last executing test programs: 15.795354004s ago: executing program 0 (id=364): socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() wait4(r1, 0x0, 0x40000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r8 = dup(r7) sendfile(r8, r8, 0x0, 0x20003) 14.628671738s ago: executing program 0 (id=368): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x4008c001, 0x0) 11.422240009s ago: executing program 0 (id=381): socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() wait4(r1, 0x0, 0x40000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r8 = dup(r7) sendfile(r8, r8, 0x0, 0x20003) 11.32729457s ago: executing program 1 (id=382): socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() wait4(r1, 0x0, 0x40000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x44}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r9 = dup(r8) sendfile(r9, r9, 0x0, 0x20003) 9.055997484s ago: executing program 3 (id=392): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff}]}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000240)=0x14) sendmsg$xdp(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x2c, 0x6, r5, 0x3f}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)="310ab98a887dd373bdf8b087", 0xc}, {0x0}], 0x2, 0x0, 0x0, 0x40}, 0x20040815) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x10, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x20064854, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000280)='}\x00', 0xfffffffffffffffc) utime(&(0x7f0000000000)='./file0\x00', 0x0) 8.302257908s ago: executing program 1 (id=393): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 6.467716737s ago: executing program 3 (id=394): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="0a00180003030303030300001000700004000500"], 0x38}, 0x1, 0x0, 0x0, 0x40085}, 0x0) 6.218857275s ago: executing program 2 (id=396): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@numtail}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@rodir}, {@uni_xlate}]}, 0x1, 0x27e, &(0x7f0000000240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 6.148690712s ago: executing program 0 (id=397): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@nodiscard}, {@compress_force}, {@acl}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nodatacow}]}, 0x23, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01"], 0x1e4}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1}) 6.012524358s ago: executing program 3 (id=398): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 5.927905157s ago: executing program 2 (id=399): memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f000062e000/0x2000)=nil, 0x2000, 0x2800008, 0x28011, 0xffffffffffffffff, 0xed6af000) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000080)=0x200009) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x81) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) socket$netlink(0x10, 0x3, 0x4) acct(0x0) writev(r2, &(0x7f00000000c0), 0x0) 5.179803318s ago: executing program 4 (id=400): memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f000062e000/0x2000)=nil, 0x2000, 0x2800008, 0x28011, 0xffffffffffffffff, 0xed6af000) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) creat(&(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000080)=0x200009) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x81) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) acct(0x0) writev(r1, &(0x7f00000000c0), 0x0) 4.553123462s ago: executing program 2 (id=401): memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f000062e000/0x2000)=nil, 0x2000, 0x2800008, 0x28011, 0xffffffffffffffff, 0xed6af000) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000080)=0x200009) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x81) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) socket$netlink(0x10, 0x3, 0x4) acct(0x0) writev(r2, &(0x7f00000000c0), 0x0) 4.517434214s ago: executing program 4 (id=402): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r1}, &(0x7f00000001c0)=0x8) 4.355891065s ago: executing program 4 (id=403): socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() wait4(r1, 0x0, 0x40000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x44}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r9 = dup(r8) sendfile(r9, r9, 0x0, 0x20003) 3.346835604s ago: executing program 4 (id=404): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff}]}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000240)=0x14) sendmsg$xdp(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x2c, 0x6, r5, 0x3f}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)="310ab98a887dd373bdf8b087", 0xc}, {0x0}], 0x2, 0x0, 0x0, 0x40}, 0x20040815) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x10, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x20064854, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000280)='}\x00', 0xfffffffffffffffc) utime(&(0x7f0000000000)='./file0\x00', 0x0) 3.336227405s ago: executing program 2 (id=405): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x62) write$FUSE_DIRENTPLUS(r1, 0x0, 0x4000) fallocate(r0, 0x3, 0xf00, 0x10000) 3.18419017s ago: executing program 1 (id=406): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7e) 3.017966502s ago: executing program 0 (id=407): socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() wait4(r1, 0x0, 0x40000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r8 = dup(r7) sendfile(r8, r8, 0x0, 0x20003) 2.916361173s ago: executing program 1 (id=408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]}, 0x2c}}, 0x0) 2.818297722s ago: executing program 3 (id=409): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0xa, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 2.671396854s ago: executing program 3 (id=410): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) 2.669266299s ago: executing program 2 (id=420): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.298683374s ago: executing program 1 (id=411): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.096977338s ago: executing program 3 (id=412): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "1a772584"}, @local=@item_012={0x1, 0x2, 0x4, 'P'}]}}, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 2.096279098s ago: executing program 1 (id=423): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="b6", 0x1}], 0x1) syz_usb_disconnect(r0) 2.058899205s ago: executing program 4 (id=413): memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f000062e000/0x2000)=nil, 0x2000, 0x2800008, 0x28011, 0xffffffffffffffff, 0xed6af000) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) creat(&(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000080)=0x200009) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x81) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) acct(0x0) writev(r1, &(0x7f00000000c0), 0x0) 2.000021261s ago: executing program 2 (id=414): r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) setns(r1, 0x20000000) 92.246928ms ago: executing program 0 (id=415): socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() wait4(r1, 0x0, 0x40000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000"], 0x44}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r9 = dup(r8) sendfile(r9, r9, 0x0, 0x20003) 0s ago: executing program 4 (id=416): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x13, &(0x7f00000001c0)=@ringbuf={{}, {}, {}, [@map_fd, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="40010000100001000400"/20, @ANYRES32=r2, @ANYBLOB="0000000012400000f8001a80200002801c0001"], 0x140}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.59' (ED25519) to the list of known hosts. [ 81.555403][ T5820] cgroup: Unknown subsys name 'net' [ 81.728838][ T5820] cgroup: Unknown subsys name 'cpuset' [ 81.737927][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.369522][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.131105][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.135971][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.145544][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.164989][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.165112][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.184633][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.193379][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.195089][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.215147][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.216730][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.226393][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.229518][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.243208][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.244097][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.254541][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.271453][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.278911][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.294932][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.303272][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.303693][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.322297][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.330753][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.338176][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.339403][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.353565][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.862209][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 87.261076][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 87.309447][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 87.366982][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.399194][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.406579][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.415251][ T5830] bridge_slave_0: entered allmulticast mode [ 87.422676][ T5830] bridge_slave_0: entered promiscuous mode [ 87.448284][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 87.479911][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.487205][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.494677][ T5830] bridge_slave_1: entered allmulticast mode [ 87.501960][ T5830] bridge_slave_1: entered promiscuous mode [ 87.651346][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.658835][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.666416][ T5831] bridge_slave_0: entered allmulticast mode [ 87.673680][ T5831] bridge_slave_0: entered promiscuous mode [ 87.723640][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.731103][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.738453][ T5831] bridge_slave_1: entered allmulticast mode [ 87.746898][ T5831] bridge_slave_1: entered promiscuous mode [ 87.771977][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.845306][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.898684][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.911981][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.935335][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.942474][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.950437][ T5839] bridge_slave_0: entered allmulticast mode [ 87.958150][ T5839] bridge_slave_0: entered promiscuous mode [ 87.967086][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.974397][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.981602][ T5839] bridge_slave_1: entered allmulticast mode [ 87.989289][ T5839] bridge_slave_1: entered promiscuous mode [ 87.996778][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.003890][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.011346][ T5840] bridge_slave_0: entered allmulticast mode [ 88.018835][ T5840] bridge_slave_0: entered promiscuous mode [ 88.026618][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.033756][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.041107][ T5836] bridge_slave_0: entered allmulticast mode [ 88.048374][ T5836] bridge_slave_0: entered promiscuous mode [ 88.057200][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.064477][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.071663][ T5836] bridge_slave_1: entered allmulticast mode [ 88.079324][ T5836] bridge_slave_1: entered promiscuous mode [ 88.125394][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.132553][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.139992][ T5840] bridge_slave_1: entered allmulticast mode [ 88.148517][ T5840] bridge_slave_1: entered promiscuous mode [ 88.202956][ T5831] team0: Port device team_slave_0 added [ 88.212317][ T5830] team0: Port device team_slave_0 added [ 88.249617][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.275143][ T5831] team0: Port device team_slave_1 added [ 88.283415][ T5830] team0: Port device team_slave_1 added [ 88.292450][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.305071][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.325145][ T5842] Bluetooth: hci0: command tx timeout [ 88.330707][ T5834] Bluetooth: hci1: command tx timeout [ 88.341226][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.355550][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.394653][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.405088][ T5842] Bluetooth: hci4: command tx timeout [ 88.407328][ T5837] Bluetooth: hci2: command tx timeout [ 88.410805][ T5834] Bluetooth: hci3: command tx timeout [ 88.505251][ T5840] team0: Port device team_slave_0 added [ 88.530016][ T5836] team0: Port device team_slave_0 added [ 88.539250][ T5836] team0: Port device team_slave_1 added [ 88.546257][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.553201][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.579310][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.593621][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.600892][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.627089][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.640459][ T5840] team0: Port device team_slave_1 added [ 88.666050][ T5839] team0: Port device team_slave_0 added [ 88.685184][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.692244][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.718737][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.730939][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.741224][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.767569][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.792923][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.799972][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.825921][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.840304][ T5839] team0: Port device team_slave_1 added [ 88.889373][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.897354][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.923319][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.954038][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.963974][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.990437][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.003565][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.010615][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.036640][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.086144][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.093125][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.119542][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.190776][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.198011][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.224622][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.268968][ T5831] hsr_slave_0: entered promiscuous mode [ 89.275741][ T5831] hsr_slave_1: entered promiscuous mode [ 89.289786][ T5830] hsr_slave_0: entered promiscuous mode [ 89.296226][ T5830] hsr_slave_1: entered promiscuous mode [ 89.302367][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.311306][ T5830] Cannot create hsr debugfs directory [ 89.346529][ T5836] hsr_slave_0: entered promiscuous mode [ 89.352930][ T5836] hsr_slave_1: entered promiscuous mode [ 89.359513][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.367235][ T5836] Cannot create hsr debugfs directory [ 89.378525][ T5840] hsr_slave_0: entered promiscuous mode [ 89.385578][ T5840] hsr_slave_1: entered promiscuous mode [ 89.391712][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.399789][ T5840] Cannot create hsr debugfs directory [ 89.559329][ T5839] hsr_slave_0: entered promiscuous mode [ 89.567105][ T5839] hsr_slave_1: entered promiscuous mode [ 89.573277][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.580936][ T5839] Cannot create hsr debugfs directory [ 90.106269][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.126356][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.138717][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.159190][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.217682][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.229912][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.242530][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.260644][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.359664][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.371426][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.384146][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.395491][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.405212][ T5834] Bluetooth: hci1: command tx timeout [ 90.405223][ T5837] Bluetooth: hci0: command tx timeout [ 90.485241][ T5834] Bluetooth: hci2: command tx timeout [ 90.485257][ T5837] Bluetooth: hci3: command tx timeout [ 90.490690][ T5834] Bluetooth: hci4: command tx timeout [ 90.550335][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.570452][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.600074][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.612671][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.671896][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.756646][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.776318][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.789308][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.805340][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.812638][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.830831][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.845555][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.867939][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.882929][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.890269][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.911460][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.957962][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.002986][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.010249][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.022114][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.029287][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.042546][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.081865][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.089021][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.136614][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.143761][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.267648][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.399836][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.467544][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.474735][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.511390][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.518621][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.639905][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.663375][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.727083][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.748736][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.769431][ T24] cfg80211: failed to load regulatory.db [ 91.806750][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.813946][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.869201][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.876435][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.915919][ T5840] veth0_vlan: entered promiscuous mode [ 91.969901][ T5840] veth1_vlan: entered promiscuous mode [ 92.012514][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.122691][ T5840] veth0_macvtap: entered promiscuous mode [ 92.173677][ T5840] veth1_macvtap: entered promiscuous mode [ 92.198212][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.293161][ T5831] veth0_vlan: entered promiscuous mode [ 92.303493][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.340039][ T5831] veth1_vlan: entered promiscuous mode [ 92.353027][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.380514][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.392156][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.401377][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.411367][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.485737][ T5834] Bluetooth: hci1: command tx timeout [ 92.489404][ T5837] Bluetooth: hci0: command tx timeout [ 92.511499][ T5839] veth0_vlan: entered promiscuous mode [ 92.527343][ T5836] veth0_vlan: entered promiscuous mode [ 92.564949][ T5837] Bluetooth: hci4: command tx timeout [ 92.566326][ T5834] Bluetooth: hci3: command tx timeout [ 92.570385][ T5837] Bluetooth: hci2: command tx timeout [ 92.591319][ T5831] veth0_macvtap: entered promiscuous mode [ 92.601791][ T5831] veth1_macvtap: entered promiscuous mode [ 92.615397][ T5839] veth1_vlan: entered promiscuous mode [ 92.622913][ T5836] veth1_vlan: entered promiscuous mode [ 92.649723][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.702173][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.712651][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.773700][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.785294][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.797499][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.822723][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.829919][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.834406][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.844064][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.860713][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.889666][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.898652][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.907953][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.921472][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.932747][ T5836] veth0_macvtap: entered promiscuous mode [ 92.956852][ T5836] veth1_macvtap: entered promiscuous mode [ 92.966703][ T5839] veth0_macvtap: entered promiscuous mode [ 92.989690][ T5830] veth0_vlan: entered promiscuous mode [ 93.019955][ T5839] veth1_macvtap: entered promiscuous mode [ 93.059157][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.066008][ T5830] veth1_vlan: entered promiscuous mode [ 93.101144][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.114710][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.126505][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.137117][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.148642][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.239085][ T5920] loop1: detected capacity change from 0 to 1024 [ 93.255147][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.270617][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.276434][ T5920] ======================================================= [ 93.276434][ T5920] WARNING: The mand mount option has been deprecated and [ 93.276434][ T5920] and is ignored by this kernel. Remove the mand [ 93.276434][ T5920] option from the mount to silence this warning. [ 93.276434][ T5920] ======================================================= [ 93.281656][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.334096][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.351063][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.360527][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.376454][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.388367][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.397483][ T5920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.399393][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.412714][ T5920] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.422833][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.447552][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.460007][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.490625][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.501545][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.516654][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.526814][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.543957][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.559990][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.562363][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.571506][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.593769][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.604074][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.615920][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.633259][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.685838][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.706250][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.721977][ T5830] veth0_macvtap: entered promiscuous mode [ 93.773597][ T5830] veth1_macvtap: entered promiscuous mode [ 93.786890][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.798181][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.808427][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.821533][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.848397][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.857922][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.905940][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.925513][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.936537][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.951047][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.961876][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.976329][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.987915][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.002059][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.020138][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.061466][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.083420][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.105038][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.115926][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.126066][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.136774][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.146729][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.158805][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.172563][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.224580][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.233346][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.243166][ T5927] loop1: detected capacity change from 0 to 32768 [ 94.252316][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.268020][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.299490][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.315568][ T5927] read_mapping_page failed! [ 94.320842][ T5927] ERROR: (device loop1): txCommit: [ 94.320842][ T5927] [ 94.342378][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.352061][ T5927] ERROR: (device loop1): remounting filesystem as read-only [ 94.447044][ T5929] ERROR: (device loop1): dbFindCtl: Corrupt dmapctl page [ 94.447044][ T5929] [ 94.498153][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.509807][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.565674][ T5837] Bluetooth: hci0: command tx timeout [ 94.571134][ T5837] Bluetooth: hci1: command tx timeout [ 94.600436][ T2938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.621603][ T2938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.639638][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.649411][ T5842] Bluetooth: hci4: command tx timeout [ 94.655278][ T5834] Bluetooth: hci2: command tx timeout [ 94.663616][ T5837] Bluetooth: hci3: command tx timeout [ 94.666883][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.704528][ T5886] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.811560][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.840898][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.850678][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.861181][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.886059][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 94.903123][ T5886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 94.945240][ T5886] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 94.973813][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 94.992972][ T5886] usb 1-1: Product: syz [ 95.005520][ T5886] usb 1-1: Manufacturer: syz [ 95.010176][ T5886] usb 1-1: SerialNumber: syz [ 95.063670][ T5886] usb 1-1: config 0 descriptor?? [ 95.086731][ T5931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.377977][ T5847] usb 1-1: USB disconnect, device number 2 [ 95.548179][ T5941] loop3: detected capacity change from 0 to 4096 [ 95.630283][ T5941] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 95.649927][ T5941] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 95.716537][ T5941] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" no data attribute [ 95.781723][ T5934] loop4: detected capacity change from 0 to 32768 [ 96.275609][ T5847] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.454779][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 96.469909][ T5847] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 96.503351][ T5847] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 96.538249][ T5847] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.570032][ T5943] loop2: detected capacity change from 0 to 32768 [ 96.570517][ T5847] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.614360][ T5847] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.631499][ T5945] loop1: detected capacity change from 0 to 32768 [ 96.640448][ T5847] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 96.661715][ T5847] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 96.687848][ T5943] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.703231][ T5847] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.703285][ T5945] (syz.1.7,5945,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 96.738911][ T5847] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.746836][ T5945] (syz.1.7,5945,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 96.800445][ T5847] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.866936][ T5945] JBD2: Ignoring recovery information on journal [ 96.898639][ T5847] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 96.931628][ T5847] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 96.948531][ T5847] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.960423][ T5847] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.973713][ T5847] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.993169][ T5847] usb 4-1: string descriptor 0 read error: -22 [ 97.000189][ T5847] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.009684][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.022962][ T5945] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 97.039836][ T5847] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 97.091594][ T5943] XFS (loop2): Ending clean mount [ 97.238656][ T5949] loop0: detected capacity change from 0 to 32768 [ 97.274997][ T5949] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.11 (5949) [ 97.303054][ T5830] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.323950][ T24] usb 4-1: USB disconnect, device number 2 [ 97.375565][ T5949] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 97.390613][ T5951] loop4: detected capacity change from 0 to 32768 [ 97.408465][ T5951] XFS: ikeep mount option is deprecated. [ 97.419467][ T5840] ocfs2: Unmounting device (7,1) on (node local) [ 97.431811][ T5949] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 97.443945][ T5949] BTRFS info (device loop0): using free-space-tree [ 97.505279][ T5951] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.533275][ T5947] adutux: No device or device unplugged -19 [ 97.760263][ T5951] XFS (loop4): Ending clean mount [ 97.808860][ T5951] XFS (loop4): Quotacheck needed: Please wait. [ 97.863570][ T5951] XFS (loop4): Quotacheck: Done. [ 98.020843][ T5990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.040311][ T5836] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.067541][ T5831] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 98.223660][ T5992] loop3: detected capacity change from 0 to 256 [ 98.344331][ T30] audit: type=1800 audit(1744121900.017:2): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16" name="file1" dev="loop3" ino=3 res=0 errno=0 [ 98.357053][ T5992] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162) [ 98.424401][ T5992] FAT-fs (loop3): Filesystem has been set read-only [ 98.782869][ T6000] loop3: detected capacity change from 0 to 128 [ 98.835341][ T6000] FAT-fs (loop3): Directory bread(block 3236) failed [ 98.896480][ T6000] FAT-fs (loop3): Directory bread(block 3237) failed [ 98.938218][ T6000] FAT-fs (loop3): Directory bread(block 3238) failed [ 98.993251][ T6000] FAT-fs (loop3): Directory bread(block 3239) failed [ 99.045222][ T6000] FAT-fs (loop3): Directory bread(block 3240) failed [ 99.074183][ T6000] FAT-fs (loop3): Directory bread(block 3241) failed [ 99.097812][ T6000] FAT-fs (loop3): Directory bread(block 3242) failed [ 99.107974][ T6000] FAT-fs (loop3): Directory bread(block 3243) failed [ 99.151649][ T6000] FAT-fs (loop3): Directory bread(block 3236) failed [ 99.175245][ T6000] FAT-fs (loop3): Directory bread(block 3237) failed [ 99.187524][ T6006] loop0: detected capacity change from 0 to 4096 [ 99.221126][ T5988] loop1: detected capacity change from 0 to 40427 [ 99.239108][ T6006] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 99.302202][ T5988] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3fffff [ 99.369466][ T5988] F2FS-fs (loop1): invalid crc value [ 99.420080][ T30] audit: type=1800 audit(1744121901.097:3): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 99.675759][ T5988] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.695894][ T5996] loop2: detected capacity change from 0 to 32768 [ 99.730641][ T6013] loop0: detected capacity change from 0 to 1024 [ 99.752362][ T5996] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.803643][ T6004] loop4: detected capacity change from 0 to 32768 [ 99.858081][ T6013] hfsplus: bad catalog entry type [ 99.899464][ T30] audit: type=1804 audit(1744121901.577:4): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.20" name="/newroot/3/file1/file2" dev="loop4" ino=7 res=1 errno=0 [ 99.923541][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.997663][ T5996] XFS (loop2): Ending clean mount [ 100.023557][ T5996] XFS (loop2): Quotacheck needed: Please wait. [ 100.046343][ T3019] hfsplus: b-tree write err: -5, ino 4 [ 100.094381][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 100.102943][ T5996] XFS (loop2): Quotacheck: Done. [ 100.139539][ T24] usb 4-1: config 0 has no interfaces? [ 100.179767][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 100.193575][ T5830] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.202396][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.235834][ T24] usb 4-1: Product: syz [ 100.240069][ T24] usb 4-1: Manufacturer: syz [ 100.294312][ T24] usb 4-1: SerialNumber: syz [ 100.321984][ T24] usb 4-1: config 0 descriptor?? [ 100.394960][ T6023] loop6: detected capacity change from 0 to 524287999 [ 100.425397][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.434877][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.450847][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.460200][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.474297][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.483482][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.493920][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.503172][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.516952][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.526146][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.540363][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.549598][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.558572][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.567811][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.584133][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.593351][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.594143][ T5886] usb 4-1: USB disconnect, device number 3 [ 100.613910][ T6023] ldm_validate_partition_table(): Disk read failed. [ 100.643888][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.653170][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.681001][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.690271][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 100.706665][ T6023] Dev loop6: unable to read RDB block 0 [ 100.713750][ T6023] loop6: unable to read partition table [ 100.723503][ T6023] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 100.753260][ T6024] ldm_validate_partition_table(): Disk read failed. [ 100.765999][ T6024] Dev loop6: unable to read RDB block 0 [ 100.772823][ T6024] loop6: unable to read partition table [ 100.941114][ T6033] loop1: detected capacity change from 0 to 512 [ 101.009667][ T6033] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.054703][ T6033] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.084617][ T5901] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.091352][ T6033] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 101.114466][ T6033] System zones: 1-12 [ 101.143837][ T6033] EXT4-fs (loop1): 1 truncate cleaned up [ 101.170858][ T6033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.261707][ T5901] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 101.287985][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.324390][ T5901] usb 5-1: Product: syz [ 101.328623][ T5901] usb 5-1: Manufacturer: syz [ 101.336130][ T5901] usb 5-1: SerialNumber: syz [ 101.357445][ T5901] usb 5-1: config 0 descriptor?? [ 101.387028][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.493661][ T6035] loop0: detected capacity change from 0 to 32768 [ 101.605942][ T6034] loop2: detected capacity change from 0 to 32768 [ 101.619628][ T6034] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.27 (6034) [ 101.646655][ T6035] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 101.729199][ T5901] usb 5-1: USB disconnect, device number 2 [ 101.810702][ T6034] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.846109][ T6034] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 101.876351][ T6034] BTRFS info (device loop2): using free-space-tree [ 101.916801][ T5831] ocfs2: Unmounting device (7,0) on (node local) [ 102.091348][ T6041] loop1: detected capacity change from 0 to 32768 [ 102.184743][ T6041] [ 102.184743][ T6041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.184743][ T6041] [ 102.207815][ T6066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.34'. [ 102.246437][ T6041] [ 102.246437][ T6041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.246437][ T6041] [ 102.284794][ T6041] [ 102.284794][ T6041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.284794][ T6041] [ 102.316142][ T5830] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.324444][ T6041] [ 102.324444][ T6041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.324444][ T6041] [ 102.379568][ T6041] [ 102.379568][ T6041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.379568][ T6041] [ 102.454360][ T6041] [ 102.454360][ T6041] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.454360][ T6041] [ 102.547220][ T6069] netlink: 'syz.3.36': attribute type 10 has an invalid length. [ 102.558885][ T116] [ 102.558885][ T116] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.558885][ T116] [ 102.649654][ T3019] [ 102.649654][ T3019] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.649654][ T3019] [ 102.708944][ T6069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.714389][ T3019] [ 102.714389][ T3019] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.714389][ T3019] [ 102.747880][ T5840] [ 102.747880][ T5840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.747880][ T5840] [ 102.763506][ T115] [ 102.763506][ T115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.763506][ T115] [ 102.798763][ T5840] [ 102.798763][ T5840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.798763][ T5840] [ 103.207019][ T6084] netlink: 60 bytes leftover after parsing attributes in process `syz.4.42'. [ 103.307338][ T6086] loop1: detected capacity change from 0 to 128 [ 103.404376][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.456312][ T6071] loop0: detected capacity change from 0 to 32768 [ 103.491704][ T6071] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.33 (6071) [ 103.524535][ T6071] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.554203][ T6071] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 103.572865][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 103.622465][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 103.636046][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 103.685563][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 103.724207][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 103.741393][ T6071] BTRFS info (device loop0): rebuilding free space tree [ 103.768849][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.790984][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 103.810780][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 103.830521][ T6071] BTRFS info (device loop0): disabling free space tree [ 103.831219][ T9] usb 4-1: Product: syz [ 103.838771][ T6093] loop4: detected capacity change from 0 to 8192 [ 103.854848][ T9] usb 4-1: Manufacturer: syz [ 103.859498][ T9] usb 4-1: SerialNumber: syz [ 103.864515][ T6071] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.888406][ T6093] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.893651][ T5901] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.899311][ T6071] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.921559][ T9] usb 4-1: config 0 descriptor?? [ 103.942207][ T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 103.965884][ T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 104.085542][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 104.110051][ T5901] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 104.135426][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.187823][ T5901] usb 2-1: Product: syz [ 104.192088][ T5901] usb 2-1: Manufacturer: syz [ 104.229035][ T5901] usb 2-1: SerialNumber: syz [ 104.243208][ T5831] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.255626][ T5901] usb 2-1: config 0 descriptor?? [ 104.271041][ T5901] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 104.284979][ T6082] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 104.325619][ T24] usb 4-1: USB disconnect, device number 4 [ 104.331563][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 104.354355][ T24] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 104.430086][ T6111] loop4: detected capacity change from 0 to 512 [ 104.494386][ T5901] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 104.502591][ T5901] visor 2-1:0.0: probe with driver visor failed with error -5 [ 104.605561][ T6111] EXT4-fs (loop4): 1 orphan inode deleted [ 104.613160][ T6111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.639653][ T6080] loop2: detected capacity change from 0 to 65536 [ 104.646403][ T62] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 104.655178][ T6111] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.679018][ T62] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 104.731804][ T6080] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 104.739180][ T5901] usb 2-1: USB disconnect, device number 2 [ 104.818276][ T6080] XFS (loop2): Ending clean mount [ 104.857253][ T5830] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 104.872956][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.013546][ T6124] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 105.031422][ T6124] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 105.039994][ T6124] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 105.277029][ T6130] loop3: detected capacity change from 0 to 256 [ 105.362361][ T6130] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.368476][ T6132] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.398579][ T6130] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 105.439933][ T6130] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 105.540217][ T6130] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 105.572957][ T6130] exFAT-fs (loop3): Filesystem has been set read-only [ 105.608785][ T6130] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 106.399849][ T6155] loop0: detected capacity change from 0 to 256 [ 106.449496][ T6155] exfat: Deprecated parameter 'namecase' [ 106.517938][ T6155] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x364566b4, utbl_chksum : 0xe619d30d) [ 106.579696][ T6159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.604488][ T6139] loop2: detected capacity change from 0 to 32768 [ 106.624223][ T6139] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.48 (6139) [ 106.679536][ T6139] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.746420][ T6139] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 106.784472][ T6139] BTRFS info (device loop2): using free-space-tree [ 107.129134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 107.176813][ T6184] loop4: detected capacity change from 0 to 2048 [ 107.219457][ T6187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.63'. [ 107.240014][ T5830] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 107.663404][ T6193] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.825777][ T6204] loop4: detected capacity change from 0 to 64 [ 108.962876][ T6181] loop0: detected capacity change from 0 to 32768 [ 108.972413][ T6181] XFS: ikeep mount option is deprecated. [ 109.011217][ T6204] hfs: bad catalog folder thread [ 109.087647][ T6181] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 109.136062][ T6181] XFS (loop0): Ending clean mount [ 109.750441][ T6181] syz.0.65 (6181) used greatest stack depth: 19560 bytes left [ 109.798066][ T5831] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 111.055000][ T6243] process 'syz.4.86' launched './file2' with NULL argv: empty string added [ 111.720870][ T6231] loop1: detected capacity change from 0 to 32768 [ 111.764093][ T6231] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.81 (6231) [ 111.916633][ T6231] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.953248][ T6231] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 111.966886][ T6231] BTRFS info (device loop1): disk space caching is enabled [ 111.974391][ T6231] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 112.217350][ T6231] BTRFS info (device loop1): rebuilding free space tree [ 112.303949][ T6231] BTRFS info (device loop1): disabling free space tree [ 112.344359][ T6231] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.396009][ T6231] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.661252][ T6245] loop2: detected capacity change from 0 to 40427 [ 113.592105][ T5840] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.794371][ T6245] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.824465][ T6287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.93'. [ 113.933628][ T6294] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 113.996554][ T5830] syz-executor: attempt to access beyond end of device [ 113.996554][ T5830] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.037993][ T6295] usb usb1: usbfs: process 6295 (syz.4.96) did not claim interface 0 before use [ 114.174711][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.229618][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 114.229649][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.229665][ T5830] Call Trace: [ 114.229674][ T5830] [ 114.229683][ T5830] dump_stack_lvl+0x241/0x360 [ 114.229721][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.229752][ T5830] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 114.229783][ T5830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 114.229814][ T5830] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 114.229841][ T5830] f2fs_handle_critical_error+0x392/0x5a0 [ 114.229873][ T5830] f2fs_write_end_io+0x563/0x790 [ 114.229906][ T5830] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 114.229935][ T5830] ? bio_endio+0x7e4/0x890 [ 114.229959][ T5830] ? bio_endio+0x82a/0x890 [ 114.229984][ T5830] __submit_merged_bio+0x2a9/0x710 [ 114.230003][ T5830] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 114.230049][ T5830] f2fs_submit_merged_write_cond+0x29f/0x380 [ 114.230094][ T5830] f2fs_write_data_pages+0x2f99/0x38d0 [ 114.230159][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 114.230199][ T5830] ? __pfx_stack_trace_save+0x10/0x10 [ 114.230228][ T5830] ? __bfs+0x14a/0x270 [ 114.230284][ T5830] ? __bfs+0x14a/0x270 [ 114.230325][ T5830] ? __lock_acquire+0xad5/0xd80 [ 114.230353][ T5830] ? do_raw_spin_lock+0x151/0x370 [ 114.230392][ T5830] ? do_raw_spin_unlock+0x13c/0x8b0 [ 114.230426][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 114.230451][ T5830] do_writepages+0x38c/0x640 [ 114.230472][ T5830] ? __lock_acquire+0xad5/0xd80 [ 114.230496][ T5830] ? __pfx_do_writepages+0x10/0x10 [ 114.230514][ T5830] ? do_raw_spin_lock+0x151/0x370 [ 114.230553][ T5830] ? do_raw_spin_unlock+0x13c/0x8b0 [ 114.230590][ T5830] filemap_fdatawrite+0x1f2/0x2a0 [ 114.230618][ T5830] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 114.230686][ T5830] ? do_raw_spin_unlock+0x13c/0x8b0 [ 114.230743][ T5830] f2fs_sync_dirty_inodes+0x34f/0x860 [ 114.230785][ T5830] f2fs_write_checkpoint+0x857/0x1da0 [ 114.230835][ T5830] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 114.230914][ T5830] ? kill_f2fs_super+0x290/0x6d0 [ 114.230947][ T5830] kill_f2fs_super+0x2b8/0x6d0 [ 114.230981][ T5830] ? __pfx_kill_f2fs_super+0x10/0x10 [ 114.231017][ T5830] ? shrinker_free+0x2ca/0x3d0 [ 114.231057][ T5830] deactivate_locked_super+0xc4/0x130 [ 114.231086][ T5830] cleanup_mnt+0x422/0x4c0 [ 114.231112][ T5830] ? lockdep_hardirqs_on+0x9d/0x150 [ 114.231137][ T5830] task_work_run+0x251/0x310 [ 114.231164][ T5830] ? __pfx_task_work_run+0x10/0x10 [ 114.231190][ T5830] ? syscall_exit_to_user_mode+0xa3/0x340 [ 114.231214][ T5830] syscall_exit_to_user_mode+0x13f/0x340 [ 114.231240][ T5830] do_syscall_64+0x100/0x230 [ 114.231261][ T5830] ? clear_bhb_loop+0x45/0xa0 [ 114.231286][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.231306][ T5830] RIP: 0033:0x7f63ee38e497 [ 114.231330][ T5830] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 114.231347][ T5830] RSP: 002b:00007ffcb941d268 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 114.231370][ T5830] RAX: 0000000000000000 RBX: 00007f63ee40e08c RCX: 00007f63ee38e497 [ 114.231384][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb941d320 [ 114.231397][ T5830] RBP: 00007ffcb941d320 R08: 0000000000000000 R09: 0000000000000000 [ 114.231409][ T5830] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb941e3b0 [ 114.231422][ T5830] R13: 00007f63ee40e08c R14: 000000000001bce2 R15: 00007ffcb941e3f0 [ 114.231456][ T5830] [ 114.231465][ T5830] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 114.360141][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.632344][ T6297] loop3: detected capacity change from 0 to 128 [ 114.639621][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 114.736537][ T6297] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.802022][ T6297] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.875898][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.941018][ T9] usb 2-1: config 0 descriptor?? [ 115.854047][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.890610][ T9] lg-g15 0003:046D:C222.0001: unbalanced delimiter at end of report description [ 116.013709][ T9] lg-g15 0003:046D:C222.0001: probe with driver lg-g15 failed with error -22 [ 116.065148][ T9] usb 2-1: USB disconnect, device number 3 [ 116.159398][ T6311] loop3: detected capacity change from 0 to 128 [ 116.296285][ T6311] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.342959][ T6318] bridge0: port 3(vlan2) entered blocking state [ 116.349708][ T6318] bridge0: port 3(vlan2) entered disabled state [ 116.359389][ T6318] vlan2: entered allmulticast mode [ 116.364755][ T6318] gretap0: entered allmulticast mode [ 116.372922][ T6318] vlan2: entered promiscuous mode [ 116.379712][ T6318] gretap0: entered promiscuous mode [ 116.386027][ T6318] bridge0: port 3(vlan2) entered blocking state [ 116.389140][ T6311] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.392756][ T6318] bridge0: port 3(vlan2) entered forwarding state [ 116.647500][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.665064][ T6320] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 117.412160][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.796145][ T6341] loop6: detected capacity change from 0 to 64 [ 117.852286][ C0] blk_print_req_error: 24 callbacks suppressed [ 117.852308][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.852366][ C0] buffer_io_error: 24 callbacks suppressed [ 117.852379][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.870944][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.870984][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.874314][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.874346][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.877297][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.877328][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.877547][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.877574][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.880972][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.881004][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.881261][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.881292][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.881498][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.881525][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.881603][ T6341] ldm_validate_partition_table(): Disk read failed. [ 117.881761][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.881788][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.882001][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.882028][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.884991][ T6341] Dev loop6: unable to read RDB block 0 [ 117.897549][ T6341] loop6: unable to read partition table [ 117.897774][ T6341] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 117.941282][ T6344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.107'. [ 118.615823][ T6351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.114'. [ 118.715011][ T6355] loop2: detected capacity change from 0 to 128 [ 118.718349][ T6343] tty tty27: ldisc open failed (-12), clearing slot 26 [ 118.798122][ T6355] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.811642][ T6355] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.858400][ T5830] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.951304][ T6399] netlink: 40 bytes leftover after parsing attributes in process `syz.4.120'. [ 121.116623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.363205][ T6379] loop2: detected capacity change from 0 to 32768 [ 121.397702][ T6379] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.121 (6379) [ 121.443010][ T6379] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.455305][ T6379] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 121.477269][ T6379] BTRFS info (device loop2): using free-space-tree [ 121.694416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 121.964606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.236687][ T6424] loop1: detected capacity change from 0 to 128 [ 122.346542][ T6424] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.394916][ T6433] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.406945][ T6424] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.499878][ T5830] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.613544][ T5840] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.123063][ T6453] netlink: 40 bytes leftover after parsing attributes in process `syz.4.138'. [ 124.218561][ T6434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.133'. [ 124.664619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 125.072583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.073623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 125.248011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.419947][ T6467] loop0: detected capacity change from 0 to 128 [ 125.475455][ T6467] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.477435][ T6470] loop1: detected capacity change from 0 to 1024 [ 125.560037][ T6467] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.630857][ T6470] hfsplus: xattr searching failed [ 125.652641][ T6470] hfsplus: xattr searching failed [ 125.714555][ T6470] hfsplus: bad catalog file entry [ 125.858854][ T12] hfsplus: b-tree write err: -5, ino 3 [ 125.867654][ T12] hfsplus: bad catalog file entry [ 127.566555][ T6488] input: syz0 as /devices/virtual/input/input5 [ 127.815511][ T5831] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.919893][ T6485] loop1: detected capacity change from 0 to 4096 [ 128.025457][ T6497] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.145608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 128.644498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.064441][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.319726][ T24] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 129.344403][ T24] usb 3-1: config 0 has no interface number 0 [ 129.351241][ T24] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.419357][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 129.488620][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.558060][ T24] usb 3-1: Product: syz [ 129.604657][ T24] usb 3-1: Manufacturer: syz [ 129.605421][ T6516] netlink: 40 bytes leftover after parsing attributes in process `syz.4.158'. [ 129.624567][ T24] usb 3-1: SerialNumber: syz [ 129.658134][ T24] usb 3-1: config 0 descriptor?? [ 129.669652][ T6518] loop3: detected capacity change from 0 to 128 [ 129.692085][ T24] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 129.733144][ T6518] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.825611][ T6518] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.064661][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 130.066836][ T5888] usb 3-1: USB disconnect, device number 2 [ 130.095052][ T6524] loop1: detected capacity change from 0 to 128 [ 130.152647][ T5888] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 130.392772][ T6524] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.602838][ T6524] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.032955][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.793265][ T5840] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.728843][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.735654][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.114534][ T6559] Illegal XDP return value 4291348736 on prog (id 22) dev N/A, expect packet loss! [ 133.406185][ T5888] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 133.540739][ T6567] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 133.687449][ T5888] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 133.695772][ T5888] usb 2-1: config 0 has no interface number 0 [ 133.701922][ T5888] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.736512][ T6571] loop3: detected capacity change from 0 to 64 [ 133.763331][ T5888] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 133.808797][ T6574] loop2: detected capacity change from 0 to 24 [ 133.821860][ T5888] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 133.837698][ T6575] loop0: detected capacity change from 0 to 128 [ 133.845381][ T6574] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 133.863701][ T5888] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 133.877000][ T6574] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 133.904647][ T5888] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 133.911235][ T6575] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.930670][ T5888] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.944901][ T5888] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 133.954339][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.977906][ T6575] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.013598][ T5888] usb 2-1: config 0 descriptor?? [ 134.020532][ T6563] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.028087][ T6563] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.053136][ T5888] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 134.208855][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.368829][ T24] usb 2-1: USB disconnect, device number 4 [ 134.597337][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 134.942657][ T6588] loop3: detected capacity change from 0 to 1024 [ 134.965234][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 134.978805][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.994724][ T5831] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.996260][ T9] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 135.037550][ T9] usb 5-1: config 179 has no interface number 0 [ 135.045716][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.070485][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 135.086173][ T9] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 135.092796][ T6588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.100018][ T9] usb 5-1: config 179 interface 65 has no altsetting 0 [ 135.123198][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 135.132389][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.868726][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.985116][ T6598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.184'. [ 136.130669][ T5921] usb 5-1: USB disconnect, device number 3 [ 137.786034][ T6622] loop4: detected capacity change from 0 to 128 [ 137.840379][ T6622] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.024813][ T6622] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.375819][ T5886] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.567520][ T5886] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 138.885171][ T5836] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.908703][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.942122][ T5886] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 138.952675][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.025460][ T5886] usb 3-1: config 0 descriptor?? [ 139.161439][ T6635] loop1: detected capacity change from 0 to 4096 [ 139.411609][ T5886] usb 3-1: string descriptor 0 read error: -71 [ 140.269857][ T5886] usb 3-1: USB disconnect, device number 3 [ 140.530289][ T6647] ALSA: seq fatal error: cannot create timer (-19) [ 140.595860][ T6645] netlink: 40 bytes leftover after parsing attributes in process `syz.0.198'. [ 141.926441][ T6661] use of bytesused == 0 is deprecated and will be removed in the future, [ 141.936922][ T6661] use the actual size instead. [ 141.954584][ T5921] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.065410][ T6665] loop0: detected capacity change from 0 to 1024 [ 142.127259][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.204195][ T5921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.222081][ T5921] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.232807][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.258372][ T6665] hfsplus: request for non-existent node 2048 in B*Tree [ 142.266500][ T5921] usb 3-1: SerialNumber: syz [ 142.286507][ T6665] hfsplus: request for non-existent node 2048 in B*Tree [ 142.306174][ T6666] hfsplus: request for non-existent node 2048 in B*Tree [ 142.335803][ T6666] hfsplus: request for non-existent node 2048 in B*Tree [ 142.500686][ T5921] usb 3-1: 0:2 : does not exist [ 142.597614][ T5921] usb 3-1: USB disconnect, device number 4 [ 142.633951][ T6670] loop0: detected capacity change from 0 to 128 [ 142.875428][ T6670] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.951032][ T6670] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.994500][ T6026] udevd[6026]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.102674][ T5831] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.364567][ T6713] netlink: 40 bytes leftover after parsing attributes in process `syz.1.216'. [ 146.971578][ T6722] loop2: detected capacity change from 0 to 1024 [ 147.122590][ T6722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.334368][ T6727] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 147.399451][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.991144][ T6755] netlink: 40 bytes leftover after parsing attributes in process `syz.0.236'. [ 150.124656][ T6759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.237'. [ 152.291264][ T6777] loop2: detected capacity change from 0 to 256 [ 152.305664][ T6777] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.373667][ T6777] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.340457][ T6789] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 153.577411][ T6794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.250'. [ 154.442547][ T6802] netlink: 'syz.4.254': attribute type 7 has an invalid length. [ 156.349674][ T6833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.264'. [ 157.555806][ T5888] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.763901][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 157.801794][ T5888] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 157.833095][ T5888] usb 3-1: config 0 has no interface number 0 [ 157.891558][ T5888] usb 3-1: config 0 interface 101 has no altsetting 0 [ 157.924075][ T5888] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 157.944911][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.004162][ T6843] loop0: detected capacity change from 0 to 512 [ 158.004362][ T5888] usb 3-1: config 0 descriptor?? [ 158.053144][ T6843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.127613][ T6843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.146384][ T6843] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.332800][ T5888] usb 3-1: string descriptor 0 read error: -71 [ 158.417351][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.438473][ T5888] usb 3-1: USB disconnect, device number 5 [ 158.561672][ T6026] udevd[6026]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.101/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.617291][ T6839] loop3: detected capacity change from 0 to 32768 [ 158.861217][ T6839] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 159.309906][ T6860] wireguard: wg2: Could not create IPv4 socket [ 159.692848][ T6865] loop2: detected capacity change from 0 to 128 [ 159.762278][ T6865] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.820365][ T6865] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.852270][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.613601][ T5830] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.724562][ T5839] ocfs2: Unmounting device (7,3) on (node local) [ 163.263715][ T6901] netlink: 40 bytes leftover after parsing attributes in process `syz.4.285'. [ 165.039458][ T6920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.291'. [ 165.117745][ T6919] loop4: detected capacity change from 0 to 64 [ 165.748515][ T6903] loop3: detected capacity change from 0 to 32768 [ 165.760098][ T6903] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.278 (6903) [ 166.603869][ T6903] BTRFS error (device loop3): open_ctree failed: -4 [ 166.798933][ T6934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.299'. [ 169.018682][ T6955] loop0: detected capacity change from 0 to 1024 [ 169.192480][ T6955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.205998][ T6954] loop3: detected capacity change from 0 to 4096 [ 169.281888][ T6955] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.314514][ T6960] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.405633][ T6954] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 169.460032][ T6954] Remounting filesystem read-only [ 169.503787][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.076476][ T6968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.306'. [ 171.671961][ T6988] loop2: detected capacity change from 0 to 2048 [ 171.757774][ T6988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.827522][ T30] audit: type=1800 audit(1744121973.507:5): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.317" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 171.964774][ T6990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.309'. [ 172.063523][ T6992] loop0: detected capacity change from 0 to 256 [ 172.129720][ T6992] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2f5a013b, utbl_chksum : 0xe619d30d) [ 172.210889][ T6996] loop2: detected capacity change from 0 to 1024 [ 172.275829][ T6996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.364404][ T6996] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.130031][ T6959] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 173.330624][ T7004] netlink: 40 bytes leftover after parsing attributes in process `syz.0.321'. [ 174.037406][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.386610][ T7024] loop0: detected capacity change from 0 to 2048 [ 175.470487][ T7024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.561409][ T30] audit: type=1800 audit(1744121977.237:6): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.339" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 176.009841][ T7039] loop1: detected capacity change from 0 to 1024 [ 176.065769][ T7039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.103579][ T7039] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.393972][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.569212][ T7052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.336'. [ 177.126515][ T7054] loop1: detected capacity change from 0 to 64 [ 177.480110][ T7030] loop4: detected capacity change from 0 to 40427 [ 177.524950][ T7030] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3fffff [ 177.559074][ T7030] F2FS-fs (loop4): Image doesn't support compression [ 177.586471][ T7030] F2FS-fs (loop4): heap/no_heap options were deprecated [ 177.621304][ T7030] F2FS-fs (loop4): Image doesn't support compression [ 177.676454][ T7030] F2FS-fs (loop4): invalid crc value [ 177.896942][ T7030] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 178.156639][ T30] audit: type=1800 audit(1744121979.837:7): pid=7030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.331" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 178.215366][ T7030] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x25f/0x2570 [ 178.274373][ T7030] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 178.488469][ T5836] syz-executor: attempt to access beyond end of device [ 178.488469][ T5836] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 178.532225][ T7074] loop1: detected capacity change from 0 to 2048 [ 178.543111][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 178.543142][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.543155][ T5836] Call Trace: [ 178.543164][ T5836] [ 178.543173][ T5836] dump_stack_lvl+0x241/0x360 [ 178.543213][ T5836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.543245][ T5836] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 178.543277][ T5836] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 178.543310][ T5836] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 178.543340][ T5836] f2fs_handle_critical_error+0x392/0x5a0 [ 178.543373][ T5836] f2fs_write_end_io+0x563/0x790 [ 178.543408][ T5836] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 178.543440][ T5836] ? blkg_put+0x18f/0x250 [ 178.543469][ T5836] ? bio_endio+0x7e4/0x890 [ 178.543493][ T5836] ? bio_endio+0x82a/0x890 [ 178.543520][ T5836] __submit_merged_bio+0x2a9/0x710 [ 178.543550][ T5836] f2fs_submit_merged_write+0x1f9/0x2d0 [ 178.543592][ T5836] f2fs_sync_node_pages+0x1563/0x1700 [ 178.543637][ T5836] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 178.543660][ T5836] ? __lock_acquire+0xad5/0xd80 [ 178.543717][ T5836] ? __pfx_up_write+0x10/0x10 [ 178.543753][ T5836] ? iput+0x3be/0xa50 [ 178.543785][ T5836] f2fs_write_checkpoint+0xce9/0x1da0 [ 178.543836][ T5836] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 178.543918][ T5836] ? kill_f2fs_super+0x290/0x6d0 [ 178.543952][ T5836] kill_f2fs_super+0x2b8/0x6d0 [ 178.543988][ T5836] ? __pfx_kill_f2fs_super+0x10/0x10 [ 178.544024][ T5836] ? shrinker_free+0x2ca/0x3d0 [ 178.544057][ T5836] deactivate_locked_super+0xc4/0x130 [ 178.544087][ T5836] cleanup_mnt+0x422/0x4c0 [ 178.544114][ T5836] ? lockdep_hardirqs_on+0x9d/0x150 [ 178.544138][ T5836] task_work_run+0x251/0x310 [ 178.544167][ T5836] ? __pfx_task_work_run+0x10/0x10 [ 178.544192][ T5836] ? syscall_exit_to_user_mode+0xa3/0x340 [ 178.544221][ T5836] syscall_exit_to_user_mode+0x13f/0x340 [ 178.544246][ T5836] do_syscall_64+0x100/0x230 [ 178.544267][ T5836] ? clear_bhb_loop+0x45/0xa0 [ 178.544292][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.544311][ T5836] RIP: 0033:0x7f4ac5b8e497 [ 178.544336][ T5836] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 178.544353][ T5836] RSP: 002b:00007ffe05fb4898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 178.544386][ T5836] RAX: 0000000000000000 RBX: 00007f4ac5c0e08c RCX: 00007f4ac5b8e497 [ 178.544400][ T5836] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe05fb4950 [ 178.544412][ T5836] RBP: 00007ffe05fb4950 R08: 0000000000000000 R09: 0000000000000000 [ 178.544424][ T5836] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe05fb59e0 [ 178.544437][ T5836] R13: 00007f4ac5c0e08c R14: 000000000002b898 R15: 00007ffe05fb5a20 [ 178.544470][ T5836] [ 178.635983][ T7074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.861601][ T5836] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 178.892742][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 178.892774][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.892787][ T5836] Call Trace: [ 178.892795][ T5836] [ 178.892803][ T5836] dump_stack_lvl+0x241/0x360 [ 178.892841][ T5836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.892872][ T5836] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 178.892902][ T5836] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 178.892934][ T5836] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 178.892962][ T5836] f2fs_handle_critical_error+0x392/0x5a0 [ 178.892993][ T5836] f2fs_write_end_io+0x563/0x790 [ 178.893026][ T5836] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 178.893056][ T5836] ? blkg_put+0x18f/0x250 [ 178.893083][ T5836] ? bio_endio+0x7e4/0x890 [ 178.893106][ T5836] ? bio_endio+0x82a/0x890 [ 178.893131][ T5836] __submit_merged_bio+0x2a9/0x710 [ 178.893160][ T5836] f2fs_submit_merged_write+0x1f9/0x2d0 [ 178.893199][ T5836] f2fs_sync_node_pages+0x1563/0x1700 [ 178.893241][ T5836] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 178.893262][ T5836] ? __lock_acquire+0xad5/0xd80 [ 178.893318][ T5836] ? __pfx_up_write+0x10/0x10 [ 178.893344][ T5836] ? iput+0x3be/0xa50 [ 178.893375][ T5836] f2fs_write_checkpoint+0xce9/0x1da0 [ 178.893423][ T5836] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 178.893501][ T5836] ? kill_f2fs_super+0x290/0x6d0 [ 178.893533][ T5836] kill_f2fs_super+0x2b8/0x6d0 [ 178.893565][ T5836] ? __pfx_kill_f2fs_super+0x10/0x10 [ 178.893600][ T5836] ? shrinker_free+0x2ca/0x3d0 [ 178.893631][ T5836] deactivate_locked_super+0xc4/0x130 [ 178.893658][ T5836] cleanup_mnt+0x422/0x4c0 [ 178.893683][ T5836] ? lockdep_hardirqs_on+0x9d/0x150 [ 178.893712][ T5836] task_work_run+0x251/0x310 [ 178.893739][ T5836] ? __pfx_task_work_run+0x10/0x10 [ 178.893764][ T5836] ? syscall_exit_to_user_mode+0xa3/0x340 [ 178.893787][ T5836] syscall_exit_to_user_mode+0x13f/0x340 [ 178.893812][ T5836] do_syscall_64+0x100/0x230 [ 178.893833][ T5836] ? clear_bhb_loop+0x45/0xa0 [ 178.893858][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.893876][ T5836] RIP: 0033:0x7f4ac5b8e497 [ 178.893894][ T5836] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 178.893909][ T5836] RSP: 002b:00007ffe05fb4898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 178.893931][ T5836] RAX: 0000000000000000 RBX: 00007f4ac5c0e08c RCX: 00007f4ac5b8e497 [ 178.893945][ T5836] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe05fb4950 [ 178.893957][ T5836] RBP: 00007ffe05fb4950 R08: 0000000000000000 R09: 0000000000000000 [ 178.893969][ T5836] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe05fb59e0 [ 178.893982][ T5836] R13: 00007f4ac5c0e08c R14: 000000000002b898 R15: 00007ffe05fb5a20 [ 178.894015][ T5836] [ 178.894023][ T5836] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 179.075774][ T30] audit: type=1800 audit(1744121980.747:8): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.345" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 179.475266][ T7076] loop0: detected capacity change from 0 to 32768 [ 179.671422][ T7076] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 180.562028][ T7085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.346'. [ 180.667502][ T5831] ocfs2: Unmounting device (7,0) on (node local) [ 180.792939][ T7089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.350'. [ 181.143298][ T7094] netlink: 132 bytes leftover after parsing attributes in process `syz.4.348'. [ 181.242869][ T7096] loop0: detected capacity change from 0 to 128 [ 181.281632][ T7096] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.294315][ T5885] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 181.364861][ T7096] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.448537][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 181.457806][ T5885] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 181.478147][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 181.634642][ T5837] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 181.653767][ T5837] Bluetooth: hci1: Injecting HCI hardware error event [ 181.662657][ T5842] Bluetooth: hci1: hardware error 0x00 [ 181.687477][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.704270][ T5885] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.734279][ T5885] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.743385][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.369037][ T5885] usb 4-1: GET_CAPABILITIES returned 0 [ 182.401168][ T5831] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.412583][ T5885] usbtmc 4-1:16.0: can't read capabilities [ 182.586380][ T5885] usb 4-1: USB disconnect, device number 5 [ 182.819546][ T7100] loop4: detected capacity change from 0 to 32768 [ 182.863541][ T7106] loop0: detected capacity change from 0 to 4096 [ 182.872467][ T7100] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.960768][ T7106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.045306][ T7106] EXT4-fs (loop0): shut down requested (2) [ 183.083106][ T7124] loop2: detected capacity change from 0 to 256 [ 183.096794][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.172598][ T7100] XFS (loop4): Ending clean mount [ 183.477816][ T5836] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.765188][ T5842] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 184.600308][ T7140] loop2: detected capacity change from 0 to 512 [ 184.643681][ T7140] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 184.701303][ T7126] loop1: detected capacity change from 0 to 32768 [ 184.737641][ T7140] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 184.760004][ T7140] System zones: 1-12 [ 184.783788][ T7126] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 184.811544][ T7140] EXT4-fs (loop2): 1 truncate cleaned up [ 184.830538][ T7140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.852718][ T7126] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 184.949485][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.991827][ T7129] loop3: detected capacity change from 0 to 32768 [ 184.999857][ T7129] XFS: ikeep mount option is deprecated. [ 185.035753][ T7129] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.077237][ T5840] ocfs2: Unmounting device (7,1) on (node local) [ 185.305530][ T7129] XFS (loop3): Ending clean mount [ 185.339156][ T7129] XFS (loop3): Quotacheck needed: Please wait. [ 185.416621][ T7129] XFS (loop3): Quotacheck: Done. [ 185.433762][ T7166] loop1: detected capacity change from 0 to 64 [ 185.471399][ T7166] bfs: Unknown parameter 's7NZO񐾤ֆBl#p8`1Ҥ˛lT.Ʌy(K+' [ 185.537303][ T5839] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.595539][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 185.754521][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 185.775405][ T9] usb 3-1: config 0 has no interfaces? [ 185.790481][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 185.822215][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.834258][ T9] usb 3-1: Product: syz [ 185.838477][ T9] usb 3-1: Manufacturer: syz [ 185.852179][ T9] usb 3-1: SerialNumber: syz [ 185.874856][ T7171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.370'. [ 185.879767][ T9] usb 3-1: config 0 descriptor?? [ 185.962097][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.375'. [ 186.160363][ T9] usb 3-1: USB disconnect, device number 6 [ 186.198345][ T7179] loop3: detected capacity change from 0 to 128 [ 186.244009][ T7179] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.304766][ T7179] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.623502][ T7177] loop1: detected capacity change from 0 to 32768 [ 186.643657][ T7177] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.376 (7177) [ 187.353543][ T7177] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.373580][ T7189] loop2: detected capacity change from 0 to 256 [ 187.374760][ T7177] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 187.390111][ T7177] BTRFS info (device loop1): using free-space-tree [ 187.405912][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.430710][ T7189] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.473358][ T7189] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 187.497416][ T7199] loop4: detected capacity change from 0 to 128 [ 187.515777][ T7189] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 187.582529][ T7189] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 187.586842][ T7199] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.627824][ T7189] exFAT-fs (loop2): Filesystem has been set read-only [ 187.661525][ T7189] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 187.683618][ T7199] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 187.703707][ T7210] netlink: 60 bytes leftover after parsing attributes in process `syz.3.379'. [ 188.055740][ T5840] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.797971][ T5836] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.001037][ T7233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.293850][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.303049][ T7239] loop2: detected capacity change from 0 to 128 [ 190.586080][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 190.721709][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 190.820774][ T7242] loop3: detected capacity change from 0 to 128 [ 190.828452][ T7239] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.894873][ T7239] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 190.895809][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.938053][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.976854][ T7242] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.989742][ T7242] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.017257][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.257337][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.280963][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.292579][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.340393][ T5885] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 192.504485][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 192.690871][ T5885] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 192.702519][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.720209][ T24] usb 5-1: usb_control_msg returned -32 [ 192.742006][ T5830] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.751905][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.769884][ T24] usbtmc 5-1:16.0: can't read capabilities [ 192.810262][ T5885] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.842910][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.865434][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 192.902883][ T5885] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 192.924550][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.960506][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 192.981596][ T5885] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.025358][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.070636][ T7258] loop2: detected capacity change from 0 to 256 [ 193.070976][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.129058][ T5885] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 193.145810][ T7259] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 193.153164][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 193.175252][ T24] usb 5-1: USB disconnect, device number 4 [ 193.192414][ T5885] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.230428][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.273135][ T5885] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.294182][ T5885] usb 2-1: string descriptor 0 read error: -22 [ 193.301674][ T5885] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 193.311136][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.335290][ T5885] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 193.488759][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 193.903073][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.980911][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.004825][ T5888] usb 2-1: USB disconnect, device number 5 [ 194.066528][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 194.084579][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.172424][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204445][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.646183][ T9] usb 4-1: usb_control_msg returned -32 [ 194.694487][ T9] usbtmc 4-1:16.0: can't read capabilities [ 194.869761][ T7261] loop0: detected capacity change from 0 to 32768 [ 195.043284][ T7261] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.397 (7261) [ 195.083961][ T7261] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 195.757431][ T7261] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 195.768577][ T5888] usb 4-1: USB disconnect, device number 6 [ 195.848605][ T7261] BTRFS info (device loop0): using free-space-tree [ 195.986856][ T7298] loop4: detected capacity change from 0 to 128 [ 196.097298][ T7299] loop2: detected capacity change from 0 to 2048 [ 196.125575][ T7298] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.181065][ T5831] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 196.193356][ T7298] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.239287][ T7299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.719431][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.228115][ T5836] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.464797][ T5889] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 197.472800][ T5886] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 197.513246][ T5901] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 197.654435][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 197.725283][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.746734][ T5889] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 197.756003][ T5889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 197.767757][ T5886] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 197.792642][ T5889] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.792768][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 197.804737][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.808990][ T5886] usb 4-1: config 0 descriptor?? [ 197.845242][ T5889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.904903][ T5889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.914889][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.921170][ T5889] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 197.930817][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.059622][ T5889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 198.063750][ T5901] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 198.115629][ T5889] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.270765][ T5889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.282349][ T5889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 198.296739][ T5889] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 198.316287][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.335103][ T5886] lg-g15 0003:046D:C222.0002: unbalanced delimiter at end of report description [ 198.336711][ T5901] usb 3-1: config 0 descriptor?? [ 198.349808][ T5889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 198.371583][ T5886] lg-g15 0003:046D:C222.0002: probe with driver lg-g15 failed with error -22 [ 199.084390][ T5889] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.122707][ T5886] usb 4-1: USB disconnect, device number 7 [ 199.160515][ T5889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.207570][ T5889] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 199.208288][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 199.262347][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 199.291803][ T5901] usb 3-1: USB disconnect, device number 7 [ 199.406144][ T5889] usb 2-1: string descriptor 0 read error: -22 [ 199.412490][ T5889] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 199.425615][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.872922][ T7342] netlink: 40 bytes leftover after parsing attributes in process `syz.4.416'. [ 199.892245][ T7342] [ 199.894619][ T7342] ===================================== [ 199.900188][ T7342] WARNING: bad unlock balance detected! [ 199.905739][ T7342] 6.15.0-rc1-next-20250408-syzkaller #0 Not tainted [ 199.912338][ T7342] ------------------------------------- [ 199.917887][ T7342] syz.4.416/7342 is trying to release lock (&dev_instance_lock_key) at: [ 199.926243][ T7342] [] do_setlink+0xc26/0x43a0 [ 199.932431][ T7342] but there are no more locks to release! [ 199.938155][ T7342] [ 199.938155][ T7342] other info that might help us debug this: [ 199.946232][ T7342] 1 lock held by syz.4.416/7342: [ 199.951178][ T7342] #0: ffffffff90100308 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 199.960265][ T7342] [ 199.960265][ T7342] stack backtrace: [ 199.966165][ T7342] CPU: 1 UID: 0 PID: 7342 Comm: syz.4.416 Not tainted 6.15.0-rc1-next-20250408-syzkaller #0 PREEMPT(full) [ 199.966187][ T7342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.966198][ T7342] Call Trace: [ 199.966206][ T7342] [ 199.966213][ T7342] dump_stack_lvl+0x241/0x360 [ 199.966242][ T7342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.966265][ T7342] ? __pfx__printk+0x10/0x10 [ 199.966288][ T7342] ? print_lock+0x171/0x1a0 [ 199.966309][ T7342] ? do_setlink+0xc26/0x43a0 [ 199.966326][ T7342] print_unlock_imbalance_bug+0x185/0x1a0 [ 199.966369][ T7342] lock_release+0x1ed/0x3e0 [ 199.966386][ T7342] ? do_setlink+0xc26/0x43a0 [ 199.966402][ T7342] ? do_setlink+0xc26/0x43a0 [ 199.966419][ T7342] __mutex_unlock_slowpath+0xee/0x800 [ 199.966437][ T7342] ? validate_linkmsg+0x70e/0xa40 [ 199.966460][ T7342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 199.966478][ T7342] ? __pfx_validate_linkmsg+0x10/0x10 [ 199.966500][ T7342] ? finish_task_switch+0x1e5/0x870 [ 199.966518][ T7342] do_setlink+0xc26/0x43a0 [ 199.966536][ T7342] ? __schedule+0x1ba6/0x5240 [ 199.966560][ T7342] ? rcu_is_watching+0x15/0xb0 [ 199.966585][ T7342] ? __pfx_do_setlink+0x10/0x10 [ 199.966602][ T7342] ? preempt_schedule_irq+0xfe/0x1c0 [ 199.966655][ T7342] ? rcu_is_watching+0x15/0xb0 [ 199.966676][ T7342] ? trace_irq_disable+0x3b/0x120 [ 199.966693][ T7342] ? preempt_schedule_irq+0x145/0x1c0 [ 199.966717][ T7342] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 199.966745][ T7342] ? irqentry_exit+0x63/0x90 [ 199.966759][ T7342] ? lockdep_hardirqs_on+0x9d/0x150 [ 199.966778][ T7342] ? rtnl_newlink+0x17c3/0x1fe0 [ 199.966796][ T7342] rtnl_newlink+0x17e2/0x1fe0 [ 199.966818][ T7342] ? __pfx_rtnl_newlink+0x10/0x10 [ 199.966834][ T7342] ? rcu_is_watching+0x15/0xb0 [ 199.966855][ T7342] ? trace_sched_exit_tp+0x3c/0x120 [ 199.966871][ T7342] ? __schedule+0x1ba6/0x5240 [ 199.966901][ T7342] ? preempt_schedule_irq+0xfe/0x1c0 [ 199.966929][ T7342] ? __pfx___schedule+0x10/0x10 [ 199.966952][ T7342] ? preempt_schedule+0xe4/0xf0 [ 199.966975][ T7342] ? lockdep_hardirqs_on+0x9d/0x150 [ 199.966992][ T7342] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 199.967014][ T7342] ? rcu_is_watching+0x15/0xb0 [ 199.967035][ T7342] ? trace_irq_disable+0x3b/0x120 [ 199.967051][ T7342] ? preempt_schedule_irq+0x145/0x1c0 [ 199.967077][ T7342] ? aa_get_newest_label+0x101/0x6f0 [ 199.967100][ T7342] ? __lock_acquire+0xad5/0xd80 [ 199.967125][ T7342] ? __pfx_rtnl_newlink+0x10/0x10 [ 199.967142][ T7342] rtnetlink_rcv_msg+0x80f/0xd70 [ 199.967156][ T7342] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 199.967179][ T7342] ? rcu_preempt_deferred_qs_irqrestore+0x8c6/0xcb0 [ 199.967199][ T7342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.967221][ T7342] netlink_rcv_skb+0x208/0x480 [ 199.967238][ T7342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.967255][ T7342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.967277][ T7342] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.967294][ T7342] ? __rcu_read_unlock+0xa1/0x110 [ 199.967312][ T7342] netlink_unicast+0x7f8/0x9a0 [ 199.967340][ T7342] ? __pfx_netlink_unicast+0x10/0x10 [ 199.967363][ T7342] ? __rcu_read_unlock+0xa1/0x110 [ 199.967380][ T7342] ? skb_put+0x114/0x1f0 [ 199.967400][ T7342] netlink_sendmsg+0x8c3/0xcd0 [ 199.967421][ T7342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.967439][ T7342] ? aa_sock_msg_perm+0xf3/0x1d0 [ 199.967461][ T7342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.967477][ T7342] __sock_sendmsg+0x221/0x270 [ 199.967503][ T7342] ____sys_sendmsg+0x523/0x860 [ 199.967526][ T7342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.967545][ T7342] ? __fget_files+0x2a/0x420 [ 199.967564][ T7342] ? __fget_files+0x2a/0x420 [ 199.967584][ T7342] __sys_sendmsg+0x271/0x360 [ 199.967606][ T7342] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.967646][ T7342] ? do_syscall_64+0xb6/0x230 [ 199.967664][ T7342] do_syscall_64+0xf3/0x230 [ 199.967680][ T7342] ? clear_bhb_loop+0x45/0xa0 [ 199.967699][ T7342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.967715][ T7342] RIP: 0033:0x7f4ac5b8d169 [ 199.967730][ T7342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.967744][ T7342] RSP: 002b:00007f4ac69bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.967762][ T7342] RAX: ffffffffffffffda RBX: 00007f4ac5da5fa0 RCX: 00007f4ac5b8d169 [ 199.967775][ T7342] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 199.967786][ T7342] RBP: 00007f4ac5c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 199.967808][ T7342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.967818][ T7342] R13: 0000000000000000 R14: 00007f4ac5da5fa0 R15: 00007ffe05fb5608 [ 199.967835][ T7342] [ 200.564478][ T5889] usb 2-1: can't set config #168, error -71 [ 200.577502][ T5889] usb 2-1: USB disconnect, device number 6