last executing test programs: 8m52.954035103s ago: executing program 2 (id=55): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) 8m49.002603417s ago: executing program 2 (id=60): socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r0) 8m48.768760813s ago: executing program 2 (id=61): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208088, &(0x7f0000002440)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRES16=0x0], 0x1, 0x5e97, &(0x7f0000005e00)="$eJzs3UuPFNfZB/CnL9Nz4TWMLL2WhbIYY+dCMDBcDLnb3iRSVpEiNlmBxmMLBScRkCi2UBhrFvkGUbJIlOyzyifIHj6EF1kGCZKNV6moZs6BmkoPzQDT1TPn95OaqqdOVfcp/n2druoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED88Ps/PteLiKu/SguWI/4vBhH9iMW6XomIxZXlvP4wIl6PreZ4rV59PqLefuufYxEXI+L+0YiHj+6s1YvPP2M//n3k/4/9868/OP37v/3u3sk/nnq73f6n9X/c+8nddFsAAADAnlRVVfXSx/zj6fN9v+tOAQBTkV//qyQvV6vVarVaffjqpmq8u80iIjaa29TvGe6OuzIAYHZtxBddd4EOyb9ow4g40nUngJnmuPvD6eGjO2u9lG+v+Xqwst2ejwXZkf9G7/H5HbtNJ2kfYzKt+9dmDOLVXfqzOKU+zJKcf7+d/9Xt9lFab7/zn5bd8h9tn/pUnJz/oJ1/y+HJvz82/1Ll/Id7yn8gfwAAAAAAmGH57//LU/v+t7fjerP5l7M7Ez3t+9+VKfUBAAAAAAAAAF62Fx3/7zHj/wEAAMDMqj+r1/589Mmy3T5j18uv9CJeaa0PFCadLLPUdT8AAAAAAAAAAAAAoCTD7WN4r/Qi5iLilaWlqqrqS1O73qsX3f6gK33/oWRdP8kDAMC2+0db5/L3IhYi4kr6rb+5paWlqlpYXKqWqsX5/H52NL9QLTY+1+ZpvWx+9AxviIejqr6yhcZ2TZM+L09qb19ffVujavAMHZuODgMHgIjYfjV66BXpkKmqY9H1uxwOBo//w8fjn2fR9f0UAAAA2H9VVVW99HPex9N3/v2uOwUATEV+/W9/L6BWq9Vqtfrw1U3VeHebRURsNLep3zPcHXdlAMDs2ogvuu4CHZJ/0YYR8XrXnQBmWq/rDrAvHj66s9ZL+faarwdpfPd8LMiO/Dd6W9vl7cdNJ2kfYzKt+9dmDOLVXfrz2pT6MEty/v12/le320dpvf3Of1p2y7/ez+UO+tO1nP+gnX/L4cm/Pzb/UuX8h3vKfyB/AAAAAACYYfnv/8u+/827DAAAAAAAAAAHzsNHd9byea/5+/8vjVnP+Z+HU86/J/8i5fz7rfy/1lpv0Jh/8P6T/P/16M7aj/7w+fE8fdb85/NML92zeuke0Uu31Bum6XPv2vy4hZtzg1F9S3O9/mCYjvmp5j6M63Ej1mN1x7r99P/xpP3cjva6p3Pprrzdfn5H+3C7vbH9hR3tc+l3B6rF3H4m1uLncSM+2Gqv2+Yn7P/ChPZqQnvOf+DxX6Sc/7BxqfNfSu291rT24LP+/zzum9Nxt/Peb+/dX93/3ZloMwaP962p3r8THfRn6//kyCh+eWv95plfX7t9++a5SJMdS89HmrxkOf+5dHn8/P/mdnt+3m8+Xh98Ntpz/rNiM4a75v9mY77e35NT7lsXcv6jdMn5f5Daxz/+D3L+uz/+T3XQHwAAAAAAAAAAAAAAAHiaqqq2ThF9LyIupfN/ujo3EwCYrvz6XyV5uVqtVqvV6sNXN1XjvdssIuLvzW3q9wy/GXdlAMAs+09EfN51J+iM/AuWf++vnr7VdWeAqbr1yac/vXbjxvrNW133BAAAAAAAAAB4Xnn8z5XG+M9vRcRya70d47++HysvOv7nMM88HmD0+Qf63ovN/mjQbww3/kY8ffzvE/H08b+HE25vbkL7aEL72EHMGxYmtI890aMh5/9GY7zzOv/jreHXSxj/tT3mfQly/ica9+c6/6+21mvmX/3lIOff35H/2dsf/+LsrU8+PX3942sfrX+0/rOLq6uXLlx+Z/Xy6tkPr99YT/922OP9lfPPY187DrQsOf+cufzLkvP/cqrlX5ac/1dSLf+y5Pzz+z35lyXnnz/7yL8sOf+TqZZ/WXL+X0+1/MuS8z+VavmXJef/dqrlX5ac/+lUy78sOf8zqZZ/WXL+Z1Mt/7Lk/PM3XPIvS84/H9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl5/9OquVflpz/pVTLvyw5/8upln9Zcv7fSLX8y5Lz/2aq5V+WnP+3Ui3/suT8v51q+Zcl5/+dVMu/LDn/76Za/mXJ+X8v1fIvS87/3VTLvyxPfv/fjBkzZvJM189MAAAAAAAAAAAAAEDbNA4n7nofAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcbIdZZ3AD97c9YOly2E4IYAG8cEkyzZ9T2mNZhbSRPSUiC0pRfj2mtj8K1em1sjxSi0RGrURiof4EO5Fal8qYgAVVSlyJVagQQS+UQrtQ2pAlVEoTW0H6AibDUz7/PuzHivZzb2zDm/nxQ/9uyZmXfOvDO7/3X+awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoN1Nr5398FBRFI3/mr9MFMUzGr/fODnR+OPWV1ztFQIAAAC9eqr566Vn5wsOrOJKbcd89UXf/OL8/Px88dh3X/b8j8zP5w9MFsXENUXR/Fh48p6/3dp+TPJAMT403Pbn4RXufmSFj4+u8PGxFT6+YYWPX7PCx8dX+PhlJ+AyG1vfj2ne2Nbmbydap7S4rhhrfmzrItd6YOia4eH4Xk7TUPM682NHi+PFiWK2mOk4vnXsUPP4L9/UuK87i7iv4bb7urGxQ3543+FYw1A6x1s77mvhNsMPXl1M/uiH9x1+08cev2GxueJp6Li91jq3bWms80PpktZah4pr8jmJdQ63rfPGRZ6TkY51DjWv1/h99zovrXKdIwvLvKK6n/PxYrj5+0eb52m0/dt6+TzdmC778c1FUVxYWHb3MZfdVzFcbOq4ZHjh+Rlv7cjGbTS20nOK0TXt05tWsU8b88jWzn3a/ZqI5/+mdL3RJdbQ/jT94IMbLnve17pPQ+NRL/Va6d6D6/1a6Zc9GPvi0eaDfnDRPbg1Pf77bll6Dy66dxbZg/lxt+3BLSvtweENI8015ydhqHmdhT24veP4keY9DTXnk7csvwenz508Mz33/g+8/PjJQ8dmj82e2jUzs2fn3t0ze2emjx4/MZt+LXm2+9+mYji/BrakcxevgZd2Hdu+Vec/tX6vw/FlXocTXceu9+twtPvBDV2ZF+Tle7r12nhr46SPPzRcLPEaaz4/t/b+OsyPu+11ONr2Olz0c8oir8PRVbwOG8ecuXV1X7OMtv232Bqers8FE217sPvrke49uN5fj/TLHhxP++Jfb136c8GNab0PTq3165GRy/ZgfrjpvadxSf56f/yO5lhsX97Q+MC1G4rzc7Nnb3/foXPnzm4v0rgintu2V7r366a2x1Rctl+H17xfD3z469+4YZHLJ9K5Gn9545fxJZ+rxjG7bl/+uWp+dlv8fHZcuqNIY51d6fO52GfzxvnMWXKZ89k45kPTvX8tnnNp2/vv2BLvv5H7f9a8n635ph4YGRttvX5H8tkZ63g/7nyqRpvvXUPN+740vbr347H035V+P75umffjzV3Hrvf78Vj3g4v346GVvtvRm+7nczztkxMzy78fN47ZvGOte3J02ffjm9McSuf/ZSkp5FzUtneW2rf5vkZHx9LjGo176NynOzuOH0vZrHFfn91Rbp9uu7l1WyP50S24Uvt0suvY9d6n+f1qqX06tNJ338rpfj7H0764bufy+7RxzMVdvb93bozftr13blhpD46NbGiseSxvwtb7/fzG2IO3F4eL08WJ4kjzoxua+2moeV9Tu1e3Bzek/670e+XmZfbgtq5j13sP5s9jS+29odHLH/w66H4+x9O++Oju5fdg45jX7V3fr123pUvyMW1fu3Z/f22p73nd0HWans7veTXW+Q97l//ebOOYE3esNWcuf55uS5dcu8h56n79LvWaOlJcmfO0Oa3z+3csfZ4a62kc85F9q9xPB4qi+MLdB5rf701/v/L589/6YsffuxxofexL+xZu67KvOhb7e58v3H3g4j/f9ZO1PEYA+tvPmr9u3dT6XNf2N1Or+ft/AAAAYCBE7h9OM5P/AQAAoDIi98f/FZ7J/wAAAFAZkftH08xqkv8f/Lfnvfun9xe5mT+fxMfjNJx5onVcdFw/mf48Ob+gcflrPvOPX3/7/au77+GiKH56178sevyDT8S6Wh5O65z8dufll9n87VXd/zvuXTiuvQM4kW4/Hk/3Nvjyfz/RvN7kvta8eNfF5nzzhQcfaHz80r7Wn6M7+eT/tI7781TmPXD07zuuv+2x1v1tfWz5xxXX+9wbN979grct3F9cb2jLs5oP46OvbN1u/Nybh1/bOv5SOm6p9f/dH3/2c43j3/eSxdd///Di638y3e530vzJU63L289p489xvT9M64/7i+vd/umvLLr+R97QOv6R9Lx8Ms3u9b/6T1/4VPv5ivXH/Rx4vHW9uP+Zv/6P5vXi9uL2u9c//qonOs5H9+1f/Hzrdva/539H2o+Py+N+8r57vPN5btxO+34Ln/2jix3nufj31vX+pmv9cXtnHl98/bd1rfPM9k3N6y9VGf/47HcWfbyxngN/9WjH43nke+n8veae5u2O/zjtx/Tx/3u4dXvdPy3h0e91vp/E8Z+caL0u4/amu9b/cNf6L7y4ce5WXv+dP2qt/5FXfbXz+fjP1joO/KA1V1r/sU98s+P6n/pW6/k4+96pU6fnzh+PDvVE+tk/Z77bur1rxjduuvYZz3zWs9N7ZfefD54+987Zs5MzkzNFMTmAPxLv6V7/p9P8r9a4sN63f19RFO9t+7x26+tb+6940aU/efGdn3lnHPdPr2td/tDdrc9bL03HPZwuv5Ce77idj3+s9fmw1/XH/Sw183pX6fzXPrxnVQemx//Rm65vvsqGLrYu7n6/Kite548/r/N1/9hbW/NL6bzOp5/MvOX6rzWP677/+NkID72l9fqOr+Ti+r2u/y/T833Pd1q3H7eb15u+jvnK5s73x3h+vnR/108amGj9FI8L6f2juND6eBwVX1M9dOn6tSxzSXPvn5s+cfzU+fdNn5udOzc99/4PHDx5+vypcwebP5vz4LtWuv7C63tT8/V9ZHbPrqL5aj/dGk+zq73+M/cePrJ35pYjs0cPnT967t4zs2ePHZ6bOzx7ZO6WQ0ePzr53pesfP7J/+459O/fumDp2/Mj+O/bt27lv6vip041ltBa1gj0z7546dfZg8ypz+3ft2757966ZqZOnj8zu3zszM3V+pes3PzdNNa79nqmzsycOnTt+cnZq7vgHZvdv37dnz44Vf7rfyTNH5yanz54/NX1+bvbsdOuxTJ5rXtz43LfS9aFh7hMbF/08NZS+et9+257881kbPvPBJW+qdUjXDxD9fvpZNN/4iz/bvZo/R+4fSzOrSf4HAACAOojcvyHNTP4HAACAyojcf02amfwPAAAAlRG5fzzNrCb5X/9f/1//X/8/6P/r/5eh/6//X4b+v/7/IKxf/1//n971W/8/cv/Goqhl/gcAAIA6iNy/Kc1M/gcAAIDKiNx/bZqZ/A8AAACVEbn/GWlmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+5+ZZlaT/A8AAAB1ELn/WWlm8j8AAABURuT+Z6eZyf8AAABQGZH7J9LMapL/9f/1//X/9f+D/r/+fxn6//r/Zej/6/8Pwvr1//X/6V2/9f8j9/9cmllN8j8AAADUQeT+56SZyf8AAABQGZH7n5tmJv8DAABAZUTuvy7NrCb5X/9f/79/+v8LtVj9f/1//f/Bof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/89LMapL/AQAAoA4i91+fZib/AwAAQGVE7n9+mpn8DwAAAJURuX9zmllN8r/+v/5///T//fv/Qf9f/3+Q6P/r/5eh/6//Pwjr1//X/6d3/db/j9z/82lmNcn/AAAAUAeR+29IM5P/AQAAoDIi978gzUz+BwAAgMqI3H9jmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+F6aZ1ST/AwAAQB1E7n9Rmpn8DwAAAJURuf/FaWbyPwAAAFRG5P7JNLOa5H/9f/1//X/9/6D/r/9fhv6//n8Z+v/6/4Owfv1//X9612/9/8j9N6WZ1ST/AwAAQB1E7t+SZib/AwAAQGVE7r85zUz+BwAAgMqI3L81zawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/S9LMapL/AQAAoA4i99+SZib/AwAAQGVE7n9pmpn8DwAAAJURuX9bmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+l6WZ1ST/AwAAQB1E7r81zUz+BwAAgMqI3H9bmpn8DwAAAJURuX8qzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/y9PMapL/AQAAoA4i99+eZib/AwAAQGVE7p9OM5P/AQAAoDIi98+kmdUk/+v/6//r/+v/B/1//f8y9P/1/8vQ/9f/H4T16//r/9O7fuv/R+7fnmZWk/wPAAAAdRC5f0eamfwPAAAAlRG5f2eamfwPAAAAlRG5f1eaWU3yv/6//r/+v/5/0P/X/y9D/1//vwz9f/3/QVi//r/+P73rt/5/5P7daWY1yf8AAABQB5H796SZyf8AAABQGZH796aZyf8AAABQGZH770gzq0n+1//X/9f/1/8P+v/6/2Xo/+v/l6H/r/8/COu/Iv3/B5b+MQD6/1RBv/X/I/fvSzOrSf4HAACAOojc/4o0M/kfAAAAKiNy/y+kmcn/AAAAUBmR+38xzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCs37//r/9P7/qt/x+5f3+aWU3yPwAAANRB5P5XppnJ/wAAAFAZkftflWYm/wMAAEBlRO4/kGZWk/yv/6//r/+v/x/0/wek//8HqzjmCtL/1/8vQ/9f/38Q1q//r/9P7/qt/x+5/9VpZjXJ/wAAAFAHkftfk2Ym/wMAAEBlRO5/bZqZ/A8AAACVEbn/dWlmNcn/+v/6//r/+v9B/39A+v99Rv9f/78M/X/9/0FYv/6//j+967f+f+T+16eZ1ST/AwAAQB1E7v+lNDP5HwAAACojcv8b0szkfwAAAKiMyP13ppnVJP/r/+v/P139/w3pNvT/2/ad/n+T/r/+/1ro/+v/F2vp/w+lV7D+f9PV7s8P+vr1//X/6V2/9f8j9/9ymllN8j8AAADUQeT+u9LM5H8AAACojMj9d6eZyf8AAABQGZH735hmVpP83/f9/3SH+v9L9v+f2Zj92P8P+v9t+07/v0n/X/9/LfT/9f8L//5/aVe7Pz/o69f/1/+nd/3W/4/cf0+aWU3yPwAAANRB5P5fSTNrz/9L/WUZAAAAMBAi9/9qmpm//wcAAIDKiNz/pjSzmuT/vu//J/r/g/fv/wf9/7Z9p//fpP+v/78W+v/6/4X+f2lXuz8/6OvX/9f/p3f91v+P3P9raWY1yf8AAABQB5H735xmJv8DAABAZUTuf0uamfwPAAAAlRG5/61pZjXJ//r/+v/6//r/Qf9f/78M/X/9/zL0//X/B2H9+v/6//Su3/r/kfvvTTOrSf4HAACAOojc/7Y0M/kfAAAAKiNy/6+nmcn/AAAAUBmR+38jzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/b6aZ1ST/AwAAQB1E7n97mpn8DwAAAJURuf+30szkfwAAAKiMyP2/nWZWk/yv/6//r/+v/x/0//X/y9D/1/8vQ/9f/38Q1q//r/9P7/qt/x+5/3fSzGqS/wEAAKAOIvf/bpqZ/A8AAACVEbn/YJqZ/A8AAACVEbn/HWlmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+w+lmdUk/wMAAEAdRO7/vTQz+R8AAAAqI3L/4TQz+R8AAAAqI3L/kTSzmuR//X/9f/1//f+g/6//X4b+v/5/Gfr/+v9huSfkaq9/vfr/I4X+P/XVb/3/yP2zaWY1yf8AAABQB5H7j6aZyf8AAABQGZH7j6WZyf8AAABQGZH735lmVpP8r/+v/6//r/8f9P/1/8vQ/9f/L0P/X/9/ENbv3//X/6d3/db/j9x/PM2sJvkfAAAA6iBy/7vSzOR/AAAAqIzI/e9OM5P/AQAAoDIi959IM6tJ/tf/1//X/9f/D/r/+v9l6P/r/5eh/6//Pwjr1//X/6d3/db/j9x/Ms2sJvkfAAAA6iBy/6k0M/kfAAAAKiNy/+k0M/kfAAAAKiNy/5k0s5rkf/1//X/9f/3/oP+v/1+G/r/+fxn6//r/g7B+/X/9f3rXb/3/yP2/n2ZWk/wPAAAAdRC5/2yamfwPAAAAlRG5fy7NTP4HAACAyojcfy7NrCb5X/9f/1//X/8/6P/r/5eh////7N3Vi2DZEcfxJiTQT/lv4+7u7u6+cXd3d3d3z0NIuqpCspuEPXdm99yqz+eloBeWw9AP82P4cvX/K/T/+v8zvF//r//nuN36/9z9d4hbhux/AAAAmCB3/x3jFvsfAAAA2sjdf6e4xf4HAACANnL33zluGbL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv1/7v67xC1D9j8AAABMkLv/rnGL/Q8AAABt5O6/W9xi/wMAAEAbufvvHrcM2f/6f/2//l//n/T/+v8V+n/9/wr9v/7/DO/X/+v/OW63/j93/z3iliH7HwAAACbI3X/PuMX+BwAAgDZy998rbrH/AQAAoI3c/feOW4bsf/2//l//r/9P+n/9/wr9v/5/hf5f/3+G9+v/9f8ct1v/n7v/PnHLkP0PAAAAE+Tuv2/cYv8DAABAG7n77xe32P8AAADQRu7++8ctQ/a//l//r//X/yf9v/5/hf5f/79C/6//P8P79f/6f47brf/P3f+AuGXI/gcAAIAJcvc/MG6x/wEAAKCN3P0PilvsfwAAAGgjd/+D45Yh+1//r//X/+v/k/5f/79C/6//X6H/1/+f4f36f/0/x+3W/+fuf0jcMmT/AwAAwAS5+x8at9j/AAAA0Ebu/ofFLfY/AAAAtJG7/+Fxy5D9r//X/+v/9f9J/6//X6H/1/+v0P/r/8/wfv2//p/jduv/c/c/Im4Zsv8BAABggtz9j4xb7H8AAABoI3f/o+KW/9z/l7fkqwAAAIBrKXf/o+OWIf/+r//X/+v/9f9J/6//X6H/1/+v0P/r/8/wfv2//p/jduv/c/c/Jm4Zsv8BAABggtz9j41b7H8AAABoI3f/4+IW+x8AAADayN3/+LhlyP7X/+v/9f/6/6T/1/+v0P/r/1fo//X/Z3i//l//z3G79f+5+58QtwzZ/wAAADBB7v4nxi32PwAAALSRu/9JcYv9DwAAAG3k7n9y3DJk/+v/9f/6f/1/0v/r/1fo//X/K/T/+v8zvF//r//nuN36/9z9T4lbhux/AAAAmCB3/1PjFvsfAAAA2sjd/7S4xf4HAACANnL3Pz1uGbL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv1/7v5nxC1D9j8AAABMkLv/mXGL/Q8AAABt5O5/Vtxi/wMAAEAbufufHbcM2f/6f/2//l//n/T/+v8VDfv/q18B/b/+X/+v/9f/6/85bLf+P3f/c+KWIfsfAAAAJsjd/9y4xf4HAACANnL3Py9usf8BAACgjdz9z49bhux//b/+X/+v/0/6f/3/iob9v+//X1zr/v/yRj/R/+v/z/B+/b/+n+N26/9z978gbhmy/wEAAGCC3P0vjFvsfwAAAGgjd/+L4hb7HwAAANrI3f/iuGXI/tf/6//1//r/pP/X/6/Q/zft/29z4fv/+n/9v/5f/89hu/X/uftfErcM2f8AAAAwQe7+l8Yt9j8AAAC0kbv/ZXGL/Q8AAABt5O5/edwyZP/r//X/+n/9f9L/6/9X6P+b9v/X9Pv/N6b/1/+f4f36f/0/x+3W/+fuf0XcMmT/AwAAwGndjO2eu/+VcVf+HwAAAMDecve/Km6x/wEAAKCN3P2vjluG7H/9v/5/j/7/houber/+X/9/of/fnv5f/79C/6//P8P7r1P/n7+m+n9G2K3/z93/mrhlyP4HAACACXL33xC32P8AAADQRu7+18Yt9j8AAAC0kbv/dXHLkP2v/9f/79H/z/z+/6X+/9/+PPX/+v+bov/X/1/o/5fd2v382d/v+//6f47brf/P3f/6uGXI/gcAAIAJcve/IW6x/wEAAKCN3P1vjFvsfwAAAGgjd/+b4pYh+1//r//X//v+f9L/6/9X6P/1/yv0//r/M7xf/6//57jd+v/c/W+OW4bsfwAAAJggd/9b4hb7HwAAANrI3f/WuMX+BwAAgDZy978tbhmy//X/+n/9v/4/6f/1/yv0//r/Ffp//f8Z3q//1/9z3G79f+7+t8ctQ/Y/AAAATJC7/x1xi/0PAAAAbeTuf2fcYv8DAABAG7n73xW3DNn/+n/9v/5f/5/0//r/Ffp//f8K/b/+/wzv1//r/zlut/4/d/+745Yh+x8AAAAmyN3/nrjF/gcAAIA2cve/N26x/wEAAKCN3P3vi1uG7H/9v/5f/6//T/p//f8K/b/+f4X+X/9/hvfr//X/HLdb/5+7//1xy5D9DwAAABPk7v9A3GL/AwAAQBu5+z8Yt9j/AAAA0Ebu/g/FLUP2v/5f/6//1/8n/b/+f4X+X/+/Qv+v/z/D+/X/+n+O263/z93/4bhlyP4HAACACXL3fyRusf8BAACgjdz9H41b7H8AAABoI3f/x+KWIftf/6//1//r/5P+X/+/Qv+v/1+h/9f/n+H9+n/9P8ft1v/n7v943DJk/wMAAMAEufs/EbfY/wAAANBG7v5Pxi32PwAAALSRu/9T/7y3/dd/GLL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv3/1e6/vPh03DJk/wMAAMAEufs/E7fY/wAAANBG7v7Pxi32PwAAALSRu/9zccuQ/a//1//r//X/Sf+v/1+h/9f/r9D/6//P8H79v/6f43br/3P3fz5uGbL/AQAAYILc/V+IW+x/AAAAaCN3/xfjFvsfAAAA2sjd/6W4Zcj+1//r/3v1/1cpnv7/iv7/iv7/+tL/6/9X6P/1/2d4v/5f/89xu/X/ufu/HLcM2f8AAAAwQe7+r8Qt9j8AAAC0kbv/q3GL/Q8AAABt5O7/WtwyZP/r//X/vfr/K/r/K/r/K/r/60v/r/9fof/X/5/h/fp//T/H7db/5+7/etwyZP8DAADABLn7vxG32P8AAADQRu7+b8Yt9j8AAAC0kbv/W3HLkP2v/9f/6//1/0n/r/9fof/X/6/Q/+v//5vbb/R+/b/+n+N26/9z9387bhmy/wEAAGCC3P3fiVvsfwAAAGgjd/934xb7HwAAANrI3f+9uGXI/tf/6//1//r/pP/X/6/Q/+v/V+j/9f9neL/+X//Pcbv1/7n7vx+3DNn/AAAAMEHu/h/ELfY/AAAAtJG7/4dxi/0PAAAAbeTu/1HcMmT/6//1//p//X/S/+v/V+j/9f8r9P/6/zO8X/+v/+e43fr/3P0/jluG7H8AAACYIHf/T+IW+x8AAADayN3/07jF/gcAAIA2cvf/LG4Zsv/1//p//b/+P+n/9f8r9P/6/xX6f/3/Gd6v/9f/c9z/6v/j7/y3aP+fu//nccuQ/Q8AAAAT5O7/Rdxi/wMAAEAbuft/GbfY/wAAANBG7v5fxS1D9r/+X/+v/9f/J/2//n+F/l//v0L/r/8/w/v1//p/jtvt+/+5+38dtwzZ/wAAADBB7v7fxC32PwAAALSRu/+3cYv9DwAAAG3k7v9d3DJk//+//v92cW/F/j+foP/X/+v/9f/6/w3p//X/K/T/+v8zvF//r//nuN36/9z9v49bhux/AAAAmCB3/x/iFvsfAAAA2sjd/8e4xf4HAACANnL3/yluGbL/ff9f/6//1/8n/b/+f4X+X/+/Ynz//48f6/+3f7/+X//Pcbv1/7n7/xy3DNn/AAAAMEHu/r/ELfY/AAAAtJG7/69xi/0PAAAAbeTu/1vcMmT/6//1//p//X/S/+v/V+j/9f8rxvf/vv9/ivfr//X/HLdb/5+7/+8BAAD//xKBZe0=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 8m45.701726262s ago: executing program 2 (id=67): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d) 8m43.548420621s ago: executing program 2 (id=73): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800090067"], 0x184}}, 0x0) 8m41.548023295s ago: executing program 2 (id=81): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4}, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) 8m40.120467709s ago: executing program 32 (id=81): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4}, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) 7m43.079106787s ago: executing program 4 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140), 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unshare(0x22020600) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES64], 0x1, 0x1a1, &(0x7f0000000440)="$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") 7m41.971176955s ago: executing program 4 (id=241): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1]) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file2\x00', 0x3000812, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="0bffd5ece651e2a4648f9b08ce06626a8efcc3bee3ccef03f1e2279d8dc44bc4bd6a5d445b3f4f75b30ef3cc0a9d3c338a26ff996b57afbe65c46e61b66cf778b449292592952663ac34eb94f6fd4cfbda2af6c85c6e135955ca064c546ab638c56d2432e45e6d333181ee921f9f26a8ef"], 0x11, 0x305, &(0x7f0000000340)="$eJzs3U1rE1scx/HfmaRNepvbmz5cLtxltaAb0boRNxHJWxDEhWjbCMVQUSuoG1NxJaJ7974FX4QbxTegKxfiC2g3jpwzD8kkk5k0JB2D3w+Ik8n85/zPPP5PoBwB+GNdbX55d/Gb/WekkkrSy8uSJ6kqlSX9q/+qj/b2d/fbrZ2sHZVchI58GQWRZmCb7b2W+/8gudrGuYhQ3X4qq9a7DtPh+/6Vr33rvnsFJYPCuLs/hSdVwrvTfV898cyyHYwZ15lwHrPGHOpQj7VUdB4AgGLZ9/9BUPjb93wtrN89T9oIX/u/5ft/XIdFJzB1fua3Pe9/N8ryjT2//7ivuuM9N4Sz33vRKHGUluf6Ps8rKCQTBaZJH1V2h3wuF2/hzm67dW77XnvH03M1Qj0Ba3ELIXuF5mS7njI2zTBC301qRRmk5c3ZPmwOyX91zBYzDAzfEifEfDCfzE1T11vtxPVf2Tc2W5dwve9MBfmfH97eoouyWyl8bDQaDc/tKLLsGvk/eaZyellNH5EoOrDLSv5AUM/L00Wt9EUFvbuQGlCJo1ZTozajT0PaWktE2d7EV/PwLKfNvDbXzbp+6L2aPfW/Z/Pb0PA7M/GLjtkIbjR3xIP+zKc3V3b7rA+8OTq6UUuuiY9iZVjqR9nPNIwgOoevtKVLWnr45OndUrvdemAXbqcs3K/Fa+ZeSKnbFLygTndNRb4zsHH0DEyEL4Qrp5TY2Ynu0D4/cje2d9mJHPneKyG6YSfWhLziL62sa6P5se9CmtiCX5nwDn/6Y0T9fcIPJRSle9KLzgQFsXWXCcZ/rpIP631Xr9lq4VpleJ0eFWRpJZur3sM9+rbGjkdA1UT8ilv6K1lG54wNFsM6JmUc19FoY65TZ6TTo7dYD/OcDf6znA1MU591i9//AQAAAAAAAAAAAAAAAAAAZs3x/65g4dhRRfcRAAAAAAAAAAAAAAAAAAAAAIBZF8//q2j+X402/2//VCzh/L9V5cz/uzWYw8D8v2/2ZDoS8/8C0/UrAAD///8sd7M=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000380)='./file1\x00', 0x2) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) 7m39.435684517s ago: executing program 4 (id=245): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x3, &(0x7f0000000180)="4171b6") 7m35.320982098s ago: executing program 4 (id=257): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x20000000) 7m34.996954934s ago: executing program 4 (id=259): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) writev(r0, 0x0, 0x0) 7m34.224477702s ago: executing program 4 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0xf, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0xfe, 0x0, 0x3, 0x2}, @sadb_lifetime={0x4, 0x3, 0xffffffff, 0x6, 0x5, 0x2}]}, 0x78}, 0x1, 0x7}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104c0000000000070000005157e7c59500740000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) 7m18.407326109s ago: executing program 33 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0xf, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0xfe, 0x0, 0x3, 0x2}, @sadb_lifetime={0x4, 0x3, 0xffffffff, 0x6, 0x5, 0x2}]}, 0x78}, 0x1, 0x7}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104c0000000000070000005157e7c59500740000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) 9.033772537s ago: executing program 1 (id=1207): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x801) r3 = getpid() syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000880)={{0x0, 0x6, 0x6, 0x9, 0x9, 0x401, 0x6bd811fb, 0x0, 0xde7a, 0x4, 0x0, 0x6, 0x6, 0x5, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001880)={0x9, [{r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4, 0x0}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {r4}, {}, {r4}, {r4}, {r4}, {r4}, {r4}], 0x12, "c3bfcae2e6c2b8"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000fc100)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x8, "d7e210b12e2d45"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) read$msr(r1, 0x0, 0x0) 7.386442849s ago: executing program 5 (id=1209): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r2, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_script(r4, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r3, r2, 0x9, 0x8) 5.870695993s ago: executing program 0 (id=1211): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0xfffffffc, 0xff, 0x4000000, 0x0, 0x1000001004, 0x4}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xffffffffefffffff, 0x9, 0x0, 0x8, 0xfffffffffffff509}, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.850079495s ago: executing program 5 (id=1212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000200)={0x1, 0x80, 0x2}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='locks_get_lock_context\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) socket$netlink(0x10, 0x3, 0x14) close(0xffffffffffffffff) 5.790126261s ago: executing program 1 (id=1213): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)) 4.85245052s ago: executing program 1 (id=1216): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0xe}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4.720945711s ago: executing program 5 (id=1217): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCXONC(r0, 0x540a, 0x0) write$6lowpan_control(r1, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$FUSE_INIT(r1, 0x0, 0x0) 4.38453749s ago: executing program 1 (id=1218): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 4.383281495s ago: executing program 3 (id=1219): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x11, @broadcast, 0x4e20, 0x1, 'wlc\x00', 0x34, 0x6, 0x54}, {@multicast1, 0x4e21, 0x0, 0x52, 0xb, 0x100}}, 0x44) 4.142921631s ago: executing program 3 (id=1220): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0x100, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r2, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80000000, 0xfffc, 0x2, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x933}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r3, 0x933, 0xffbfffffffffffff) 3.717485335s ago: executing program 5 (id=1221): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04f1ff", 0x18, 0x2b, 0x0, @remote, @local, {[@srh={0x0, 0x0, 0x3}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 3.686740268s ago: executing program 3 (id=1222): request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x0, 0x2002) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x208402, &(0x7f00000021c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006180)="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", 0x2000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000002240)={0x30, 0x5, 0x0, {0x0, 0x1, 0x2, 0x101}}, 0x30) 3.571568407s ago: executing program 5 (id=1223): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) close(r0) 3.301468761s ago: executing program 1 (id=1224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000008000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b81f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x1, 0xa0, &(0x7f0000001a80)=""/160, 0x41000, 0x25}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.016056205s ago: executing program 1 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x27, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) 2.115715606s ago: executing program 0 (id=1226): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r0, r1, 0x6, 0x0, 0x0, 0x3, 0x0, 0xe9, 0x3071, 0x101, 0x1, 0x6, 'syz0\x00'}) 2.01481513s ago: executing program 3 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000200)={0x1, 0x80, 0x2}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='locks_get_lock_context\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) socket$netlink(0x10, 0x3, 0x14) close(0xffffffffffffffff) 1.716358473s ago: executing program 0 (id=1228): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0xe}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 697.554338ms ago: executing program 3 (id=1229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "2fdd3124e9ca63fe", "4291a02f97c890da36eb76e121c16effedb3859a353762fbdf2465f54bc8dda5", "811bee20", "d7610e4fad67269e"}, 0x38) 662.046997ms ago: executing program 0 (id=1230): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x1) connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 528.936405ms ago: executing program 5 (id=1231): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCXONC(r1, 0x540a, 0x0) write$6lowpan_control(r2, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$FUSE_INIT(r2, 0x0, 0x0) 252.686653ms ago: executing program 0 (id=1232): getdents(0xffffffffffffffff, &(0x7f0000000100)=""/49, 0x31) getdents64(0xffffffffffffffff, 0x0, 0x43) 129.55159ms ago: executing program 3 (id=1233): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x800) 0s ago: executing program 0 (id=1234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) kernel console output (not intermixed with test programs): 0.542469][ T9279] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 420.667928][ T8751] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 420.692297][ T5918] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 420.774994][ T8751] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 420.873230][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 420.886538][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.934985][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.989840][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 421.056331][ T5918] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 421.115900][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.159794][ T5918] usb 6-1: config 0 descriptor?? [ 421.567256][ T8751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.628745][ T8751] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.134659][ T5918] usbhid 6-1:0.0: can't add hid device: -71 [ 422.154503][ T5918] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 422.293035][ T5918] usb 6-1: USB disconnect, device number 13 [ 422.663912][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.671128][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.899315][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.906530][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.023193][ T9322] loop5: detected capacity change from 0 to 32768 [ 424.073357][ T9322] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.765 (9322) [ 424.089604][ T9322] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 424.099992][ T9322] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 424.340276][ T9322] BTRFS info (device loop5): allowing degraded mounts [ 424.347975][ T9322] BTRFS info (device loop5): enabling ssd optimizations [ 424.355964][ T9322] BTRFS info (device loop5): enabling free space tree [ 424.425420][ T5831] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 424.478780][ T8900] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 424.602954][ T8900] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 424.708266][ T9341] loop1: detected capacity change from 0 to 2048 [ 424.731252][ T8900] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 424.769641][ T9341] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 424.844354][ T8900] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 424.892495][ T9341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.466270][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.517612][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.564327][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.571548][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.684920][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.692147][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.722886][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 426.770551][ T9369] bridge_slave_1: left allmulticast mode [ 426.791789][ T9369] bridge_slave_1: left promiscuous mode [ 426.820837][ T9368] loop3: detected capacity change from 0 to 4096 [ 426.827867][ T9369] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.889806][ T9369] bridge_slave_0: left allmulticast mode [ 426.895795][ T9369] bridge_slave_0: left promiscuous mode [ 426.917375][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.947869][ T9368] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 426.977055][ T9368] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 427.056678][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.776'. [ 427.132337][ T6117] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 427.198732][ T8751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.284068][ T6117] usb 6-1: Using ep0 maxpacket: 16 [ 427.309484][ T6117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.370330][ T6117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.430496][ T6117] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 427.475002][ T6117] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 427.538009][ T6117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.775694][ T6117] usb 6-1: config 0 descriptor?? [ 428.566298][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.131714][ T6117] usbhid 6-1:0.0: can't add hid device: -71 [ 429.254608][ T6117] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 429.310095][ T6117] usb 6-1: USB disconnect, device number 14 [ 430.113523][ T9418] loop1: detected capacity change from 0 to 256 [ 430.194647][ T9418] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 430.262350][ T9418] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 430.347122][ T9418] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 430.379477][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 430.528002][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 430.552681][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 430.570970][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 430.615143][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 430.711012][ T9418] exFAT-fs (loop1): failed to load alloc-bitmap [ 430.940673][ T9418] exFAT-fs (loop1): failed to recognize exfat type [ 431.299999][ T8900] veth0_vlan: entered promiscuous mode [ 431.330417][ T9429] loop3: detected capacity change from 0 to 2048 [ 431.456859][ T9429] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 431.880523][ T9429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.361523][ T8900] veth1_vlan: entered promiscuous mode [ 432.786645][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.787'. [ 432.825853][ T9450] loop5: detected capacity change from 0 to 64 [ 432.843792][ T52] Bluetooth: hci0: command tx timeout [ 433.859599][ T9450] syz.5.789: attempt to access beyond end of device [ 433.859599][ T9450] loop5: rw=8390657, sector=161, nr_sectors = 1 limit=64 [ 433.886180][ T9450] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 433.895017][ T9450] syz.5.789: attempt to access beyond end of device [ 433.895017][ T9450] loop5: rw=8390657, sector=162, nr_sectors = 1 limit=64 [ 433.909024][ T9450] Buffer I/O error on dev loop5, logical block 162, lost async page write [ 433.917956][ T9450] syz.5.789: attempt to access beyond end of device [ 433.917956][ T9450] loop5: rw=8390657, sector=163, nr_sectors = 1 limit=64 [ 433.931716][ T9450] Buffer I/O error on dev loop5, logical block 163, lost async page write [ 433.940724][ T9450] syz.5.789: attempt to access beyond end of device [ 433.940724][ T9450] loop5: rw=8390657, sector=167, nr_sectors = 1 limit=64 [ 433.954623][ T9450] Buffer I/O error on dev loop5, logical block 167, lost async page write [ 433.963579][ T9450] syz.5.789: attempt to access beyond end of device [ 433.963579][ T9450] loop5: rw=8390657, sector=169, nr_sectors = 1 limit=64 [ 433.977385][ T9450] Buffer I/O error on dev loop5, logical block 169, lost async page write [ 434.010331][ T9450] syz.5.789: attempt to access beyond end of device [ 434.010331][ T9450] loop5: rw=8390657, sector=171, nr_sectors = 1 limit=64 [ 434.024314][ T9450] Buffer I/O error on dev loop5, logical block 171, lost async page write [ 434.033269][ T9450] syz.5.789: attempt to access beyond end of device [ 434.033269][ T9450] loop5: rw=8390657, sector=172, nr_sectors = 1 limit=64 [ 434.047238][ T9450] Buffer I/O error on dev loop5, logical block 172, lost async page write [ 434.370172][ T9450] No control pipe specified [ 434.810514][ T9456] loop3: detected capacity change from 0 to 4096 [ 434.902423][ T52] Bluetooth: hci0: command tx timeout [ 434.953673][ T9456] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 434.968850][ T8900] veth0_macvtap: entered promiscuous mode [ 435.033913][ T9456] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 435.691218][ T8900] veth1_macvtap: entered promiscuous mode [ 436.133908][ T9461] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 436.219286][ T9461] bond1 (unregistering): Released all slaves [ 436.982765][ T52] Bluetooth: hci0: command tx timeout [ 437.211325][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.306576][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.335690][ T9424] chnl_net:caif_netlink_parms(): no params data found [ 439.062700][ T52] Bluetooth: hci0: command tx timeout [ 439.101595][ T6105] bridge_slave_1: left allmulticast mode [ 439.122730][ T6105] bridge_slave_1: left promiscuous mode [ 439.128565][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.308579][ T6105] bridge_slave_0: left allmulticast mode [ 439.317514][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.328829][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.370277][ T6105] bridge_slave_0: left promiscuous mode [ 439.458911][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.846437][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.800'. [ 441.123719][ T9506] loop3: detected capacity change from 0 to 64 [ 441.533336][ T9506] syz.3.801: attempt to access beyond end of device [ 441.533336][ T9506] loop3: rw=2049, sector=73, nr_sectors = 88 limit=64 [ 441.547765][ T9506] syz.3.801: attempt to access beyond end of device [ 441.547765][ T9506] loop3: rw=8390657, sector=161, nr_sectors = 1 limit=64 [ 441.561703][ T9506] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 441.570629][ T9506] syz.3.801: attempt to access beyond end of device [ 441.570629][ T9506] loop3: rw=8390657, sector=162, nr_sectors = 1 limit=64 [ 441.584397][ T9506] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 441.593148][ T9506] syz.3.801: attempt to access beyond end of device [ 441.593148][ T9506] loop3: rw=8390657, sector=163, nr_sectors = 1 limit=64 [ 441.606693][ T9506] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 441.615560][ T9506] syz.3.801: attempt to access beyond end of device [ 441.615560][ T9506] loop3: rw=8390657, sector=167, nr_sectors = 1 limit=64 [ 441.629387][ T9506] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 441.638291][ T9506] syz.3.801: attempt to access beyond end of device [ 441.638291][ T9506] loop3: rw=8390657, sector=169, nr_sectors = 1 limit=64 [ 441.651818][ T9506] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 441.660761][ T9506] syz.3.801: attempt to access beyond end of device [ 441.660761][ T9506] loop3: rw=8390657, sector=171, nr_sectors = 1 limit=64 [ 441.674843][ T9506] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 441.683570][ T9506] syz.3.801: attempt to access beyond end of device [ 441.683570][ T9506] loop3: rw=8390657, sector=172, nr_sectors = 1 limit=64 [ 441.697119][ T9506] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 442.306952][ T9506] No control pipe specified [ 442.572908][ T9517] loop1: detected capacity change from 0 to 256 [ 442.606457][ T9517] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 442.642223][ T9517] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 442.729419][ T9517] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 442.783898][ T9517] exFAT-fs (loop1): failed to load alloc-bitmap [ 442.837167][ T9517] exFAT-fs (loop1): failed to recognize exfat type [ 445.127878][ T9531] loop3: detected capacity change from 0 to 32768 [ 445.171811][ T9531] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.808 (9531) [ 445.250028][ T9531] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 445.260737][ T9531] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 446.369918][ T9531] BTRFS info (device loop3): allowing degraded mounts [ 446.376800][ T9531] BTRFS info (device loop3): enabling ssd optimizations [ 446.383791][ T9531] BTRFS info (device loop3): enabling free space tree [ 447.453470][ T5829] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 447.588118][ T6105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.675643][ T6105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.746154][ T6105] bond0 (unregistering): Released all slaves [ 447.905576][ T6757] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.970186][ T9560] loop3: detected capacity change from 0 to 4096 [ 448.029451][ T6757] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.077464][ T6757] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.116311][ T9560] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 448.143883][ T6757] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.153933][ T9560] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 448.281242][ T6105] hsr_slave_0: left promiscuous mode [ 448.288585][ T6105] hsr_slave_1: left promiscuous mode [ 448.303195][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.336348][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.975183][ T5925] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 449.132261][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 449.149336][ T5925] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.175514][ T5925] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.199340][ T5925] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 449.229460][ T5925] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.301800][ T5925] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 449.348616][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.173579][ T9581] loop5: detected capacity change from 0 to 40427 [ 450.211688][ T9581] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 450.219549][ T9581] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 450.233167][ T9581] F2FS-fs (loop5): invalid crc value [ 450.241769][ T5925] usb 2-1: GET_CAPABILITIES returned 0 [ 450.298165][ T9581] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 450.314038][ T5925] usbtmc 2-1:16.0: can't read capabilities [ 450.320040][ T9581] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 450.327174][ T9581] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 450.525663][ T6105] team0 (unregistering): Port device team_slave_1 removed [ 450.636275][ T6011] usb 2-1: USB disconnect, device number 10 [ 450.796651][ T6105] team0 (unregistering): Port device team_slave_0 removed [ 451.271888][ T9594] loop0: detected capacity change from 0 to 32768 [ 451.289860][ T9594] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.822 (9594) [ 451.323889][ T9594] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 451.334114][ T9594] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 451.397137][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 451.407331][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 451.416959][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 451.425403][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 451.433562][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 451.512052][ T9594] BTRFS info (device loop0): allowing degraded mounts [ 451.520305][ T9594] BTRFS info (device loop0): enabling ssd optimizations [ 451.527321][ T9594] BTRFS info (device loop0): enabling free space tree [ 452.378042][ T7472] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 452.943046][ T9621] loop3: detected capacity change from 0 to 256 [ 453.004958][ T9621] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 453.074627][ T9621] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 453.142259][ T9621] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 453.202316][ T9621] exFAT-fs (loop3): failed to load alloc-bitmap [ 453.254781][ T9621] exFAT-fs (loop3): failed to recognize exfat type [ 453.464068][ T5837] Bluetooth: hci1: command tx timeout [ 454.175371][ T9627] loop0: detected capacity change from 0 to 64 [ 454.674128][ T9630] gre1: entered allmulticast mode [ 454.944527][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.984584][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.013678][ T9424] bridge_slave_0: entered allmulticast mode [ 455.054190][ T9424] bridge_slave_0: entered promiscuous mode [ 455.096659][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.126395][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.154483][ T9424] bridge_slave_1: entered allmulticast mode [ 455.174300][ T9424] bridge_slave_1: entered promiscuous mode [ 455.542740][ T5837] Bluetooth: hci1: command tx timeout [ 455.586350][ T9424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.658412][ T9424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.690270][ T5925] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 455.865024][ T5925] usb 1-1: device descriptor read/64, error -71 [ 456.115395][ T5925] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 456.125369][ T9424] team0: Port device team_slave_0 added [ 456.159812][ T9424] team0: Port device team_slave_1 added [ 456.272375][ T5925] usb 1-1: device descriptor read/64, error -71 [ 456.363466][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.384291][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.422659][ T5925] usb usb1-port1: attempt power cycle [ 456.472306][ T9424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.486449][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.512231][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.594203][ T9424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.812491][ T5925] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 456.846788][ T5925] usb 1-1: device descriptor read/8, error -71 [ 457.233218][ T5925] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 457.403155][ T5925] usb 1-1: device descriptor read/8, error -71 [ 457.417709][ T6105] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.563196][ T5925] usb usb1-port1: unable to enumerate USB device [ 457.622367][ T5837] Bluetooth: hci1: command tx timeout [ 457.715081][ T6105] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.730752][ T9676] loop3: detected capacity change from 0 to 4096 [ 457.909621][ T9676] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 457.963632][ T9676] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 458.065577][ T9424] hsr_slave_0: entered promiscuous mode [ 458.095419][ T9424] hsr_slave_1: entered promiscuous mode [ 458.883065][ T6105] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.316424][ T9685] loop0: detected capacity change from 0 to 40427 [ 459.325377][ T9685] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 459.333176][ T9685] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 459.343031][ T9685] F2FS-fs (loop0): invalid crc value [ 459.406750][ T6105] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.426341][ T9685] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 459.437798][ T9685] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 459.444907][ T9685] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 459.702247][ T5837] Bluetooth: hci1: command tx timeout [ 460.074939][ T9595] chnl_net:caif_netlink_parms(): no params data found [ 460.414504][ T6105] bridge_slave_1: left allmulticast mode [ 460.438811][ T6105] bridge_slave_1: left promiscuous mode [ 460.448998][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.495528][ T6105] bridge_slave_0: left allmulticast mode [ 460.522654][ T6105] bridge_slave_0: left promiscuous mode [ 460.532973][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.775171][ T9713] loop5: detected capacity change from 0 to 32768 [ 460.784139][ T9713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.847 (9713) [ 460.802932][ T9713] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 460.813652][ T9713] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 460.979626][ T9713] BTRFS info (device loop5): allowing degraded mounts [ 460.986802][ T9713] BTRFS info (device loop5): enabling ssd optimizations [ 460.993791][ T9713] BTRFS info (device loop5): enabling free space tree [ 461.844902][ T6031] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 461.870638][ T5831] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 462.022920][ T6031] usb 2-1: device descriptor read/64, error -71 [ 462.042069][ T9739] loop3: detected capacity change from 0 to 4096 [ 462.117027][ T9739] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 462.171800][ T9739] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 462.272280][ T6031] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 462.422352][ T6031] usb 2-1: device descriptor read/64, error -71 [ 463.136703][ T6031] usb usb2-port1: attempt power cycle [ 463.471863][ T6105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.497257][ T6105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.517986][ T6105] bond0 (unregistering): Released all slaves [ 463.712261][ T6031] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 463.802703][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.853'. [ 464.332913][ T6031] usb 2-1: device descriptor read/8, error -71 [ 464.583400][ T6031] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 464.678865][ T6031] usb 2-1: device descriptor read/8, error -71 [ 464.875418][ T6031] usb usb2-port1: unable to enumerate USB device [ 464.953984][ T6105] hsr_slave_0: left promiscuous mode [ 464.973786][ T6105] hsr_slave_1: left promiscuous mode [ 464.990601][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.012421][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.041066][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.060386][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.101905][ T6105] veth1_macvtap: left promiscuous mode [ 465.137984][ T6105] veth0_macvtap: left promiscuous mode [ 465.150185][ T6105] veth1_vlan: left promiscuous mode [ 465.160964][ T6105] veth0_vlan: left promiscuous mode [ 465.192367][ T6310] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 465.522550][ T6310] usb 1-1: Using ep0 maxpacket: 8 [ 465.543592][ T6310] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 465.559155][ T6310] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 465.573616][ T6310] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 465.591749][ T6310] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.608675][ T6310] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 465.621736][ T6310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.972734][ T6310] usb 1-1: GET_CAPABILITIES returned 0 [ 465.996797][ T6310] usbtmc 1-1:16.0: can't read capabilities [ 466.250559][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.263786][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.272887][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.281969][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.291034][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.380148][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.389273][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.398355][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.407434][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.486291][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.495431][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.504521][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.513768][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.573865][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.582987][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.592120][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.658535][ T6310] usb 1-1: USB disconnect, device number 13 [ 468.033503][ T9799] loop5: detected capacity change from 0 to 32768 [ 468.041408][ T6031] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 468.054723][ T9799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.863 (9799) [ 468.084783][ T9799] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 468.095024][ T9799] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 468.105200][ T6117] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 468.207792][ T6031] usb 4-1: Using ep0 maxpacket: 8 [ 468.231743][ T9799] BTRFS info (device loop5): allowing degraded mounts [ 468.238754][ T9799] BTRFS info (device loop5): enabling ssd optimizations [ 468.245784][ T9799] BTRFS info (device loop5): enabling free space tree [ 468.253058][ T6117] usb 1-1: device descriptor read/64, error -71 [ 468.266237][ T6031] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 468.301083][ T6031] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 468.321845][ T6031] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 468.691105][ T6117] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 468.700292][ T6031] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.727250][ T6031] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 468.742113][ T6031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.852305][ T6117] usb 1-1: device descriptor read/64, error -71 [ 468.962855][ T6117] usb usb1-port1: attempt power cycle [ 468.968469][ T6031] usb 4-1: GET_CAPABILITIES returned 0 [ 468.995715][ T6031] usbtmc 4-1:16.0: can't read capabilities [ 469.105905][ T5831] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 469.224490][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.233627][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.242687][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.251745][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.322495][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.322701][ T6117] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 469.331617][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.348368][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.357447][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.399606][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.408738][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.419198][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.428316][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.437389][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.453733][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.462843][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.471924][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 469.491495][ T6310] usb 4-1: USB disconnect, device number 21 [ 469.493107][ T6117] usb 1-1: device descriptor read/8, error -71 [ 469.793433][ T6117] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 469.872316][ T6117] usb 1-1: device descriptor read/8, error -71 [ 469.923036][ T6105] team0 (unregistering): Port device team_slave_1 removed [ 469.983464][ T6117] usb usb1-port1: unable to enumerate USB device [ 470.107546][ T6105] team0 (unregistering): Port device team_slave_0 removed [ 470.752775][ T6031] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 470.903987][ T6031] usb 4-1: device descriptor read/64, error -71 [ 471.202592][ T6031] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 471.372260][ T6031] usb 4-1: device descriptor read/64, error -71 [ 471.805863][ T6031] usb usb4-port1: attempt power cycle [ 472.212274][ T6031] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 472.324028][ T6031] usb 4-1: device descriptor read/8, error -71 [ 474.441387][ T9851] loop5: detected capacity change from 0 to 32768 [ 474.469412][ T9851] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.879 (9851) [ 474.495075][ T9851] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 474.505257][ T9851] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 474.552281][ T6031] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 474.696437][ T9851] BTRFS info (device loop5): allowing degraded mounts [ 474.703638][ T9851] BTRFS info (device loop5): enabling ssd optimizations [ 474.710626][ T9851] BTRFS info (device loop5): enabling free space tree [ 474.792476][ T6031] usb 4-1: device not accepting address 25, error -71 [ 474.864949][ T6031] usb usb4-port1: unable to enumerate USB device [ 475.108825][ T9877] loop3: detected capacity change from 0 to 64 [ 476.437457][ T5831] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 476.455420][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.489349][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.512475][ T9595] bridge_slave_0: entered allmulticast mode [ 476.532912][ T9595] bridge_slave_0: entered promiscuous mode [ 476.561886][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.583113][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.606506][ T9595] bridge_slave_1: entered allmulticast mode [ 476.632543][ T9595] bridge_slave_1: entered promiscuous mode [ 476.664742][ T6310] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 476.847080][ T6310] usb 4-1: Using ep0 maxpacket: 16 [ 476.868368][ T6310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.922706][ T6310] usb 4-1: config 0 has no interfaces? [ 476.953254][ T6310] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 476.972648][ T6310] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 477.013583][ T6310] usb 4-1: Manufacturer: syz [ 477.043395][ T6310] usb 4-1: config 0 descriptor?? [ 477.237498][ T9595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.280417][ T6310] usb 4-1: USB disconnect, device number 26 [ 477.385734][ T9595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.476717][ T9896] loop1: detected capacity change from 0 to 64 [ 481.527172][ T9897] No control pipe specified [ 482.465819][ T9595] team0: Port device team_slave_0 added [ 482.488065][ T9595] team0: Port device team_slave_1 added [ 482.494524][ T9898] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 483.342327][ T9898] usb 1-1: device descriptor read/64, error -71 [ 483.493822][ T9916] loop3: detected capacity change from 0 to 64 [ 483.582383][ T9898] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 484.425578][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.434748][ T9898] usb 1-1: device descriptor read/64, error -71 [ 484.488168][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.543084][ T9595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.546656][ T9898] usb usb1-port1: attempt power cycle [ 484.571874][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.582233][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.702248][ T9595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.946263][ T9919] loop3: detected capacity change from 0 to 32768 [ 484.974729][ T9919] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.895 (9919) [ 484.989949][ T9919] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 485.000196][ T9919] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 485.012419][ T9898] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 485.033419][ T9898] usb 1-1: device descriptor read/8, error -71 [ 485.174460][ T9919] BTRFS info (device loop3): allowing degraded mounts [ 485.182110][ T9919] BTRFS info (device loop3): enabling ssd optimizations [ 485.189194][ T9919] BTRFS info (device loop3): enabling free space tree [ 485.282522][ T9898] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 485.708563][ T9898] usb 1-1: device descriptor read/8, error -71 [ 485.777586][ T9595] hsr_slave_0: entered promiscuous mode [ 485.823494][ T9595] hsr_slave_1: entered promiscuous mode [ 485.829904][ T9595] debugfs: 'hsr0' already exists in 'hsr' [ 485.836149][ T5829] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 485.847055][ T9898] usb usb1-port1: unable to enumerate USB device [ 485.878104][ T9595] Cannot create hsr debugfs directory [ 485.962507][ T9937] loop0: detected capacity change from 0 to 256 [ 486.106594][ T9937] FAT-fs (loop0): Directory bread(block 64) failed [ 486.152489][ T9937] FAT-fs (loop0): Directory bread(block 65) failed [ 486.159149][ T9937] FAT-fs (loop0): Directory bread(block 66) failed [ 486.203612][ T9937] FAT-fs (loop0): Directory bread(block 67) failed [ 486.213811][ T9937] FAT-fs (loop0): Directory bread(block 68) failed [ 486.442278][ T9937] FAT-fs (loop0): Directory bread(block 69) failed [ 486.490872][ T9937] FAT-fs (loop0): Directory bread(block 70) failed [ 487.376526][ T9937] FAT-fs (loop0): Directory bread(block 71) failed [ 487.448654][ T9937] FAT-fs (loop0): Directory bread(block 72) failed [ 487.513812][ T9937] FAT-fs (loop0): Directory bread(block 73) failed [ 487.644294][ T9424] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 487.799413][ T9424] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 487.929262][ T9424] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 487.951087][ T5911] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 488.152682][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 488.168817][ T9967] loop5: detected capacity change from 0 to 64 [ 488.372713][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.498151][ T5911] usb 4-1: config 0 has no interfaces? [ 488.666443][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 488.853835][ T5911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 489.003350][ T5911] usb 4-1: Manufacturer: syz [ 489.149560][ T9967] No control pipe specified [ 489.408422][ T9424] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 489.442751][ T5911] usb 4-1: config 0 descriptor?? [ 489.687456][ T6016] usb 4-1: USB disconnect, device number 27 [ 490.889020][ T9991] loop5: detected capacity change from 0 to 64 [ 492.424564][ T9998] loop1: detected capacity change from 0 to 32768 [ 492.435088][ T9998] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.907 (9998) [ 492.450757][ T9998] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 492.461408][ T9998] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 492.623066][ T6016] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 492.655644][ T9998] BTRFS info (device loop1): allowing degraded mounts [ 492.662500][ T9998] BTRFS info (device loop1): enabling ssd optimizations [ 492.669444][ T9998] BTRFS info (device loop1): enabling free space tree [ 492.999031][ T6016] usb 1-1: device descriptor read/64, error -71 [ 493.225277][ T5830] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 493.342325][ T6016] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 493.386754][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 493.395932][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 493.403670][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 493.411886][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 493.421650][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 493.482283][ T6016] usb 1-1: device descriptor read/64, error -71 [ 493.708041][ T6016] usb usb1-port1: attempt power cycle [ 494.303010][ T6016] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 494.330796][T10032] loop5: detected capacity change from 0 to 256 [ 494.347136][ T6016] usb 1-1: device descriptor read/8, error -71 [ 494.476237][T10032] FAT-fs (loop5): Directory bread(block 64) failed [ 494.495735][T10032] FAT-fs (loop5): Directory bread(block 65) failed [ 494.516106][T10032] FAT-fs (loop5): Directory bread(block 66) failed [ 494.543582][T10032] FAT-fs (loop5): Directory bread(block 67) failed [ 494.563888][T10032] FAT-fs (loop5): Directory bread(block 68) failed [ 494.570447][T10032] FAT-fs (loop5): Directory bread(block 69) failed [ 494.589205][T10032] FAT-fs (loop5): Directory bread(block 70) failed [ 494.602397][ T6016] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 494.641956][T10032] FAT-fs (loop5): Directory bread(block 71) failed [ 494.665661][ T6016] usb 1-1: device descriptor read/8, error -71 [ 494.685090][T10032] FAT-fs (loop5): Directory bread(block 72) failed [ 494.691650][T10032] FAT-fs (loop5): Directory bread(block 73) failed [ 494.922436][ T6016] usb usb1-port1: unable to enumerate USB device [ 495.892367][ T5837] Bluetooth: hci6: command tx timeout [ 496.410591][T10046] loop5: detected capacity change from 0 to 64 [ 497.942342][ T5837] Bluetooth: hci6: command tx timeout [ 498.316547][T10064] No control pipe specified [ 499.139207][ T9595] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 499.454573][T10068] loop5: detected capacity change from 0 to 32768 [ 499.474828][T10068] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.921 (10068) [ 499.492248][T10068] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 499.502495][T10068] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 499.881638][T10068] BTRFS info (device loop5): allowing degraded mounts [ 499.892125][T10068] BTRFS info (device loop5): enabling ssd optimizations [ 499.899923][T10068] BTRFS info (device loop5): enabling free space tree [ 500.034249][ T5837] Bluetooth: hci6: command tx timeout [ 500.594814][ T9595] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 500.748509][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.755037][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.867117][ T5831] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 500.899263][ T9595] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 500.974138][T10025] chnl_net:caif_netlink_parms(): no params data found [ 500.977366][T10097] loop0: detected capacity change from 0 to 256 [ 501.090899][ T9595] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 501.103252][T10097] FAT-fs (loop0): Directory bread(block 64) failed [ 501.152342][T10097] FAT-fs (loop0): Directory bread(block 65) failed [ 501.192413][T10097] FAT-fs (loop0): Directory bread(block 66) failed [ 501.198986][T10097] FAT-fs (loop0): Directory bread(block 67) failed [ 501.249141][T10102] loop5: detected capacity change from 0 to 2048 [ 501.278787][T10097] FAT-fs (loop0): Directory bread(block 68) failed [ 501.302361][ T6016] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 501.313944][T10097] FAT-fs (loop0): Directory bread(block 69) failed [ 501.340507][T10105] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 501.350638][T10097] FAT-fs (loop0): Directory bread(block 70) failed [ 501.368984][T10097] FAT-fs (loop0): Directory bread(block 71) failed [ 501.403733][T10097] FAT-fs (loop0): Directory bread(block 72) failed [ 501.410954][T10097] FAT-fs (loop0): Directory bread(block 73) failed [ 501.502395][ T6016] usb 2-1: Using ep0 maxpacket: 16 [ 502.102394][ T5837] Bluetooth: hci6: command tx timeout [ 502.538077][ T6016] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.564808][T10118] loop3: detected capacity change from 0 to 64 [ 502.636599][ T6016] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 502.646181][ T6016] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 502.655498][ T6016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.373615][ T6016] usb 2-1: config 0 descriptor?? [ 505.500853][ T6016] usb 2-1: can't set config #0, error -71 [ 505.595551][T10105] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 505.599493][ T6016] usb 2-1: USB disconnect, device number 15 [ 505.615446][T10105] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 505.764659][T10105] Remounting filesystem read-only [ 505.785287][ T5831] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 505.896680][T10025] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.981442][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.566479][T10133] No control pipe specified [ 507.496410][T10025] bridge_slave_0: entered allmulticast mode [ 507.563826][T10025] bridge_slave_0: entered promiscuous mode [ 507.675044][T10025] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.700115][T10025] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.738857][T10025] bridge_slave_1: entered allmulticast mode [ 507.784108][T10142] loop0: detected capacity change from 0 to 4096 [ 507.999751][T10143] loop5: detected capacity change from 0 to 32768 [ 508.012356][T10025] bridge_slave_1: entered promiscuous mode [ 508.031024][T10143] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.936 (10143) [ 508.068556][T10143] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 508.078825][T10143] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 508.514744][T10153] mmap: syz.0.933 (10153) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 508.915212][ T31] audit: type=1800 audit(1767451375.899:7): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.933" name="file1" dev="loop0" ino=34 res=0 errno=0 [ 511.432297][T10164] loop1: detected capacity change from 0 to 64 [ 512.770987][T10143] BTRFS info (device loop5): allowing degraded mounts [ 512.778217][T10143] BTRFS info (device loop5): enabling ssd optimizations [ 512.785284][T10143] BTRFS info (device loop5): enabling free space tree [ 512.918536][ T5831] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 513.294103][T10025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.386490][T10025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.414293][ T12] bridge_slave_1: left allmulticast mode [ 513.419981][ T12] bridge_slave_1: left promiscuous mode [ 513.489327][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.606973][ T12] bridge_slave_0: left allmulticast mode [ 513.627008][ T12] bridge_slave_0: left promiscuous mode [ 513.646165][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.709549][T10181] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 514.911689][T10188] loop5: detected capacity change from 0 to 64 [ 515.082274][ T772] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 515.641194][T10191] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 515.755432][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.767018][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.776715][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.786565][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 515.792631][ T772] usb 4-1: Using ep0 maxpacket: 16 [ 515.805201][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 515.806211][ T772] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.876856][ T772] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 515.906433][ T772] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 515.968995][ T772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.985149][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.018215][ T772] usb 4-1: config 0 descriptor?? [ 516.051879][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.111163][ T12] bond0 (unregistering): Released all slaves [ 516.574275][T10205] No control pipe specified [ 517.421935][T10025] team0: Port device team_slave_0 added [ 517.545333][ T12] hsr_slave_0: left promiscuous mode [ 517.562921][ T12] hsr_slave_1: left promiscuous mode [ 517.583197][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.595840][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.686147][T10214] loop0: detected capacity change from 0 to 512 [ 517.718800][T10214] ext4: Unknown parameter 'dioread_nolock2' [ 517.862696][ T5837] Bluetooth: hci0: command tx timeout [ 518.842797][ T772] usb 4-1: USB disconnect, device number 28 [ 519.006504][T10222] loop3: detected capacity change from 0 to 64 [ 519.298480][T10222] syz.3.949: attempt to access beyond end of device [ 519.298480][T10222] loop3: rw=8390657, sector=161, nr_sectors = 1 limit=64 [ 519.312469][T10222] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 519.321395][T10222] syz.3.949: attempt to access beyond end of device [ 519.321395][T10222] loop3: rw=8390657, sector=162, nr_sectors = 1 limit=64 [ 519.335261][T10222] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 519.344206][T10222] syz.3.949: attempt to access beyond end of device [ 519.344206][T10222] loop3: rw=8390657, sector=163, nr_sectors = 1 limit=64 [ 519.357860][T10222] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 519.366602][T10222] syz.3.949: attempt to access beyond end of device [ 519.366602][T10222] loop3: rw=8390657, sector=167, nr_sectors = 1 limit=64 [ 519.380366][T10222] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 519.389176][T10222] syz.3.949: attempt to access beyond end of device [ 519.389176][T10222] loop3: rw=8390657, sector=169, nr_sectors = 1 limit=64 [ 519.402816][T10222] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 519.411510][T10222] syz.3.949: attempt to access beyond end of device [ 519.411510][T10222] loop3: rw=8390657, sector=171, nr_sectors = 1 limit=64 [ 519.425287][T10222] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 519.434582][T10222] syz.3.949: attempt to access beyond end of device [ 519.434582][T10222] loop3: rw=8390657, sector=172, nr_sectors = 1 limit=64 [ 519.448236][T10222] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 519.906640][T10222] No control pipe specified [ 519.971932][ T5837] Bluetooth: hci0: command tx timeout [ 520.401265][T10226] loop0: detected capacity change from 0 to 32768 [ 520.413818][T10226] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.950 (10226) [ 520.428851][T10226] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 520.439082][T10226] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 520.567655][T10226] BTRFS info (device loop0): allowing degraded mounts [ 520.574574][T10226] BTRFS info (device loop0): enabling ssd optimizations [ 520.581497][T10226] BTRFS info (device loop0): enabling free space tree [ 521.307900][ T12] team0 (unregistering): Port device team_slave_1 removed [ 521.378267][ T12] team0 (unregistering): Port device team_slave_0 removed [ 521.614907][ T7472] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 522.023211][ T5837] Bluetooth: hci0: command tx timeout [ 522.151761][T10255] loop1: detected capacity change from 0 to 64 [ 522.641938][T10255] syz.1.956: attempt to access beyond end of device [ 522.641938][T10255] loop1: rw=8390657, sector=121, nr_sectors = 1 limit=64 [ 522.655759][T10255] Buffer I/O error on dev loop1, logical block 121, lost async page write [ 522.665550][T10255] syz.1.956: attempt to access beyond end of device [ 522.665550][T10255] loop1: rw=8390657, sector=122, nr_sectors = 1 limit=64 [ 522.679967][T10255] Buffer I/O error on dev loop1, logical block 122, lost async page write [ 522.688934][T10255] syz.1.956: attempt to access beyond end of device [ 522.688934][T10255] loop1: rw=8390657, sector=167, nr_sectors = 1 limit=64 [ 522.702511][T10255] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 523.049040][T10256] No control pipe specified [ 524.044311][T10264] No control pipe specified [ 524.120890][ T5837] Bluetooth: hci0: command tx timeout [ 524.345767][T10025] team0: Port device team_slave_1 added [ 524.734165][ T6075] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 525.121995][ T6075] usb 4-1: Using ep0 maxpacket: 16 [ 525.341889][T10025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.373764][ T6075] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.394705][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.462261][ T6075] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.542246][T10025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.555519][ T6075] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 525.590684][ T6075] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 525.618970][ T6075] usb 4-1: Manufacturer: syz [ 525.852496][T10283] loop5: detected capacity change from 0 to 32768 [ 525.874741][T10283] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.964 (10283) [ 525.890992][T10283] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 525.901342][T10283] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 525.918783][ T6075] usb 4-1: config 0 descriptor?? [ 525.941380][T10025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.990258][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.043953][T10025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.121852][T10283] BTRFS info (device loop5): allowing degraded mounts [ 526.128686][T10283] BTRFS info (device loop5): enabling ssd optimizations [ 526.135724][T10283] BTRFS info (device loop5): enabling free space tree [ 526.570387][ T6310] usb 4-1: USB disconnect, device number 29 [ 527.184079][ T5831] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 527.386355][T10025] hsr_slave_0: entered promiscuous mode [ 528.064388][T10025] hsr_slave_1: entered promiscuous mode [ 528.251282][T10328] No control pipe specified [ 530.639243][T10353] loop1: detected capacity change from 0 to 32768 [ 530.653620][T10353] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.980 (10353) [ 530.676283][T10353] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 530.686549][T10353] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 530.792318][ T6016] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 530.840505][T10353] BTRFS info (device loop1): allowing degraded mounts [ 530.848075][T10353] BTRFS info (device loop1): enabling ssd optimizations [ 530.855328][T10353] BTRFS info (device loop1): enabling free space tree [ 531.962608][ T6016] usb 6-1: Using ep0 maxpacket: 16 [ 532.701643][ T6016] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.712430][ T6016] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.733372][ T6016] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 532.742919][ T6016] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 532.751026][ T6016] usb 6-1: Manufacturer: syz [ 532.817621][ T6016] usb 6-1: config 0 descriptor?? [ 532.973133][ T5830] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 533.066232][ T9898] usb 6-1: USB disconnect, device number 15 [ 533.152250][ T8553] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 533.412226][ T8553] usb 4-1: Using ep0 maxpacket: 8 [ 533.440754][T10395] loop1: detected capacity change from 0 to 64 [ 533.786302][ T6120] bio_check_eod: 14 callbacks suppressed [ 533.786377][ T6120] kworker/u8:20: attempt to access beyond end of device [ 533.786377][ T6120] loop1: rw=8390657, sector=121, nr_sectors = 1 limit=64 [ 533.835235][T10395] syz.1.985: attempt to access beyond end of device [ 533.835235][T10395] loop1: rw=8390657, sector=175, nr_sectors = 1 limit=64 [ 533.848990][T10395] buffer_io_error: 13 callbacks suppressed [ 533.849071][T10395] Buffer I/O error on dev loop1, logical block 175, lost async page write [ 533.863972][T10395] syz.1.985: attempt to access beyond end of device [ 533.863972][T10395] loop1: rw=8390657, sector=176, nr_sectors = 1 limit=64 [ 533.877704][T10395] Buffer I/O error on dev loop1, logical block 176, lost async page write [ 533.886648][T10395] syz.1.985: attempt to access beyond end of device [ 533.886648][T10395] loop1: rw=8390657, sector=177, nr_sectors = 1 limit=64 [ 533.900243][T10395] Buffer I/O error on dev loop1, logical block 177, lost async page write [ 533.909038][T10395] syz.1.985: attempt to access beyond end of device [ 533.909038][T10395] loop1: rw=8390657, sector=179, nr_sectors = 1 limit=64 [ 533.923197][T10395] Buffer I/O error on dev loop1, logical block 179, lost async page write [ 533.932498][T10395] syz.1.985: attempt to access beyond end of device [ 533.932498][T10395] loop1: rw=8390657, sector=180, nr_sectors = 1 limit=64 [ 533.946242][T10395] Buffer I/O error on dev loop1, logical block 180, lost async page write [ 533.955131][T10395] syz.1.985: attempt to access beyond end of device [ 533.955131][T10395] loop1: rw=8390657, sector=181, nr_sectors = 1 limit=64 [ 533.968812][T10395] Buffer I/O error on dev loop1, logical block 181, lost async page write [ 533.977809][T10395] syz.1.985: attempt to access beyond end of device [ 533.977809][T10395] loop1: rw=8390657, sector=182, nr_sectors = 1 limit=64 [ 533.991372][T10395] Buffer I/O error on dev loop1, logical block 182, lost async page write [ 534.000137][T10395] syz.1.985: attempt to access beyond end of device [ 534.000137][T10395] loop1: rw=8390657, sector=183, nr_sectors = 1 limit=64 [ 534.013827][T10395] Buffer I/O error on dev loop1, logical block 183, lost async page write [ 534.025399][T10395] syz.1.985: attempt to access beyond end of device [ 534.025399][T10395] loop1: rw=2049, sector=184, nr_sectors = 31 limit=64 [ 534.222845][ T6120] Buffer I/O error on dev loop1, logical block 121, lost async page write [ 534.345693][ T6120] Buffer I/O error on dev loop1, logical block 122, lost async page write [ 534.948147][ T8553] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 534.960227][T10395] No control pipe specified [ 535.192258][ T8553] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 535.212206][ T8553] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 535.304908][ T8553] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 535.367662][ T8553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.546427][T10402] binder: 10398:10402 ioctl 400c620e 0 returned -14 [ 535.718508][ T8553] usb 4-1: USB disconnect, device number 30 [ 537.585907][T10193] chnl_net:caif_netlink_parms(): no params data found [ 538.210186][T10428] loop0: detected capacity change from 0 to 32768 [ 538.231287][T10428] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.995 (10428) [ 538.273384][T10428] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 538.283701][T10428] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 538.389607][T10428] BTRFS info (device loop0): allowing degraded mounts [ 538.396481][T10428] BTRFS info (device loop0): enabling ssd optimizations [ 538.403471][T10428] BTRFS info (device loop0): enabling free space tree [ 539.122305][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 539.273566][ T7472] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 539.312286][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 539.327272][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.389704][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.438707][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 539.512926][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 539.520960][ T24] usb 4-1: Manufacturer: syz [ 539.575640][ T24] usb 4-1: config 0 descriptor?? [ 539.778888][T10193] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.798784][T10193] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.819016][T10193] bridge_slave_0: entered allmulticast mode [ 539.842105][ T9898] usb 4-1: USB disconnect, device number 31 [ 539.860551][T10193] bridge_slave_0: entered promiscuous mode [ 539.973482][T10193] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.980658][T10193] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.042596][T10193] bridge_slave_1: entered allmulticast mode [ 540.056251][T10193] bridge_slave_1: entered promiscuous mode [ 540.084300][ T12] bridge_slave_1: left allmulticast mode [ 540.090078][ T12] bridge_slave_1: left promiscuous mode [ 540.099126][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.209085][ T12] bridge_slave_0: left allmulticast mode [ 540.256652][T10479] loop1: detected capacity change from 0 to 64 [ 540.274684][ T12] bridge_slave_0: left promiscuous mode [ 540.378364][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.523014][T10479] bio_check_eod: 7 callbacks suppressed [ 540.523053][T10479] syz.1.1002: attempt to access beyond end of device [ 540.523053][T10479] loop1: rw=8390657, sector=161, nr_sectors = 1 limit=64 [ 540.542494][T10479] buffer_io_error: 6 callbacks suppressed [ 540.542576][T10479] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 540.557058][T10479] syz.1.1002: attempt to access beyond end of device [ 540.557058][T10479] loop1: rw=8390657, sector=162, nr_sectors = 1 limit=64 [ 540.571113][T10479] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 540.580197][T10479] syz.1.1002: attempt to access beyond end of device [ 540.580197][T10479] loop1: rw=8390657, sector=163, nr_sectors = 1 limit=64 [ 540.593922][T10479] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 540.602683][T10479] syz.1.1002: attempt to access beyond end of device [ 540.602683][T10479] loop1: rw=8390657, sector=167, nr_sectors = 1 limit=64 [ 540.616550][T10479] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 540.625579][T10479] syz.1.1002: attempt to access beyond end of device [ 540.625579][T10479] loop1: rw=8390657, sector=169, nr_sectors = 1 limit=64 [ 540.639291][T10479] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 540.648336][T10479] syz.1.1002: attempt to access beyond end of device [ 540.648336][T10479] loop1: rw=8390657, sector=171, nr_sectors = 1 limit=64 [ 540.662006][T10479] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 540.670671][T10479] syz.1.1002: attempt to access beyond end of device [ 540.670671][T10479] loop1: rw=8390657, sector=172, nr_sectors = 1 limit=64 [ 540.684461][T10479] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 541.068961][T10479] No control pipe specified [ 542.930264][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.850219][T10502] loop5: detected capacity change from 0 to 32768 [ 543.864892][T10502] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1008 (10502) [ 543.889075][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.901266][T10502] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 543.911474][T10502] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 543.961948][ T12] bond0 (unregistering): Released all slaves [ 543.994246][ T6152] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 544.024742][T10502] BTRFS info (device loop5): allowing degraded mounts [ 544.031573][T10502] BTRFS info (device loop5): enabling ssd optimizations [ 544.038640][T10502] BTRFS info (device loop5): enabling free space tree [ 544.256728][ T6152] usb 2-1: Using ep0 maxpacket: 8 [ 544.455858][ T6152] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 544.465992][ T6152] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 544.477104][ T6152] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 544.487747][ T6152] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.501025][ T6152] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.510249][ T6152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.563527][T10193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.651416][T10193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.752664][ T6152] usb 2-1: GET_CAPABILITIES returned 0 [ 544.780553][ T6152] usbtmc 2-1:16.0: can't read capabilities [ 544.978035][ T5831] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 545.022427][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.031579][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.044383][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.055312][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.064424][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.073524][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.082620][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.092718][ T12] hsr_slave_0: left promiscuous mode [ 545.099620][ T12] hsr_slave_1: left promiscuous mode [ 545.107529][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.116645][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.125755][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.139451][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.150350][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.159478][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.168587][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.177685][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.193871][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.203000][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 545.243478][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.263915][ T6016] usb 2-1: USB disconnect, device number 16 [ 545.342308][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 545.503718][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 545.515201][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.542259][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 545.582420][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 545.653780][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 545.689107][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 545.723495][ T24] usb 4-1: Manufacturer: syz [ 545.744210][ T24] usb 4-1: config 0 descriptor?? [ 546.007856][T10552] No control pipe specified [ 546.832905][ T6152] usb 4-1: USB disconnect, device number 32 [ 546.942040][ T12] team0 (unregistering): Port device team_slave_1 removed [ 547.946393][ T12] team0 (unregistering): Port device team_slave_0 removed [ 547.997603][T10566] loop1: detected capacity change from 0 to 64 [ 549.272322][ T6016] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 549.336180][T10193] team0: Port device team_slave_0 added [ 549.370899][T10025] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 549.427094][T10193] team0: Port device team_slave_1 added [ 549.433278][ T6016] usb 2-1: Using ep0 maxpacket: 16 [ 549.441030][ T6016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.473035][T10025] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 549.473932][ T6016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.491900][ T6016] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 549.507328][ T6016] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 549.511900][T10025] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 549.542855][ T6016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.577796][ T6016] usb 2-1: config 0 descriptor?? [ 549.680868][T10025] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 549.727481][T10193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.742326][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.806001][T10193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.855009][T10193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.872393][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.096475][T10193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.335912][ T6016] usbhid 2-1:0.0: can't add hid device: -71 [ 550.874559][ T6016] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 550.974312][ T6016] usb 2-1: USB disconnect, device number 17 [ 551.138739][T10193] hsr_slave_0: entered promiscuous mode [ 551.332538][T10592] loop3: detected capacity change from 0 to 32768 [ 551.346708][T10592] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1025 (10592) [ 551.383868][T10193] hsr_slave_1: entered promiscuous mode [ 551.394375][T10592] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 551.404580][T10592] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 551.421544][T10193] debugfs: 'hsr0' already exists in 'hsr' [ 551.445008][T10193] Cannot create hsr debugfs directory [ 551.574886][T10607] loop0: detected capacity change from 0 to 64 [ 552.423479][T10607] No control pipe specified [ 552.743781][T10592] BTRFS info (device loop3): allowing degraded mounts [ 552.750579][T10592] BTRFS info (device loop3): enabling ssd optimizations [ 552.757584][T10592] BTRFS info (device loop3): enabling free space tree [ 553.481227][ T5829] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 554.636557][ T5904] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 554.820857][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 554.826968][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 554.845519][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.856179][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 554.868734][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 554.882287][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 554.893228][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 554.904058][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 554.918268][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 554.930195][ T5904] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 554.951672][ T5904] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 554.959875][ T5904] usb 2-1: Manufacturer: syz [ 554.967793][ T5904] usb 2-1: config 0 descriptor?? [ 555.736431][T10650] loop0: detected capacity change from 0 to 64 [ 556.609939][ T5904] usb 2-1: USB disconnect, device number 18 [ 556.989294][ T52] Bluetooth: hci1: command tx timeout [ 557.445565][T10650] No control pipe specified [ 558.059605][T10668] loop1: detected capacity change from 0 to 64 [ 558.805644][T10668] No control pipe specified [ 559.062415][ T52] Bluetooth: hci1: command tx timeout [ 559.816976][ T5904] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 560.192516][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 560.392652][T10688] loop1: detected capacity change from 0 to 32768 [ 560.402832][T10688] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1042 (10688) [ 560.439393][T10688] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 560.450930][T10688] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 560.465137][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.673205][ T6016] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 560.687412][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.724874][T10688] BTRFS info (device loop1): allowing degraded mounts [ 561.326488][T10688] BTRFS info (device loop1): enabling ssd optimizations [ 561.333550][T10688] BTRFS info (device loop1): enabling free space tree [ 561.341240][ T52] Bluetooth: hci1: command tx timeout [ 561.359758][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 561.482356][ T6016] usb 1-1: Using ep0 maxpacket: 8 [ 561.831983][ T5904] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 561.843142][ T6016] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 561.861864][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.870729][ T6016] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 561.884360][ T6016] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 561.895547][ T5904] usb 4-1: config 0 descriptor?? [ 561.900850][ T6016] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 561.936655][ T6016] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 561.946165][ T6016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.204007][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.210445][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.261440][ T6016] usb 1-1: GET_CAPABILITIES returned 0 [ 562.271272][ T6016] usbtmc 1-1:16.0: can't read capabilities [ 562.343172][ T5830] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 562.356650][ T5904] usbhid 4-1:0.0: can't add hid device: -71 [ 563.012554][ T5904] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 563.089336][ T5904] usb 4-1: USB disconnect, device number 33 [ 563.108712][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.118742][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.127837][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.136935][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.242517][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.251639][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.260695][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.269746][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.279596][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.288660][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.297720][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.306783][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.316591][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.325658][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.334718][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.343771][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 563.382317][ T52] Bluetooth: hci1: command tx timeout [ 563.487685][ T6058] usb 1-1: USB disconnect, device number 26 [ 565.241356][ T6075] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 565.502539][ T6075] usb 6-1: Using ep0 maxpacket: 16 [ 565.516848][ T6075] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.528210][ T6075] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 565.541590][ T6075] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 565.630832][ T6075] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 565.767734][ T6075] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 565.845681][ T6075] usb 6-1: Manufacturer: syz [ 565.874189][ T6075] usb 6-1: config 0 descriptor?? [ 566.116591][T10751] loop1: detected capacity change from 0 to 64 [ 566.716606][T10751] No control pipe specified [ 567.009721][T10193] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 567.033867][ T6075] usb 6-1: USB disconnect, device number 16 [ 568.209298][T10193] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 569.382527][T10767] loop3: detected capacity change from 0 to 32768 [ 569.390416][T10767] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1057 (10767) [ 569.473420][T10767] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 569.483617][T10767] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 569.532747][T10193] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 569.622630][T10767] BTRFS info (device loop3): allowing degraded mounts [ 569.629473][T10767] BTRFS info (device loop3): enabling ssd optimizations [ 569.636480][T10767] BTRFS info (device loop3): enabling free space tree [ 569.893200][T10640] chnl_net:caif_netlink_parms(): no params data found [ 570.252323][ T6058] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 570.318872][T10193] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 570.428347][ T6058] usb 2-1: Using ep0 maxpacket: 16 [ 570.443397][ T6058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.485002][ T6058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.503799][ T5829] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 570.505467][ T6058] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 570.572296][ T6058] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 570.584067][ T6058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.595397][ T6058] usb 2-1: config 0 descriptor?? [ 570.802716][ T43] bridge_slave_1: left allmulticast mode [ 570.837837][ T43] bridge_slave_1: left promiscuous mode [ 570.879041][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.186352][ T43] bridge_slave_0: left allmulticast mode [ 571.222708][ T43] bridge_slave_0: left promiscuous mode [ 571.251056][ T6058] usbhid 2-1:0.0: can't add hid device: -71 [ 571.252493][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.297600][ T6058] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 571.361061][ T6058] usb 2-1: USB disconnect, device number 19 [ 572.024822][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.062439][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.089550][ T43] bond0 (unregistering): Released all slaves [ 572.416416][ T43] hsr_slave_0: left promiscuous mode [ 572.473828][ T43] hsr_slave_1: left promiscuous mode [ 572.480063][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.664361][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.949553][T10825] loop3: detected capacity change from 0 to 64 [ 573.290359][T10830] loop1: detected capacity change from 0 to 64 [ 573.985716][T10830] No control pipe specified [ 574.694231][ T43] team0 (unregistering): Port device team_slave_1 removed [ 575.002239][T10836] loop3: detected capacity change from 0 to 32768 [ 575.045116][T10836] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1071 (10836) [ 575.060861][T10836] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 575.071057][T10836] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 575.100463][ T43] team0 (unregistering): Port device team_slave_0 removed [ 576.114617][T10836] BTRFS info (device loop3): allowing degraded mounts [ 576.121430][T10836] BTRFS info (device loop3): enabling ssd optimizations [ 576.128532][T10836] BTRFS info (device loop3): enabling free space tree [ 576.864498][ T5829] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 576.949859][T10857] loop1: detected capacity change from 0 to 4096 [ 576.964018][T10857] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 577.123797][T10857] ntfs3(loop1): Failed to load $Extend (-22). [ 577.129908][T10857] ntfs3(loop1): Failed to initialize $Extend. [ 577.318184][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 577.332640][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 577.342665][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 577.363372][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 577.371215][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 577.982493][T10865] loop3: detected capacity change from 0 to 4096 [ 579.400629][T10827] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1067'. [ 579.463441][ T5837] Bluetooth: hci6: command tx timeout [ 579.673549][ T31] audit: type=1800 audit(1767451446.949:8): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1075" name="file1" dev="loop3" ino=0 res=0 errno=0 [ 579.738599][T10640] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.780267][T10640] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.825116][T10640] bridge_slave_0: entered allmulticast mode [ 579.934903][T10640] bridge_slave_0: entered promiscuous mode [ 579.979288][T10640] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.035373][T10640] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.063402][T10640] bridge_slave_1: entered allmulticast mode [ 580.108022][T10640] bridge_slave_1: entered promiscuous mode [ 580.565404][T10884] loop1: detected capacity change from 0 to 64 [ 581.542220][ T5837] Bluetooth: hci6: command tx timeout [ 581.802976][T10884] No control pipe specified [ 582.104019][T10640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.699654][T10640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.242395][T10895] loop3: detected capacity change from 0 to 32768 [ 583.258584][T10895] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1083 (10895) [ 583.274391][T10895] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 583.284692][T10895] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 583.401514][T10640] team0: Port device team_slave_0 added [ 583.430159][T10640] team0: Port device team_slave_1 added [ 583.454304][T10895] BTRFS info (device loop3): allowing degraded mounts [ 583.461123][T10895] BTRFS info (device loop3): enabling ssd optimizations [ 583.468360][T10895] BTRFS info (device loop3): enabling free space tree [ 583.629603][ T5837] Bluetooth: hci6: command tx timeout [ 584.165236][ T5904] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 584.188352][ T5829] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 584.334306][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 584.356725][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.397846][ T5904] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.462474][ T5904] usb 2-1: config 0 interface 0 has no altsetting 0 [ 584.484390][T10640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.491382][T10640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.522278][ T5904] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 584.559595][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.584319][ T5904] usb 2-1: config 0 descriptor?? [ 584.609737][T10640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.635503][ T5904] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 584.994253][T10640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.001228][T10640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.776119][ T5837] Bluetooth: hci6: command tx timeout [ 585.845926][T10640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.932528][ T5837] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 587.237919][ T9899] usb 2-1: USB disconnect, device number 20 [ 587.457879][T10640] hsr_slave_0: entered promiscuous mode [ 587.476832][T10640] hsr_slave_1: entered promiscuous mode [ 587.692294][ T9899] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 587.892206][ T9899] usb 2-1: Using ep0 maxpacket: 8 [ 587.927648][ T9899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 587.966154][ T9899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 588.028540][ T9899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 588.108117][ T9899] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.152254][ T9899] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 588.185449][ T9899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.381754][T10859] chnl_net:caif_netlink_parms(): no params data found [ 588.442010][ T9899] usb 2-1: GET_CAPABILITIES returned 0 [ 588.467426][ T9899] usbtmc 2-1:16.0: can't read capabilities [ 588.577092][ T43] bridge_slave_1: left allmulticast mode [ 588.612215][ T43] bridge_slave_1: left promiscuous mode [ 588.618017][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.682669][ T43] bridge_slave_0: left allmulticast mode [ 588.688355][ T43] bridge_slave_0: left promiscuous mode [ 588.722522][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.225866][ T24] usb 2-1: USB disconnect, device number 21 [ 590.564120][T11001] 9p: Bad value for 'rfdno' [ 590.738972][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.812472][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.835519][ T43] bond0 (unregistering): Released all slaves [ 590.836999][T10970] loop3: detected capacity change from 0 to 40427 [ 590.904048][T10970] F2FS-fs (loop3): invalid crc value [ 590.932471][ T6152] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 591.121521][ T43] hsr_slave_0: left promiscuous mode [ 591.130115][ T6152] usb 1-1: Using ep0 maxpacket: 16 [ 591.137675][ T6152] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.319292][ T6152] usb 1-1: config 0 interface 0 has no altsetting 0 [ 591.326231][ T43] hsr_slave_1: left promiscuous mode [ 591.343079][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.358806][ T6152] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 591.377067][T10970] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 591.387025][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.399376][ T6152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.463356][T10970] F2FS-fs (loop3): Start checkpoint disabled! [ 591.477484][ T6152] usb 1-1: config 0 descriptor?? [ 591.500705][T10970] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 591.520576][ T6152] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 591.539328][T10970] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 592.112964][ T43] team0 (unregistering): Port device team_slave_1 removed [ 592.971867][ T43] team0 (unregistering): Port device team_slave_0 removed [ 593.320477][T11035] loop1: detected capacity change from 0 to 64 [ 593.333102][ T6152] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 593.634852][ T6152] usb 6-1: Using ep0 maxpacket: 8 [ 593.675807][T11035] syz.1.1111: attempt to access beyond end of device [ 593.675807][T11035] loop1: rw=8390657, sector=161, nr_sectors = 1 limit=64 [ 593.690033][T11035] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 593.699074][T11035] syz.1.1111: attempt to access beyond end of device [ 593.699074][T11035] loop1: rw=8390657, sector=162, nr_sectors = 1 limit=64 [ 593.712904][T11035] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 593.721583][T11035] syz.1.1111: attempt to access beyond end of device [ 593.721583][T11035] loop1: rw=8390657, sector=163, nr_sectors = 1 limit=64 [ 593.735554][T11035] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 593.744469][T11035] syz.1.1111: attempt to access beyond end of device [ 593.744469][T11035] loop1: rw=8390657, sector=167, nr_sectors = 1 limit=64 [ 593.758192][T11035] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 593.767360][T11035] syz.1.1111: attempt to access beyond end of device [ 593.767360][T11035] loop1: rw=8390657, sector=169, nr_sectors = 1 limit=64 [ 593.781103][T11035] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 593.790052][T11035] syz.1.1111: attempt to access beyond end of device [ 593.790052][T11035] loop1: rw=8390657, sector=171, nr_sectors = 1 limit=64 [ 593.803876][T11035] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 593.812913][T11035] syz.1.1111: attempt to access beyond end of device [ 593.812913][T11035] loop1: rw=8390657, sector=172, nr_sectors = 1 limit=64 [ 593.826728][T11035] Buffer I/O error on dev loop1, logical block 172, lost async page write [ 594.010583][ T6152] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 594.163116][ T6152] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 594.258996][ T6152] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 594.274800][T11035] No control pipe specified [ 594.456479][ T6152] usb 6-1: config 4 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.532200][ T6152] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 594.541403][ T6152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.582611][ T24] usb 1-1: USB disconnect, device number 27 [ 594.802700][ T9] usb 6-1: USB disconnect, device number 17 [ 595.281578][T11043] loop0: detected capacity change from 0 to 4096 [ 595.309433][T11043] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 595.496667][T11043] ntfs3(loop0): Failed to load $Extend (-22). [ 595.522245][T11043] ntfs3(loop0): Failed to initialize $Extend. [ 596.000694][ T9899] kernel write not supported for file [eventfd] (pid: 9899 comm: kworker/0:14) [ 596.018863][T11053] 9p: Bad value for 'rfdno' [ 596.323701][T11048] loop1: detected capacity change from 0 to 4096 [ 596.423945][T11048] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 597.291454][T10859] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.317047][T11048] ntfs3(loop1): Failed to load $Extend (-22). [ 597.329308][T10859] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.340509][T10859] bridge_slave_0: entered allmulticast mode [ 597.372348][T11048] ntfs3(loop1): Failed to initialize $Extend. [ 597.402882][T10859] bridge_slave_0: entered promiscuous mode [ 598.341806][ T31] audit: type=1800 audit(1767451465.609:9): pid=11070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1114" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 598.436194][T10859] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.352310][T10859] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.904880][T10859] bridge_slave_1: entered allmulticast mode [ 599.999645][T10859] bridge_slave_1: entered promiscuous mode [ 600.247667][T11084] loop5: detected capacity change from 0 to 64 [ 600.618778][T11084] syz.5.1124: attempt to access beyond end of device [ 600.618778][T11084] loop5: rw=2049, sector=89, nr_sectors = 72 limit=64 [ 600.635002][T11084] syz.5.1124: attempt to access beyond end of device [ 600.635002][T11084] loop5: rw=8390657, sector=161, nr_sectors = 1 limit=64 [ 600.648637][T11084] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 600.657552][T11084] syz.5.1124: attempt to access beyond end of device [ 600.657552][T11084] loop5: rw=8390657, sector=162, nr_sectors = 1 limit=64 [ 600.671382][T11084] Buffer I/O error on dev loop5, logical block 162, lost async page write [ 600.680212][T11084] syz.5.1124: attempt to access beyond end of device [ 600.680212][T11084] loop5: rw=8390657, sector=163, nr_sectors = 1 limit=64 [ 600.694483][T11084] Buffer I/O error on dev loop5, logical block 163, lost async page write [ 600.703655][T11084] syz.5.1124: attempt to access beyond end of device [ 600.703655][T11084] loop5: rw=8390657, sector=167, nr_sectors = 1 limit=64 [ 600.717487][T11084] Buffer I/O error on dev loop5, logical block 167, lost async page write [ 600.726502][T11084] syz.5.1124: attempt to access beyond end of device [ 600.726502][T11084] loop5: rw=8390657, sector=169, nr_sectors = 1 limit=64 [ 600.740351][T11084] Buffer I/O error on dev loop5, logical block 169, lost async page write [ 600.749308][T11084] syz.5.1124: attempt to access beyond end of device [ 600.749308][T11084] loop5: rw=8390657, sector=171, nr_sectors = 1 limit=64 [ 600.762971][T11084] Buffer I/O error on dev loop5, logical block 171, lost async page write [ 600.771842][T11084] syz.5.1124: attempt to access beyond end of device [ 600.771842][T11084] loop5: rw=8390657, sector=172, nr_sectors = 1 limit=64 [ 600.786041][T11084] Buffer I/O error on dev loop5, logical block 172, lost async page write [ 601.181332][T11084] No control pipe specified [ 601.687247][ T9899] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 601.952380][ T9899] usb 4-1: Using ep0 maxpacket: 16 [ 601.980018][T10859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.060151][ T9899] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.099659][ T9899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 602.110199][T10859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.130172][ T9899] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 602.156164][ T9899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.238437][ T9899] usb 4-1: config 0 descriptor?? [ 602.275623][ T9899] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 603.446771][T10859] team0: Port device team_slave_0 added [ 603.500646][T11104] 9p: Bad value for 'rfdno' [ 603.645011][T10859] team0: Port device team_slave_1 added [ 603.740430][T11107] loop5: detected capacity change from 0 to 4096 [ 603.778558][T11107] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 604.256700][T11107] ntfs3(loop5): Failed to load $Extend (-22). [ 604.387029][T11107] ntfs3(loop5): Failed to initialize $Extend. [ 604.441389][T10859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.467211][T10859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.521897][T10859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.544843][T10859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.553064][T10859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.589260][T10859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.602750][T10640] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 604.769977][T10640] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 604.987192][T10640] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 605.048709][T10640] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 606.048602][ T5977] usb 4-1: USB disconnect, device number 34 [ 608.115542][T11130] loop3: detected capacity change from 0 to 4096 [ 609.209306][T10859] hsr_slave_0: entered promiscuous mode [ 609.242700][T10859] hsr_slave_1: entered promiscuous mode [ 609.249286][T10859] debugfs: 'hsr0' already exists in 'hsr' [ 609.332616][T10859] Cannot create hsr debugfs directory [ 610.677799][T11159] 9p: Bad value for 'rfdno' [ 611.170655][T11167] loop1: detected capacity change from 0 to 64 [ 611.251041][T11167] No control pipe specified [ 612.402452][T11171] loop3: detected capacity change from 0 to 2048 [ 612.409741][T11171] udf: Bad value for 'volume' [ 613.086769][ T5837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 613.096703][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 613.096736][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 613.096753][ T5837] Workqueue: hci2 hci_rx_work [ 613.096785][ T5837] Call Trace: [ 613.096796][ T5837] [ 613.096808][ T5837] dump_stack_lvl+0xe8/0x150 [ 613.096844][ T5837] sysfs_create_dir_ns+0x259/0x280 [ 613.096871][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.096904][ T5837] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 613.096933][ T5837] ? do_raw_spin_unlock+0x122/0x240 [ 613.096976][ T5837] kobject_add_internal+0x6ab/0xcc0 [ 613.097019][ T5837] kobject_add+0x155/0x220 [ 613.097046][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.097078][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.097111][ T5837] ? __pfx_kobject_add+0x10/0x10 [ 613.097141][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.097170][ T5837] ? _raw_spin_unlock+0x3f/0x50 [ 613.097206][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.097240][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.097273][ T5837] ? get_device_parent+0x366/0x3a0 [ 613.097304][ T5837] device_add+0x408/0xb80 [ 613.097335][ T5837] hci_conn_add_sysfs+0xd5/0x210 [ 613.097365][ T5837] le_conn_complete_evt+0xf1d/0x1420 [ 613.097400][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.097441][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 613.097474][ T5837] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 613.097501][ T5837] ? __asan_memcpy+0x40/0x70 [ 613.097531][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.097559][ T5837] ? skb_pull_data+0xfb/0x200 [ 613.097602][ T5837] hci_le_conn_complete_evt+0x187/0x480 [ 613.097646][ T5837] hci_event_packet+0x78f/0x1260 [ 613.097676][ T5837] ? rcu_is_watching+0x15/0xb0 [ 613.097711][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 613.097747][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 613.097789][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.097817][ T5837] ? hci_send_to_monitor+0xe2/0x590 [ 613.097858][ T5837] hci_rx_work+0x3ee/0x1060 [ 613.097888][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.097917][ T5837] ? preempt_schedule_thunk+0x16/0x30 [ 613.097944][ T5837] ? process_scheduled_works+0x9ef/0x1770 [ 613.097980][ T5837] process_scheduled_works+0xad1/0x1770 [ 613.098044][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 613.098067][ T5837] ? do_raw_spin_lock+0x121/0x290 [ 613.098111][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.098151][ T5837] worker_thread+0x8a0/0xda0 [ 613.098193][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.098223][ T5837] ? __kthread_parkme+0x7b/0x200 [ 613.098271][ T5837] kthread+0x711/0x8a0 [ 613.098308][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 613.098335][ T5837] ? __pfx_kthread+0x10/0x10 [ 613.098365][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.098400][ T5837] ? _raw_spin_unlock_irq+0x23/0x50 [ 613.098438][ T5837] ? __pfx_kthread+0x10/0x10 [ 613.098474][ T5837] ret_from_fork+0x510/0xa50 [ 613.098503][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 613.098524][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 613.098552][ T5837] ? __switch_to+0xc9e/0x1480 [ 613.098594][ T5837] ? __pfx_kthread+0x10/0x10 [ 613.098628][ T5837] ret_from_fork_asm+0x1a/0x30 [ 613.098686][ T5837] [ 613.099007][ T5837] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 613.442747][ T5837] Bluetooth: hci2: failed to register connection device [ 613.492222][ T9899] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 613.732708][T10640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.852720][ T9899] usb 2-1: Using ep0 maxpacket: 16 [ 613.899412][ T9899] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.123642][ T9899] usb 2-1: config 0 interface 0 has no altsetting 0 [ 614.154912][ T9899] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 614.180002][ T9899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.209847][ T9899] usb 2-1: config 0 descriptor?? [ 614.230118][ T9899] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 614.636172][T10859] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 614.807299][T11199] loop5: detected capacity change from 0 to 4096 [ 615.087762][T10859] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 617.075574][T10859] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 617.263865][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 617.275457][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 617.304302][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 617.355645][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 617.504364][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 618.413701][ T24] usb 2-1: USB disconnect, device number 22 [ 618.420705][T11230] loop5: detected capacity change from 0 to 64 [ 618.439835][T11230] syz.5.1154: attempt to access beyond end of device [ 618.439835][T11230] loop5: rw=8390657, sector=161, nr_sectors = 1 limit=64 [ 618.453554][T11230] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 618.462077][T11230] syz.5.1154: attempt to access beyond end of device [ 618.462077][T11230] loop5: rw=8390657, sector=162, nr_sectors = 1 limit=64 [ 618.475718][T11230] Buffer I/O error on dev loop5, logical block 162, lost async page write [ 618.484407][T11230] syz.5.1154: attempt to access beyond end of device [ 618.484407][T11230] loop5: rw=8390657, sector=163, nr_sectors = 1 limit=64 [ 618.498130][T11230] Buffer I/O error on dev loop5, logical block 163, lost async page write [ 618.509347][T11230] syz.5.1154: attempt to access beyond end of device [ 618.509347][T11230] loop5: rw=8390657, sector=167, nr_sectors = 1 limit=64 [ 618.522931][T11230] Buffer I/O error on dev loop5, logical block 167, lost async page write [ 618.531430][T11230] syz.5.1154: attempt to access beyond end of device [ 618.531430][T11230] loop5: rw=8390657, sector=169, nr_sectors = 1 limit=64 [ 618.545058][T11230] Buffer I/O error on dev loop5, logical block 169, lost async page write [ 618.553590][T11230] syz.5.1154: attempt to access beyond end of device [ 618.553590][T11230] loop5: rw=8390657, sector=171, nr_sectors = 1 limit=64 [ 618.567172][T11230] Buffer I/O error on dev loop5, logical block 171, lost async page write [ 618.575694][T11230] syz.5.1154: attempt to access beyond end of device [ 618.575694][T11230] loop5: rw=8390657, sector=172, nr_sectors = 1 limit=64 [ 618.589482][T11230] Buffer I/O error on dev loop5, logical block 172, lost async page write [ 618.631642][T11230] No control pipe specified [ 618.641808][T10859] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 619.004312][T11244] loop5: detected capacity change from 0 to 64 [ 619.032498][T11244] No control pipe specified [ 619.628592][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 619.862258][T11221] Bluetooth: hci0: command tx timeout [ 620.412318][T11259] netlink: 'syz.1.1159': attribute type 2 has an invalid length. [ 620.466966][ T9899] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 620.742245][ T9899] usb 1-1: Using ep0 maxpacket: 16 [ 620.761548][ T9899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.791527][ T9899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.833821][ T9899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 620.894573][ T9899] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 620.936507][ T9899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.987631][ T9899] usb 1-1: config 0 descriptor?? [ 621.167216][T11264] loop1: detected capacity change from 0 to 4096 [ 621.183910][T11264] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 621.295222][T11264] ntfs3(loop1): Failed to load $Extend (-22). [ 621.329329][T11264] ntfs3(loop1): Failed to initialize $Extend. [ 621.942417][T11221] Bluetooth: hci0: command tx timeout [ 622.573119][ T9899] usbhid 1-1:0.0: can't add hid device: -71 [ 622.579164][ T9899] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 622.619877][ T9899] usb 1-1: USB disconnect, device number 28 [ 623.626966][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.645448][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.702775][T10859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.931649][T10859] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.023996][T11221] Bluetooth: hci0: command tx timeout [ 624.202203][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 624.266505][ T6789] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.273718][ T6789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.672455][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 624.856299][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.000928][T11217] chnl_net:caif_netlink_parms(): no params data found [ 625.013937][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.042675][ T3457] bridge_slave_1: left allmulticast mode [ 625.049599][ T3457] bridge_slave_1: left promiscuous mode [ 625.059782][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 625.071111][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.102211][ T8553] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 625.172597][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 625.181707][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.206418][ T9] usb 2-1: config 0 descriptor?? [ 625.243367][ T3457] bridge_slave_0: left allmulticast mode [ 625.254589][ T8553] usb 4-1: Using ep0 maxpacket: 16 [ 625.268293][ T3457] bridge_slave_0: left promiscuous mode [ 625.276587][ T8553] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.288126][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.296381][ T8553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 625.303422][T11317] loop5: detected capacity change from 0 to 2048 [ 625.331966][ T8553] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 625.336389][T11317] udf: Bad value for 'volume' [ 625.384516][ T8553] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 625.414277][ T8553] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 625.442428][ T8553] usb 4-1: Manufacturer: syz [ 625.655613][ T9] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 625.677197][ T8553] usb 4-1: config 0 descriptor?? [ 626.102689][T11221] Bluetooth: hci0: command tx timeout [ 626.162650][ T8553] usb 4-1: USB disconnect, device number 35 [ 626.578248][T11326] loop5: detected capacity change from 0 to 4096 [ 626.586509][T11326] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 626.820745][T11326] ntfs3(loop5): Failed to load $Extend (-22). [ 626.828910][T11326] ntfs3(loop5): Failed to initialize $Extend. [ 627.356112][T11334] loop0: detected capacity change from 0 to 4096 [ 627.489675][T11334] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 628.446209][T11334] ntfs3(loop0): Failed to load $Extend (-22). [ 628.512197][T11334] ntfs3(loop0): Failed to initialize $Extend. [ 628.518680][ T9] usb 2-1: USB disconnect, device number 23 [ 629.144350][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 629.231908][T11330] loop3: detected capacity change from 0 to 32768 [ 629.352248][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 629.371620][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.422639][T11330] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 629.437044][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.447893][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.501590][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 629.515696][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.543737][ T3457] bond0 (unregistering): Released all slaves [ 629.581539][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 629.653188][T11360] loop5: detected capacity change from 0 to 4096 [ 629.698424][ T6789] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.705670][ T6789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.893634][T11330] XFS (loop3): Ending clean mount [ 629.899553][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.920621][T11330] XFS (loop3): Quotacheck needed: Please wait. [ 629.945196][ T9] usb 2-1: config 0 descriptor?? [ 630.041816][T11330] XFS (loop3): Quotacheck: Done. [ 630.138134][ T5829] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 630.180053][ T3457] hsr_slave_0: left promiscuous mode [ 630.203322][ T3457] hsr_slave_1: left promiscuous mode [ 630.210195][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.232673][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.570200][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 630.580493][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 630.601711][ T9] usb 2-1: USB disconnect, device number 24 [ 631.476790][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 631.524728][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 631.536487][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 631.713840][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 631.725124][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.779534][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 631.830231][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 631.850449][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 631.871018][ T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 631.888713][ T24] usb 6-1: Manufacturer: syz [ 631.903504][ T24] usb 6-1: config 0 descriptor?? [ 632.117396][ T6152] usb 6-1: USB disconnect, device number 18 [ 632.814488][T11217] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.892270][T11217] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.899555][T11217] bridge_slave_0: entered allmulticast mode [ 632.960771][T11217] bridge_slave_0: entered promiscuous mode [ 632.980156][T11391] loop0: detected capacity change from 0 to 64 [ 632.998483][T11391] syz.0.1194: attempt to access beyond end of device [ 632.998483][T11391] loop0: rw=8390657, sector=161, nr_sectors = 1 limit=64 [ 633.012174][T11391] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 633.020681][T11391] syz.0.1194: attempt to access beyond end of device [ 633.020681][T11391] loop0: rw=8390657, sector=162, nr_sectors = 1 limit=64 [ 633.034407][T11391] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 633.043053][T11391] syz.0.1194: attempt to access beyond end of device [ 633.043053][T11391] loop0: rw=8390657, sector=163, nr_sectors = 1 limit=64 [ 633.056908][T11391] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 633.065491][T11391] syz.0.1194: attempt to access beyond end of device [ 633.065491][T11391] loop0: rw=8390657, sector=167, nr_sectors = 1 limit=64 [ 633.079099][T11391] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 633.087662][T11391] syz.0.1194: attempt to access beyond end of device [ 633.087662][T11391] loop0: rw=8390657, sector=169, nr_sectors = 1 limit=64 [ 633.101266][T11391] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 633.109857][T11391] syz.0.1194: attempt to access beyond end of device [ 633.109857][T11391] loop0: rw=8390657, sector=171, nr_sectors = 1 limit=64 [ 633.123432][T11391] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 633.131936][T11391] syz.0.1194: attempt to access beyond end of device [ 633.131936][T11391] loop0: rw=8390657, sector=172, nr_sectors = 1 limit=64 [ 633.145568][T11391] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 633.174379][T11217] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.181801][T11217] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.202942][T11217] bridge_slave_1: entered allmulticast mode [ 633.240843][T11217] bridge_slave_1: entered promiscuous mode [ 633.412829][T11391] No control pipe specified [ 634.239080][T11398] loop5: detected capacity change from 0 to 4096 [ 634.254841][T11217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.288632][T11398] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 634.302486][T11217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.404293][T11398] ntfs3(loop5): Failed to load $Extend (-22). [ 634.411801][T11398] ntfs3(loop5): Failed to initialize $Extend. [ 635.472491][ T31] audit: type=1800 audit(1767451502.759:10): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1192" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 635.560754][T11217] team0: Port device team_slave_0 added [ 635.651597][T11217] team0: Port device team_slave_1 added [ 635.809650][T11217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.817892][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.845859][T11217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.860006][T11217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.867505][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.894174][T11217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.000437][T11217] hsr_slave_0: entered promiscuous mode [ 636.014770][T11217] hsr_slave_1: entered promiscuous mode [ 636.731171][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 636.742607][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 636.755776][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 636.765000][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 636.773544][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 636.782507][ T6058] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 636.952265][ T6058] usb 4-1: Using ep0 maxpacket: 16 [ 636.987953][ T6058] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.028509][ T6058] usb 4-1: config 0 interface 0 has no altsetting 0 [ 638.145378][ T6058] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 638.217035][ T6058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.230221][ T6058] usb 4-1: config 0 descriptor?? [ 638.417872][ T5896] udevd[5896]: symlink '../../loop5' '/dev/disk/by-diskseq/553.tmp-b7:5' failed: Read-only file system [ 638.872614][T11221] Bluetooth: hci1: command tx timeout [ 640.691655][ T6058] usbhid 4-1:0.0: can't add hid device: -71 [ 640.922423][ T6058] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 640.952461][ T6058] usb 4-1: USB disconnect, device number 36 [ 640.978513][T11221] Bluetooth: hci1: command tx timeout [ 641.536453][ T6015] udevd[6015]: symlink '../../loop5' '/dev/disk/by-diskseq/553.tmp-b7:5' failed: Read-only file system [ 641.690064][ T6058] kernel write not supported for file /vbi5 (pid: 6058 comm: kworker/0:10) [ 642.548005][T11217] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 642.814460][ T5896] udevd[5896]: symlink '../../loop5' '/dev/disk/by-diskseq/553.tmp-b7:5' failed: Read-only file system [ 643.056567][T11217] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 643.065717][T11221] Bluetooth: hci1: command tx timeout [ 643.124127][T11217] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 643.176835][T11217] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 643.253140][ T3457] bridge_slave_1: left allmulticast mode [ 643.266850][ T3457] bridge_slave_1: left promiscuous mode [ 643.303572][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.339620][ T3457] bridge_slave_0: left allmulticast mode [ 643.361002][ T3457] bridge_slave_0: left promiscuous mode [ 643.367902][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.484086][T11496] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 643.520261][T11496] block device autoloading is deprecated and will be removed. [ 643.617082][ T6015] udevd[6015]: symlink '../../loop5' '/dev/disk/by-diskseq/553.tmp-b7:5' failed: Read-only file system [ 644.096622][ T6015] udevd[6015]: symlink '../../loop5' '/dev/disk/by-diskseq/553.tmp-b7:5' failed: Read-only file system [ 644.849890][T11515] loop1: detected capacity change from 0 to 40427 [ 644.857696][T11515] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 644.865496][T11515] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 644.876737][T11515] F2FS-fs (loop1): invalid crc value [ 644.953539][T11515] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 644.968360][T11515] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 644.975454][T11515] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 644.998121][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.142352][T11221] Bluetooth: hci1: command tx timeout [ 645.315450][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.346701][ T3457] bond0 (unregistering): Released all slaves [ 645.350477][ T6015] udevd[6015]: symlink '../../loop1' '/dev/disk/by-diskseq/555.tmp-b7:1' failed: Read-only file system [ 645.420437][ T6015] udevd[6015]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 645.595599][T11440] chnl_net:caif_netlink_parms(): no params data found [ 645.658456][ T6015] udevd[6015]: symlink '../../loop1' '/dev/disk/by-diskseq/555.tmp-b7:1' failed: Read-only file system [ 645.689493][ T6015] udevd[6015]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 646.981946][ T6015] udevd[6015]: symlink '../../loop5' '/dev/disk/by-diskseq/553.tmp-b7:5' failed: Read-only file system [ 647.086451][ T3457] hsr_slave_0: left promiscuous mode [ 647.182451][ T3457] hsr_slave_1: left promiscuous mode [ 647.188653][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.241078][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.518696][T11551] ------------[ cut here ]------------ [ 647.524361][T11551] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x1, 0x0] s64=[0x1, 0x0] u32=[0x1, 0x0] s32=[0x1, 0x0] var_off=(0x0, 0x0) [ 647.540362][T11551] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x201/0xc30, CPU#0: syz.0.1234/11551 [ 647.551586][T11551] Modules linked in: [ 647.555677][T11551] CPU: 0 UID: 0 PID: 11551 Comm: syz.0.1234 Not tainted syzkaller #0 PREEMPT(full) [ 647.565248][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.575524][T11551] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 647.581819][T11551] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 647.604365][T11551] RSP: 0018:ffffc9000552eed0 EFLAGS: 00010246 [ 647.610525][T11551] RAX: dffffc0000000000 RBX: 1ffff1100a2b742e RCX: 0000000000000001 [ 647.618660][T11551] RDX: ffffffff8b71cde0 RSI: ffffffff8b7255a0 RDI: ffffffff8f8617e0 [ 647.626798][T11551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 647.634907][T11551] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff8880515ba170 [ 647.642984][T11551] R13: 0000000000000001 R14: 1ffff1100a2b742d R15: 0000000000000000 [ 647.651014][T11551] FS: 00007feb5bb796c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 647.660058][T11551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.666717][T11551] CR2: 00007feb5bb78f98 CR3: 00000000524d2000 CR4: 0000000000350ef0 [ 647.674806][T11551] Call Trace: [ 647.678128][T11551] [ 647.681143][T11551] reg_set_min_max+0x2b4/0x340 [ 647.686090][T11551] check_cond_jmp_op+0x19c6/0x2e20 [ 647.693578][T11551] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 647.699075][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.705395][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.711075][T11551] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 647.717271][T11551] do_check+0x58f5/0xeba0 [ 647.721682][T11551] ? __pfx_stack_trace_save+0x10/0x10 [ 647.727369][T11551] ? __pfx_do_check+0x10/0x10 [ 647.732247][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.737940][T11551] ? init_func_state+0x1ab2/0x28d0 [ 647.743262][T11551] do_check_common+0x19cc/0x25b0 [ 647.748290][T11551] bpf_check+0x5e7a/0x1c300 [ 647.752930][T11551] ? __entry_text_end+0xfe0b5/0x1020b9 [ 647.758453][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.764259][T11551] ? sched_clock+0x3f/0x60 [ 647.768729][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.774498][T11551] ? queued_spin_lock_slowpath+0x43/0x50 [ 647.780200][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.785935][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.793889][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.799586][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.805444][T11551] ? __schedule+0x14b1/0x4fd0 [ 647.810227][T11551] ? __pfx___schedule+0x10/0x10 [ 647.815232][T11551] ? __pfx_bpf_check+0x10/0x10 [ 647.820049][T11551] ? irqentry_exit+0x5dd/0x660 [ 647.824987][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.830662][T11551] ? lockdep_hardirqs_on+0x7b/0x110 [ 647.835995][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.841671][T11551] ? irqentry_exit+0x5dd/0x660 [ 647.846575][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.852373][T11551] ? security_bpf_prog_load+0x5f/0x3f0 [ 647.857885][T11551] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 647.864195][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.869884][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.875600][T11551] ? security_bpf_prog_load+0x125/0x3f0 [ 647.881202][T11551] bpf_prog_load+0x13ba/0x1a10 [ 647.886187][T11551] ? __pfx_bpf_prog_load+0x10/0x10 [ 647.891357][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.899441][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.905241][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.910930][T11551] ? security_bpf+0x7e/0x300 [ 647.915642][T11551] __sys_bpf+0x507/0x860 [ 647.919937][T11551] ? __pfx___sys_bpf+0x10/0x10 [ 647.924985][T11551] ? irqentry_exit+0x5dd/0x660 [ 647.929879][T11551] ? exc_page_fault+0x71/0xd0 [ 647.934742][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 647.940438][T11551] __x64_sys_bpf+0x7c/0x90 [ 647.945152][T11551] do_syscall_64+0xec/0xf80 [ 647.949698][T11551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.956029][T11551] ? trace_irq_disable+0x37/0x100 [ 647.961115][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.967170][T11551] RIP: 0033:0x7feb5ad8f749 [ 647.971624][T11551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.991419][T11551] RSP: 002b:00007feb5bb79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 648.002130][T11551] RAX: ffffffffffffffda RBX: 00007feb5afe6090 RCX: 00007feb5ad8f749 [ 648.010203][T11551] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 648.018262][T11551] RBP: 00007feb5ae13f91 R08: 0000000000000000 R09: 0000000000000000 [ 648.026379][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.034440][T11551] R13: 00007feb5afe6128 R14: 00007feb5afe6090 R15: 00007ffda915b388 [ 648.042702][T11551] [ 648.045768][T11551] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 648.053052][T11551] CPU: 0 UID: 0 PID: 11551 Comm: syz.0.1234 Not tainted syzkaller #0 PREEMPT(full) [ 648.062439][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.072480][T11551] Call Trace: [ 648.075746][T11551] [ 648.078661][T11551] vpanic+0x1e0/0x670 [ 648.082640][T11551] panic+0xb9/0xc0 [ 648.086353][T11551] ? __pfx_panic+0x10/0x10 [ 648.090778][T11551] __warn+0x317/0x4b0 [ 648.094751][T11551] ? reg_bounds_sanity_check+0x201/0xc30 [ 648.100376][T11551] ? reg_bounds_sanity_check+0x201/0xc30 [ 648.105998][T11551] __report_bug+0x288/0x500 [ 648.110498][T11551] ? reg_bounds_sanity_check+0x201/0xc30 [ 648.116132][T11551] ? __pfx___report_bug+0x10/0x10 [ 648.121161][T11551] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 648.126788][T11551] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 648.132422][T11551] report_bug_entry+0x19a/0x290 [ 648.137269][T11551] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 648.142892][T11551] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 648.148518][T11551] handle_bug+0xca/0x200 [ 648.152760][T11551] exc_invalid_op+0x1a/0x50 [ 648.157267][T11551] asm_exc_invalid_op+0x1a/0x20 [ 648.162110][T11551] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 648.168351][T11551] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 648.187973][T11551] RSP: 0018:ffffc9000552eed0 EFLAGS: 00010246 [ 648.194049][T11551] RAX: dffffc0000000000 RBX: 1ffff1100a2b742e RCX: 0000000000000001 [ 648.202020][T11551] RDX: ffffffff8b71cde0 RSI: ffffffff8b7255a0 RDI: ffffffff8f8617e0 [ 648.209985][T11551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 648.217944][T11551] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff8880515ba170 [ 648.225903][T11551] R13: 0000000000000001 R14: 1ffff1100a2b742d R15: 0000000000000000 [ 648.233917][T11551] reg_set_min_max+0x2b4/0x340 [ 648.238689][T11551] check_cond_jmp_op+0x19c6/0x2e20 [ 648.243811][T11551] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 648.249264][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.254899][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.260524][T11551] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 648.266508][T11551] do_check+0x58f5/0xeba0 [ 648.270846][T11551] ? __pfx_stack_trace_save+0x10/0x10 [ 648.276305][T11551] ? __pfx_do_check+0x10/0x10 [ 648.280985][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.286613][T11551] ? init_func_state+0x1ab2/0x28d0 [ 648.291735][T11551] do_check_common+0x19cc/0x25b0 [ 648.296696][T11551] bpf_check+0x5e7a/0x1c300 [ 648.301197][T11551] ? __entry_text_end+0xfe0b5/0x1020b9 [ 648.306668][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.312301][T11551] ? sched_clock+0x3f/0x60 [ 648.316746][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.322378][T11551] ? queued_spin_lock_slowpath+0x43/0x50 [ 648.328024][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.333655][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.339281][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.344921][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.350552][T11551] ? __schedule+0x14b1/0x4fd0 [ 648.355260][T11551] ? __pfx___schedule+0x10/0x10 [ 648.360111][T11551] ? __pfx_bpf_check+0x10/0x10 [ 648.364875][T11551] ? irqentry_exit+0x5dd/0x660 [ 648.369634][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.375264][T11551] ? lockdep_hardirqs_on+0x7b/0x110 [ 648.380455][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.386080][T11551] ? irqentry_exit+0x5dd/0x660 [ 648.390839][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.396483][T11551] ? security_bpf_prog_load+0x5f/0x3f0 [ 648.401942][T11551] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 648.408011][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.413640][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.419266][T11551] ? security_bpf_prog_load+0x125/0x3f0 [ 648.424812][T11551] bpf_prog_load+0x13ba/0x1a10 [ 648.429594][T11551] ? __pfx_bpf_prog_load+0x10/0x10 [ 648.434706][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.440356][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.445983][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.451610][T11551] ? security_bpf+0x7e/0x300 [ 648.456202][T11551] __sys_bpf+0x507/0x860 [ 648.460451][T11551] ? __pfx___sys_bpf+0x10/0x10 [ 648.465211][T11551] ? irqentry_exit+0x5dd/0x660 [ 648.469987][T11551] ? exc_page_fault+0x71/0xd0 [ 648.474657][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 648.480294][T11551] __x64_sys_bpf+0x7c/0x90 [ 648.484710][T11551] do_syscall_64+0xec/0xf80 [ 648.489212][T11551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.495274][T11551] ? trace_irq_disable+0x37/0x100 [ 648.500304][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.506194][T11551] RIP: 0033:0x7feb5ad8f749 [ 648.510704][T11551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.530305][T11551] RSP: 002b:00007feb5bb79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 648.538718][T11551] RAX: ffffffffffffffda RBX: 00007feb5afe6090 RCX: 00007feb5ad8f749 [ 648.546678][T11551] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 648.554647][T11551] RBP: 00007feb5ae13f91 R08: 0000000000000000 R09: 0000000000000000 [ 648.562605][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.570568][T11551] R13: 00007feb5afe6128 R14: 00007feb5afe6090 R15: 00007ffda915b388 [ 648.578553][T11551] [ 648.581837][T11551] Kernel Offset: disabled [ 648.586151][T11551] Rebooting in 86400 seconds..