last executing test programs: 1m56.380487553s ago: executing program 3 (id=567): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4) socket(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 1m51.343689716s ago: executing program 3 (id=583): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x200000}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xffffffffffffffff, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="851658ce20ea", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m50.582568295s ago: executing program 3 (id=585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffff8604"]) 1m50.140842292s ago: executing program 3 (id=587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 1m49.301193923s ago: executing program 3 (id=589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x26, 0xd8, 0x68, 0x0, 0x4d, 0x2f, 0x0, @multicast1, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "7fb5875c8cb1e5103810f3514c5859085f8bcd044121d872d527be9db6ccba47166b45027b4ebb9222f071ff96"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9, 0xfff9], "1fbce160e162f55bc8bfa98cf867654435cafef2e11038b1276561c409fae6fba57b5e0b13ca3a10de756ab719d097383e545c8d1c5b4f19e65f"}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x4}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0xe, 0x3, 0x1, 0x3, 0x7, 0x3}, 0x2, {0x8, 0x8, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "a33ce789860dc984c201b1e28a9fe3cd0d2bcc93a0"}}}}, 0xe6) 1m48.221277158s ago: executing program 3 (id=593): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m32.960751319s ago: executing program 32 (id=593): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13.215660411s ago: executing program 5 (id=886): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33356d090890e0878f0e1ac6e7049b284c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 10.292887257s ago: executing program 0 (id=899): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000000c0)={0x2}) 10.172839873s ago: executing program 5 (id=901): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x2, &(0x7f00000001c0)="74f2"}, {0x8, 0x2a19, 0x0, 0x0}], 0x2}) 9.591656555s ago: executing program 0 (id=904): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 7.993366284s ago: executing program 5 (id=910): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x300, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x8000, '\x00', @ptr=0x20001ffe}}) 7.782270502s ago: executing program 2 (id=911): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x80010, r3, 0x942c7000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x8004000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 7.389414232s ago: executing program 5 (id=912): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="b00000000000000029000000360000"], 0x1b0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) 7.044021779s ago: executing program 2 (id=914): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/188, 0xbc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000880)=""/105, 0x69}], 0x1}}], 0x4, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 6.764711412s ago: executing program 5 (id=916): r0 = socket(0x2, 0x80805, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xc, 0xa0001) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, 0x8) 6.129315919s ago: executing program 5 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$poke(0x4, 0x0, 0x0, 0x9) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, 0xffffffffffffffff, 0x0) r3 = socket(0x22, 0x2, 0x3) sendto$inet6(r3, 0x0, 0x0, 0x4811, 0x0, 0x0) 5.624565875s ago: executing program 4 (id=920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 5.199921841s ago: executing program 4 (id=921): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="453513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 5.19252124s ago: executing program 1 (id=922): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48050}, 0x40) 5.121837605s ago: executing program 0 (id=923): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@test_dummy_encryption}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000000600)=ANY=[@ANYBLOB="ba618c14e6c7e698de3fb8b765b993fa49575985fb77bf8cbe11f3e10fe145c3161212e5b9a65501d007df1337c25665e8404c1dc11c53041207bea7fd891761869c2d7d6a7a06c71bfcfe33d41cab42b82ecd0a1fd7f713b1fc70fee63b712bbefbb0a96138503f0163651b0512fa7aa1c1df2df969aa400e0f1901ad03d5cb2eaa2e2fd9500641a214a4ff49e005d1eeb61c2893e933bb23f2568bb02382c787f0c6642de45d21683e0bcf71115878d6e9a489bf815b4133e3d156bdd935a75e", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80000, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x101800, 0x145) renameat2(r0, &(0x7f00000001c0)='./bus/file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x4) 4.680258005s ago: executing program 4 (id=924): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x1000}, {r0, 0x18}], 0x2, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) ioctl$BLKFRAGET(0xffffffffffffffff, 0x1265, 0x0) socket$kcm(0x10, 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 4.515899345s ago: executing program 2 (id=925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000000000000002294400240004802000018007000100637400001400028008000240000000ff08000140000000020900010073797a30000000000900020073797a3200000000140000001100010000"], 0x78}}, 0x0) 4.452620626s ago: executing program 1 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x4}}, {@generic={0x8864}}}}, 0x16) 3.958765317s ago: executing program 2 (id=927): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3.694291593s ago: executing program 0 (id=928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40012102, 0x0) 3.462050551s ago: executing program 1 (id=929): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x4c, 0x30, 0xb, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ct={0x34, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x8003}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 3.321345749s ago: executing program 2 (id=930): socket$netlink(0x10, 0x3, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r1, r3, 0x0) 3.129693318s ago: executing program 4 (id=931): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000300)={[{@dmode={'dmode', 0x3d, 0xb1}}, {}, {@overriderock}, {@gid}, {@map_acorn}, {}, {@showassoc}, {@hide}, {@gid={'gid', 0x3d, 0xee01}}, {}, {@overriderock}, {@mode={'mode', 0x3d, 0x1000}}, {@map_normal}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@cruft}, {@uid}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'norock'}}, {@flag='mand'}, {@subj_user}]}, 0x1, 0xa4a, &(0x7f00000007c0)="$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") 2.912759971s ago: executing program 0 (id=932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\x00MVK']) 2.540935351s ago: executing program 1 (id=933): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x2) 1.945166748s ago: executing program 4 (id=934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fb0800", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x40, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 1.944744707s ago: executing program 0 (id=935): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r0, 0x0, 0x0) 1.212760298s ago: executing program 2 (id=936): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r1, 0x708, 0x7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xd9, 0x2, &(0x7f0000000040)={0x8, "810556c721393f4084cc9efc7ddbe76f2fb91f7abe359f7ed2401f27a7f77d040b"}}) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) 851.582338ms ago: executing program 1 (id=937): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='nodecompose,decompose,nls=cp864,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x20, 0x6de, &(0x7f0000000840)="$eJzs3U9sW3cdAPDvsx0n7qTMG+1WEFKjVVSwQpvEjBYJiYIQymGCSlx2DW26RnWyKslQWiHqAYMjnFAPOwyhcNgJcUAa4oAYZyQk7r1X4sCt4oDRe34vsZ3Esds4abvPR3p+v+f3+/N9X//es/3SygF8ai28FROtSGLh/Jub6faDrUbzwVZjpShHxGRElCIqnVUkqxHJJxFXorPEZ9Mn8+6S/cZ54+HHH5y7/1Gjs1XJl6x+aVC7He0BI7TyJWYiopyvR1TZr79re/R3b6Suk+2404SdLRIHx629S2uU5kOct8DT7l5EeWKP5+sRJyJiKv8cEPnVoXTE4R26ka5yAAAA8HQqH1ThxUfxKDZj+mjCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdD0vnNwCRfSkV5JpL89/+/n1fLVKvHG+4BvnzA/vdvHFEgAAAAAAAAAHD4JnaKZx7Fo9iM6WK7nWR/838t2ziZPb4Q78Z6LMVaXIjNWIyN2Ii1mIuYmO7qs7q5uLGxNre75W8ibdlut+/lLecjor6r5fyYjxkAAAAAAAAAnm8/jYWYPu4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgWxJR7qyy5WRRrkepEhFTEVFN67Ui/lKUn2V/Pe4AAAAAYPxq+Xo6+V+n0E6y7/yvZN/7p+LdWI2NWI6NaMZSXM/uBXS+9Zf+2Wo0H2w1VtJld8ff+vdIcWQ9RkQ53ttn5NmsxqntFgvx3fhBnI+ZuBprsRw/isXYiKWYiVp6ELEYSdRrnbsX9SLO3njLeVdXekK52h/bmb7t01kktbgRy1lsF+JateitlNVI4nTXaH+qRvRl6L00O8k3c0Pm6HrX6/Xr/L5Mrv3ikH2MRz078ontjMymuc+z8dLeuS+MOE/6R5qL0vY9qJM7o6Sb/SMVOf/hKDk/ka/TXP+iN+eHbcRbaf2ZmI9SPvsiXunN+e0v3H+5t/GX/vW3qzdLq7du3lg/P8ZDGquJotCfiUZXJl4dPPvyTDTTTLSGz8RE/xNTT3Ach6iaZ6NzYRvuavmdrLQYr3VNwXfieizFpZiNubgcs/H1mI9Gzww71ZPXSmOlNyfZuVbafX2rDQj+7Be7Kv3ygMpHK83LS1157b7S1bN9+TNXfhWzXVl6efDse5x3gcrn8kI6xs+233GeBj2ZyK/NRXTFG9Q+mfhtO31cb67eWru5eHvI8c7l6/S0fb/32vy7Jz6YJ5LOl/SKW8m2spzUivmS7vvMdrS9+armf3HptCvt2ndqe189pmM5vrfvmVrNP8Pt7qmz79U99zWyfae79vV8yol3opl9CukzczRZBWBoJ14/Ua09rP2j9mHt57WbtTenvj15efLz1Zj4e+XP5T+Ufl/6RvJ6fBg/ienjjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4H63fu3lpsNpfWxlioPuZYUTqwztYLw3UY9YjBYyV5oTrubDwFhf9MDcxGLcY0+h8jYkCd6hMPkYx/PqcT+VA6LH44LXumXR6heaVotXedSqxP7fcKTu687lG/tdj8b7unTi26ThngOXdxY+X2xfU7d7+yvLL49tLbS6vzly9dvtT42txXL95Ybi7Ndh6PO0pgHNbv3C0fdwwAAAAAAAAAAADAaPJ//b/x2P+ZoXJAnera+t4jnznqQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeUQtvxUQrkpibvTCbbj/YajTTpSjv1KxERCkikh9HJJ9EXInOEvWu7pL9xnnj4ccfnLv/UWOnr0pRvzSo3XBa+RIzEVHO1web3KOb3f1d6+qv9VjhJdtHmCbsbJE4OG7/DwAA//9tSfWT") mount(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000100)='sysfs\x00', 0x4091, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 405.223296ms ago: executing program 4 (id=938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x154}}, 0x804) 0s ago: executing program 1 (id=939): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@main=@item_012={0x2, 0x0, 0x8, "7ad5"}, @local=@item_4={0x3, 0x2, 0xa, "d5e200"}, @global=@item_4={0x3, 0x1, 0x1, "9623e900"}, @global=@item_012={0x0, 0x1, 0x7}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 173.258874][ T5784] cgroup: Unknown subsys name 'net' [ 173.444174][ T5784] cgroup: Unknown subsys name 'cpuset' [ 173.459059][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 179.275117][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 184.608311][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.618101][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.626560][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.638519][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.647955][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.656631][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.669057][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.686653][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.700544][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.704868][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.710010][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.719463][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.729390][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.731887][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.742330][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.749965][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.760681][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.766980][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.782764][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.800392][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.812363][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.829181][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.844884][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.868516][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.882296][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.404795][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 186.519164][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 186.762528][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 186.864854][ T5816] Bluetooth: hci3: command tx timeout [ 186.870544][ T5816] Bluetooth: hci0: command tx timeout [ 186.877276][ T5816] Bluetooth: hci1: command tx timeout [ 186.883393][ T5816] Bluetooth: hci2: command tx timeout [ 187.035195][ T5814] Bluetooth: hci4: command tx timeout [ 187.136774][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 187.228524][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 187.571227][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.579712][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.587698][ T5808] bridge_slave_0: entered allmulticast mode [ 187.597675][ T5808] bridge_slave_0: entered promiscuous mode [ 187.658020][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.669579][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.677615][ T5808] bridge_slave_1: entered allmulticast mode [ 187.687679][ T5808] bridge_slave_1: entered promiscuous mode [ 187.990916][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.002551][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.010478][ T5805] bridge_slave_0: entered allmulticast mode [ 188.020176][ T5805] bridge_slave_0: entered promiscuous mode [ 188.085795][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.096302][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.103813][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.111891][ T5805] bridge_slave_1: entered allmulticast mode [ 188.127106][ T5805] bridge_slave_1: entered promiscuous mode [ 188.180287][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.187967][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.196041][ T5801] bridge_slave_0: entered allmulticast mode [ 188.205806][ T5801] bridge_slave_0: entered promiscuous mode [ 188.229528][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.239583][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.247205][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.254958][ T5801] bridge_slave_1: entered allmulticast mode [ 188.264732][ T5801] bridge_slave_1: entered promiscuous mode [ 188.580251][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.590345][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.598281][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.606321][ T5818] bridge_slave_0: entered allmulticast mode [ 188.615244][ T5818] bridge_slave_0: entered promiscuous mode [ 188.731364][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.741580][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.749899][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.758584][ T5802] bridge_slave_0: entered allmulticast mode [ 188.768292][ T5802] bridge_slave_0: entered promiscuous mode [ 188.781345][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.789484][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.797491][ T5818] bridge_slave_1: entered allmulticast mode [ 188.807623][ T5818] bridge_slave_1: entered promiscuous mode [ 188.826742][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.845384][ T5808] team0: Port device team_slave_0 added [ 188.883514][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.892614][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.900633][ T5802] bridge_slave_1: entered allmulticast mode [ 188.909377][ T5802] bridge_slave_1: entered promiscuous mode [ 188.944913][ T5814] Bluetooth: hci2: command tx timeout [ 188.950775][ T5814] Bluetooth: hci1: command tx timeout [ 188.952447][ T5816] Bluetooth: hci0: command tx timeout [ 188.956487][ T5814] Bluetooth: hci3: command tx timeout [ 188.980529][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.998820][ T5808] team0: Port device team_slave_1 added [ 189.106230][ T5816] Bluetooth: hci4: command tx timeout [ 189.215434][ T5805] team0: Port device team_slave_0 added [ 189.230930][ T5801] team0: Port device team_slave_0 added [ 189.290088][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.337255][ T5805] team0: Port device team_slave_1 added [ 189.351185][ T5801] team0: Port device team_slave_1 added [ 189.369888][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.389847][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.401905][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.409569][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.437005][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.535676][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.588670][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.596181][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.623534][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.794278][ T5818] team0: Port device team_slave_0 added [ 189.813140][ T5818] team0: Port device team_slave_1 added [ 189.825133][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.832572][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.859700][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.874143][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.881674][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.908278][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.031698][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.038995][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.066697][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.081007][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.088578][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.115923][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.152383][ T5802] team0: Port device team_slave_0 added [ 190.190381][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.197941][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.224214][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.255858][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.263261][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.290468][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.319156][ T5802] team0: Port device team_slave_1 added [ 190.375856][ T5808] hsr_slave_0: entered promiscuous mode [ 190.386403][ T5808] hsr_slave_1: entered promiscuous mode [ 190.602519][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.610797][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.638150][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.780654][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.787980][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.815076][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.841569][ T5801] hsr_slave_0: entered promiscuous mode [ 190.851620][ T5801] hsr_slave_1: entered promiscuous mode [ 190.860289][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 190.866380][ T5801] Cannot create hsr debugfs directory [ 190.906291][ T5805] hsr_slave_0: entered promiscuous mode [ 190.915349][ T5805] hsr_slave_1: entered promiscuous mode [ 190.923365][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 190.929464][ T5805] Cannot create hsr debugfs directory [ 190.949614][ T5818] hsr_slave_0: entered promiscuous mode [ 190.958606][ T5818] hsr_slave_1: entered promiscuous mode [ 190.967215][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 190.973148][ T5818] Cannot create hsr debugfs directory [ 191.033549][ T5816] Bluetooth: hci3: command tx timeout [ 191.033788][ T5098] Bluetooth: hci0: command tx timeout [ 191.039796][ T5816] Bluetooth: hci1: command tx timeout [ 191.045957][ T5814] Bluetooth: hci2: command tx timeout [ 191.186591][ T5814] Bluetooth: hci4: command tx timeout [ 191.237371][ T5802] hsr_slave_0: entered promiscuous mode [ 191.248222][ T5802] hsr_slave_1: entered promiscuous mode [ 191.257181][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 191.263170][ T5802] Cannot create hsr debugfs directory [ 192.649470][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.682312][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.716382][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.736942][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.941965][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.965611][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 193.010163][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.061000][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 193.106365][ T5814] Bluetooth: hci2: command tx timeout [ 193.115768][ T5814] Bluetooth: hci0: command tx timeout [ 193.121468][ T5814] Bluetooth: hci1: command tx timeout [ 193.128366][ T5814] Bluetooth: hci3: command tx timeout [ 193.264795][ T5098] Bluetooth: hci4: command tx timeout [ 193.275377][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.314249][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.339604][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.366887][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.387018][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.453498][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.477299][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.498104][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.542870][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.623279][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.690460][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.737318][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.313405][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.356644][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.580173][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.622624][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.638570][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.745693][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.753646][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.810586][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.920774][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.928437][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.945663][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.953440][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.969295][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.977231][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.180815][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.247787][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.255515][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.280430][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.288032][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.451336][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.580709][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.791368][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.828820][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.836473][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.930800][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.938570][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.954883][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.962644][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.156555][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.164633][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.291843][ T5805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.307487][ T5805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.462014][ T5818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.474611][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.350435][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.543795][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.787252][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.873598][ T5802] veth0_vlan: entered promiscuous mode [ 197.962167][ T5802] veth1_vlan: entered promiscuous mode [ 198.222844][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.349002][ T5801] veth0_vlan: entered promiscuous mode [ 198.454904][ T5801] veth1_vlan: entered promiscuous mode [ 198.473816][ T5802] veth0_macvtap: entered promiscuous mode [ 198.506267][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.600660][ T5802] veth1_macvtap: entered promiscuous mode [ 198.780464][ T5805] veth0_vlan: entered promiscuous mode [ 198.888584][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.981301][ T5801] veth0_macvtap: entered promiscuous mode [ 199.050778][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.062972][ T5805] veth1_vlan: entered promiscuous mode [ 199.086591][ T5801] veth1_macvtap: entered promiscuous mode [ 199.197682][ T3629] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.232676][ T5818] veth0_vlan: entered promiscuous mode [ 199.271817][ T3629] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.319789][ T3629] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.360658][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.387540][ T3629] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.425497][ T5818] veth1_vlan: entered promiscuous mode [ 199.493878][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.625750][ T5805] veth0_macvtap: entered promiscuous mode [ 199.698297][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.717289][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.726840][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.750819][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.810363][ T5805] veth1_macvtap: entered promiscuous mode [ 199.866254][ T5818] veth0_macvtap: entered promiscuous mode [ 199.963164][ T5818] veth1_macvtap: entered promiscuous mode [ 200.050984][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.193464][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.232231][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.330188][ T3794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.358138][ T3794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.375078][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.439073][ T3794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.482663][ T5808] veth0_vlan: entered promiscuous mode [ 200.513406][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.628240][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.661352][ T5808] veth1_vlan: entered promiscuous mode [ 200.689798][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.761460][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.795569][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.052298][ T5808] veth0_macvtap: entered promiscuous mode [ 201.119085][ T5808] veth1_macvtap: entered promiscuous mode [ 201.271937][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.389586][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.490948][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.605700][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.681571][ T3860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.739196][ T3860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.695080][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.703164][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.926261][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.934365][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.040232][ T3629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.048757][ T3629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.245507][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.253629][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.562674][ T3629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.570960][ T3629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.586256][ T5802] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 206.779105][ T3653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.788396][ T3653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.851110][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.860115][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.084868][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.093443][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.029243][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 208.038735][ T5994] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2'. [ 208.048208][ T5994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 208.069471][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.078155][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.319006][ T5999] loop2: detected capacity change from 0 to 128 [ 208.400515][ T5997] loop3: detected capacity change from 0 to 512 [ 208.427290][ T3794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.436266][ T3794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.526213][ T5997] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 208.541202][ T5997] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.703377][ T5997] EXT4-fs (loop3): 1 truncate cleaned up [ 208.712432][ T5997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.820012][ T6005] loop1: detected capacity change from 0 to 256 [ 209.153259][ T6005] FAT-fs (loop1): Directory bread(block 64) failed [ 209.160730][ T6005] FAT-fs (loop1): Directory bread(block 65) failed [ 209.168127][ T6005] FAT-fs (loop1): Directory bread(block 66) failed [ 209.175221][ T6005] FAT-fs (loop1): Directory bread(block 67) failed [ 209.182294][ T6005] FAT-fs (loop1): Directory bread(block 68) failed [ 209.201297][ T6005] FAT-fs (loop1): Directory bread(block 69) failed [ 209.211765][ T6005] FAT-fs (loop1): Directory bread(block 70) failed [ 209.218878][ T6005] FAT-fs (loop1): Directory bread(block 71) failed [ 209.225908][ T6005] FAT-fs (loop1): Directory bread(block 72) failed [ 209.232706][ T6005] FAT-fs (loop1): Directory bread(block 73) failed [ 209.309815][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.696074][ T6021] netlink: 27 bytes leftover after parsing attributes in process `syz.0.13'. [ 211.695510][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 212.233677][ T6037] loop2: detected capacity change from 0 to 128 [ 212.337124][ T6037] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.415958][ T6037] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.752979][ T5805] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.585510][ T6023] loop4: detected capacity change from 0 to 32768 [ 213.660322][ T6023] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.14 (6023) [ 213.741130][ T6023] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 213.752741][ T6023] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 213.768006][ T6043] loop2: detected capacity change from 0 to 4096 [ 213.892299][ T6023] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 213.894125][ T6023] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 213.907394][ T6023] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 213.918654][ T6023] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 213.928943][ T6023] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 213.939228][ T6023] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 213.949417][ T6023] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 213.959876][ T6023] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 213.969770][ T6023] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 213.980649][ T6023] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 213.991769][ T6023] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 214.005073][ T6023] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 214.084090][ T6023] BTRFS error (device loop4): open_ctree failed: -12 [ 214.167048][ T6043] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 214.356972][ T6043] ntfs3(loop2): Failed to load $Extend (-22). [ 214.363391][ T6043] ntfs3(loop2): Failed to initialize $Extend. [ 216.971290][ T6071] comedi: valid board names for 8255 driver are: [ 216.978509][ T6071] 8255 [ 216.981679][ T6071] comedi: valid board names for vmk80xx driver are: [ 216.988797][ T6071] vmk80xx [ 216.991964][ T6071] comedi: valid board names for usbduxsigma driver are: [ 217.000047][ T6071] usbduxsigma [ 217.003552][ T6071] comedi: valid board names for usbduxfast driver are: [ 217.010939][ T6071] usbduxfast [ 217.018854][ T6071] comedi: valid board names for usbdux driver are: [ 217.026006][ T6071] usbdux [ 217.029175][ T6071] comedi: valid board names for ni6501 driver are: [ 217.036405][ T6071] ni6501 [ 217.039620][ T6071] comedi: valid board names for dt9812 driver are: [ 217.046417][ T6071] dt9812 [ 217.049575][ T6071] comedi: valid board names for ni_labpc_cs driver are: [ 217.058240][ T6071] ni_labpc_cs [ 217.061776][ T6071] comedi: valid board names for ni_daq_700 driver are: [ 217.071257][ T6071] ni_daq_700 [ 217.075286][ T6071] comedi: valid board names for labpc_pci driver are: [ 217.082196][ T6071] labpc_pci [ 217.085680][ T6071] comedi: valid board names for adl_pci9118 driver are: [ 217.092785][ T6071] pci9118dg [ 217.096342][ T6071] pci9118hg [ 217.099669][ T6071] pci9118hr [ 217.103011][ T6071] comedi: valid board names for 8255_pci driver are: [ 217.111740][ T6071] 8255_pci [ 217.115674][ T6071] comedi: valid board names for s526 driver are: [ 217.122400][ T6071] s526 [ 217.125399][ T6071] comedi: valid board names for multiq3 driver are: [ 217.132733][ T6071] multiq3 [ 217.136128][ T6071] comedi: valid board names for pcmuio driver are: [ 217.143128][ T6071] pcmuio48 [ 217.146627][ T6071] pcmuio96 [ 217.149977][ T6071] comedi: valid board names for pcmmio driver are: [ 217.156800][ T6071] pcmmio [ 217.160050][ T6071] comedi: valid board names for pcmda12 driver are: [ 217.166970][ T6071] pcmda12 [ 217.170186][ T6071] comedi: valid board names for pcmad driver are: [ 217.178527][ T6071] pcmad12 [ 217.181778][ T6071] pcmad16 [ 217.185577][ T6071] comedi: valid board names for ni_labpc driver are: [ 217.192672][ T6071] lab-pc-1200 [ 217.196622][ T6071] lab-pc-1200ai [ 217.200560][ T6071] lab-pc+ [ 217.203833][ T6071] comedi: valid board names for atmio16 driver are: [ 217.211198][ T6071] atmio16 [ 217.214606][ T6071] atmio16d [ 217.218114][ T6071] comedi: valid board names for ni_at_ao driver are: [ 217.225170][ T6071] at-ao-6 [ 217.228438][ T6071] at-ao-10 [ 217.231788][ T6071] comedi: valid board names for ni_at_a2150 driver are: [ 217.239039][ T6071] ni_at_a2150 [ 217.242648][ T6071] comedi: valid board names for adq12b driver are: [ 217.249677][ T6071] adq12b [ 217.252825][ T6071] comedi: valid board names for mpc624 driver are: [ 217.259655][ T6071] mpc624 [ 217.262742][ T6071] comedi: valid board names for c6xdigio driver are: [ 217.270036][ T6071] c6xdigio [ 217.273330][ T6071] comedi: valid board names for aio_iiro_16 driver are: [ 217.281637][ T6071] aio_iiro_16 [ 217.285567][ T6071] comedi: valid board names for aio_aio12_8 driver are: [ 217.292654][ T6071] aio_aio12_8 [ 217.296315][ T6071] aio_ai12_8 [ 217.299740][ T6071] aio_ao12_4 [ 217.303147][ T6071] comedi: valid board names for fl512 driver are: [ 217.306965][ T6069] loop2: detected capacity change from 0 to 4096 [ 217.309920][ T6071] fl512 [ 217.319246][ T6071] comedi: valid board names for dmm32at driver are: [ 217.326208][ T6071] dmm32at [ 217.329480][ T6071] comedi: valid board names for dt282x driver are: [ 217.336518][ T6071] dt2821 [ 217.339684][ T6071] dt2821-f [ 217.342981][ T6071] dt2821-g [ 217.346504][ T6071] dt2823 [ 217.349563][ T6071] dt2824-pgh [ 217.352979][ T6071] dt2824-pgl [ 217.356653][ T6071] dt2825 [ 217.359894][ T6071] dt2827 [ 217.363061][ T6071] dt2828 [ 217.366243][ T6071] dt2829 [ 217.369434][ T6071] dt21-ez [ 217.372672][ T6071] dt23-ez [ 217.377127][ T6071] dt24-ez [ 217.380401][ T6071] dt24-ez-pgl [ 217.383924][ T6071] comedi: valid board names for dt2817 driver are: [ 217.391061][ T6071] dt2817 [ 217.394290][ T6071] comedi: valid board names for dt2815 driver are: [ 217.401243][ T6071] dt2815 [ 217.404584][ T6071] comedi: valid board names for dt2814 driver are: [ 217.413981][ T6071] dt2814 [ 217.417400][ T6071] comedi: valid board names for dt2811 driver are: [ 217.424673][ T6071] dt2811-pgh [ 217.428109][ T6071] dt2811-pgl [ 217.431547][ T6071] comedi: valid board names for dt2801 driver are: [ 217.438366][ T6071] dt2801 [ 217.441449][ T6071] comedi: valid board names for das6402 driver are: [ 217.448440][ T6071] das6402-12 [ 217.451872][ T6071] das6402-16 [ 217.455522][ T6071] comedi: valid board names for das1800 driver are: [ 217.462266][ T6071] das-1701st [ 217.465857][ T6071] das-1701st-da [ 217.469565][ T6071] das-1702st [ 217.472998][ T6071] das-1702st-da [ 217.476838][ T6071] das-1702hr [ 217.481113][ T6071] das-1702hr-da [ 217.485328][ T6071] das-1701ao [ 217.488785][ T6071] das-1702ao [ 217.492353][ T6071] das-1801st [ 217.496306][ T6071] das-1801st-da [ 217.499995][ T6071] das-1802st [ 217.503524][ T6071] das-1802st-da [ 217.528881][ T6071] das-1802hr [ 217.532335][ T6071] das-1802hr-da [ 217.536215][ T6071] das-1801hc [ 217.539824][ T6071] das-1802hc [ 217.543246][ T6071] das-1801ao [ 217.546913][ T6071] das-1802ao [ 217.550400][ T6071] comedi: valid board names for das800 driver are: [ 217.557356][ T6071] das-800 [ 217.560519][ T6071] cio-das800 [ 217.563931][ T6071] das-801 [ 217.567257][ T6071] cio-das801 [ 217.570678][ T6071] das-802 [ 217.574082][ T6071] cio-das802 [ 217.577694][ T6071] cio-das802/16 [ 217.582257][ T6071] comedi: valid board names for isa-das08 driver are: [ 217.589692][ T6071] isa-das08 [ 217.593028][ T6071] das08-pgm [ 217.598817][ T6071] das08-pgh [ 217.602163][ T6071] das08-pgl [ 217.606246][ T6071] das08-aoh [ 217.609748][ T6071] das08-aol [ 217.613101][ T6071] das08-aom [ 217.616687][ T6071] das08/jr-ao [ 217.620299][ T6071] das08jr-16-ao [ 217.624165][ T6071] pc104-das08 [ 217.628365][ T6071] das08jr/16 [ 217.631797][ T6071] comedi: valid board names for das16m1 driver are: [ 217.638690][ T6071] das16m1 [ 217.641850][ T6071] comedi: valid board names for dac02 driver are: [ 217.648559][ T6071] dac02 [ 217.651549][ T6071] comedi: valid board names for rti802 driver are: [ 217.658453][ T6071] rti802 [ 217.661626][ T6071] comedi: valid board names for rti800 driver are: [ 217.668538][ T6071] rti800 [ 217.671695][ T6071] rti815 [ 217.674993][ T6071] comedi: valid board names for pcm3724 driver are: [ 217.681717][ T6071] pcm3724 [ 217.686073][ T6071] comedi: valid board names for pcl818 driver are: [ 217.692894][ T6071] pcl818l [ 217.696664][ T6071] pcl818h [ 217.699897][ T6071] pcl818hd [ 217.703122][ T6071] pcl818hg [ 217.706727][ T6071] pcl818 [ 217.709797][ T6071] pcl718 [ 217.712858][ T6071] pcm3718 [ 217.716903][ T6071] comedi: valid board names for pcl816 driver are: [ 217.723901][ T6071] pcl816 [ 217.727129][ T6071] pcl814b [ 217.730357][ T6071] comedi: valid board names for pcl812 driver are: [ 217.737320][ T6071] pcl812 [ 217.740652][ T6071] pcl812pg [ 217.743976][ T6071] acl8112pg [ 217.749359][ T6071] acl8112dg [ 217.752729][ T6071] acl8112hg [ 217.756750][ T6071] a821pgl [ 217.759922][ T6071] a821pglnda [ 217.763445][ T6071] a821pgh [ 217.766946][ T6071] a822pgl [ 217.770118][ T6071] a822pgh [ 217.773384][ T6071] a823pgl [ 217.776757][ T6071] a823pgh [ 217.780198][ T6071] pcl813 [ 217.783280][ T6071] pcl813b [ 217.787643][ T6071] acl8113 [ 217.790885][ T6071] iso813 [ 217.793980][ T6071] acl8216 [ 217.797604][ T6071] a826pg [ 217.800687][ T6071] comedi: valid board names for pcl730 driver are: [ 217.807820][ T6071] pcl730 [ 217.810993][ T6071] iso730 [ 217.814159][ T6071] acl7130 [ 217.817488][ T6071] pcm3730 [ 217.820645][ T6071] pcl725 [ 217.823711][ T6071] p8r8dio [ 217.827048][ T6071] acl7225b [ 217.830290][ T6071] p16r16dio [ 217.833613][ T6071] pcl733 [ 217.837043][ T6071] pcl734 [ 217.840106][ T6071] opmm-1616-xt [ 217.843859][ T6071] pearl-mm-p [ 217.847390][ T6071] ir104-pbf [ 217.850716][ T6071] comedi: valid board names for pcl726 driver are: [ 217.857514][ T6071] pcl726 [ 217.860672][ T6071] pcl727 [ 217.863826][ T6071] pcl728 [ 217.867151][ T6071] acl6126 [ 217.870318][ T6071] acl6128 [ 217.873559][ T6071] comedi: valid board names for pcl724 driver are: [ 217.880548][ T6071] pcl724 [ 217.883632][ T6071] pcl722 [ 217.886819][ T6071] pcl731 [ 217.890740][ T6071] acl7122 [ 217.894046][ T6071] acl7124 [ 217.897998][ T6071] pet48dio [ 217.901252][ T6071] pcmio48 [ 217.904401][ T6071] onyx-mm-dio [ 217.908118][ T6071] comedi: valid board names for pcl711 driver are: [ 217.915567][ T6071] pcl711 [ 217.918825][ T6071] pcl711b [ 217.922077][ T6071] acl8112hg [ 217.925921][ T6071] acl8112dg [ 217.929285][ T6071] comedi: valid board names for amplc_pc263 driver are: [ 217.936655][ T6071] pc263 [ 217.939650][ T6071] comedi: valid board names for amplc_pc236 driver are: [ 217.946851][ T6071] pc36at [ 217.950013][ T6071] comedi: valid board names for amplc_dio200 driver are: [ 217.957458][ T6071] pc212e [ 217.960705][ T6071] pc214e [ 217.963938][ T6071] pc215e [ 217.967191][ T6071] pc218e [ 217.970344][ T6071] pc272e [ 217.973492][ T6071] comedi: valid board names for comedi_parport driver are: [ 217.981115][ T6071] comedi_parport [ 217.985202][ T6071] comedi: valid board names for comedi_test driver are: [ 217.993609][ T6071] comedi_test [ 217.997840][ T6071] comedi: valid board names for comedi_bond driver are: [ 218.005247][ T6071] comedi_bond [ 218.130612][ T6069] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 218.332405][ T6076] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 218.388692][ T6069] ntfs3(loop2): ino=1a, mi_enum_attr [ 218.394972][ T6069] ntfs3(loop2): ino=1a, mi_enum_attr [ 218.409772][ T6069] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 218.716998][ T6069] ntfs3(loop2): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 218.799547][ T6077] kvm: pic: level sensitive irq not supported [ 218.799944][ T6077] kvm: pic: non byte read [ 218.869444][ T6077] kvm: pic: non byte read [ 218.926037][ T6077] kvm: pic: non byte read [ 218.977722][ T6077] kvm: pic: non byte read [ 219.018084][ T6077] kvm: pic: non byte read [ 219.071440][ T6077] kvm: pic: level sensitive irq not supported [ 219.072120][ T6077] kvm: pic: non byte read [ 219.111552][ T6077] kvm: pic: non byte read [ 219.255090][ T6084] loop3: detected capacity change from 0 to 1024 [ 220.441843][ T6096] loop2: detected capacity change from 0 to 2048 [ 220.625717][ T6096] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.262334][ T6107] loop0: detected capacity change from 0 to 164 [ 221.447189][ T6107] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 221.591592][ T6110] Bluetooth: MGMT ver 1.23 [ 222.117134][ T6112] loop4: detected capacity change from 0 to 4096 [ 222.355617][ T6120] warning: `syz.3.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 222.435206][ T6112] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 222.622069][ T6112] ntfs3(loop4): ino=1a, mi_enum_attr [ 222.634888][ T6112] ntfs3(loop4): ino=1a, mi_enum_attr [ 222.640490][ T6112] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 222.879344][ T6112] ntfs3(loop4): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 224.432218][ T6140] loop1: detected capacity change from 0 to 512 [ 224.579030][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.586263][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.764569][ T6140] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.55: inode has both inline data and extents flags [ 224.834908][ T6140] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.55: couldn't read orphan inode 15 (err -117) [ 224.877108][ T6140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.227076][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.381045][ T6152] netlink: 'syz.4.60': attribute type 32 has an invalid length. [ 226.391347][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 226.401198][ T6152] netlink: 'syz.4.60': attribute type 32 has an invalid length. [ 226.675142][ T6155] loop0: detected capacity change from 0 to 1024 [ 226.736462][ T6155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.897180][ T6155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.183645][ T6155] EXT4-fs warning (device loop0): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 227.479006][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.140105][ T6173] devpts: Bad value for 'gid' [ 228.145343][ T6173] devpts: Bad value for 'gid' [ 228.468650][ T6175] loop3: detected capacity change from 0 to 64 [ 229.611583][ T6187] loop4: detected capacity change from 0 to 1024 [ 230.349512][ T6191] loop2: detected capacity change from 0 to 512 [ 230.413205][ T6191] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.420276][ T6191] EXT4-fs: inline encryption not supported [ 230.427011][ T6191] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.480507][ T6191] EXT4-fs (loop2): Test dummy encryption mode enabled [ 230.490178][ T6191] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.807033][ T6191] EXT4-fs (loop2): 1 truncate cleaned up [ 230.815475][ T6191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.675160][ T6214] loop0: detected capacity change from 0 to 64 [ 231.782116][ T6206] loop1: detected capacity change from 0 to 8192 [ 231.854352][ T6191] fscrypt (loop2): Error allocating 'xts(aes)' transform: -4 [ 231.866507][ T6206] Dev loop1: unable to read RDB block 8 [ 231.872708][ T6206] loop1: unable to read partition table [ 231.939067][ T6206] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 232.160987][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.481602][ T6227] mmap: syz.0.88 (6227): VmData 175788032 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 233.850875][ T6230] loop1: detected capacity change from 0 to 2048 [ 234.080246][ T6230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.510360][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.281192][ T6249] usb usb8: usbfs: process 6249 (syz.1.96) did not claim interface 32 before use [ 235.554934][ T5857] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 235.782605][ T5857] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.794160][ T5857] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 235.804810][ T5857] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.816348][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.003244][ T6250] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 236.086096][ T5857] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.362769][ T9] usb 1-1: USB disconnect, device number 2 [ 236.715325][ T6268] udevd[6268]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.902771][ T6279] loop1: detected capacity change from 0 to 4096 [ 238.619487][ T6286] loop2: detected capacity change from 0 to 2048 [ 239.895858][ T5857] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 240.112794][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 240.140562][ T5857] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 240.149307][ T5857] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.160303][ T5857] usb 3-1: config 0 has no interface number 0 [ 240.280010][ T5857] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 240.290274][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.298980][ T5857] usb 3-1: Product: syz [ 240.303356][ T5857] usb 3-1: Manufacturer: syz [ 240.308458][ T5857] usb 3-1: SerialNumber: syz [ 240.411903][ T5857] usb 3-1: config 0 descriptor?? [ 240.487157][ T5857] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 240.495474][ T5857] uvcvideo 3-1:0.105: No valid video chain found. [ 240.662176][ T5857] usb 3-1: USB disconnect, device number 2 [ 242.446973][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 243.146895][ T6332] random: crng reseeded on system resumption [ 243.276484][ T6332] netlink: 56 bytes leftover after parsing attributes in process `syz.1.132'. [ 244.135862][ T6339] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 244.196377][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 244.234297][ T6332] syz.1.132 (6332) used greatest stack depth: 2344 bytes left [ 246.091344][ T6359] overlayfs: failed to resolve './file1': -2 [ 247.005087][ T6373] netlink: 256 bytes leftover after parsing attributes in process `syz.2.150'. [ 247.014801][ T6373] netlink: 56 bytes leftover after parsing attributes in process `syz.2.150'. [ 248.192618][ T6385] syzkaller0: entered promiscuous mode [ 248.200837][ T6385] syzkaller0: entered allmulticast mode [ 249.105196][ T5857] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 249.285264][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 249.299870][ T5857] usb 3-1: unable to get BOS descriptor or descriptor too short [ 249.313194][ T5857] usb 3-1: config 7 has an invalid interface number: 48 but max is 0 [ 249.321984][ T5857] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 249.334143][ T5857] usb 3-1: config 7 has no interface number 0 [ 249.340823][ T5857] usb 3-1: config 7 interface 48 has no altsetting 0 [ 249.413110][ T5857] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 249.422836][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.433892][ T5857] usb 3-1: Product: syz [ 249.438740][ T5857] usb 3-1: Manufacturer: syz [ 249.443533][ T5857] usb 3-1: SerialNumber: syz [ 249.774649][ T5857] cdc_phonet 3-1:7.48: probe with driver cdc_phonet failed with error -22 [ 249.879467][ T5857] usb 3-1: USB disconnect, device number 3 [ 250.877763][ T6405] loop4: detected capacity change from 0 to 8192 [ 250.937044][ T6405] loop4: p1 < > p2 p4 < p5 > [ 250.942062][ T6405] loop4: partition table partially beyond EOD, truncated [ 250.950793][ T6405] loop4: p1 start 8388864 is beyond EOD, truncated [ 250.958172][ T6405] loop4: p2 size 31064064 extends beyond EOD, truncated [ 251.110085][ T6405] loop4: p5 size 31064064 extends beyond EOD, truncated [ 252.317226][ T6417] syzkaller0: entered promiscuous mode [ 252.322934][ T6086] udevd[6086]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 252.323147][ T6417] syzkaller0: entered allmulticast mode [ 252.344324][ T6270] udevd[6270]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 252.382423][ T6269] udevd[6269]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 253.401651][ T6427] loop2: detected capacity change from 0 to 128 [ 253.467859][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 253.657600][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 253.736056][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.750672][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 253.758124][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 253.768069][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.907221][ T9] usb 4-1: config 0 descriptor?? [ 253.931702][ T6431] loop4: detected capacity change from 0 to 128 [ 254.139367][ T6431] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.252703][ T6431] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.307816][ T6431] EXT4-fs (loop4): shut down requested (1) [ 254.540044][ T5808] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.645789][ T5857] usb 4-1: USB disconnect, device number 2 [ 255.876272][ T6450] syz.2.182 uses obsolete (PF_INET,SOCK_PACKET) [ 255.975018][ T6451] loop4: detected capacity change from 0 to 512 [ 256.045495][ T6451] ======================================================= [ 256.045495][ T6451] WARNING: The mand mount option has been deprecated and [ 256.045495][ T6451] and is ignored by this kernel. Remove the mand [ 256.045495][ T6451] option from the mount to silence this warning. [ 256.045495][ T6451] ======================================================= [ 256.085075][ T6451] ext4: Unknown parameter 'noacl' [ 256.434014][ T6453] syzkaller0: entered promiscuous mode [ 256.440015][ T6453] syzkaller0: entered allmulticast mode [ 257.549914][ T6462] loop4: detected capacity change from 0 to 2048 [ 257.662997][ T6462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.676182][ T6462] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.703725][ T6467] usb usb5: usbfs: process 6467 (syz.2.190) did not claim interface 0 before use [ 258.085226][ T4076] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:23: bg 0: block 345: padding at end of block bitmap is not set [ 258.128272][ T4076] EXT4-fs (loop4): Remounting filesystem read-only [ 258.155062][ T3653] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 258.213344][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.435833][ T5857] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 258.665526][ T5857] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 258.675248][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.700812][ T6477] loop4: detected capacity change from 0 to 256 [ 258.755901][ T5857] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 258.766300][ T5857] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 258.775061][ T5857] usb 2-1: Manufacturer: syz [ 258.795105][ T6477] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.806658][ T6477] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 258.833829][ T5857] usb 2-1: config 0 descriptor?? [ 258.975047][ T6477] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 259.088854][ T6477] exFAT-fs (loop4): failed to load alloc-bitmap [ 259.095630][ T6477] exFAT-fs (loop4): failed to recognize exfat type [ 259.335334][ T5857] rc_core: IR keymap rc-hauppauge not found [ 259.341759][ T5857] Registered IR keymap rc-empty [ 259.352227][ T5857] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 259.369413][ T5857] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 259.489229][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.500111][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.575896][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 259.612430][ T9] usb 2-1: USB disconnect, device number 2 [ 260.055770][ T6487] tipc: Started in network mode [ 260.061063][ T6487] tipc: Node identity f28e54f1848, cluster identity 4711 [ 260.069546][ T6487] tipc: Enabled bearer , priority 0 [ 260.205576][ T6486] tipc: Disabling bearer [ 260.335879][ T6493] syzkaller0: entered promiscuous mode [ 260.341758][ T6493] syzkaller0: entered allmulticast mode [ 261.215631][ T6505] evm: overlay not supported [ 262.055769][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 262.065108][ T6514] netlink: 76 bytes leftover after parsing attributes in process `syz.4.207'. [ 264.438658][ T6540] syzkaller0: entered promiscuous mode [ 264.444759][ T6540] syzkaller0: entered allmulticast mode [ 264.784302][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 264.983998][ T6516] loop0: detected capacity change from 0 to 32768 [ 265.053774][ T6516] ocfs2: Bad value for 'localalloc' [ 267.647240][ T6572] syzkaller0: entered promiscuous mode [ 267.653008][ T6572] syzkaller0: entered allmulticast mode [ 269.036694][ T6593] netlink: 128 bytes leftover after parsing attributes in process `syz.4.238'. [ 269.185641][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 269.415221][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 269.461595][ T9] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 269.470527][ T9] usb 3-1: config 0 has no interface number 0 [ 269.568946][ T9] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=df.0a [ 269.578913][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.587674][ T9] usb 3-1: Product: syz [ 269.592132][ T9] usb 3-1: Manufacturer: syz [ 269.597174][ T9] usb 3-1: SerialNumber: syz [ 269.698111][ T9] usb 3-1: config 0 descriptor?? [ 269.787936][ T9] ums-datafab 3-1:0.88: USB Mass Storage device detected [ 269.917183][ T9] ums-sddr55 3-1:0.88: USB Mass Storage device detected [ 270.131048][ T9] usb 3-1: USB disconnect, device number 4 [ 270.290614][ T6607] loop3: detected capacity change from 0 to 512 [ 270.377574][ T6607] EXT4-fs: Ignoring removed nobh option [ 270.592953][ T6607] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.243: iget: bad i_size value: 38620345925642 [ 270.714101][ T6617] syzkaller0: entered promiscuous mode [ 270.720037][ T6617] syzkaller0: entered allmulticast mode [ 270.745683][ T6607] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.243: couldn't read orphan inode 15 (err -117) [ 270.830605][ T6607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.421580][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.422022][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 272.662255][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.679472][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.692080][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.706065][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.715815][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.859410][ T6634] loop1: detected capacity change from 0 to 4096 [ 272.892884][ T9] usb 5-1: config 0 descriptor?? [ 273.063085][ T6643] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.334934][ T9] plantronics 0003:047F:FFFF.0002: unbalanced delimiter at end of report description [ 273.383079][ T9] plantronics 0003:047F:FFFF.0002: parse failed [ 273.400053][ T9] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 273.535846][ T9] usb 5-1: USB disconnect, device number 2 [ 273.744998][ T2016] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 273.934912][ T2016] usb 4-1: Using ep0 maxpacket: 8 [ 273.985006][ T2016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.997641][ T2016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.013955][ T2016] usb 4-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 274.025969][ T2016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.200358][ T6649] syzkaller0: entered promiscuous mode [ 274.206303][ T6649] syzkaller0: entered allmulticast mode [ 274.265350][ T2016] usb 4-1: config 0 descriptor?? [ 274.348722][ T2016] usbhid 4-1:0.0: can't add hid device: -22 [ 274.355832][ T2016] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 274.575753][ T2016] usb 4-1: USB disconnect, device number 3 [ 274.854731][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 275.035086][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 275.060118][ T9] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 275.070315][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.159767][ T9] usb 2-1: config 0 descriptor?? [ 275.296537][ T6663] capability: warning: `syz.0.266' uses deprecated v2 capabilities in a way that may be insecure [ 275.495546][ T9] usb 2-1: string descriptor 0 read error: -71 [ 275.502252][ T9] uvcvideo 2-1:0.0: Found UVC 0.00 device (2833:0201) [ 275.510955][ T9] uvcvideo 2-1:0.0: No valid video chain found. [ 275.558024][ T9] usb 2-1: USB disconnect, device number 3 [ 275.595304][ T5857] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 275.850347][ T5857] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.862006][ T5857] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.915715][ T5857] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 275.925327][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.933527][ T5857] usb 5-1: SerialNumber: syz [ 276.236407][ T5857] usb 5-1: 0:2 : does not exist [ 276.392987][ T5857] usb 5-1: USB disconnect, device number 3 [ 276.834827][ T6269] udevd[6269]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.315598][ T6682] loop3: detected capacity change from 0 to 128 [ 277.421020][ T6681] syzkaller0: entered promiscuous mode [ 277.429536][ T6681] syzkaller0: entered allmulticast mode [ 278.425739][ T6696] netlink: 96 bytes leftover after parsing attributes in process `syz.2.282'. [ 280.681032][ T6724] syzkaller0: entered promiscuous mode [ 280.687191][ T6724] syzkaller0: entered allmulticast mode [ 281.404910][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 281.635019][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.647000][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.757515][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 281.767362][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 281.776170][ T9] usb 2-1: Manufacturer: syz [ 281.851559][ T9] usb 2-1: config 0 descriptor?? [ 282.043277][ T6737] loop4: detected capacity change from 0 to 1024 [ 282.088295][ T6737] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 282.184862][ T6743] loop0: detected capacity change from 0 to 128 [ 282.194331][ T6737] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.300: lblock 1 mapped to illegal pblock 1 (length 1) [ 282.315028][ T6737] Quota error (device loop4): write_blk: dquota write failed [ 282.323134][ T6737] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 282.338315][ T6737] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.300: Failed to acquire dquot type 0 [ 282.530516][ T6737] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.300: Freeing blocks not in datazone - block = 0, count = 4096 [ 282.566334][ T6737] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.300: Invalid inode bitmap blk 0 in block_group 0 [ 282.594717][ T4277] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 282.647274][ T6737] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 282.647352][ T4277] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 282.647508][ T4277] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:27: Failed to release dquot type 0 [ 282.686322][ T6737] EXT4-fs (loop4): 1 orphan inode deleted [ 282.696990][ T6737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.775803][ T9] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 282.827031][ T6737] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 282.992736][ T9] usb 2-1: USB disconnect, device number 4 [ 283.085738][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.370994][ T6764] syzkaller0: entered promiscuous mode [ 284.376924][ T6764] syzkaller0: entered allmulticast mode [ 284.622642][ T6767] loop0: detected capacity change from 0 to 64 [ 284.852792][ T6761] loop3: detected capacity change from 0 to 4096 [ 284.967602][ T6761] EXT4-fs (loop3): Test dummy encryption mode enabled [ 285.048789][ T6771] loop1: detected capacity change from 0 to 2048 [ 285.138648][ T6761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.152034][ T6771] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 285.163294][ T6771] NILFS (loop1): mounting unchecked fs [ 285.249850][ T6771] NILFS (loop1): recovery complete [ 285.309541][ T6774] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.485401][ T5857] kernel read not supported for file /dsp1 (pid: 5857 comm: kworker/1:3) [ 285.692273][ T6761] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 285.747380][ T6761] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 285.797849][ T6761] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 286.014280][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.022052][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.445232][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.264651][ T6781] loop0: detected capacity change from 0 to 4096 [ 287.348810][ T6781] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 289.216537][ T6781] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 289.263470][ T6781] ntfs3(loop0): Failed to load $Extend (-22). [ 289.270903][ T6781] ntfs3(loop0): Failed to initialize $Extend. [ 290.093783][ T6806] syzkaller0: entered promiscuous mode [ 290.100048][ T6806] syzkaller0: entered allmulticast mode [ 290.933561][ T6812] loop0: detected capacity change from 0 to 256 [ 290.966148][ T6812] exfat: Deprecated parameter 'utf8' [ 290.972448][ T6812] exfat: Deprecated parameter 'utf8' [ 291.301375][ T6810] loop3: detected capacity change from 0 to 4096 [ 291.335696][ T6810] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.377694][ T6810] EXT4-fs (loop3): Test dummy encryption mode enabled [ 291.564372][ T6810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.438465][ T6810] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 292.812369][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.257684][ T6839] netlink: 368 bytes leftover after parsing attributes in process `syz.4.339'. [ 293.439668][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 295.474948][ T6869] loop3: detected capacity change from 0 to 128 [ 295.560642][ T6869] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 295.630019][ T6869] hpfs: filesystem error: improperly stopped [ 295.636707][ T6869] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 295.645336][ T6869] hpfs: You really don't want any checks? You are crazy... [ 295.723143][ T6869] hpfs: hpfs_map_sector(): read error [ 295.729405][ T6869] hpfs: code page support is disabled [ 295.755738][ T6869] hpfs: hpfs_map_4sectors(): unaligned read [ 295.762445][ T6869] hpfs: hpfs_map_4sectors(): unaligned read [ 295.773429][ T6869] hpfs: filesystem error: unable to find root dir [ 296.086665][ T6871] tmpfs: Bad value for 'mpol' [ 296.608664][ T6873] loop4: detected capacity change from 0 to 4096 [ 297.211095][ T6873] ntfs3(loop4): failed to convert "0080" to cp775 [ 297.280387][ T6873] ntfs3(loop4): failed to convert name for inode 1e. [ 297.329934][ T6873] ntfs3(loop4): ino=1f, mi_enum_attr [ 297.335934][ T6873] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 297.866282][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 297.904779][ T6875] loop3: detected capacity change from 0 to 8192 [ 299.120681][ T6895] loop2: detected capacity change from 0 to 128 [ 299.845171][ T6905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.365'. [ 299.855541][ T6905] netlink: 'syz.4.365': attribute type 6 has an invalid length. [ 299.863458][ T6905] netlink: 36 bytes leftover after parsing attributes in process `syz.4.365'. [ 300.466437][ T6912] process 'syz.1.369' launched './file1' with NULL argv: empty string added [ 300.732879][ T5857] IPVS: starting estimator thread 0... [ 300.946845][ T6915] IPVS: using max 240 ests per chain, 12000 per kthread [ 302.988558][ T6939] loop4: detected capacity change from 0 to 64 [ 303.205695][ T6942] netlink: 'syz.2.382': attribute type 16 has an invalid length. [ 303.213723][ T6942] netlink: 'syz.2.382': attribute type 17 has an invalid length. [ 303.249347][ T6943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 305.385050][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.393'. [ 305.394818][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.393'. [ 306.520230][ T6973] loop3: detected capacity change from 0 to 4096 [ 306.748700][ T6987] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.778618][ T6973] NILFS (loop3): corrupt root inode [ 307.634794][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 307.844987][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 307.888632][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 307.897744][ T9] usb 5-1: config 0 has no interface number 0 [ 308.018231][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 308.028193][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.037249][ T9] usb 5-1: Product: syz [ 308.041611][ T9] usb 5-1: Manufacturer: syz [ 308.046718][ T9] usb 5-1: SerialNumber: syz [ 308.157448][ T9] usb 5-1: config 0 descriptor?? [ 308.189514][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 308.341223][ T7002] loop0: detected capacity change from 0 to 1024 [ 308.446776][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 308.485854][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 308.555763][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 308.555906][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 308.556022][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 308.556137][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 308.556252][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 308.850324][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 308.859214][ T9] usb 5-1: USB disconnect, device number 4 [ 309.120570][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 309.217057][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 309.232784][ T9] quatech2 5-1:0.51: device disconnected [ 309.403530][ T7013] loop1: detected capacity change from 0 to 512 [ 309.667247][ T7013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.681528][ T7013] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.936763][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.162116][ T7027] loop0: detected capacity change from 0 to 64 [ 310.275172][ T7027] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 311.094844][ T5857] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 311.262028][ T7041] loop3: detected capacity change from 0 to 64 [ 311.315953][ T5857] usb 5-1: Using ep0 maxpacket: 32 [ 311.327066][ T7039] loop1: detected capacity change from 0 to 2048 [ 311.335377][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.348924][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.359872][ T5857] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 311.369279][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.457648][ T7039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.536357][ T5857] usb 5-1: config 0 descriptor?? [ 312.087167][ T5857] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 312.280308][ T9] usb 5-1: USB disconnect, device number 5 [ 312.390321][ T7048] loop3: detected capacity change from 0 to 128 [ 312.430119][ T7050] netlink: 72 bytes leftover after parsing attributes in process `syz.2.427'. [ 312.464307][ T7048] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.513564][ T7048] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.577181][ T7048] binder: Bad value for 'stats' [ 312.795959][ T5818] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.405593][ T7061] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 313.554185][ T7056] fido_id[7056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 314.306172][ T7070] dummy0: entered allmulticast mode [ 314.329749][ T7070] dummy0: left allmulticast mode [ 315.300655][ T7080] loop3: detected capacity change from 0 to 2048 [ 315.356812][ T7084] loop0: detected capacity change from 0 to 1024 [ 315.415129][ T7080] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.441: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 315.495989][ T7080] EXT4-fs (loop3): get root inode failed [ 315.502017][ T7080] EXT4-fs (loop3): mount failed [ 315.648412][ T7084] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 316.047301][ T4076] hfsplus: b-tree write err: -5, ino 4 [ 316.163577][ T7094] loop2: detected capacity change from 0 to 64 [ 316.496518][ T7096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.449'. [ 316.507883][ T7096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.449'. [ 316.517765][ T7096] netlink: 7 bytes leftover after parsing attributes in process `syz.1.449'. [ 317.288581][ T7103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.451'. [ 317.346886][ T7103] netlink: 104 bytes leftover after parsing attributes in process `syz.2.451'. [ 317.356883][ T7103] netlink: 104 bytes leftover after parsing attributes in process `syz.2.451'. [ 317.367139][ T7106] tipc: Enabling of bearer rejected, failed to enable media [ 317.384348][ T7104] loop0: detected capacity change from 0 to 512 [ 317.461358][ T7104] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 317.495604][ T7104] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.452: invalid indirect mapped block 2683928664 (level 1) [ 317.605321][ T7104] EXT4-fs (loop0): Remounting filesystem read-only [ 317.650176][ T7104] EXT4-fs (loop0): 1 truncate cleaned up [ 317.658962][ T7104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.945107][ T7111] loop3: detected capacity change from 0 to 512 [ 318.039358][ T7111] EXT4-fs: Ignoring removed i_version option [ 318.111695][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.124949][ T7111] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 318.321834][ T7111] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 318.395384][ T7111] EXT4-fs (loop3): 1 truncate cleaned up [ 318.403838][ T7111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.735826][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.182108][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 319.269390][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 320.026439][ T7132] netlink: 'syz.3.465': attribute type 13 has an invalid length. [ 320.035523][ T7132] netlink: 'syz.3.465': attribute type 17 has an invalid length. [ 320.609926][ T7132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.854892][ T5857] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 320.916367][ T7138] loop2: detected capacity change from 0 to 256 [ 321.055660][ T5857] usb 5-1: Using ep0 maxpacket: 8 [ 321.102834][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.117845][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 321.129240][ T5857] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 321.138982][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.307932][ T5857] usb 5-1: config 0 descriptor?? [ 321.582645][ T5857] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 321.775720][ T7140] iowarrior 5-1:0.0: Error -90 while submitting URB [ 321.896187][ T5857] usb 5-1: USB disconnect, device number 6 [ 322.943272][ T7157] loop2: detected capacity change from 0 to 128 [ 323.385651][ T5857] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 323.675135][ T5857] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 323.684968][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.693295][ T5857] usb 1-1: Product: syz [ 323.697892][ T5857] usb 1-1: Manufacturer: syz [ 323.703046][ T5857] usb 1-1: SerialNumber: syz [ 323.829007][ T5857] usb 1-1: config 0 descriptor?? [ 323.860600][ T5857] asix 1-1:0.0: probe with driver asix failed with error -22 [ 326.915553][ T5857] usb 1-1: USB disconnect, device number 3 [ 327.414801][ T30] audit: type=1326 audit(1763414552.405:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7197 comm="syz.0.491" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x0 [ 328.293418][ T7206] loop0: detected capacity change from 0 to 512 [ 328.409195][ T7206] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.493: Unrecognised inode hash code 255 [ 328.421459][ T7206] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.493: Corrupt directory, running e2fsck is recommended [ 328.469644][ T7206] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 328.478760][ T7206] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.493: corrupted in-inode xattr: invalid ea_ino [ 328.604869][ T7206] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.493: couldn't read orphan inode 15 (err -117) [ 328.679161][ T7206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.137816][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.999526][ T7218] netlink: 104 bytes leftover after parsing attributes in process `syz.4.497'. [ 330.009238][ T7218] netlink: 104 bytes leftover after parsing attributes in process `syz.4.497'. [ 330.371232][ T7220] loop0: detected capacity change from 0 to 1024 [ 330.457511][ T7220] EXT4-fs: Ignoring removed orlov option [ 330.505037][ T7220] EXT4-fs (loop0): Test dummy encryption mode enabled [ 330.560486][ T7220] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 330.570874][ T7220] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 330.596729][ T7223] loop3: detected capacity change from 0 to 64 [ 330.880482][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 331.139101][ T9] usb 5-1: descriptor type invalid, skip [ 331.187435][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.198403][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 331.276994][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.286644][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.295402][ T9] usb 5-1: Product: syz [ 331.299772][ T9] usb 5-1: Manufacturer: syz [ 331.304718][ T9] usb 5-1: SerialNumber: syz [ 331.420401][ T9] usb 5-1: config 0 descriptor?? [ 331.535299][ T7231] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 331.642261][ T9] usb 5-1: USB disconnect, device number 7 [ 332.630225][ T7239] loop0: detected capacity change from 0 to 16 [ 332.699210][ T7239] erofs (device loop0): mounted with root inode @ nid 36. [ 332.776009][ T7239] erofs (device loop0): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 332.789524][ T7239] erofs (device loop0): big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 332.801610][ T7239] erofs (device loop0): read error -117 @ 72 of nid 36 [ 333.858857][ T7248] binder: Unknown parameter '%' [ 335.668027][ T7265] loop3: detected capacity change from 0 to 64 [ 335.977015][ T7267] loop0: detected capacity change from 0 to 256 [ 336.421146][ T7267] FAT-fs (loop0): Directory bread(block 64) failed [ 336.430151][ T7267] FAT-fs (loop0): Directory bread(block 65) failed [ 336.437911][ T7267] FAT-fs (loop0): Directory bread(block 66) failed [ 336.445952][ T7267] FAT-fs (loop0): Directory bread(block 67) failed [ 336.453298][ T7267] FAT-fs (loop0): Directory bread(block 68) failed [ 336.460934][ T7267] FAT-fs (loop0): Directory bread(block 69) failed [ 336.475912][ T7267] FAT-fs (loop0): Directory bread(block 70) failed [ 336.483385][ T7267] FAT-fs (loop0): Directory bread(block 71) failed [ 336.494933][ T7267] FAT-fs (loop0): Directory bread(block 72) failed [ 336.502497][ T7267] FAT-fs (loop0): Directory bread(block 73) failed [ 337.464300][ T7277] loop1: detected capacity change from 0 to 512 [ 337.581005][ T7277] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 337.711937][ T7281] Zero length message leads to an empty skb [ 337.966867][ T5801] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 339.731578][ T7299] loop4: detected capacity change from 0 to 4096 [ 339.859477][ T7305] loop0: detected capacity change from 0 to 1024 [ 340.019246][ T7305] EXT4-fs (loop0): orphan cleanup on readonly fs [ 340.083606][ T7305] EXT4-fs (loop0): 1 truncate cleaned up [ 340.146602][ T7305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.346300][ T7299] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 340.352280][ T7299] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 340.364098][ T7299] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 340.370719][ T7299] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 340.376732][ T7299] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 340.382823][ T7299] ntfs3(loop4): ino=5, "/" attr_set_size [ 340.517124][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.114238][ T7319] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 341.135166][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 342.487524][ T7330] ALSA: mixer_oss: invalid OSS volume '' [ 342.493824][ T7330] ALSA: mixer_oss: invalid OSS volume 'é›' [ 343.092178][ T7338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.553'. [ 343.850214][ T7346] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 344.416161][ T7351] capability: warning: `syz.3.559' uses 32-bit capabilities (legacy support in use) [ 344.701122][ T7355] loop1: detected capacity change from 0 to 256 [ 347.469402][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.477432][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.783069][ T7382] loop2: detected capacity change from 0 to 1024 [ 348.017973][ T7382] EXT4-fs (loop2): orphan cleanup on readonly fs [ 348.248056][ T7382] EXT4-fs (loop2): 1 truncate cleaned up [ 348.564630][ T5857] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 348.765760][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 348.823476][ T5857] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 348.833132][ T5857] usb 1-1: config 254 has no interface number 0 [ 348.840686][ T5857] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 348.851495][ T5857] usb 1-1: config 254 interface 235 has no altsetting 0 [ 349.032965][ T5857] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 349.045003][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.053747][ T5857] usb 1-1: Product: syz [ 349.058546][ T5857] usb 1-1: Manufacturer: syz [ 349.065101][ T5857] usb 1-1: SerialNumber: syz [ 349.234329][ T7389] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 349.544007][ T7382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 349.582953][ T7389] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 349.600886][ T5857] usbtest 1-1:254.235: Linux gadget zero [ 349.607816][ T5857] usbtest 1-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 350.166589][ T5857] usb 1-1: USB disconnect, device number 4 [ 350.458817][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.774839][ T5857] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 351.973142][ T5857] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 351.982685][ T5857] usb 1-1: config 179 has no interface number 0 [ 351.991408][ T5857] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 352.004036][ T5857] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 352.016216][ T5857] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 352.028216][ T5857] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 352.256777][ T5857] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 352.267267][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 352.276901][ T5857] usb 1-1: Product: syz [ 352.341794][ T7406] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 352.498823][ T7407] loop2: detected capacity change from 0 to 4096 [ 352.505641][ T30] audit: type=1400 audit(1763414577.485:3): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F262053 pid=7414 comm="syz.4.588" [ 352.698670][ T5857] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 352.835730][ T9] usb 1-1: USB disconnect, device number 5 [ 352.835762][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 352.835984][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 353.311409][ T7419] loop1: detected capacity change from 0 to 1024 [ 353.432362][ T7419] EXT4-fs (loop1): orphan cleanup on readonly fs [ 353.537689][ T7407] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 353.544734][ T7407] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 353.550699][ T7407] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 353.557531][ T7407] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 353.563677][ T7407] ntfs3(loop2): ino=5, "/" mi_enum_attr [ 353.571664][ T7407] ntfs3(loop2): ino=5, "/" attr_set_size [ 353.606275][ T7419] EXT4-fs (loop1): 1 truncate cleaned up [ 353.681571][ T7419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.068766][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.539125][ T7438] loop2: detected capacity change from 0 to 512 [ 355.705841][ T7438] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 355.715813][ T7438] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 355.778469][ T7438] System zones: 0-1, 15-15, 18-18, 34-34 [ 355.802205][ T7440] loop0: detected capacity change from 0 to 2048 [ 355.826777][ T7438] EXT4-fs (loop2): orphan cleanup on readonly fs [ 355.833779][ T7438] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 355.844015][ T7438] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 355.859679][ T7438] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 355.936136][ T7440] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.105631][ T7438] EXT4-fs (loop2): 1 truncate cleaned up [ 356.117506][ T7438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 356.238447][ T7444] loop1: detected capacity change from 0 to 1024 [ 356.389046][ T7438] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 356.488635][ T7445] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 356.708891][ T30] audit: type=1400 audit(1763414581.715:4): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F262053 pid=7446 comm="syz.0.601" [ 356.960489][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.091290][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 359.204034][ T7460] loop4: detected capacity change from 0 to 2048 [ 359.213386][ T7465] loop2: detected capacity change from 0 to 1764 [ 359.328614][ T7468] pimreg: tun_chr_ioctl cmd 1074025681 [ 359.353755][ T7468] pimreg: tun_chr_ioctl cmd 1074025681 [ 359.458330][ T7460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.471662][ T7465] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 359.562163][ T7466] loop0: detected capacity change from 0 to 4096 [ 359.742394][ T7465] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 360.087435][ T7466] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 360.093912][ T7466] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 360.100795][ T7466] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 360.107331][ T7466] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 360.113785][ T7466] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 360.120609][ T7466] ntfs3(loop0): ino=5, "/" attr_set_size [ 361.656541][ T7478] netlink: 'syz.4.611': attribute type 3 has an invalid length. [ 361.796332][ T7481] loop1: detected capacity change from 0 to 2048 [ 361.848915][ T7481] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 361.892758][ T7481] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 361.902261][ T7481] UDF-fs: Scanning with blocksize 512 failed [ 362.016909][ T7481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.860739][ T7488] netlink: 'syz.0.619': attribute type 1 has an invalid length. [ 363.255252][ T5857] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 363.435590][ T5857] usb 1-1: device descriptor read/64, error -71 [ 363.695344][ T5857] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 363.848429][ T7496] sd 0:0:1:0: device reset [ 363.900323][ T5857] usb 1-1: device descriptor read/64, error -71 [ 364.029053][ T5857] usb usb1-port1: attempt power cycle [ 364.389213][ T5857] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 364.447678][ T5857] usb 1-1: device descriptor read/8, error -71 [ 364.473926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 364.706914][ T5857] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 364.773199][ T5857] usb 1-1: device descriptor read/8, error -71 [ 364.887973][ T5857] usb usb1-port1: unable to enumerate USB device [ 368.301852][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 368.442317][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 368.591316][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 370.343137][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.404204][ T7536] loop4: detected capacity change from 0 to 64 [ 370.407659][ T7537] loop0: detected capacity change from 0 to 256 [ 370.441190][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.480288][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.525370][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.545336][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.020119][ T7537] FAT-fs (loop0): Directory bread(block 64) failed [ 371.028055][ T7537] FAT-fs (loop0): Directory bread(block 65) failed [ 371.035527][ T7537] FAT-fs (loop0): Directory bread(block 66) failed [ 371.043296][ T7537] FAT-fs (loop0): Directory bread(block 67) failed [ 371.051445][ T7537] FAT-fs (loop0): Directory bread(block 68) failed [ 371.058932][ T7537] FAT-fs (loop0): Directory bread(block 69) failed [ 371.067215][ T7537] FAT-fs (loop0): Directory bread(block 70) failed [ 371.074189][ T7537] FAT-fs (loop0): Directory bread(block 71) failed [ 371.088477][ T7537] FAT-fs (loop0): Directory bread(block 72) failed [ 371.097400][ T7537] FAT-fs (loop0): Directory bread(block 73) failed [ 371.271837][ T7541] loop1: detected capacity change from 0 to 512 [ 371.323776][ T7536] hfs: walked past end of dir [ 371.550600][ T7541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.566203][ T7541] ext4 filesystem being mounted at /140/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.047851][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.070285][ T7538] chnl_net:caif_netlink_parms(): no params data found [ 372.629675][ T5807] Bluetooth: hci5: command tx timeout [ 373.953694][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.998053][ T7566] loop1: detected capacity change from 0 to 256 [ 374.141402][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.435277][ T7566] FAT-fs (loop1): Directory bread(block 64) failed [ 374.442743][ T7566] FAT-fs (loop1): Directory bread(block 65) failed [ 374.450394][ T7566] FAT-fs (loop1): Directory bread(block 66) failed [ 374.463587][ T7566] FAT-fs (loop1): Directory bread(block 67) failed [ 374.472973][ T7566] FAT-fs (loop1): Directory bread(block 68) failed [ 374.480269][ T7566] FAT-fs (loop1): Directory bread(block 69) failed [ 374.489319][ T7566] FAT-fs (loop1): Directory bread(block 70) failed [ 374.497434][ T7566] FAT-fs (loop1): Directory bread(block 71) failed [ 374.504729][ T7566] FAT-fs (loop1): Directory bread(block 72) failed [ 374.511734][ T7566] FAT-fs (loop1): Directory bread(block 73) failed [ 374.581128][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.685313][ T30] audit: type=1800 audit(1763414599.655:5): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.648" name="file7" dev="loop1" ino=1048613 res=0 errno=0 [ 374.749038][ T5807] Bluetooth: hci5: command tx timeout [ 374.792199][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.799988][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.808333][ T7538] bridge_slave_0: entered allmulticast mode [ 374.818359][ T7538] bridge_slave_0: entered promiscuous mode [ 374.909702][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.965251][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.981809][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.990809][ T7538] bridge_slave_1: entered allmulticast mode [ 375.001619][ T7538] bridge_slave_1: entered promiscuous mode [ 375.409450][ T7538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.535245][ T7538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.120267][ T7538] team0: Port device team_slave_0 added [ 376.135347][ T59] bridge_slave_1: left allmulticast mode [ 376.142080][ T59] bridge_slave_1: left promiscuous mode [ 376.150120][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.265606][ T59] bridge_slave_0: left allmulticast mode [ 376.273834][ T59] bridge_slave_0: left promiscuous mode [ 376.281822][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.785281][ T5807] Bluetooth: hci5: command tx timeout [ 376.788861][ T7578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.654'. [ 376.904680][ T7580] loop1: detected capacity change from 0 to 512 [ 377.059669][ T7580] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 377.207793][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.252478][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.275860][ T59] bond0 (unregistering): Released all slaves [ 377.370703][ T7538] team0: Port device team_slave_1 added [ 378.017739][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.026464][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.058311][ T7538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.190138][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.199050][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.229197][ T7538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.605101][ T7591] loop4: detected capacity change from 0 to 512 [ 378.632634][ T59] hsr_slave_0: left promiscuous mode [ 378.682107][ T59] hsr_slave_1: left promiscuous mode [ 378.690935][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.699254][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.795251][ T7585] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 378.801939][ T7585] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 378.816440][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.825933][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.866170][ T5807] Bluetooth: hci5: command tx timeout [ 378.868997][ T7585] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.879676][ T7585] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 379.022194][ T7585] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.029442][ T7585] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 379.043493][ T59] veth1_macvtap: left promiscuous mode [ 379.050010][ T59] veth0_macvtap: left promiscuous mode [ 379.056328][ T59] veth1_vlan: left promiscuous mode [ 379.062088][ T59] veth0_vlan: left promiscuous mode [ 379.087770][ T7585] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.094791][ T7585] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 379.181838][ T7585] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 379.195348][ T7585] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 379.533654][ T7585] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 380.154841][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 380.896768][ T59] team0 (unregistering): Port device team_slave_1 removed [ 380.960380][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 380.980561][ T59] team0 (unregistering): Port device team_slave_0 removed [ 381.024775][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 381.106696][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 381.184834][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 381.198336][ T7603] loop2: detected capacity change from 0 to 4096 [ 381.796351][ T7538] hsr_slave_0: entered promiscuous mode [ 381.883435][ T7538] hsr_slave_1: entered promiscuous mode [ 381.892943][ T7538] debugfs: 'hsr0' already exists in 'hsr' [ 381.900292][ T7538] Cannot create hsr debugfs directory [ 382.238370][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 383.027562][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 383.107869][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 383.194918][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 383.271073][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 383.862196][ T7538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 383.989163][ T7538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.090853][ T7538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 384.232310][ T7538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 385.355348][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 385.485744][ T7538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.665825][ T7538] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.737601][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.746078][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.866245][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.874206][ T3653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.161248][ T7538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.725983][ T5864] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 388.944794][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 388.978567][ T5864] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 388.987997][ T5864] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.002262][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 389.013801][ T5864] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.024215][ T5864] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.038016][ T5864] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 389.048019][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.635046][ T5864] usb 5-1: usb_control_msg returned -32 [ 389.641311][ T5864] usbtmc 5-1:16.0: can't read capabilities [ 390.226144][ T7677] usbtmc 5-1:16.0: INITIATE_CLEAR returned 52 [ 390.447520][ T5864] usb 5-1: USB disconnect, device number 8 [ 390.932092][ T7538] veth0_vlan: entered promiscuous mode [ 391.072758][ T7538] veth1_vlan: entered promiscuous mode [ 391.399407][ T7538] veth0_macvtap: entered promiscuous mode [ 391.456937][ T7538] veth1_macvtap: entered promiscuous mode [ 391.717139][ T7538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.811312][ T7538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.939586][ T3794] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.978090][ T3794] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.024660][ T3794] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.064288][ T7695] loop4: detected capacity change from 0 to 128 [ 392.094171][ T4076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.436728][ T1107] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.486031][ T7695] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.507455][ T1107] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.589950][ T1107] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.613184][ T1107] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.623582][ T7695] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 393.740408][ T5808] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 394.685073][ T7724] program syz.1.690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.495687][ T7733] loop2: detected capacity change from 0 to 2048 [ 395.620962][ T7733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.217472][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.381494][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.389786][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.612068][ T7789] loop1: detected capacity change from 0 to 2048 [ 399.630451][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.638789][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.719427][ T7789] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 399.807083][ T7789] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 399.885770][ T7789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.943586][ T7801] loop4: detected capacity change from 0 to 256 [ 401.053683][ T7801] exFAT-fs (loop4): error, The cluster chain has a loop [ 401.061869][ T7801] exFAT-fs (loop4): Filesystem has been set read-only [ 401.069339][ T7801] exFAT-fs (loop4): failed to count the number of clusters in root [ 401.077946][ T7801] exFAT-fs (loop4): failed to recognize exfat type [ 401.818332][ T7809] loop1: detected capacity change from 0 to 128 [ 401.995647][ T7809] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 402.104972][ T7809] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 402.909736][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 402.917199][ T7822] netlink: 'syz.5.717': attribute type 46 has an invalid length. [ 403.146562][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 405.215625][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 405.837062][ T7851] netlink: 'syz.4.730': attribute type 4 has an invalid length. [ 405.846182][ T7851] netlink: 'syz.4.730': attribute type 5 has an invalid length. [ 405.854262][ T7851] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.730'. [ 406.149905][ T5801] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.784237][ T7867] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 406.862319][ T7869] 9pnet_fd: p9_fd_create_unix (7869): problem connecting socket: éq‰Y’3aK: -111 [ 407.543353][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 407.552754][ T7876] bridge_slave_1: left allmulticast mode [ 407.558985][ T7876] bridge_slave_1: left promiscuous mode [ 407.566175][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.669872][ T7876] bridge_slave_0: left allmulticast mode [ 407.676814][ T7876] bridge_slave_0: left promiscuous mode [ 407.683775][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.400924][ T7880] loop5: detected capacity change from 0 to 4096 [ 408.790825][ T7880] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 408.898215][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.905258][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.037100][ T7880] ntfs3(loop5): ino=1e, "file1" attr_set_size [ 409.099694][ T7878] ntfs3(loop5): ino=1e, "file1" attr_set_size [ 409.765689][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 409.976410][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.989827][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 410.004534][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.040504][ T9] usb 1-1: config 0 descriptor?? [ 410.527981][ T9] wacom 0003:056A:00E3.0005: unknown main item tag 0x0 [ 410.740597][ T5857] usb 1-1: USB disconnect, device number 10 [ 410.797085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 410.877054][ T7916] netlink: 188 bytes leftover after parsing attributes in process `syz.1.751'. [ 410.895526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 411.170529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 413.469726][ T7937] loop1: detected capacity change from 0 to 4096 [ 413.735413][ T7937] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 413.742506][ T7937] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 413.947096][ T7951] loop5: detected capacity change from 0 to 512 [ 415.099100][ T7937] ntfs3: Cannot use different iocharset when remounting! [ 415.167853][ T7961] loop0: detected capacity change from 0 to 8 [ 415.230351][ T7961] unable to read id index table [ 415.446755][ T4277] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 415.471749][ T5801] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 415.479107][ T5801] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 415.487424][ T5801] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 415.527627][ T59] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 416.187061][ T7968] loop1: detected capacity change from 0 to 64 [ 416.644618][ T7968] hfs: unable to load iocharset "Sp—" [ 417.399551][ T7979] netlink: 100 bytes leftover after parsing attributes in process `syz.1.776'. [ 418.911260][ T7996] loop4: detected capacity change from 0 to 64 [ 420.390815][ T8007] loop4: detected capacity change from 0 to 2048 [ 420.685715][ T8007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.698900][ T8007] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.389107][ T3794] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:17: bg 0: block 345: padding at end of block bitmap is not set [ 421.463045][ T3794] EXT4-fs (loop4): Remounting filesystem read-only [ 421.604031][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.831228][ T25] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 423.678548][ T8053] loop2: detected capacity change from 0 to 1024 [ 424.130163][ T8055] loop5: detected capacity change from 0 to 4096 [ 424.201485][ T8055] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 424.292545][ T8055] ntfs3(loop5): ino=3, mi_enum_attr [ 424.655309][ T8055] ntfs3(loop5): ino=19, mi_enum_attr [ 424.660934][ T8055] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 426.235697][ T8077] nbd: must specify at least one socket [ 427.073991][ T8085] loop5: detected capacity change from 0 to 1024 [ 427.276442][ T8085] hfsplus: bad catalog entry type [ 427.637220][ T59] hfsplus: b-tree write err: -5, ino 4 [ 427.763807][ T8093] loop0: detected capacity change from 0 to 4096 [ 428.045138][ T8102] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 428.406465][ T8103] loop4: detected capacity change from 0 to 512 [ 428.572922][ T8103] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 428.636285][ T8103] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 428.645176][ T8103] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.811: iget: bad i_size value: 12154757448730 [ 428.705593][ T8103] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.811: couldn't read orphan inode 13 (err -117) [ 428.762753][ T8103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.587642][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.011763][ T8133] netlink: 'syz.0.822': attribute type 3 has an invalid length. [ 432.200053][ T8146] sctp: [Deprecated]: syz.5.828 (pid 8146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.200053][ T8146] Use struct sctp_sack_info instead [ 432.463145][ T8151] netlink: 'syz.2.830': attribute type 36 has an invalid length. [ 432.584730][ T5857] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 432.779318][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.779495][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.779625][ T5857] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.779832][ T5857] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.779970][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.785680][ T5857] usb 1-1: config 0 descriptor?? [ 433.215029][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 433.340656][ T5857] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 433.367563][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 433.384010][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.384154][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 433.384295][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 433.384623][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.384832][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 433.384971][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.574767][ T5857] usb 1-1: USB disconnect, device number 11 [ 433.663540][ T9] usb 3-1: GET_CAPABILITIES returned 2f [ 433.663750][ T9] usbtmc 3-1:16.0: can't read capabilities [ 433.834221][ T8156] fido_id[8156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 433.881496][ T5857] usb 3-1: USB disconnect, device number 5 [ 434.442443][ T8158] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 434.732788][ T8160] tipc: Started in network mode [ 434.738238][ T8160] tipc: Node identity 1aee63c8c938, cluster identity 4711 [ 434.746523][ T8160] tipc: Enabled bearer , priority 0 [ 434.787082][ T8160] syzkaller0: entered promiscuous mode [ 434.793019][ T8160] syzkaller0: entered allmulticast mode [ 434.879453][ T8160] tipc: Resetting bearer [ 434.898547][ T8159] tipc: Resetting bearer [ 434.924094][ T8159] tipc: Disabling bearer [ 437.028784][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 437.195534][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 437.233326][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.245233][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 437.254784][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.357772][ T9] usb 1-1: config 0 descriptor?? [ 437.893117][ T9] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 438.127658][ T9] usb 1-1: USB disconnect, device number 12 [ 438.744806][ T5857] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 439.107712][ T5857] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.119907][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 439.132058][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 133, setting to 64 [ 439.182358][ T5857] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 439.192260][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.201977][ T5857] usb 2-1: Product: syz [ 439.207105][ T5857] usb 2-1: Manufacturer: syz [ 439.211979][ T5857] usb 2-1: SerialNumber: syz [ 439.307570][ T5857] usb 2-1: config 0 descriptor?? [ 439.317203][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 439.537811][ T8198] loop5: detected capacity change from 0 to 512 [ 439.632071][ T8198] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 439.719476][ T5857] rc_core: IR keymap rc-streamzap not found [ 439.725909][ T5857] Registered IR keymap rc-empty [ 439.733512][ T5857] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 439.749366][ T5857] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 439.873540][ T5857] usb 2-1: USB disconnect, device number 5 [ 441.699055][ T8213] loop5: detected capacity change from 0 to 16 [ 441.769283][ T8213] erofs (device loop5): mounted with root inode @ nid 36. [ 442.044945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 442.147065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 442.455241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 443.393954][ T8225] loop4: detected capacity change from 0 to 2048 [ 443.519928][ T8228] loop0: detected capacity change from 0 to 256 [ 444.278137][ T8225] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 445.397005][ T5857] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 445.589627][ T8243] loop0: detected capacity change from 0 to 1024 [ 445.654024][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.668155][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.678559][ T5857] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 445.688340][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.708869][ T5857] usb 2-1: config 0 descriptor?? [ 445.888762][ T8243] hfsplus: bad catalog entry type [ 446.153558][ T4076] hfsplus: b-tree write err: -5, ino 4 [ 446.170347][ T5857] cp2112 0003:10C4:EA90.0008: item fetching failed at offset 6/7 [ 446.181025][ T8247] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 446.221151][ T5857] cp2112 0003:10C4:EA90.0008: parse failed [ 446.228198][ T5857] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -22 [ 446.395957][ T9] usb 2-1: USB disconnect, device number 6 [ 446.776982][ T8250] loop5: detected capacity change from 0 to 2048 [ 446.925971][ T8250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.874924][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 448.093682][ T9] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 448.102501][ T9] usb 5-1: config 0 has no interface number 0 [ 448.109012][ T9] usb 5-1: config 0 interface 19 has no altsetting 0 [ 448.116103][ T9] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=9a.76 [ 448.125698][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.232124][ T9] usb 5-1: config 0 descriptor?? [ 448.459801][ T9] usb 5-1: string descriptor 0 read error: -71 [ 448.547407][ T9] usb 5-1: USB disconnect, device number 9 [ 449.351006][ T8281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.887'. [ 450.345551][ T5857] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 450.495000][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 450.506786][ T5857] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 450.506921][ T5857] usb 3-1: config 0 has no interface number 0 [ 450.537189][ T5857] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 450.537344][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.537568][ T5857] usb 3-1: Product: syz [ 450.537673][ T5857] usb 3-1: Manufacturer: syz [ 450.537774][ T5857] usb 3-1: SerialNumber: syz [ 450.556714][ T5857] usb 3-1: config 0 descriptor?? [ 450.593734][ T5857] redrat3 3-1:0.83: Couldn't find all endpoints [ 450.807760][ T5857] usb 3-1: USB disconnect, device number 6 [ 451.110695][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 451.110799][ T8296] netlink: 56 bytes leftover after parsing attributes in process `syz.1.894'. [ 451.893654][ T8304] loop2: detected capacity change from 0 to 256 [ 451.982775][ T8307] loop4: detected capacity change from 0 to 65 [ 452.039135][ T8307] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop4 [ 452.367306][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 452.605773][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.614018][ T9] usb 6-1: config 0 has no interface number 0 [ 452.621420][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 452.631295][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.756551][ T9] usb 6-1: config 0 descriptor?? [ 452.805220][ T9] usb 6-1: selecting invalid altsetting 1 [ 452.812284][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 452.819178][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 452.923493][ T8319] loop2: detected capacity change from 0 to 256 [ 453.499549][ T9] DVB: Unable to find symbol cx22700_attach() [ 453.712821][ T9] DVB: Unable to find symbol tda10046_attach() [ 453.721710][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 453.773484][ T9] usb 6-1: USB disconnect, device number 2 [ 453.783631][ T8324] loop4: detected capacity change from 0 to 2048 [ 453.873281][ T8324] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 454.085088][ T8329] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.085512][ T8324] syz.4.907: attempt to access beyond end of device [ 454.085512][ T8324] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 454.565060][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 454.616240][ T8334] netlink: 104 bytes leftover after parsing attributes in process `syz.2.911'. [ 454.626018][ T8334] netlink: 104 bytes leftover after parsing attributes in process `syz.2.911'. [ 457.304627][ T8360] loop0: detected capacity change from 0 to 512 [ 457.397309][ T8360] EXT4-fs: Ignoring removed i_version option [ 457.406097][ T8360] EXT4-fs: Ignoring removed nobh option [ 457.526338][ T8360] EXT4-fs (loop0): Test dummy encryption mode enabled [ 457.533328][ T8360] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 457.699804][ T8360] EXT4-fs (loop0): 1 truncate cleaned up [ 457.707988][ T8360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.831885][ T8370] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 458.220390][ T5802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.447447][ T8388] loop4: detected capacity change from 0 to 1764 [ 461.295866][ T5857] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 461.489097][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 461.490872][ T8401] loop1: detected capacity change from 0 to 1024 [ 461.533014][ T5857] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 461.543113][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.602555][ T5857] usb 3-1: config 0 descriptor?? [ 461.850717][ T5857] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 461.878305][ T5857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 461.912933][ T5857] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 461.920802][ T5857] usb 3-1: media controller created [ 461.939337][ T12] hfsplus: b-tree write err: -5, ino 4 [ 462.021607][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.058739][ T8397] ===================================================== [ 462.066358][ T8397] BUG: KMSAN: uninit-value in __i2c_smbus_xfer+0x23e7/0x2f60 [ 462.074527][ T8397] __i2c_smbus_xfer+0x23e7/0x2f60 [ 462.079849][ T8397] i2c_smbus_xfer+0x31d/0x4d0 [ 462.085082][ T8397] i2cdev_ioctl_smbus+0x4a1/0x660 [ 462.090279][ T8397] compat_i2cdev_ioctl+0x48f/0xb40 [ 462.095710][ T8397] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 462.101735][ T8397] ia32_sys_call+0x2d5f/0x4310 [ 462.107068][ T8397] __do_fast_syscall_32+0xb0/0x150 [ 462.114070][ T8397] do_fast_syscall_32+0x38/0x80 [ 462.119398][ T8397] do_SYSENTER_32+0x1f/0x30 [ 462.124120][ T8397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.130786][ T8397] [ 462.133271][ T8397] Local variable msgbuf1.i created at: [ 462.139452][ T8397] __i2c_smbus_xfer+0x86a/0x2f60 [ 462.144863][ T8397] i2c_smbus_xfer+0x31d/0x4d0 [ 462.149712][ T8397] [ 462.152154][ T8397] CPU: 0 UID: 0 PID: 8397 Comm: syz.2.936 Not tainted syzkaller #0 PREEMPT(none) [ 462.161773][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.172342][ T8397] ===================================================== [ 462.179504][ T8397] Disabling lock debugging due to kernel taint [ 462.185958][ T8397] Kernel panic - not syncing: kmsan.panic set ... [ 462.192508][ T8397] CPU: 0 UID: 0 PID: 8397 Comm: syz.2.936 Tainted: G B syzkaller #0 PREEMPT(none) [ 462.203468][ T8397] Tainted: [B]=BAD_PAGE [ 462.207724][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.218535][ T8397] Call Trace: [ 462.221921][ T8397] [ 462.225027][ T8397] __dump_stack+0x26/0x30 [ 462.229547][ T8397] dump_stack_lvl+0x53/0x270 [ 462.234403][ T8397] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 462.240392][ T8397] dump_stack+0x1e/0x25 [ 462.244826][ T8397] vpanic+0x435/0xd30 [ 462.249000][ T8397] panic+0x15d/0x160 [ 462.253191][ T8397] kmsan_report+0x31c/0x320 [ 462.257939][ T8397] ? __msan_warning+0x1b/0x30 [ 462.262834][ T8397] ? __i2c_smbus_xfer+0x23e7/0x2f60 [ 462.268208][ T8397] ? i2c_smbus_xfer+0x31d/0x4d0 [ 462.273229][ T8397] ? i2cdev_ioctl_smbus+0x4a1/0x660 [ 462.278655][ T8397] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 462.284345][ T8397] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 462.290385][ T8397] ? ia32_sys_call+0x2d5f/0x4310 [ 462.295515][ T8397] ? __do_fast_syscall_32+0xb0/0x150 [ 462.301598][ T8397] ? do_fast_syscall_32+0x38/0x80 [ 462.306890][ T8397] ? do_SYSENTER_32+0x1f/0x30 [ 462.311917][ T8397] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.318596][ T8397] ? az6027_i2c_xfer+0x2bdf/0x2c40 [ 462.324047][ T8397] ? kmsan_get_metadata+0xfb/0x160 [ 462.329404][ T8397] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 462.336050][ T8397] ? kmsan_get_metadata+0xfb/0x160 [ 462.341432][ T8397] ? kmsan_get_metadata+0xfb/0x160 [ 462.346814][ T8397] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 462.353320][ T8397] ? i2c_smbus_msg_pec+0x678/0x6c0 [ 462.358731][ T8397] __msan_warning+0x1b/0x30 [ 462.363374][ T8397] __i2c_smbus_xfer+0x23e7/0x2f60 [ 462.368619][ T8397] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 462.374944][ T8397] ? rt_mutex_lock+0x3e/0x70 [ 462.379712][ T8397] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 462.385592][ T8397] i2c_smbus_xfer+0x31d/0x4d0 [ 462.390545][ T8397] i2cdev_ioctl_smbus+0x4a1/0x660 [ 462.395771][ T8397] compat_i2cdev_ioctl+0x48f/0xb40 [ 462.401060][ T8397] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 462.406863][ T8397] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 462.412978][ T8397] ? kmsan_get_metadata+0xfb/0x160 [ 462.418247][ T8397] ? kmsan_get_metadata+0xfb/0x160 [ 462.423553][ T8397] ia32_sys_call+0x2d5f/0x4310 [ 462.428700][ T8397] __do_fast_syscall_32+0xb0/0x150 [ 462.434023][ T8397] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 462.440029][ T8397] do_fast_syscall_32+0x38/0x80 [ 462.445091][ T8397] do_SYSENTER_32+0x1f/0x30 [ 462.449782][ T8397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.456395][ T8397] RIP: 0023:0xf70ad539 [ 462.460666][ T8397] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 462.480774][ T8397] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 462.489698][ T8397] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 462.497892][ T8397] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 462.506071][ T8397] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.514146][ T8397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 462.522257][ T8397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.530559][ T8397] [ 462.534185][ T8397] Kernel Offset: disabled [ 462.538571][ T8397] Rebooting in 86400 seconds..