.400927][T10952] syz.8.1766/10952 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 376.408689][T10952] ffffffff8e20c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0xed/0xc80 [ 376.417421][T10952] [ 376.417421][T10952] and this task is already holding: [ 376.424848][T10952] ffff88802eddd7a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 376.433746][T10952] which would create a new lock dependency: [ 376.439654][T10952] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 376.447321][T10952] [ 376.447321][T10952] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 376.456822][T10952] (&dev->event_lock#2){..-.}-{3:3} [ 376.456939][T10952] [ 376.456939][T10952] ... which became SOFTIRQ-irq-safe at: [ 376.469919][T10952] lock_acquire+0x179/0x350 [ 376.474602][T10952] _raw_spin_lock_irqsave+0x3a/0x60 [ 376.480040][T10952] input_event+0x70/0xb0 [ 376.484430][T10952] hidinput_report_event+0xb2/0x100 [ 376.489779][T10952] hid_report_raw_event+0x268/0x1290 [ 376.495248][T10952] __hid_input_report.constprop.0+0x33f/0x450 [ 376.501479][T10952] hid_irq_in+0x35e/0x870 [ 376.506000][T10952] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 376.511545][T10952] usb_hcd_giveback_urb+0x39b/0x450 [ 376.516957][T10952] dummy_timer+0x180e/0x3a20 [ 376.521764][T10952] __hrtimer_run_queues+0x202/0xad0 [ 376.527159][T10952] hrtimer_run_softirq+0x17d/0x350 [ 376.532393][T10952] handle_softirqs+0x219/0x8e0 [ 376.537290][T10952] __irq_exit_rcu+0x109/0x170 [ 376.542129][T10952] irq_exit_rcu+0x9/0x30 [ 376.546648][T10952] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 376.552436][T10952] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.558647][T10952] finish_task_switch.isra.0+0x22a/0xc10 [ 376.564439][T10952] __schedule+0x1172/0x5de0 [ 376.569117][T10952] preempt_schedule_common+0x44/0xc0 [ 376.574554][T10952] preempt_schedule_thunk+0x16/0x30 [ 376.579880][T10952] _raw_spin_unlock_irqrestore+0x61/0x80 [ 376.585663][T10952] __set_page_owner+0x405/0x550 [ 376.590648][T10952] post_alloc_hook+0x1c0/0x230 [ 376.595537][T10952] get_page_from_freelist+0x1321/0x3890 [ 376.601200][T10952] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 376.607212][T10952] alloc_pages_mpol+0x1fb/0x550 [ 376.612191][T10952] alloc_pages_noprof+0x131/0x390 [ 376.617378][T10952] stack_depot_save_flags+0x933/0xa40 [ 376.622915][T10952] kasan_save_stack+0x42/0x60 [ 376.627722][T10952] kasan_save_track+0x14/0x30 [ 376.632540][T10952] __kasan_slab_alloc+0x89/0x90 [ 376.637543][T10952] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 376.643151][T10952] __btrfs_free_extent.isra.0+0x2c1/0x2cf0 [ 376.649153][T10952] __btrfs_run_delayed_refs+0x87f/0x3690 [ 376.654924][T10952] btrfs_run_delayed_refs+0x1a9/0x330 [ 376.660417][T10952] btrfs_start_dirty_block_groups+0x9d6/0x1290 [ 376.666715][T10952] btrfs_commit_transaction+0x305/0x3df0 [ 376.672472][T10952] btrfs_rebuild_free_space_tree+0x29b/0x500 [ 376.678693][T10952] btrfs_start_pre_rw_mount+0x212/0xeb0 [ 376.684356][T10952] open_ctree+0x4c37/0x5430 [ 376.688974][T10952] btrfs_get_tree+0x1030/0x1b70 [ 376.693936][T10952] vfs_get_tree+0x8e/0x340 [ 376.698469][T10952] fc_mount+0x18/0x110 [ 376.702741][T10952] btrfs_get_tree+0xa37/0x1b70 [ 376.707621][T10952] vfs_get_tree+0x8e/0x340 [ 376.712148][T10952] path_mount+0x14d4/0x1f70 [ 376.716780][T10952] __x64_sys_mount+0x28d/0x310 [ 376.721713][T10952] do_syscall_64+0xcd/0x4c0 [ 376.726353][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.732395][T10952] [ 376.732395][T10952] to a SOFTIRQ-irq-unsafe lock: [ 376.739474][T10952] (tasklist_lock){.+.+}-{3:3} [ 376.739529][T10952] [ 376.739529][T10952] ... which became SOFTIRQ-irq-unsafe at: [ 376.752233][T10952] ... [ 376.752250][T10952] lock_acquire+0x179/0x350 [ 376.759470][T10952] _raw_read_lock+0x5f/0x70 [ 376.764108][T10952] __do_wait+0x105/0x890 [ 376.768479][T10952] do_wait+0x21e/0x5a0 [ 376.772679][T10952] kernel_wait+0x9f/0x160 [ 376.777141][T10952] call_usermodehelper_exec_work+0xf1/0x170 [ 376.783148][T10952] process_one_work+0x9cf/0x1b70 [ 376.788193][T10952] worker_thread+0x6c8/0xf10 [ 376.792889][T10952] kthread+0x3c5/0x780 [ 376.797064][T10952] ret_from_fork+0x5d7/0x6f0 [ 376.801808][T10952] ret_from_fork_asm+0x1a/0x30 [ 376.806699][T10952] [ 376.806699][T10952] other info that might help us debug this: [ 376.806699][T10952] [ 376.816983][T10952] Chain exists of: [ 376.816983][T10952] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 376.816983][T10952] [ 376.830096][T10952] Possible interrupt unsafe locking scenario: [ 376.830096][T10952] [ 376.838424][T10952] CPU0 CPU1 [ 376.843842][T10952] ---- ---- [ 376.849218][T10952] lock(tasklist_lock); [ 376.853479][T10952] local_irq_disable(); [ 376.860316][T10952] lock(&dev->event_lock#2); [ 376.867564][T10952] lock(&f_owner->lock); [ 376.874549][T10952] [ 376.878013][T10952] lock(&dev->event_lock#2); [ 376.882910][T10952] [ 376.882910][T10952] *** DEADLOCK *** [ 376.882910][T10952] [ 376.891069][T10952] 2 locks held by syz.8.1766/10952: [ 376.896287][T10952] #0: ffff8880126bc8c0 (&u->lock){+.+.}-{3:3}, at: unix_stream_sendmsg+0xc7b/0x11d0 [ 376.905861][T10952] #1: ffff88802eddd7a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 376.915085][T10952] [ 376.915085][T10952] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 376.925586][T10952] -> (&dev->event_lock#2){..-.}-{3:3} { [ 376.931403][T10952] IN-SOFTIRQ-W at: [ 376.935577][T10952] lock_acquire+0x179/0x350 [ 376.942127][T10952] _raw_spin_lock_irqsave+0x3a/0x60 [ 376.949372][T10952] input_event+0x70/0xb0 [ 376.955658][T10952] hidinput_report_event+0xb2/0x100 [ 376.962894][T10952] hid_report_raw_event+0x268/0x1290 [ 376.970397][T10952] __hid_input_report.constprop.0+0x33f/0x450 [ 376.978615][T10952] hid_irq_in+0x35e/0x870 [ 376.984976][T10952] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 376.992397][T10952] usb_hcd_giveback_urb+0x39b/0x450 [ 376.999646][T10952] dummy_timer+0x180e/0x3a20 [ 377.006362][T10952] __hrtimer_run_queues+0x202/0xad0 [ 377.013589][T10952] hrtimer_run_softirq+0x17d/0x350 [ 377.020726][T10952] handle_softirqs+0x219/0x8e0 [ 377.027538][T10952] __irq_exit_rcu+0x109/0x170 [ 377.034255][T10952] irq_exit_rcu+0x9/0x30 [ 377.040611][T10952] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 377.048285][T10952] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.056305][T10952] finish_task_switch.isra.0+0x22a/0xc10 [ 377.064324][T10952] __schedule+0x1172/0x5de0 [ 377.070866][T10952] preempt_schedule_common+0x44/0xc0 [ 377.078193][T10952] preempt_schedule_thunk+0x16/0x30 [ 377.085436][T10952] _raw_spin_unlock_irqrestore+0x61/0x80 [ 377.093126][T10952] __set_page_owner+0x405/0x550 [ 377.100037][T10952] post_alloc_hook+0x1c0/0x230 [ 377.106865][T10952] get_page_from_freelist+0x1321/0x3890 [ 377.114456][T10952] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 377.122419][T10952] alloc_pages_mpol+0x1fb/0x550 [ 377.129352][T10952] alloc_pages_noprof+0x131/0x390 [ 377.136428][T10952] stack_depot_save_flags+0x933/0xa40 [ 377.143869][T10952] kasan_save_stack+0x42/0x60 [ 377.150585][T10952] kasan_save_track+0x14/0x30 [ 377.157303][T10952] __kasan_slab_alloc+0x89/0x90 [ 377.164190][T10952] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 377.171682][T10952] __btrfs_free_extent.isra.0+0x2c1/0x2cf0 [ 377.179529][T10952] __btrfs_run_delayed_refs+0x87f/0x3690 [ 377.187278][T10952] btrfs_run_delayed_refs+0x1a9/0x330 [ 377.194850][T10952] btrfs_start_dirty_block_groups+0x9d6/0x1290 [ 377.203050][T10952] btrfs_commit_transaction+0x305/0x3df0 [ 377.210719][T10952] btrfs_rebuild_free_space_tree+0x29b/0x500 [ 377.218744][T10952] btrfs_start_pre_rw_mount+0x212/0xeb0 [ 377.226319][T10952] open_ctree+0x4c37/0x5430 [ 377.232842][T10952] btrfs_get_tree+0x1030/0x1b70 [ 377.239717][T10952] vfs_get_tree+0x8e/0x340 [ 377.246155][T10952] fc_mount+0x18/0x110 [ 377.252237][T10952] btrfs_get_tree+0xa37/0x1b70 [ 377.259024][T10952] vfs_get_tree+0x8e/0x340 [ 377.265460][T10952] path_mount+0x14d4/0x1f70 [ 377.272000][T10952] __x64_sys_mount+0x28d/0x310 [ 377.278800][T10952] do_syscall_64+0xcd/0x4c0 [ 377.285381][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.293414][T10952] INITIAL USE at: [ 377.297599][T10952] lock_acquire+0x179/0x350 [ 377.304076][T10952] _raw_spin_lock_irqsave+0x3a/0x60 [ 377.311222][T10952] input_inject_event+0x9f/0x390 [ 377.318173][T10952] led_set_brightness+0x217/0x290 [ 377.325150][T10952] kbd_led_trigger_activate+0xcb/0x110 [ 377.332550][T10952] led_trigger_set+0x59a/0xc50 [ 377.339275][T10952] led_trigger_set_default+0x1e0/0x2e0 [ 377.346700][T10952] led_classdev_register_ext+0x7b8/0xa10 [ 377.354325][T10952] input_leds_connect+0x552/0x8e0 [ 377.361305][T10952] input_attach_handler.isra.0+0x184/0x260 [ 377.369075][T10952] input_register_device+0xa84/0x1130 [ 377.376403][T10952] atkbd_connect+0x5da/0xa20 [ 377.382959][T10952] serio_driver_probe+0x77/0xb0 [ 377.389752][T10952] really_probe+0x241/0xa90 [ 377.396210][T10952] __driver_probe_device+0x1de/0x440 [ 377.403444][T10952] driver_probe_device+0x4c/0x1b0 [ 377.410434][T10952] __driver_attach+0x283/0x580 [ 377.417264][T10952] bus_for_each_dev+0x13e/0x1d0 [ 377.424062][T10952] serio_handle_event+0x247/0xa50 [ 377.431030][T10952] process_one_work+0x9cf/0x1b70 [ 377.437953][T10952] worker_thread+0x6c8/0xf10 [ 377.444485][T10952] kthread+0x3c5/0x780 [ 377.450484][T10952] ret_from_fork+0x5d7/0x6f0 [ 377.457080][T10952] ret_from_fork_asm+0x1a/0x30 [ 377.463821][T10952] } [ 377.466501][T10952] ... key at: [] __key.7+0x0/0x40 [ 377.473812][T10952] -> (&new->fa_lock){....}-{3:3} { [ 377.479066][T10952] INITIAL USE at: [ 377.483055][T10952] lock_acquire+0x179/0x350 [ 377.489529][T10952] _raw_write_lock_irq+0x36/0x50 [ 377.496276][T10952] fasync_remove_entry+0xb2/0x1e0 [ 377.503100][T10952] fasync_helper+0xaf/0xd0 [ 377.509308][T10952] lease_modify+0x232/0x500 [ 377.515581][T10952] locks_remove_file+0x29e/0x5c0 [ 377.522281][T10952] __fput+0x351/0xb70 [ 377.528043][T10952] task_work_run+0x150/0x240 [ 377.534403][T10952] exit_to_user_mode_loop+0xeb/0x110 [ 377.541458][T10952] do_syscall_64+0x3f6/0x4c0 [ 377.547852][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.555537][T10952] INITIAL READ USE at: [ 377.560004][T10952] lock_acquire+0x179/0x350 [ 377.566797][T10952] _raw_read_lock_irqsave+0x74/0x90 [ 377.574273][T10952] kill_fasync+0x138/0x510 [ 377.580947][T10952] lease_break_callback+0x23/0x30 [ 377.588189][T10952] __break_lease+0x674/0x1810 [ 377.595070][T10952] do_dentry_open+0x6e1/0x1c10 [ 377.602057][T10952] vfs_open+0x82/0x3f0 [ 377.608354][T10952] path_openat+0x1de4/0x2cb0 [ 377.615162][T10952] do_filp_open+0x20b/0x470 [ 377.621879][T10952] do_sys_openat2+0x11b/0x1d0 [ 377.628777][T10952] __x64_sys_openat+0x174/0x210 [ 377.635846][T10952] do_syscall_64+0xcd/0x4c0 [ 377.642584][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.650770][T10952] } [ 377.653365][T10952] ... key at: [] __key.0+0x0/0x40 [ 377.660675][T10952] ... acquired at: [ 377.664579][T10952] _raw_read_lock_irqsave+0x74/0x90 [ 377.669984][T10952] kill_fasync+0x138/0x510 [ 377.674616][T10952] mousedev_notify_readers+0x6d8/0xa30 [ 377.680291][T10952] mousedev_event+0x84e/0x1490 [ 377.685276][T10952] input_handle_events_default+0x119/0x1b0 [ 377.691293][T10952] input_pass_values+0x6c7/0x890 [ 377.696448][T10952] input_handle_event+0xf00/0x14d0 [ 377.701778][T10952] input_inject_event+0x1cd/0x390 [ 377.707011][T10952] evdev_write+0x457/0x750 [ 377.711633][T10952] vfs_write+0x2a0/0x1150 [ 377.716163][T10952] ksys_write+0x1f8/0x250 [ 377.720705][T10952] do_syscall_64+0xcd/0x4c0 [ 377.725458][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.731574][T10952] [ 377.733918][T10952] -> (&f_owner->lock){....}-{3:3} { [ 377.739233][T10952] INITIAL USE at: [ 377.743265][T10952] lock_acquire+0x179/0x350 [ 377.749471][T10952] _raw_write_lock_irq+0x36/0x50 [ 377.756026][T10952] __f_setown+0x61/0x3c0 [ 377.761892][T10952] generic_setlease+0xef2/0x1300 [ 377.768421][T10952] kernel_setlease+0x106/0x140 [ 377.774783][T10952] vfs_setlease+0x258/0x2d0 [ 377.780895][T10952] fcntl_setlease+0x3ed/0x5a0 [ 377.787179][T10952] do_fcntl+0x751/0x15a0 [ 377.793041][T10952] __x64_sys_fcntl+0x163/0x200 [ 377.799603][T10952] do_syscall_64+0xcd/0x4c0 [ 377.805761][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.813267][T10952] INITIAL READ USE at: [ 377.817638][T10952] lock_acquire+0x179/0x350 [ 377.824192][T10952] _raw_read_lock_irqsave+0x74/0x90 [ 377.831432][T10952] send_sigio+0x31/0x3e0 [ 377.837729][T10952] dnotify_handle_event+0x15e/0x2b0 [ 377.845013][T10952] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 377.853498][T10952] fsnotify+0x132f/0x1dc0 [ 377.859960][T10952] __fsnotify_parent+0x915/0xc40 [ 377.866934][T10952] __do_sys_vmsplice+0x6af/0x1180 [ 377.873997][T10952] do_syscall_64+0xcd/0x4c0 [ 377.880577][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.888589][T10952] } [ 377.891111][T10952] ... key at: [] __key.1+0x0/0x40 [ 377.898295][T10952] ... acquired at: [ 377.902138][T10952] _raw_read_lock_irqsave+0x74/0x90 [ 377.907602][T10952] send_sigio+0x31/0x3e0 [ 377.912059][T10952] kill_fasync+0x214/0x510 [ 377.916682][T10952] lease_break_callback+0x23/0x30 [ 377.922050][T10952] __break_lease+0x674/0x1810 [ 377.926932][T10952] do_dentry_open+0x6e1/0x1c10 [ 377.931916][T10952] vfs_open+0x82/0x3f0 [ 377.936219][T10952] path_openat+0x1de4/0x2cb0 [ 377.941119][T10952] do_filp_open+0x20b/0x470 [ 377.945936][T10952] do_sys_openat2+0x11b/0x1d0 [ 377.950843][T10952] __x64_sys_openat+0x174/0x210 [ 377.956091][T10952] do_syscall_64+0xcd/0x4c0 [ 377.960804][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.966901][T10952] [ 377.969242][T10952] [ 377.969242][T10952] the dependencies between the lock to be acquired [ 377.969258][T10952] and SOFTIRQ-irq-unsafe lock: [ 377.982823][T10952] -> (tasklist_lock){.+.+}-{3:3} { [ 377.988020][T10952] HARDIRQ-ON-R at: [ 377.992031][T10952] lock_acquire+0x179/0x350 [ 377.998241][T10952] _raw_read_lock+0x5f/0x70 [ 378.004532][T10952] __do_wait+0x105/0x890 [ 378.010502][T10952] do_wait+0x21e/0x5a0 [ 378.016377][T10952] kernel_wait+0x9f/0x160 [ 378.022415][T10952] call_usermodehelper_exec_work+0xf1/0x170 [ 378.030006][T10952] process_one_work+0x9cf/0x1b70 [ 378.036641][T10952] worker_thread+0x6c8/0xf10 [ 378.042925][T10952] kthread+0x3c5/0x780 [ 378.048694][T10952] ret_from_fork+0x5d7/0x6f0 [ 378.055018][T10952] ret_from_fork_asm+0x1a/0x30 [ 378.061531][T10952] SOFTIRQ-ON-R at: [ 378.065543][T10952] lock_acquire+0x179/0x350 [ 378.071753][T10952] _raw_read_lock+0x5f/0x70 [ 378.077953][T10952] __do_wait+0x105/0x890 [ 378.083902][T10952] do_wait+0x21e/0x5a0 [ 378.089688][T10952] kernel_wait+0x9f/0x160 [ 378.095776][T10952] call_usermodehelper_exec_work+0xf1/0x170 [ 378.103383][T10952] process_one_work+0x9cf/0x1b70 [ 378.110022][T10952] worker_thread+0x6c8/0xf10 [ 378.116295][T10952] kthread+0x3c5/0x780 [ 378.122042][T10952] ret_from_fork+0x5d7/0x6f0 [ 378.128333][T10952] ret_from_fork_asm+0x1a/0x30 [ 378.134802][T10952] INITIAL USE at: [ 378.138733][T10952] lock_acquire+0x179/0x350 [ 378.144982][T10952] _raw_write_lock_irq+0x36/0x50 [ 378.151584][T10952] copy_process+0x4caf/0x76a0 [ 378.157928][T10952] kernel_clone+0xfc/0x960 [ 378.164003][T10952] user_mode_thread+0xc7/0x110 [ 378.170393][T10952] rest_init+0x23/0x2b0 [ 378.176144][T10952] start_kernel+0x3ee/0x4d0 [ 378.182240][T10952] x86_64_start_reservations+0x18/0x30 [ 378.189318][T10952] x86_64_start_kernel+0x130/0x190 [ 378.196049][T10952] common_startup_64+0x13e/0x148 [ 378.202608][T10952] INITIAL READ USE at: [ 378.207052][T10952] lock_acquire+0x179/0x350 [ 378.213742][T10952] _raw_read_lock+0x5f/0x70 [ 378.220300][T10952] __do_wait+0x105/0x890 [ 378.226591][T10952] do_wait+0x21e/0x5a0 [ 378.232833][T10952] kernel_wait+0x9f/0x160 [ 378.239223][T10952] call_usermodehelper_exec_work+0xf1/0x170 [ 378.247204][T10952] process_one_work+0x9cf/0x1b70 [ 378.254243][T10952] worker_thread+0x6c8/0xf10 [ 378.260982][T10952] kthread+0x3c5/0x780 [ 378.267197][T10952] ret_from_fork+0x5d7/0x6f0 [ 378.273855][T10952] ret_from_fork_asm+0x1a/0x30 [ 378.280645][T10952] } [ 378.283194][T10952] ... key at: [] tasklist_lock+0x18/0x40 [ 378.290998][T10952] ... acquired at: [ 378.294891][T10952] lock_acquire+0x179/0x350 [ 378.299677][T10952] _raw_read_lock+0x5f/0x70 [ 378.304398][T10952] send_sigurg+0xed/0xc80 [ 378.309076][T10952] sk_send_sigurg+0x76/0x360 [ 378.313881][T10952] unix_stream_sendmsg+0xeb3/0x11d0 [ 378.319295][T10952] ____sys_sendmsg+0xa98/0xc70 [ 378.324283][T10952] ___sys_sendmsg+0x134/0x1d0 [ 378.329168][T10952] __sys_sendmmsg+0x200/0x420 [ 378.334055][T10952] __x64_sys_sendmmsg+0x9c/0x100 [ 378.339214][T10952] do_syscall_64+0xcd/0x4c0 [ 378.343933][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.350022][T10952] [ 378.352359][T10952] [ 378.352359][T10952] stack backtrace: [ 378.358296][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.8.1766 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 378.358350][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.358375][T10952] Call Trace: [ 378.358388][T10952] [ 378.358402][T10952] dump_stack_lvl+0x116/0x1f0 [ 378.358475][T10952] check_irq_usage+0x7dc/0x920 [ 378.358544][T10952] ? check_path.constprop.0+0x24/0x50 [ 378.358598][T10952] ? __lock_acquire+0x1285/0x1c90 [ 378.358650][T10952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.358692][T10952] __lock_acquire+0x1285/0x1c90 [ 378.358750][T10952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.358793][T10952] lock_acquire+0x179/0x350 [ 378.358844][T10952] ? send_sigurg+0xed/0xc80 [ 378.358902][T10952] _raw_read_lock+0x5f/0x70 [ 378.358945][T10952] ? send_sigurg+0xed/0xc80 [ 378.358993][T10952] send_sigurg+0xed/0xc80 [ 378.359041][T10952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.359080][T10952] ? find_held_lock+0x2b/0x80 [ 378.359125][T10952] sk_send_sigurg+0x76/0x360 [ 378.359173][T10952] unix_stream_sendmsg+0xeb3/0x11d0 [ 378.359226][T10952] ? aa_sk_perm+0x2f4/0xb10 [ 378.359271][T10952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.359311][T10952] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 378.359356][T10952] ? __pfx_aa_sk_perm+0x10/0x10 [ 378.359392][T10952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.359440][T10952] ____sys_sendmsg+0xa98/0xc70 [ 378.359473][T10952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.359512][T10952] ? copy_msghdr_from_user+0x10a/0x160 [ 378.359560][T10952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.359595][T10952] ? find_held_lock+0x2b/0x80 [ 378.359634][T10952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.359677][T10952] ___sys_sendmsg+0x134/0x1d0 [ 378.359724][T10952] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.359785][T10952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.359824][T10952] ? find_held_lock+0x2b/0x80 [ 378.359876][T10952] __sys_sendmmsg+0x200/0x420 [ 378.359926][T10952] ? __pfx___sys_sendmmsg+0x10/0x10 [ 378.359979][T10952] ? __pfx_do_futex+0x10/0x10 [ 378.360026][T10952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.360066][T10952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.360117][T10952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.360155][T10952] ? xfd_validate_state+0x61/0x180 [ 378.360202][T10952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.360245][T10952] __x64_sys_sendmmsg+0x9c/0x100 [ 378.360292][T10952] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.360331][T10952] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.360381][T10952] do_syscall_64+0xcd/0x4c0 [ 378.360431][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.360464][T10952] RIP: 0033:0x7f3e0c38e929 [ 378.360490][T10952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.360522][T10952] RSP: 002b:00007f3e0d2a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 378.360553][T10952] RAX: ffffffffffffffda RBX: 00007f3e0c5b5fa0 RCX: 00007f3e0c38e929 [ 378.360575][T10952] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 378.360596][T10952] RBP: 00007f3e0c410b39 R08: 0000000000000000 R09: 0000000000000000 [ 378.360616][T10952] R10: 00000000000408b1 R11: 0000000000000246 R12: 0000000000000000 [ 378.360636][T10952] R13: 0000000000000000 R14: 00007f3e0c5b5fa0 R15: 00007ffd7dbb2a58 [ 378.360668][T10952] [ 378.722075][T10954] rfkill: input handler disabled [ 378.751221][T10954] rfkill: input handler enabled [ 378.832260][ T5932] usbhid 4-1:0.0: can't add hid device: -71 [ 378.838462][ T5932] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 378.849476][ T5932] usb 4-1: USB disconnect, device number 25 [ 379.003390][T10791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 379.024494][T10791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 379.036071][T10791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 379.046927][T10791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 379.104593][T10791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.120981][T10791] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.135337][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.142653][ T5911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.159380][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.166566][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.359498][T10791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.596516][T10791] veth0_vlan: entered promiscuous mode [ 379.609545][T10791] veth1_vlan: entered promiscuous mode [ 379.641909][T10791] veth0_macvtap: entered promiscuous mode [ 379.652075][T10791] veth1_macvtap: entered promiscuous mode [ 379.668894][T10791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.686748][T10791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.701589][T10791] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.710511][T10791] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.720577][T10791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.729413][T10791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.767158][T10791] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 379.797853][ T5912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.800247][T10791] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 379.809411][ T5912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.840849][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.849699][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50