last executing test programs: 43m0.815258338s ago: executing program 2 (id=389): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) 43m0.731481093s ago: executing program 2 (id=390): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) memfd_create(0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9) 42m59.375931292s ago: executing program 2 (id=391): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0xed) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000001c0)={0xffffc7ff, 0x50000, 0x0, 0x1, 0x10}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f00000005c0)={{0x7, 0x7}, {0xffffffff, 0x200}, 0x3, 0x1}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xc6, 0x5, 0x2}}}, {{@ip={@multicast2, @remote, 0xffffff00, 0x0, 'syzkaller0\x00', 'tunl0\x00', {}, {}, 0x84, 0x0, 0x4}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) personality(0x400000a) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x8, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r5) 42m58.248008998s ago: executing program 2 (id=394): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5522, &(0x7f00000004c0)="$eJzs3M1rI2UYAPA37Xa3++FaxIO3HViEFjah6ceit6q7+IFdyqoHT5om05DdJFOaNK09efAoHvxPRMGTR6+eBA+evYkHxZugzLzTZesHLjRtdre/H0yeed+8eeZ5Qyk8M5AAnFlzye+/VsLVcDGEMB1CuBJCcV4pj8JaDC+EEK6FEKYeOirl/IOJ8yGESyGEq3nymLNSvvX5jdH11V/e+u2bHy6cu/zF1z9ObtfApH3f+262tx3P93oxZu0Y75XzjVGniL2VURnjG7375TiLcS/dLDLsNQ7XNYq43I7rs+3dQR63uo1mHtudrWJ+ux8vOBi1D/MUH7jX2CnGrXSziJ1BVsT2Qaxr/yD+bzsYDGOeVpnvoyJ9GA4PY5xP99O4n+37RWz2h+V8zJu10v08jspYXi40s26rqGPzON/04+3tTn93PxmlO4NO1k9Wa/WXavWb1fpO1kqH6Uq10WvdXEnm2918WXWYNnpr7Sxrd9NaM+stJPPtZrNaryfzt9LNTqOf1Ou15dpidXWhPLuRvH7nvaTbSubz+GqnvzvsdAfJVraTxE8sJEu15ZcXkuv15J31jWTj7u3b6xvvfnDr/TuvrL/5WrnoH2Ul80uLS0vV+mJ1qb7w+O0/z3si+/+kLHqM+4djqUy6AIAnj/4fmIQX8z79RPr/nbshnHz/H/T/Y6H/P9v7h2PR/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFk/zXz5RnEyF8eXy/lnyqnnynElhDAVQvjzX0yH80dyTpd5Zv5j/czfavi2EooM+TUulMelEMJaefzx7El/CwAAAPD0+urja5/Fbj2+zE26IE5TvGkzdeXDMeWbDSHMzP08pmxT+cvzj7b2/P+uyP++z4X9Y1cVFTewZseULN5yOzeubI9k+kiYfShUYpg61XIAAIBTcbQTON0uBAAAgNP06aQLYDIq4fBR5oMnqBdiKB8IXjwyAgAAAJ5AlUkXAAAAAJy4ov/3+38AAADwdIu//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MXO/dwmDkRxAH42eGH/adFq79vK3qCMLWGPe4woIE1QQA6khTRADeSWEiKI8DgEIg6RPLaV6PskZzKW+fEGwWFmpAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALt1X68Xt1e/rtjm7fTt5RgMAAABcsq3Wi/qfWep/be5/b279bPpFRJQRcWnuPopPZ5mjJqd6ef7m9PnqVQ13EXXC4T0mzfUlIv401+OPrj8FAAAA+Lg2y9U8zdbTn9nQBdGntGhTfvubKa+IiGr2kCmtPOT9yhRWf7/H8T9TWr2ANc0UlpbcxrnS3qT+uR9X7aYnTZGa8uLLjkVmGzsAANCj0VnT7ywEAACAPv0bugCGUcTzVuZxK3CSmmZ77/NZDwAAAHiHiqELAAAAADpXz/97Ov9v7/w/AAAAGEY6/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubav1YrNczdvm7Pbt5BkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDE/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7984bRxUFAPjMvkzCyxjkwgiBRAENcTYhIR2iAFkU/AQky9kEkw2PxAWJIoQbOuQ6DYISISSQ6fIfUidSmtClcBEkatCdhz12gnBAzEzs75Pu3LOzo7nnzsqWz9zxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUtt7ZiftpM1vEvXLfrfvXVlJ/e0+f3Ni4s5BairMmk348vFR/kc3veu+ZppMBAADgcOhX9X1E3B1uLqW+N5vX/8PqmFTzf/d0EVf1/N66v+qr2j+1X3+598L2QLPFOOmk51ank+MPpjL4/2bZbc/+4xGD/Mrn9176+QfSe3/9+a1hfj2zb27efHeUhzNNZAsA/BvHqr4Mqr+HUj9uMzEADo1BrfCu6v/+bLs5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADRhaz2erOIsIhYGO3Fy+/61lb39TPnejY07C6mdvn59I77aOWc6xTAizq1OJ8ebm0rnXb5y9cLydDq51HzwckS0Nfrb5fQvfLiPgyNauT7dCrIofpy6ks8jBL3yw+5KPo9H0N7vJAAADqZh2VJdf3e4uZT2ZXMRf36/u/5/rRbH39T/Uav9U7v30elb9bHq9f+4sRl23+Laxc8WL1+5+sbqxeXzk/OTT948MX5rfPLMqVNnFvN7JYvumAAAAPDfjMpWr/97cw+u/x+txbHP+v/zb8df1sfqq/8famfRr+1MAAAADrfnXvnj9+wh+7PRKL5YXlu7NC62269PFNsWUn1kM2Wr1//9ubazAgAAAJqwtZ7tWv8/W4tjn+v/T/3w4k/1c/Yj4ki5/n9s5dPp2eam02lN/Dtx23MEAACgXUfKVl//H+bP//e2H3noRcTrrxZx+TWA+6r/++99/WN9rPrz/yebm2In9eaL65H38xGD+bYzAgAA4CB7omyp2P9tuLn08c9HPxh5/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgaX8FAAD//3mMOsY=") 42m55.060119584s ago: executing program 2 (id=402): syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2800883, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@mb_optimize_scan}]}, 0xff, 0x470, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 42m54.686761006s ago: executing program 2 (id=404): read$FUSE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 42m37.984469061s ago: executing program 32 (id=404): read$FUSE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 39m59.683447433s ago: executing program 4 (id=740): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, 0x0) 39m58.263383776s ago: executing program 4 (id=742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0), 0x0, 0x0, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_to_hsr\x00', 0x0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001040)={[0x4, 0xffffffffffffffff, 0x80000001, 0x4004, 0x2, 0x80000000, 0xefffffffffffffff, 0x0, 0x8, 0x2000000, 0x0, 0x1c, 0x3, 0xcbb, 0x9], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39m56.442392302s ago: executing program 4 (id=748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 39m56.164125389s ago: executing program 4 (id=749): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1a, 0x522, &(0x7f0000000c00)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtlHVC+VUIVQJ0SOHbUicKIodR7FTmrCH7JE7EpU4wYkzByQOSD1xR+IANy7lgFRgBWqQkHDlsZ11/ji2sondjX8/aeQ38zz+3tvRvGd93swLYGLdioj9iLgWEe9GxFzneNLZ4s321nrfJ48eLB88erCcRLP5zj+TrL51LHrOaXmm85n5iPjBWxE/So4F/VNEfXdvY6lSKW93DhUb1a1ifXfv7np1aa28Vt4slRYXFudfv/da6cL6+lL1Nx9fj4jf/+7LH/1x/1s/aTVrtlPX24+L1O76zGGclumI+N5lBBuDqU5/rp3n5HOdxEVKI+JzEfFydv/PxVR2NY86epm+PcLWAQCXodmci+Zc7z4AcNWlWQ4sSQudXMBspGmh0M7hvRA30kqt3rizWtvZXGnnym7GTLq6XinPd3KFN2MmWV2fLi9k5e5+pVxKju7fi4jnI+JnuevZfmG5VlkZ5xcfAJhgzxyb//+Ta8//AMAVl39czI2zHQDA6OTH3QAAYOTM/wAwecz/ADB5zP8AMHnM/wAwecz/ADBRvv/2262tedB5/vXKe7s7G7X37q6U6xuF6s5yYbm2vVVYq9XWsmf2VAd9XqVW21p4NXbeLzbK9Uaxvrt3v1rb2Wzcz57rfb88M5JeAQBnef6lD/+SRMT+G9ezLXqe9z9wrn7xslsHXKZ03A0AxmZq3A0Axubkal/ApJCPh8n1/2azGT1r90bEw8NSz8NA+/4XoQ+GCpNaNxQ+e25/8Qny/8BTTf4fJtf58v++y8NVIP8Pk6vZTKz5DwATRo4fSAbU9/7+P9/s2Rnu938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4kmazLUkLnbXAZyNNC4WIZyPiZswkq+uV8nxEPBcRf87N5Fr7CxFh3SAAeJqlf08663/dnntl9njttdx/c9lrRPz4F+/8/P2lRmN7IeJa8q/D440POsdL42g/ADBId57uzuNdnzx6sNzdRtmej7/TXly0Ffegs7VrpmM6e81nuYYb/046+22t7ytTFxB//2FEfOG0/idZbuRmZ+XT4/FbsZ8dafz0SPw0q2u/tv4tPn8BbYFJ82Fr/HnztPsvjVvZ6+n3fz4boZ5cd/w7ODH+pYfj31Sf8e/WsDFe/cN3TxxszrXrHkZ8aTrioPvhPeNPN37SJ/4rQ8b/64tfeblfXfOXEbfjtP4nR2IVG9WtYn137+56dWmtvFbeLJUWFxbnX7/3WqmY5aiL3Uz1Sf94485z/eK3+n+jT/z8gP5/fcj+/+p/7/7wq2fE/+bXTr/+L5wRvzUnfmPI+Es3fpvvV9eKv9Kn/4Ou/50h43/0t72VEwcHLTgOAFya+u7exlKlUt5+8kL+zPekFxFiiEISsX/JIR4Xcr/+6VuD35wbWXvOWYh+VVOflRZemULuHGflL/Y+HbIw7pEJuGyPb/pxtwQAAAAAAAAAAAAAAOhnFH9ONO4+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHV9GgAA///+udUz") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 39m54.461218158s ago: executing program 4 (id=755): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x1}]}, {0x0, [0x2e, 0x30, 0x2e, 0x2e]}}, 0x0, 0x2a}, 0x28) 39m52.776067766s ago: executing program 4 (id=759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r4, &(0x7f0000000240)="bad33075218151db00316f3a277f953286ddd1dc", 0x14, 0x2000041, &(0x7f0000000080)={0x11, 0xf5, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 39m51.85869821s ago: executing program 33 (id=759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r4, &(0x7f0000000240)="bad33075218151db00316f3a277f953286ddd1dc", 0x14, 0x2000041, &(0x7f0000000080)={0x11, 0xf5, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 28m9.424007599s ago: executing program 3 (id=3041): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f", 0xc6}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="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", 0x162}, {&(0x7f0000000d00)="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", 0x145}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 28m8.404685399s ago: executing program 3 (id=3043): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 28m8.124211315s ago: executing program 3 (id=3044): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 28m8.024421191s ago: executing program 3 (id=3047): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x2, 0x10004041) 28m7.854651021s ago: executing program 3 (id=3048): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e6576650000"], 0x58}, 0x1, 0x2}, 0x80) 28m7.690404091s ago: executing program 3 (id=3050): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) bind$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) 27m52.61787853s ago: executing program 34 (id=3050): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) bind$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x20, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) 23.303431694s ago: executing program 1 (id=7686): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) socket$netlink(0x10, 0x3, 0xc) unshare(0x2040400) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000780)={0x8, {"7dca779dfb6b1afe5afdd81af7fc4380f731934c82bc3bff08f666d1523eb93bb0cd692b00305d65bd611e46c9d8cbee60b871569bb8111992ff0cf3d4474caa9d3898de9b2ddfbeeeb5194c6f9c0c78a839ac5949509b154665fe9e94dec81697f92a065cc9ab0b5933726ad86c5cc4edf21a14dff1f7bca3cc9da4646be0bb8e9d6d022f28f8cf216d23ff0da8a161ed5b4f44cbbc3bf5fa2bcd6094da99681cf85f73da26ba8773f17904ec821ff61cc055d63e371a712aab041e34e820e2a869abdbfdb37d9674783ecb6c55671fc53025f22920d17c9def7a6257756f6cbb931c48bd4138c072a36d7d4ec913525af7aa3b8b349b8bf7a186feed32ae601bb93bb66048f0cb57cd792100920544d76580fb7d74ff6d8801968d198fe8b7df301cf0a2518ef7162ff9cd6f5a1593af7ad0412f5612bfe9423cbe99bb7ba02363a8143b74a1682703b1e235cf62395c2fea24934fb86bec8e43865f203ac2ca5e7c02efcf6b98a4f705d8dbff194de7900e3199e60ce48b97ae926806e17dbd3ef777cd6dd9ea2e54feca22bcbaae599cf10ac3d9e60543caf267927dfd134b7010bc4afd4fb7b02d1cf44b38fe79994b691c39262df431e8f7c51ed1ebe146a24eb858ab824d1d510a589c5b529d33b879cfec15968db22499f7e0952a8f6b7e00ab1bd5f02df8054bec769c986e558ff065adc850bd7577faca7e48289798e2258bf30524bab5095635761266c82568286e10664b2e9c54706c71aa98bb2c3da66f646a1d954727f12f4b8d64959ae309bdebb9c4b30ccaec462c1c550473fdc6d6bc74be5ee4efb3ab3e58edfdb49f4919e807f75fb5ee9263bcc195e003d3cce590ad4e1368c4a93b83a3a132f45eaafebf2bcf748f0ac95817953bc91b51bc0f61f64cca46a9de786b33f441352f95932fde876ce93a48d3116e6757e6f17b8d37a298d5bb5d1661049ff6a54df8c9590de513951cafccb1d3134e9673c452c6e5e4328728a352cf317a96d9d460b72da94f67251abbf56ec37d16e13aa1baa9f8e4e5b7fad524a79f81f617eabac3cb6756cbea58c566e0c71004b466b503ca8c674fc3afef7be74d9e3e4457edb864c30d764e65b9278a1d97f40e31d14325218dfdc0a6da1fddc2d8ca5eeb512fd09036e6ba85c18949a4baf92028b72cc7ff247937567a483b0f3f6fb0fc1d39510b58ffb5006aeea0deecb808b7f056aa61d9d24f2d2f1093f6c2056d4684ce495a8f1bd714ff51c2ca6b5a8063104f4c504d22e5a388d839b22c28eb43ec92ec6574b5360c83677733e7d318a4dd43d008d047af6f9a1d7da274a8c386d0150edcf00e8463fee376823e62c103c9fab929787db78d2187a8b0ec61352681f6ebacf2c9bd1fd636bad512f85418ccd7849a833a967a1885182b7d2b6f7d2bab7d83dfe92882ed3db6259d954187fa770dc9b70d7b1875bab118c6899e00d0d13cf1b95c81aba6b499b8398084e7a5a5110f455b949f6f12c4e5703528c6aba12f3bb81bafe540d20072ec6735ddebfc4ba68063dec0d0ad00e63c294faf191cd98f4fe1efae5145c68338d6089322a82c573012b4bf569f65b244b5de70df5e6610ad076fa39d9b813e8f7d32aaecf433b4772562fe062e9d502f00f4646cce3a0515012eb08fcf045508319be80ac34e6024d39926bf2ea5cf20e488b8eef72cd8ff30fc9d02fed93f3854ab9753b6a5bc2b0376490c39661923715720adc8bae4f8ec0dc256799f3decb57c86e39058e1f9bc1067fd4ea2edca532d83ad5f066322f023d1c2eb968692d51161f9b9e3201bb4a585994e41561b42e239515485f2dc4c2a2be4268dc5665cfd635396b72123418425fe75e5144f1354e59ed24f61776b754f95ded641fc516fca81559913206f158409e77281680351f0a0b764a1716abca426b07410ebf19004b2e4a941df1391df29399265c27d2ef54c866c3acd7f776ee6e1bdfca753e6b0b30580f40d6dae49c37a5d5908ed6884dabd84699b32aa24884fd3584a4f29ab9033ce5f7f4c58a8f8cbde43c5b82eb9225ccea75fdad40414600d9288299b780e995906aa4e5d2bad96f49b45a59a30669d1035d80217759bcf04d173a4d4686ffa190806de90959a902ccb66d7f96819cff6cd962fc893ce748189c1e2f80bc77e67d7aad160beee408d0b2e565ce2770796d32ea018a36810d07fb8dd45ac340a7dfd7094d94bb38cd679269c837e5a3e43a9eae1605a5cb94af80da32b20bd236dd39b0de58dd4ad09546d6ccf9b75fed878fd49f202c1c00d0f17aa8b4c68ae811bafed82315ed7c93a9a89f160d6eed5639d60bf3793c3f1cce54664d39b5d96b195621ee780abc62d31cf199251e341380fbd52ee1cc3ed49c13dcb5381256304cd79f27ad28835108199fe42c86ac31d406ffbaaeebf4e171acd4c50614fb3feb914992aa479125247669a7bd675a9060d1af1fbc72fd48318784f87249952885a3a011da3381f33d268084136aaff2f09358e20649ee534fd02c0032b68301ba0305588c17444a26e499be703f4566608a76f62bcc780c65fdaedaf981cc4c1d7a5ea25ddcf29f4f110fdf374efef76ea7d5630c552cac22fa323660fb2203c66fa485ea9fea6154b3b26d880c48690c3bedfa8786b349c297ecdc854591ff32da2ce8c5102162851f9e4dda0eda15d68d9196757ec9d309798ed44f68d0ff9a42286bdac79d840df392c03a6ebbe0d1d0ab1b4c656ecc27fa1999ae7ebf761a825415bd68e45554d122e6c0be6c7d56f891e192b46992001119db02771aba231d24e24e38024109448c398d6cd89817d3182800c6176baa52e164d81566ab773bc63b4752589dc7180fc2a44a903edbb045f896d76906a82fb14997405097f7b62de86eb43e2abed2bbbe25ffa0f8ff674346ae8cf07cccc0ac2aa805cfa01b565d31cf9b163c56bfa0b534da9529cc4ef1b85f4e2a09d98c5786dee8ef7f5547b13f1c0f21e309a280c3c36067fb76b2f8d17d22b8768f74446ed57e79b3161237ccde8067763f2856044d0ea2d4e944546379c2282cf0597a619e81eeb11f24125ccf32e65c4cc1a1747833937fadb057de276f771e5e40a5ae92714be591b03988662d0ab592f4e3c0f99bf63f5aa9a28031ce39d5c00d95e961a8c0176c3f2ba7cf1f58134aaf372739ffcd44903f009e2e8d54d0957f91c5ef56d7f1fe39c18032cd28fa789bec06731c28f7974c6aa7f78626e4a1a3dd47e4fa8aed067ad7f3112a3861203813edc0438234aee770ccc46395afd78397b1d3113f9c8a4909fd8e3fb214f326685981f2a62071ba7619a4cce357c3ebb812fed9f31add7c50dbebe14157206a006af17edbd012be29b7890a6261b325a2c38a4662120e7c1b74f8c16cef6b1932c49e1ad4ea4d9d086399568ccd63ddf35f96195ac04f47e6b2306c61673df038b1b08d794d68f4872eb1ebdf19468f08026faa3759df5236326e01d0dbd210ae3dbadada48218faab10f2966cd4d8fd179168b9b3919779277a05320cef56e4b7ff83bbea6a4fdc5911688e2518cc98376801aff6796c89aeb65cc0152c4383fcc24ab47a9c2a9451de5a18950f482359a8522824379fb621810ebdb8bc5d48a9df64167e1e5985c6ab78abc38824a132654eb0da541c3c9bef4d6a4aee463bd252ebbb9477f92610ab3a5ab6c67d48b407ef89e2d6c37f5bd6bfd5aba7fc3ae5c6d9f08cecb1364f7a354f7e986e1a3a7bb4216d3964096986bc72511446ee3c8c33b4f617951c2ba01f93e29a00743dada6dbae040aaced7febf92e38d0483383a2b33170f30f045f06a664ae39577079a900cde851a33a33dd3cee8bbd752cb72c7a5be1cc833b35526886040267f73ac349df05a694c7941769f95f5a3941e87c960848d7deb0c39d88021287fcfd9f1d6fcddcac74a94d40ce53f232e3e0bba239aad17eea6b25aecda6f9379e6d23d6090d959fc21bb3af0572c45e8533f367b61dcfd2c8b93e65ac19b896bbdfc36c668d42101402b8a0fae06e7b9614d16223fade45261f84c49a74a2e7629ac7bf6bda7714122a3d7eca013f853eb0e5c97f03579c6efed4392e20c5e4d1b9356e87c0f39a3168611dbc618219adf73eb3d76c5bb070d6afc01770c94ec20b6e9f2c7d9aa734f50f9c40e21500860c5cd808e3c9ab6b46394d20756cf352782022d460093601cdc2741b196a4f3f0688676602f8cbec1bcad9045821e5eaadd11e4e9b43a284d3c74c205e38972fb1d9e812edb8d62cce5dfce340373f8f33a37d289bfcc64202b78ab3fce21513170677b2455c251e60c80a3163bbe2b30ada5f18d69ff5e2104c43bb8bc7041a7a1ad17a8b25904bd30d491bd94bc275179cac1b47b549f942bf70719b6f9d4ebb637e56d0dc1f6a266a46c613ac06b3ff1681599d6667f4dc7b45dac6b826e424e47b3a07040c65f1855613d94a63dee6030eeeb6a30dbef00d91f2eb7d0e8db11d4ceda51a7961dce00de14585234c1346ef8e2c88984c6023190b06b6042015f72934a476c1b8e02f695207605eb48dfce6badea7490742060ff9c872a7d8185210afc11240857b0311f3b488848ababba9d4a066023473d83d2a189e0f2277e1861466305fce25f25b2fba5facd5dc57b59616f764c3acb9562b1c11807212d557af998e0bcaa1085dee623539858cc106459a96ff5f513d05f8bd21300f6b3755baf9a322311863b4c9c08e2ffc553d63b08031ba58dfea76437b3485035e9432b4631f93f9bddf487383236c9aedd8d24c327c51c8b7663999b84590e66ea14f2b2a1c50d31a8b49ecd4fd579308fbee89d0a7c72718a08ac9d837d096d14eba2bbd896bc6fc55b9aaab8238ee511d84d92fb62e7b197ddaed50c01c381e7669e96c72aeb7d025bd8eadee189fe7d56203acb889ecf65ef96b928c9e0e9a577bea117a1647db7b342fbead43600e87d9d1a35c44a8e799c07375ce367cc96e93153050d6d8e334efadf467611b90170e03af0e6554ddc2333e44bae5b831b4609860c262abfdfadacb980f63f99235aab7b9d090d98c16247758b275400df428093e65831b292b415d1aa20bdee18985f0fd9c28f6f86483130158bde1d53d4f5169565e88b5dcceb77bbac3b8a7dbbdcdb02a6196b047934455993684a1658a18a8579bb190c2989c559af99ac1ceba26cb20fe611f5d46d4b4d818d1add9767aae60f39a3562bc64149aace8327e6a02e00783ae866dc6551a48d0f351d07455b54e2054e66043ed9a57741b4e9fcf074fd3668b3216ff8446d3d23d83630f6a08b91d7a714c72d2b5f56b8512a845328e1f3906556d6e20accd3bf57e5a747fec1cbd2188f47b05f9991a49c2b8fcbf9ec89c37fcfd3ff563f9877612b94bb27a71c7458447143a9ea26f72b5186f3f40a9caa4b10df3a33d3fe87b4ba3e56bcaf9550bdc9e09d800dd3c30fcb7c9c86f409af7f367565afc29c582bf679eec215d6a4de854943d72ad2d99398bd46648cd1a0a420c07eac8fc2cd68efe8b565cbbf4039e0e36f67a8f1ec345a7aa25afa8b7edef95bb55bd85aa64d11788b3c9ee5116c4d4270662e3d56d0e118af6ac69b8d284aca637989a9e0b7c6432ce217400408ecee04a7887e2becc241ca6d10716d8bb1ffafc332a3ee3bd9dcbfa23a0a781167b02d4829d66db3971ecdf12cfe1361bfc154b0a868c3cd4ccd303bbf9e6355b0e1719a2e5bb8c130333a3361b97d79e63e2cbc615d138c02ca168324d7f6d5cb98cede37c986f4b", 0x1000}}, 0x1006) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0x8}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 17.456136344s ago: executing program 1 (id=7693): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) 12.016092911s ago: executing program 6 (id=7702): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0) 10.361045595s ago: executing program 5 (id=7705): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800001, &(0x7f0000000380)=ANY=[@ANYRES8=0x0], 0x3, 0xa86, &(0x7f0000000e40)="$eJzs3U1sXEfhAPB5a68TJ+k/m/4TapLQJny05aN245jwEUFTNReipuJWqeISpWmJSAMilaBVJZKcuNGqClco4lQOFSCk9oKinrhUopG49FQ4cCAKUiUOtJAs8npm/Xay27e2Y++u9/eTxrPz5u3OvOe3b9/XzARgbNVafxcWZooQrrz16vF/3P/36cUpj7TnaLT+TpZS9RBCEdOT2ee9P7EU3/zgpdPd4iLMt/6mdHjiRvu920MIF8OBcDU0wt4r1155Z/7xk5dOXD747utHr6/P0gMAwHj59tWjC3v++ud9uz56495jYUt7ejo+b8T0jnjcfywe+Kfj/1roTBelUDaVzTcZQy2bb6LLfOVy6tl8kz3Kn8o+t97O39cx35aK8idK07otN4yytB03QlGb7UjXarOzS+fkoXVeP1XMnj977pkLA6oocMf9674QwgFhpaHZbP6ktQKHoC6CsNrQ3DnoPRDAkvx+4W0u5lcW1qb9aZP9lX/j0Vr398MdsNHbv/JHq/xfX7LH4c7ZrFtTWq70PdoR0/l9hPz5pZV+/9Pn5fcj6n3Ws9d9hFG5v9CrnhMbXI/V6lX/fLvYrL4R47Qevpnll78/+f90VP7HQHf/3qjr/69ND/xa52I4MAR12NShPgR1EPoOzUHvgIChtfzc3JJmlPLz5/ry/C0V+Vsr8qcr8rdV5G+vyIdx9vvnfxZeLpbP8/Nz+pVeD0vX2e6K8f+tsD759ciVlp8/97tSay0/f54Yhtmbp54889Wnn7q29Px/0d7+b8Xt/UBMN+J362qcIV0vzK+rt5/9b3SWU+sx391Zfe66bf7mUom7O+crdi9/TijtZ26rx0zn+3b2mm9/53yNbL7pGLZm9c2PT7Zl70vHH2m/mtbXZLa89Ww5prJ6pP3Krhjn9YDVSNtjr+f/0/Y5E+rFM2fPnXk4ptN2+qeJ+pbF6YfKH/qbjak7sDat35UPl0+Ke7X/mQmd7X92tKfXa+X9ws7l6UV5v9DIps8vJdu3ydP0wzGdfue+OzHdmj57+vvnnl6H5YdxduGFF7936ty5Mz/0Ir2Ytlq88KJqz7FZnxyE8TH3/HM/mLvwwosPnX3u1LNnnj1z/vCRI4fn54987fDCXOu4fq58dA9sJss/+oOuCQAAAAAAAAAAANCvH504fu0vb3/lvaX2/8vt/1L7//Tkb2r//9Os/X/eTj61CkjtAHd1yW+Nu/dmZz2msvnqMfx/Vt/dWTl7svd9Isbtcfxi+//U3j7v1zXV555set5/b5ov607gtv5SprI+SNrjBcYG+5+O6csx/lWAASqmu0+OcVX/1mlbT/1T6JdiNKX/W9oaUj8mqf13r36d0v5/1wbUkTtvI5oTDnoZge7+OfTjf5aOxAdel48Nzebg67D2MPzrWbiDodk0igcwHAY9/me67pni83/81tbFkGa78Wjn/jLvvxTWYtjHn1T+5hr/sz3+XV/7vy69q3f089z/6Aof/uL6e6Viw95+97/58qd+oHdXl1n2USw/Lf8Dob/ym69l5ec3hPr0n6z8bX2Wf9vy719d+f+N5afV9uBn+i1/qcZFrbMe+XXjdP8vv26c3MyWP/XtueLlX+VAjbdi+TDOeo8z2+8ItsNpVMb/7SV/DuPLMZ12hOk5h/wXeaX1T89XpN+BPdnnFxW/b6MyTnEvHzP+71qHkhkJX49x1fchjf+btsdGl3StlK53Wbejvq3AZvP+0N//G7FwcV0/f/lhrUEvp7CKMBxjYJdDs9kcaEfeehEfrEGv/0HffR50+YNe/1Xy8X/zY/h8/N9adgKRj/+bvz8f/zfPz8fXy/Pz8X/z9ZmP/5vn35N9bn4Fe6Yi/5MV+Xsr8vct5093y99f8f5PVeQfrMi/tyL/vor8uyvyJyryP1uR/7mK/Psr8h+syP98Rf5m12qPUvpSjdvywzjL2+f5/sP4SPd/en3/d1fkA6Pr528ceuyp332nsdT+f6p9vpbu4x2L6Xo8d/5xTOf3vUMpvZj3dkz/Lcsf9usdME7y/jPy3/cHKvKB0ZWe8/L9hjFUdO+xJ7/f1qvfql7H+YyWL8T4izH+UowfivFsjOdifCjG8xtUP9bHY7/9w9GXi+Xz/Z1Zfr/Pk+ftgfJ+og73WZ/8+sBKn2fP+/FbqbWWv8rmYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTa/1dWJgpQrjy1qvHnzx5dm5xyiPtORqtv5OlVL39vhAejvFEjH8ZX9z84KXT5fhWjIswH4pQtKeHJ260S9oeQrgYDoSroRH2Xrn2yjvzj5+8dOLywXdfP3p9/dYAAAAAbH7/CwAA///G5yKN") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x18) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file1\x00', 0x2109843, 0x0, 0x1, 0x0, 0x0) 9.226807548s ago: executing program 1 (id=7706): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x1, 0x508, &(0x7f0000000400)="$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") r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000640)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 9.093799156s ago: executing program 6 (id=7708): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "c0cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000280)={0x0, 0x15, 0x1, "8a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 8.864552159s ago: executing program 5 (id=7709): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="ffffff7f000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x18, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x10, 0x5, 0x3, 0x800, 0x0, "f759e100edc710000000d9fc6300", "00000004", "03000500", "e8cc1304", ["8bada11e03411000", "c2fed6e2ffffff6806528640", "000000ff0000000000000020", "0000000000000000009700"]}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) connect$bt_sco(r0, &(0x7f0000000280)={0x1f, @none}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) 8.059947294s ago: executing program 0 (id=7710): socket$vsock_stream(0x28, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 7.921308212s ago: executing program 5 (id=7711): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0xfffffffffffffc8c, 0x0, 0x1, 0x0, 0x0, 0x2004c000}, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = getpgid(0x0) migrate_pages(r3, 0x8, &(0x7f0000000040)=0x35f4, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) gettid() sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 6.485757694s ago: executing program 0 (id=7712): openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x101) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x1}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) syz_open_dev$media(&(0x7f0000000040), 0x1723, 0x440) connect$netrom(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000035000701feffffff00000000027c"], 0x28}, 0x1, 0x0, 0x0, 0x48895}, 0x8000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') write$cgroup_int(r2, &(0x7f0000000300)=0x9, 0x12) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1a, 0xa, 0x0, "ba2000fc0000000000ffff00"}) 6.423051437s ago: executing program 5 (id=7713): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x42, 0x6}]}}, 0x0, 0x2a, 0x0, 0x1, 0xf61}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r1, 0x0, 0x10160) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x100}, 0xc) fdatasync(r2) socket$netlink(0x10, 0x3, 0x4) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0xf0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="00d8", 0x2, 0x44004, &(0x7f0000000100)={0xa, 0x4e23, 0xb, @loopback, 0xc5f}, 0x1c) 5.424072184s ago: executing program 1 (id=7714): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) 5.353259857s ago: executing program 0 (id=7715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 4.700375584s ago: executing program 6 (id=7716): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x1000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x4) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xf) ioctl$UI_DEV_CREATE(r1, 0x5501) 3.217762778s ago: executing program 0 (id=7717): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x121000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2.944571133s ago: executing program 5 (id=7718): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r0) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.839442709s ago: executing program 6 (id=7719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x11, 0xa, 0x5) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 2.737819545s ago: executing program 0 (id=7720): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7030000070000008500000021000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x20, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="140000000000000029000000340000000400000000000000680000000000000029000000040000000409000000000000fe2bf4e12b9826287997a6b33d89f3d60da1641d9fe3896c421b6c130ef4f01be8f5836d41787454800809e12e5f0b6bdcf705020bf4c910fc02000000000000000000000000000000000014000000000000002900000034000000000000000000000030000000000000002900000036"], 0xc8}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x1, 0x24088804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191b386b290ce1e7fe4c59288afbcafe11869395eaae3f5562347", 0xcf}, {&(0x7f0000002840)="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", 0xdf4}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.028179265s ago: executing program 1 (id=7721): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0xfffffffffffffc8c, 0x0, 0x1, 0x0, 0x0, 0x2004c000}, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = getpgid(0x0) migrate_pages(r3, 0x8, &(0x7f0000000040)=0x35f4, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) gettid() sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 1.807143127s ago: executing program 5 (id=7722): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x1, 0x508, &(0x7f0000000400)="$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") r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000640)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.76865475s ago: executing program 6 (id=7723): openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x1}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) syz_open_dev$media(&(0x7f0000000040), 0x1723, 0x440) connect$netrom(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000035000701feffffff00000000027c"], 0x28}, 0x1, 0x0, 0x0, 0x48895}, 0x8000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') write$cgroup_int(r3, &(0x7f0000000300)=0x9, 0x12) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1a, 0xa, 0x0, "ba2000fc0000000000ffff00"}) 1.22531239s ago: executing program 0 (id=7724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}, {@favordynmods}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000100)={@multicast1, @multicast2, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0x81}, 0x3c) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 307.062592ms ago: executing program 1 (id=7725): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4000}, {r2, 0x1040}, {r1, 0x2187}, {0xffffffffffffffff, 0x64a9}], 0x4, 0x3ff) 0s ago: executing program 6 (id=7726): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x42, 0x6}]}}, 0x0, 0x2a, 0x0, 0x1, 0xf61}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x100}, 0xc) fdatasync(r2) socket$netlink(0x10, 0x3, 0x4) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0xf0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="00d8", 0x2, 0x44004, &(0x7f0000000100)={0xa, 0x4e23, 0xb, @loopback, 0xc5f}, 0x1c) kernel console output (not intermixed with test programs): dc_wdm: probe of 6-1:1.0 failed with error -22 [ 2104.911466][T27838] BTRFS info (device loop0): enabling ssd optimizations [ 2104.950573][T27838] BTRFS info (device loop0): auto enabling async discard [ 2105.270998][T22361] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 2105.685515][T27874] fuse: Unknown parameter 'user_id00000000000000000000' [ 2107.334794][ T5817] usb 6-1: USB disconnect, device number 53 [ 2107.577896][T27890] fuse: Unknown parameter 'user_i00000000000000000000' [ 2108.039237][T27902] loop5: detected capacity change from 0 to 256 [ 2108.079350][T27902] exfat: Deprecated parameter 'utf8' [ 2108.095914][T27902] exfat: Deprecated parameter 'namecase' [ 2108.179359][T27902] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2108.849994][T27907] fuse: Unknown parameter 'user_id00000000000000000000' [ 2109.578343][ T5817] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2109.938698][ T5817] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2109.948746][ T5817] usb 7-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 2109.969936][ T5817] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2109.981257][ T5817] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2110.359182][ T5817] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2110.383727][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2110.397861][ T5817] usb 7-1: Product: syz [ 2110.402241][ T5817] usb 7-1: Manufacturer: syz [ 2110.419382][T27882] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2110.754112][ T5817] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 2111.987142][T27927] loop0: detected capacity change from 0 to 8 [ 2112.173193][T27929] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2112.545112][T18559] usb 7-1: USB disconnect, device number 13 [ 2113.480674][T27939] fuse: Bad value for 'fd' [ 2115.037300][T27959] loop1: detected capacity change from 0 to 512 [ 2115.070577][T27959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2115.177994][T27959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2115.291986][T27959] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2115.918142][T27968] fuse: Unknown parameter 'user_id00000000000000000000' [ 2117.355047][T27972] fuse: Bad value for 'fd' [ 2117.677797][T27950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2118.161900][T22799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2118.203729][T27977] loop5: detected capacity change from 0 to 32768 [ 2118.275178][T27977] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.6284 (27977) [ 2118.319361][T27977] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 2118.348919][T27977] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 2118.380652][T27977] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2118.405700][T27977] BTRFS info (device loop5): use zstd compression, level 3 [ 2118.427041][T27977] BTRFS info (device loop5): using free space tree [ 2118.661896][T27977] BTRFS info (device loop5): enabling ssd optimizations [ 2118.669729][T27977] BTRFS info (device loop5): auto enabling async discard [ 2119.014381][T28013] fuse: Bad value for 'fd' [ 2119.142151][T25586] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 2119.313013][T28015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6293'. [ 2119.337791][T28015] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6293'. [ 2119.683146][T25477] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop5 scanned by udevd (25477) [ 2122.393354][T28039] loop0: detected capacity change from 0 to 256 [ 2122.472737][T28039] exfat: Deprecated parameter 'utf8' [ 2122.481145][T28039] exfat: Deprecated parameter 'namecase' [ 2122.626558][T28039] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2122.733306][ T5817] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2122.941954][ T5817] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2122.979434][ T5817] usb 7-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 2123.021473][ T5817] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2123.047835][ T5817] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2123.084047][ T5817] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2123.126516][T28051] fuse: Unknown parameter '0x0000000000000003' [ 2123.137731][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2123.168066][ T5817] usb 7-1: Product: syz [ 2123.174249][ T5817] usb 7-1: Manufacturer: syz [ 2123.200031][ T5817] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 2126.517741][T28045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2126.668579][T18559] usb 7-1: USB disconnect, device number 14 [ 2128.738258][T28082] fuse: Unknown parameter '0x0000000000000003' [ 2130.256406][T28106] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2130.484707][T28112] fuse: Unknown parameter '0x0000000000000003' [ 2132.255292][T28092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2133.064475][T28140] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2133.096695][T28141] fuse: Unknown parameter '0x0000000000000003' [ 2134.368833][T28143] loop1: detected capacity change from 0 to 32768 [ 2134.395916][T28143] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 2134.624643][T25477] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 2136.274612][T28165] fuse: Unknown parameter '0x0000000000000003' [ 2136.437918][T13821] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2136.674569][T13821] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2136.698010][T13821] usb 7-1: config 1 descriptor has 1 excess byte, ignoring [ 2136.705467][T13821] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2136.729415][T13821] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2136.765966][T13821] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2136.781550][T13821] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2136.790190][T13821] usb 7-1: Product: syz [ 2136.794706][T13821] usb 7-1: Manufacturer: syz [ 2136.821116][T13821] cdc_wdm 7-1:1.0: skipping garbage [ 2136.837288][T13821] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 2137.023867][T28177] loop5: detected capacity change from 0 to 256 [ 2137.058851][T28177] exfat: Deprecated parameter 'utf8' [ 2137.110583][T28177] exfat: Deprecated parameter 'namecase' [ 2137.225622][T28177] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2138.298653][T28182] loop1: detected capacity change from 0 to 32768 [ 2138.309267][T28182] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 2138.369351][T25477] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2139.231504][T13821] usb 7-1: USB disconnect, device number 15 [ 2139.449420][T28197] fuse: Unknown parameter '0x0000000000000003' [ 2139.779198][T28204] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2140.764028][T28216] fuse: Unknown parameter '0x0000000000000003' [ 2141.162485][T13821] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2141.510658][T13821] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2141.717385][T13821] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 2141.807717][T13821] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2141.832062][T13821] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2141.862824][T13821] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2141.892904][T13821] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2141.926880][T13821] usb 6-1: Product: syz [ 2141.947318][T13821] usb 6-1: Manufacturer: syz [ 2141.981765][T13821] cdc_wdm 6-1:1.0: skipping garbage [ 2141.998336][T13821] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 2142.593675][T28227] loop6: detected capacity change from 0 to 32768 [ 2142.604907][T28227] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 2143.473175][T25477] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 2143.515287][T28245] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6364'. [ 2143.553096][T28245] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6364'. [ 2143.664295][T28247] fuse: Unknown parameter '0x0000000000000003' [ 2143.777809][T28249] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2143.903149][T18561] usb 6-1: USB disconnect, device number 54 [ 2145.151841][T28275] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6374'. [ 2145.177305][T28275] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6374'. [ 2146.171529][T28283] loop0: detected capacity change from 0 to 8 [ 2147.137757][ T5817] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2147.280576][T28270] loop1: detected capacity change from 0 to 32768 [ 2147.327941][T28270] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 2147.350287][ T5817] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2147.359359][ T5817] usb 6-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 2147.382634][ T5817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2147.408943][ T5817] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2147.430399][ T5817] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2147.440255][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2147.449044][ T5817] usb 6-1: Product: syz [ 2147.453712][ T5817] usb 6-1: Manufacturer: syz [ 2147.469027][ T5817] cdc_wdm 6-1:1.0: skipping garbage [ 2147.479899][ T5817] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 2147.557290][T25477] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 2148.143227][T28298] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2149.233275][ T5787] usb 6-1: USB disconnect, device number 55 [ 2150.360255][ T28] audit: type=1326 audit(2000001748.250:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28312 comm="syz.0.6386" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7c199bf79 code=0x0 [ 2151.457437][T28325] loop9: detected capacity change from 0 to 7 [ 2151.503188][T28325] Dev loop9: unable to read RDB block 7 [ 2151.514591][T28325] loop9: unable to read partition table [ 2151.538224][T28325] loop9: partition table beyond EOD, truncated [ 2151.704376][T28330] netlink: 620 bytes leftover after parsing attributes in process `syz.6.6391'. [ 2151.740257][T28325] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2157.854674][T28377] netlink: 620 bytes leftover after parsing attributes in process `syz.0.6400'. [ 2159.455352][T28388] loop5: detected capacity change from 0 to 256 [ 2159.509696][T28388] exfat: Deprecated parameter 'utf8' [ 2159.548222][T28388] exfat: Deprecated parameter 'namecase' [ 2159.600786][T28388] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2159.742794][T28392] loop1: detected capacity change from 0 to 512 [ 2159.794427][T28392] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.6410: inode has both inline data and extents flags [ 2159.817773][T13821] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2159.833598][T28392] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.6410: couldn't read orphan inode 15 (err -117) [ 2159.889451][T28392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2160.191747][T13821] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2160.201111][T13821] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 2160.213799][T13821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2160.223388][T13821] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2160.249352][T13821] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2160.258980][T13821] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2160.273048][T13821] usb 1-1: Product: syz [ 2160.279146][T13821] usb 1-1: Manufacturer: syz [ 2161.154219][T13821] cdc_wdm 1-1:1.0: skipping garbage [ 2161.195154][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.948035][T13821] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 2161.988698][T22799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2162.786882][T28411] netlink: 620 bytes leftover after parsing attributes in process `syz.6.6415'. [ 2164.096571][T13821] usb 1-1: USB disconnect, device number 50 [ 2165.439379][T28428] fuse: Unknown parameter '0x0000000000000003' [ 2166.424654][T28438] netlink: 620 bytes leftover after parsing attributes in process `syz.1.6424'. [ 2167.518714][T28456] fuse: Unknown parameter 'fd0x0000000000000003' [ 2168.409405][T28471] netlink: 620 bytes leftover after parsing attributes in process `syz.5.6436'. [ 2168.988249][ T28] audit: type=1326 audit(2000001766.880:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28476 comm="syz.0.6438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7c199bf79 code=0x0 [ 2169.734227][T28490] fuse: Unknown parameter 'fd0x0000000000000003' [ 2170.038055][T28495] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2171.050138][T28509] loop1: detected capacity change from 0 to 2048 [ 2171.201218][T28509] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2171.577432][T28505] loop5: detected capacity change from 0 to 32768 [ 2171.605397][T28519] fuse: Unknown parameter 'fd0x0000000000000003' [ 2171.676077][T28505] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 2171.707384][T28505] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 2171.732036][T28505] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2171.767720][T28505] BTRFS info (device loop5): use zstd compression, level 3 [ 2171.793456][T28505] BTRFS info (device loop5): using free space tree [ 2171.967804][T28505] BTRFS info (device loop5): enabling ssd optimizations [ 2171.987975][T28505] BTRFS info (device loop5): auto enabling async discard [ 2174.437846][T25586] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 2174.926195][T25477] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop5 scanned by udevd (25477) [ 2177.691158][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801cbe7000: rx timeout, send abort [ 2178.147682][T28580] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2178.191272][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801cbe7800: rx timeout, send abort [ 2178.202694][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801cbe7000: abort rx timeout. Force session deactivation [ 2178.495198][T28576] loop5: detected capacity change from 0 to 32768 [ 2178.563568][T28576] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 2178.632618][T28576] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 2178.677907][T28576] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2178.687435][T28576] BTRFS info (device loop5): use zstd compression, level 3 [ 2178.699619][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801cbe7800: abort rx timeout. Force session deactivation [ 2178.772114][T28576] BTRFS info (device loop5): using free space tree [ 2178.790637][T28584] syzkaller0: entered promiscuous mode [ 2178.796203][T28584] syzkaller0: entered allmulticast mode [ 2178.991459][T28576] BTRFS info (device loop5): enabling ssd optimizations [ 2179.059445][T28576] BTRFS info (device loop5): auto enabling async discard [ 2179.500975][T25586] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 2180.076180][T28613] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2183.233439][T28628] affs: No valid root block on device nullb0 [ 2184.364857][T28633] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2184.667971][T28639] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2189.192276][T28633] bridge0: port 2(bridge_slave_1) entered disabled state [ 2189.199896][T28633] bridge0: port 1(1¾x9ÿ) entered disabled state [ 2190.478379][T18551] hid-generic FFFF:0008:0003.0017: item fetching failed at offset 0/1 [ 2190.524929][T18551] hid-generic: probe of FFFF:0008:0003.0017 failed with error -22 [ 2191.298348][T28633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2191.364547][T28633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2191.856250][T28633] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.865877][T28633] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.874928][T28633] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.884547][T28633] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.244232][T28691] fuse: Bad value for 'fd' [ 2192.461655][T28698] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2197.907956][T18551] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2198.098957][T28732] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2198.138466][T18551] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2198.157623][T18551] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2198.206026][T28735] loop1: detected capacity change from 0 to 1024 [ 2198.207792][T18551] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2198.237887][T18551] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2198.275183][T18551] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2198.280127][T28735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2198.305132][T18551] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2198.317933][T18551] usb 6-1: Product: syz [ 2198.322180][T18551] usb 6-1: Manufacturer: syz [ 2198.354348][T18551] cdc_wdm 6-1:1.0: skipping garbage [ 2198.366088][T18551] cdc_wdm 6-1:1.0: skipping garbage [ 2198.371512][T18551] cdc_wdm 6-1:1.0: skipping garbage [ 2198.376824][T18551] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 2198.473024][T28742] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4047: comm syz.1.6493: Allocating blocks 257-513 which overlap fs metadata [ 2198.566152][T28744] loop6: detected capacity change from 0 to 256 [ 2198.619113][T22799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2198.811316][T28747] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2199.167834][T18561] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2199.258414][T28759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6503'. [ 2200.193661][T18551] usb 6-1: USB disconnect, device number 56 [ 2200.339729][T18561] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2200.351504][T18561] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2200.368690][T18561] usb 7-1: config 1 has no interface number 1 [ 2200.374975][T18561] usb 7-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2200.384044][T25139] udevd[25139]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2200.451618][T25477] udevd[25477]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2200.463147][T18561] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2200.507614][T18561] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2200.515700][T18561] usb 7-1: Product: syz [ 2200.548349][T18561] usb 7-1: Manufacturer: syz [ 2200.553041][T18561] usb 7-1: SerialNumber: syz [ 2202.266374][T18561] usb-storage 7-1:1.2: USB Mass Storage device detected [ 2202.413135][T28783] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6511'. [ 2202.563883][T18561] usb 7-1: USB disconnect, device number 16 [ 2203.403425][T25477] udevd[25477]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2203.420076][T28790] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2203.522277][T28789] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2204.012336][T28804] syzkaller0: entered promiscuous mode [ 2204.023228][T28804] syzkaller0: entered allmulticast mode [ 2209.350843][T28828] syz.0.6523 (28828): drop_caches: 2 [ 2210.099671][T28835] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6520'. [ 2210.311253][T28839] loop6: detected capacity change from 0 to 256 [ 2210.348530][T28839] exfat: Deprecated parameter 'utf8' [ 2210.354048][T28839] exfat: Deprecated parameter 'namecase' [ 2210.434507][T28841] syzkaller0: entered promiscuous mode [ 2210.451106][T28841] syzkaller0: entered allmulticast mode [ 2210.605329][T28839] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2210.998585][T28846] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2213.300922][T28853] loop6: detected capacity change from 0 to 32768 [ 2213.660971][T28866] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6534'. [ 2213.698634][T28853] JBD2: Ignoring recovery information on journal [ 2213.714579][T28863] loop1: detected capacity change from 0 to 40427 [ 2213.735663][T28863] F2FS-fs (loop1): invalid crc value [ 2213.744209][T28863] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2213.794719][T28863] F2FS-fs (loop1): Start checkpoint disabled! [ 2213.829233][T28863] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2213.955533][T28870] syzkaller0: entered promiscuous mode [ 2213.980343][T28870] syzkaller0: entered allmulticast mode [ 2214.103565][T28853] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 2214.536859][T10480] kworker/u4:3: attempt to access beyond end of device [ 2214.536859][T10480] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 2214.553906][T10480] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2214.592806][T10480] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2214.616489][T10480] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2214.743325][T25906] ocfs2: Unmounting device (7,6) on (node local) [ 2217.055594][T28884] loop1: detected capacity change from 0 to 764 [ 2217.146645][T28884] Symlink component flag not implemented [ 2217.198911][T28884] Symlink component flag not implemented (116) [ 2217.391528][T28891] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2217.457391][T28894] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6543'. [ 2217.547713][T13821] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2217.733006][T28900] syzkaller0: entered promiscuous mode [ 2217.743226][T13821] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2217.756057][T28900] syzkaller0: entered allmulticast mode [ 2217.763580][T13821] usb 7-1: config 0 has no interface number 0 [ 2217.780309][T13821] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2217.835673][T13821] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2217.854854][T13821] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 2217.876800][T13821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.909238][T13821] usb 7-1: config 0 descriptor?? [ 2220.146140][T13821] input: HID 04d9:a055 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:04D9:A055.0018/input/input18 [ 2220.330731][T13821] holtek_kbd 0003:04D9:A055.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.6-1/input1 [ 2220.355345][T13821] usb 7-1: USB disconnect, device number 17 [ 2220.541119][T28911] fido_id[28911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 2220.745411][T28913] loop1: detected capacity change from 0 to 128 [ 2221.357687][T28923] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6553'. [ 2222.112365][T28932] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2222.205498][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2223.097861][T13821] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2223.297988][T13821] usb 6-1: Using ep0 maxpacket: 8 [ 2223.320061][T13821] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2223.335365][T13821] usb 6-1: config 0 has no interface number 0 [ 2223.356714][T13821] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 2223.391801][T13821] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 2223.434684][T13821] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2223.465974][T13821] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2223.493112][T13821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.528077][T13821] usb 6-1: config 0 descriptor?? [ 2223.556052][T13821] ldusb 6-1:0.55: Interrupt in endpoint not found [ 2223.804465][T13821] usb 6-1: USB disconnect, device number 57 [ 2224.086979][T28959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2224.373416][T28970] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2224.879074][T28982] loop6: detected capacity change from 0 to 8 [ 2226.308297][T13821] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2226.520713][T13821] usb 7-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 2226.552605][T13821] usb 7-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2226.611537][T13821] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2226.650251][T13821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.713561][T13821] aiptek 7-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 2227.795565][T29019] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2228.762108][T18561] usb 7-1: USB disconnect, device number 18 [ 2234.588546][T29082] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2234.972015][T29090] loop0: detected capacity change from 0 to 512 [ 2235.019273][T29090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2235.233888][T29090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2235.358985][T29090] ext4 filesystem being mounted at /512/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2235.843713][T29105] syzkaller0: entered promiscuous mode [ 2235.852530][T29105] syzkaller0: entered allmulticast mode [ 2237.947911][T29123] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2240.074782][T29121] loop1: detected capacity change from 0 to 32768 [ 2240.239172][T29121] JBD2: Ignoring recovery information on journal [ 2240.439429][T29121] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2241.023424][T22799] ocfs2: Unmounting device (7,1) on (node local) [ 2241.169132][T29140] loop6: detected capacity change from 0 to 8 [ 2241.234738][T22361] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2241.530430][T29144] syzkaller0: entered promiscuous mode [ 2241.536033][T29144] syzkaller0: entered allmulticast mode [ 2241.934424][T29151] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2241.968041][T25591] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 2242.302441][T29154] loop1: detected capacity change from 0 to 40427 [ 2242.328631][T29154] F2FS-fs (loop1): invalid crc value [ 2242.349046][T29154] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2242.403233][T29154] F2FS-fs (loop1): Start checkpoint disabled! [ 2242.422204][T29154] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2243.067818][T29171] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2243.126545][ T1126] kworker/u4:5: attempt to access beyond end of device [ 2243.126545][ T1126] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 2243.168990][ T1126] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2243.192289][ T1126] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2243.209114][T29177] syzkaller0: entered promiscuous mode [ 2243.215789][ T1126] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2243.225764][T29177] syzkaller0: entered allmulticast mode [ 2244.030520][T29187] loop5: detected capacity change from 0 to 8 [ 2244.516483][T29191] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2244.578178][T29195] loop1: detected capacity change from 0 to 512 [ 2244.617837][T29195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2244.676068][T29195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2244.719209][T29195] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2246.983174][T29205] loop6: detected capacity change from 0 to 40427 [ 2247.015758][T29205] F2FS-fs (loop6): invalid crc value [ 2247.049903][T29205] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2247.100247][T29205] F2FS-fs (loop6): Start checkpoint disabled! [ 2247.120141][T29205] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 2247.614914][T25836] kworker/u4:9: attempt to access beyond end of device [ 2247.614914][T25836] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 2247.629430][T25836] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2247.636731][T25836] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2247.644402][T25836] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2247.758323][T29214] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2247.914305][T22799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2251.340759][T29247] loop5: detected capacity change from 0 to 512 [ 2251.363132][T29247] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2251.423456][T29247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2251.450972][T29247] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2251.478268][T29245] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2251.888459][T29239] loop1: detected capacity change from 0 to 32768 [ 2252.056222][T29239] JBD2: Ignoring recovery information on journal [ 2252.167342][T29239] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2252.496650][T22799] ocfs2: Unmounting device (7,1) on (node local) [ 2255.925711][T29277] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2255.960686][T25586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2258.628255][T29307] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2262.249013][T29341] loop5: detected capacity change from 0 to 512 [ 2262.279650][T29341] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2262.376891][T29341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2262.488929][T29341] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2266.445452][T25586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2267.745118][T29392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6690'. [ 2269.774299][T29401] loop5: detected capacity change from 0 to 512 [ 2269.811156][T29401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2269.913617][T29401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2271.549966][T29407] syz.6.6684 (29407): drop_caches: 2 [ 2271.833360][T29401] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2273.845860][T25586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2276.022098][T29425] loop5: detected capacity change from 0 to 8192 [ 2278.471757][T29461] loop1: detected capacity change from 0 to 256 [ 2280.942174][T29480] loop5: detected capacity change from 0 to 512 [ 2281.941082][T29489] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2282.449287][T29502] loop1: detected capacity change from 0 to 4096 [ 2282.918646][T29512] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2283.531575][T29521] netlink: 'syz.0.6723': attribute type 3 has an invalid length. [ 2283.547753][T29521] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2283.643265][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2285.258058][T18560] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2285.632041][ T28] audit: type=1800 audit(2000001883.520:585): pid=29534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6727" name="/" dev="fuse" ino=4 res=0 errno=0 [ 2285.736222][T18560] usb 1-1: Using ep0 maxpacket: 16 [ 2285.744607][T18560] usb 1-1: config 0 has no interfaces? [ 2285.756758][T18560] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2285.767168][T18560] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2285.800254][T18560] usb 1-1: Manufacturer: syz [ 2285.816239][T18560] usb 1-1: config 0 descriptor?? [ 2286.434294][T29542] tmpfs: Unknown parameter 'mp' [ 2287.673146][T29527] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2287.701162][ T5787] usb 1-1: USB disconnect, device number 51 [ 2287.713902][T29539] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2290.592764][ T28] audit: type=1800 audit(2000001888.480:586): pid=29567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6737" name="/" dev="fuse" ino=4 res=0 errno=0 [ 2291.553220][T29583] loop6: detected capacity change from 0 to 128 [ 2291.573635][T29583] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2291.607155][T29583] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2291.732352][ T7485] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2292.788147][T29597] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2293.059807][T29601] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2294.067799][ T28] audit: type=1800 audit(2000001891.950:587): pid=29606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6748" name="/" dev="fuse" ino=4 res=0 errno=0 [ 2297.821801][T29655] kernel profiling enabled (shift: 0) [ 2299.598862][T29655] syz.6.6762: vmalloc error: size 654311424, failed to allocated page array size 1277952, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 2299.640849][T29671] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2299.822620][T29655] CPU: 1 PID: 29655 Comm: syz.6.6762 Not tainted syzkaller #0 [ 2299.830206][T29655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2299.840352][T29655] Call Trace: [ 2299.843695][T29655] [ 2299.846674][T29655] dump_stack_lvl+0x18c/0x250 [ 2299.851525][T29655] ? show_regs_print_info+0x20/0x20 [ 2299.856811][T29655] ? load_image+0x400/0x400 [ 2299.861427][T29655] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2299.867936][T29655] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2299.874496][T29655] warn_alloc+0x246/0x340 [ 2299.878893][T29655] ? zone_watermark_ok_safe+0x230/0x230 [ 2299.884610][T29655] ? _raw_spin_unlock+0x28/0x40 [ 2299.889590][T29655] ? iter_file_splice_write+0x6a3/0xcb0 [ 2299.895175][T29655] __vmalloc_node_range+0x662/0x1330 [ 2299.900513][T29655] ? zone_statistics+0x170/0x170 [ 2299.905483][T29655] ? free_vm_area+0x50/0x50 [ 2299.910016][T29655] ? alloc_pages+0x2ff/0x740 [ 2299.914640][T29655] ? rcu_is_watching+0x15/0xb0 [ 2299.919468][T29655] ? profile_init+0xee/0x130 [ 2299.924140][T29655] ? sysfs_kf_read+0x310/0x310 [ 2299.928993][T29655] vzalloc+0x79/0x90 [ 2299.932974][T29655] ? profile_init+0xee/0x130 [ 2299.937726][T29655] profile_init+0xee/0x130 [ 2299.942289][T29655] profiling_store+0x5e/0xc0 [ 2299.946918][T29655] kernfs_fop_write_iter+0x3b6/0x520 [ 2299.952294][T29655] do_iter_write+0x738/0xc30 [ 2299.956933][T29655] ? vfs_iter_write+0xa0/0xa0 [ 2299.961897][T29655] ? __asan_memset+0x22/0x40 [ 2299.966615][T29655] ? iov_iter_bvec+0xd4/0x1b0 [ 2299.971421][T29655] ? vfs_iter_write+0x6e/0xa0 [ 2299.976141][T29655] iter_file_splice_write+0x6a3/0xcb0 [ 2299.981577][T29655] ? splice_from_pipe+0x180/0x180 [ 2299.986703][T29655] ? splice_shrink_spd+0xc0/0xc0 [ 2299.991824][T29655] ? common_file_perm+0x198/0x1f0 [ 2299.996906][T29655] ? splice_from_pipe+0x180/0x180 [ 2300.002069][T29655] direct_splice_actor+0xe8/0x130 [ 2300.007168][T29655] splice_direct_to_actor+0x304/0x8c0 [ 2300.013054][T29655] ? direct_file_splice_eof+0xb0/0xb0 [ 2300.018497][T29655] ? warn_unsupported+0xc0/0xc0 [ 2300.023429][T29655] ? fsnotify_perm+0x5d/0x5e0 [ 2300.028170][T29655] ? security_file_permission+0x79/0xa0 [ 2300.033791][T29655] do_splice_direct+0x1d5/0x2f0 [ 2300.038697][T29655] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2300.044304][T29655] ? rcu_read_lock_any_held+0xb4/0x140 [ 2300.049805][T29655] ? do_splice_direct+0x2f0/0x2f0 [ 2300.054881][T29655] do_sendfile+0x5f2/0xef0 [ 2300.059344][T29655] ? do_pwritev+0x3a0/0x3a0 [ 2300.063945][T29655] __se_sys_sendfile64+0x145/0x1a0 [ 2300.069224][T29655] ? lock_chain_count+0x20/0x20 [ 2300.074123][T29655] ? __x64_sys_sendfile64+0xb0/0xb0 [ 2300.079396][T29655] ? lockdep_hardirqs_on+0x98/0x150 [ 2300.084681][T29655] do_syscall_64+0x55/0xa0 [ 2300.089170][T29655] ? clear_bhb_loop+0x40/0x90 [ 2300.093998][T29655] ? clear_bhb_loop+0x40/0x90 [ 2300.099348][T29655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2300.105339][T29655] RIP: 0033:0x7f4f0319bf79 [ 2300.110025][T29655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2300.130452][T29655] RSP: 002b:00007f4f04083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2300.138899][T29655] RAX: ffffffffffffffda RBX: 00007f4f03415fa0 RCX: 00007f4f0319bf79 [ 2300.147080][T29655] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 2300.155134][T29655] RBP: 00007f4f032327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.163309][T29655] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 2300.171412][T29655] R13: 00007f4f03416038 R14: 00007f4f03415fa0 R15: 00007ffff51d0ce8 [ 2300.179426][T29655] [ 2300.487991][T29655] Mem-Info: [ 2300.491312][T29655] active_anon:10050 inactive_anon:9 isolated_anon:0 [ 2300.491312][T29655] active_file:8251 inactive_file:51074 isolated_file:0 [ 2300.491312][T29655] unevictable:768 dirty:151 writeback:0 [ 2300.491312][T29655] slab_reclaimable:9283 slab_unreclaimable:96202 [ 2300.491312][T29655] mapped:27656 shmem:4245 pagetables:777 [ 2300.491312][T29655] sec_pagetables:0 bounce:0 [ 2300.491312][T29655] kernel_misc_reclaimable:0 [ 2300.491312][T29655] free:1304285 free_pcp:15868 free_cma:0 [ 2300.826442][T29655] Node 0 active_anon:28648kB inactive_anon:36kB active_file:33004kB inactive_file:204064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99200kB dirty:604kB writeback:0kB shmem:4044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11868kB pagetables:2932kB sec_pagetables:0kB all_unreclaimable? no [ 2300.952365][T29655] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2301.099086][T29655] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2301.290502][T29655] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2301.296860][T29655] Node 0 DMA32 free:1333048kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:28872kB inactive_anon:36kB active_file:33004kB inactive_file:203240kB unevictable:1536kB writepending:652kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:31216kB local_pcp:12720kB free_cma:0kB [ 2301.376682][T29655] lowmem_reserve[]: 0 0 0 0 0 [ 2301.398779][T29655] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 2301.523509][T29655] lowmem_reserve[]: 0 0 0 0 0 [ 2301.544451][T29655] Node 1 Normal free:3868480kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:43680kB local_pcp:29056kB free_cma:0kB [ 2301.604607][T29655] lowmem_reserve[]: 0 0 0 0 0 [ 2301.629844][T29655] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2301.766668][T29655] Node 0 DMA32: 22*4kB (ME) 586*8kB (UME) 1321*16kB (UME) 986*32kB (UME) 513*64kB (ME) 255*128kB (ME) 171*256kB (ME) 84*512kB (M) 35*1024kB (UME) 15*2048kB (UM) 258*4096kB (M) = 1333048kB [ 2301.786393][T29655] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2301.806346][T29655] Node 1 Normal: 252*4kB (UME) 74*8kB (UME) 46*16kB (UME) 119*32kB (UE) 33*64kB (UE) 6*128kB (UME) 0*256kB 2*512kB (UM) 2*1024kB (UE) 3*2048kB (ME) 940*4096kB (M) = 3868480kB [ 2301.830389][T29655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2301.841155][T29655] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2301.851009][T29655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2301.870228][T29655] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2301.880144][T29655] 60712 total pagecache pages [ 2301.884890][T29655] 9 pages in swap cache [ 2301.889549][T29655] Free swap = 124384kB [ 2301.894066][T29655] Total swap = 124996kB [ 2301.898798][T29655] 2097051 pages RAM [ 2301.917637][T29655] 0 pages HighMem/MovableOnly [ 2301.922413][T29655] 416922 pages reserved [ 2301.926612][T29655] 0 pages cma reserved [ 2302.053512][T29689] loop5: detected capacity change from 0 to 256 [ 2302.108737][T29689] exfat: Deprecated parameter 'utf8' [ 2302.114240][T29689] exfat: Deprecated parameter 'namecase' [ 2302.438266][T29689] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2302.528370][T29695] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2306.659853][T29720] syz.1.6784 (29720): drop_caches: 2 [ 2308.913289][T29746] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2309.871007][T29754] syz.5.6795 (29754): drop_caches: 2 [ 2314.527841][T29776] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2319.612664][T29821] loop5: detected capacity change from 0 to 256 [ 2319.631290][T29821] exfat: Deprecated parameter 'utf8' [ 2319.639109][T29821] exfat: Deprecated parameter 'namecase' [ 2319.788095][T29821] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2319.827873][T29827] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2321.333997][T29843] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2322.400835][T29848] loop6: detected capacity change from 0 to 512 [ 2323.984614][T29848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2324.419069][T29848] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2324.494461][T29848] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2325.219568][T25906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2326.704799][T29875] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 2326.711914][T29875] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2326.791457][T29875] vhci_hcd vhci_hcd.0: Device attached [ 2327.067746][ T5787] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2327.513234][ T5787] usb 6-1: config 0 has no interfaces? [ 2327.519415][ T5787] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 2327.530013][ T5787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2327.836021][ T5787] usb 6-1: config 0 descriptor?? [ 2328.185709][T18560] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 2329.094073][T29876] usb 43-1: recv xbuf, 0 [ 2329.252402][T29895] ERROR: device name not specified. [ 2329.621833][ T5787] usb 6-1: USB disconnect, device number 58 [ 2330.047552][ T7485] vhci_hcd: stop threads [ 2330.054392][ T7485] vhci_hcd: release socket [ 2330.119883][T29897] loop1: detected capacity change from 0 to 512 [ 2330.124221][ T7485] vhci_hcd: disconnect device [ 2330.137873][T29897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2330.251086][T29897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2330.339174][T29897] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2330.620047][T29903] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2332.152003][T29905] loop6: detected capacity change from 0 to 32768 [ 2332.237656][T29905] JBD2: Ignoring recovery information on journal [ 2332.430638][T29905] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 2332.582049][T22799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2333.268524][T25906] ocfs2: Unmounting device (7,6) on (node local) [ 2333.411602][T29921] trusted_key: syz.5.6837 sent an empty control message without MSG_MORE. [ 2333.641631][T29932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6843'. [ 2334.228289][T29941] fuse: Unknown parameter 'd½0xffffffffffffffff00000000000000000000' [ 2334.334191][T29948] loop5: detected capacity change from 0 to 512 [ 2334.361969][T29948] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2335.794190][T29948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2336.083351][T29948] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2337.597745][T29966] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2339.326874][T25586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2339.431648][T29982] loop0: detected capacity change from 0 to 256 [ 2339.455084][T29982] exfat: Deprecated parameter 'utf8' [ 2339.485327][T29982] exfat: Deprecated parameter 'namecase' [ 2339.687796][T29982] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2340.040695][T29976] loop6: detected capacity change from 0 to 32768 [ 2340.152621][T29976] JBD2: Ignoring recovery information on journal [ 2340.206285][T29976] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 2340.689728][T25906] ocfs2: Unmounting device (7,6) on (node local) [ 2343.327699][T30008] loop1: detected capacity change from 0 to 40427 [ 2343.395820][T30008] F2FS-fs (loop1): invalid crc value [ 2343.435553][T30008] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2345.259466][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.425884][T30008] F2FS-fs (loop1): Start checkpoint disabled! [ 2349.508900][T30057] ERROR: device name not specified. [ 2350.260236][T30055] loop6: detected capacity change from 0 to 256 [ 2350.348511][T30055] exfat: Deprecated parameter 'utf8' [ 2350.354464][T30055] exfat: Deprecated parameter 'namecase' [ 2350.491822][T30060] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2350.550450][T30055] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2352.261555][T30065] loop5: detected capacity change from 0 to 32768 [ 2352.423894][T30065] JBD2: Ignoring recovery information on journal [ 2352.666592][T30065] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 2353.326430][T30071] loop1: detected capacity change from 0 to 40427 [ 2353.365274][T30071] F2FS-fs (loop1): invalid crc value [ 2353.405507][T30071] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2353.583989][T25586] ocfs2: Unmounting device (7,5) on (node local) [ 2353.591079][T30071] F2FS-fs (loop1): Start checkpoint disabled! [ 2353.637178][T30071] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2354.821685][ T6209] kworker/u4:10: attempt to access beyond end of device [ 2354.821685][ T6209] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 2356.583813][ T6209] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2356.600851][ T6209] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2356.650801][ T6209] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2357.163426][T30098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6889'. [ 2357.227977][T30098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6889'. [ 2358.335868][T30104] 9pnet: Found fid 0 not clunked [ 2359.689830][T30105] loop5: detected capacity change from 0 to 32768 [ 2359.702942][T30105] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.6890 (30105) [ 2359.732695][T30105] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2359.750708][T30105] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 2359.760927][T30105] BTRFS info (device loop5): setting nodatasum [ 2359.767212][T30105] BTRFS info (device loop5): force zlib compression, level 3 [ 2359.776746][T30105] BTRFS info (device loop5): metadata ratio 1 [ 2359.783675][T30105] BTRFS info (device loop5): enabling ssd optimizations [ 2359.805150][T30105] BTRFS info (device loop5): allowing degraded mounts [ 2359.813423][T30105] BTRFS info (device loop5): using free space tree [ 2360.263610][T25586] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2360.966851][T25477] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (25477) [ 2361.179054][T18560] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2361.428520][T18560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2361.457789][T18560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2361.530769][T18560] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 2361.579541][T18560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2361.618398][T18560] usb 1-1: config 0 descriptor?? [ 2362.251534][T18560] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 2362.283780][T18560] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 2362.310673][T18560] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 2362.321652][T18560] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 2362.338465][T18560] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 2362.382245][T18560] playstation 0003:054C:0DF2.0019: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 2362.672280][T18560] playstation 0003:054C:0DF2.0019: Failed to retrieve feature with reportID 32: -71 [ 2362.683065][T18560] playstation 0003:054C:0DF2.0019: Failed to retrieve DualSense firmware info: -71 [ 2362.694015][T18560] playstation 0003:054C:0DF2.0019: Failed to get firmware info from DualSense [ 2362.737613][T18560] playstation 0003:054C:0DF2.0019: Failed to create dualsense. [ 2362.755796][T18560] playstation: probe of 0003:054C:0DF2.0019 failed with error -71 [ 2362.771275][T18560] usb 1-1: USB disconnect, device number 52 [ 2363.029867][T30161] fido_id[30161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2364.118334][T30167] usb usb7: usbfs: process 30167 (syz.0.6902) did not claim interface 0 before use [ 2364.391512][T30157] loop6: detected capacity change from 0 to 32768 [ 2364.419392][T30157] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 2364.666174][T25477] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 2366.438919][T30170] sd 0:0:1:0: PR command failed: 1026 [ 2366.461995][T30170] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2366.469944][T30170] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2370.036087][T30201] loop1: detected capacity change from 0 to 8192 [ 2370.617681][T30224] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2372.824977][T30253] usb usb7: usbfs: process 30253 (syz.0.6924) did not claim interface 0 before use [ 2372.843653][T30250] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2373.214785][T30257] loop5: detected capacity change from 0 to 512 [ 2373.247183][T30257] EXT4-fs: Ignoring removed bh option [ 2373.317195][T30257] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 2373.366309][T30257] EXT4-fs (loop5): 1 truncate cleaned up [ 2373.393883][T30257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2373.593107][T25586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2373.907771][T30277] ERROR: device name not specified. [ 2374.051795][T30279] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2375.306832][T30291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2375.325074][T30291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2375.334736][T30291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2375.346201][T30291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2375.356466][T30291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2375.366117][T30291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2375.597672][T30296] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2377.145355][T30325] syz.6.6941 (30325): drop_caches: 2 [ 2377.792232][T25591] Bluetooth: hci0: command tx timeout [ 2377.983058][T30289] chnl_net:caif_netlink_parms(): no params data found [ 2378.197910][T30332] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2378.313517][T23714] tipc: Left network mode [ 2378.451965][T30289] bridge0: port 1(bridge_slave_0) entered blocking state [ 2378.497683][T30289] bridge0: port 1(bridge_slave_0) entered disabled state [ 2378.505095][T30289] bridge_slave_0: entered allmulticast mode [ 2378.536704][T30289] bridge_slave_0: entered promiscuous mode [ 2378.856913][T30289] bridge0: port 2(bridge_slave_1) entered blocking state [ 2378.887857][T30289] bridge0: port 2(bridge_slave_1) entered disabled state [ 2378.901610][T30289] bridge_slave_1: entered allmulticast mode [ 2378.927853][T30289] bridge_slave_1: entered promiscuous mode [ 2379.238085][T30289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2379.280899][T30289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2380.967735][T25591] Bluetooth: hci0: command tx timeout [ 2381.022952][ C0] vkms_vblank_simulate: vblank timer overrun [ 2381.129332][T30343] loop1: detected capacity change from 0 to 32768 [ 2381.206720][T30343] JBD2: Ignoring recovery information on journal [ 2381.245133][T30289] team0: Port device team_slave_0 added [ 2381.293962][T30343] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2381.491606][T30289] team0: Port device team_slave_1 added [ 2381.525099][T30362] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6942'. [ 2381.724766][T22799] ocfs2: Unmounting device (7,1) on (node local) [ 2381.800934][T30289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2381.845529][T30289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2381.888733][T30289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2382.364248][T30289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2382.371651][T30289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2382.401864][T30289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2382.851088][T30289] hsr_slave_0: entered promiscuous mode [ 2382.893853][T30289] hsr_slave_1: entered promiscuous mode [ 2382.916147][T30289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2382.924222][T30289] Cannot create hsr debugfs directory [ 2382.997745][T25591] Bluetooth: hci0: command tx timeout [ 2384.441647][T30405] ERROR: device name not specified. [ 2385.095927][T25591] Bluetooth: hci0: command tx timeout [ 2387.352124][T30414] gfs2: not a GFS2 filesystem [ 2387.547006][T23714] hsr_slave_0: left promiscuous mode [ 2387.572664][T23714] hsr_slave_1: left promiscuous mode [ 2387.627774][T23714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2387.664083][T23714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2387.753332][T23714] bridge_slave_1: left allmulticast mode [ 2387.777563][T23714] bridge_slave_1: left promiscuous mode [ 2387.783608][T23714] bridge0: port 2(bridge_slave_1) entered disabled state [ 2387.837331][T23714] ¾x9ÿ: left allmulticast mode [ 2387.847825][T23714] ¾x9ÿ: left promiscuous mode [ 2387.852840][T23714] bridge0: port 1(1¾x9ÿ) entered disabled state [ 2388.177419][T30422] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2388.557007][T30433] ERROR: device name not specified. [ 2390.122805][T30435] loop6: detected capacity change from 0 to 256 [ 2393.668961][T23714] team0 (unregistering): Port device team_slave_1 removed [ 2394.519408][T23714] team0 (unregistering): Port device team_slave_0 removed [ 2394.793030][T23714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2396.835562][T23714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2398.635007][T30483] fuse: Bad value for 'fd' [ 2399.534954][T23714] bond0 (unregistering): Released all slaves [ 2406.542407][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.618066][T30517] fuse: Bad value for 'fd' [ 2406.733967][T30289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2406.793492][T30289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2406.967839][T30289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2407.048680][T30289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2408.003101][T30289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2408.102342][T30289] 8021q: adding VLAN 0 to HW filter on device team0 [ 2408.302441][T25836] bridge0: port 1(bridge_slave_0) entered blocking state [ 2408.309688][T25836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2408.507147][T10480] bridge0: port 2(bridge_slave_1) entered blocking state [ 2408.514386][T10480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2409.589248][T30549] kvm: kvm [30548]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4910 [ 2409.665916][T30549] kvm: kvm [30548]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10000003c [ 2409.668388][T30558] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2409.686280][T30289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2409.756734][T30549] kvm: kvm [30548]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2130 [ 2409.846994][T30549] kvm: kvm [30548]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1928 [ 2409.956285][T30289] veth0_vlan: entered promiscuous mode [ 2410.033861][T30289] veth1_vlan: entered promiscuous mode [ 2410.241492][T30565] loop5: detected capacity change from 0 to 8 [ 2410.260076][T30289] veth0_macvtap: entered promiscuous mode [ 2410.286128][T30289] veth1_macvtap: entered promiscuous mode [ 2412.608799][T30289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.662744][T30289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.697579][T30289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.729526][T30289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.754336][T30289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2412.797725][T30289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.848602][T30289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2412.882851][T30289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2412.941577][T30289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2412.985733][T30289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.022357][T30289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.061318][T30289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2413.101380][T30289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2413.146363][T30289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2413.196791][T30289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.227792][T30289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.253279][T30289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.286233][T30289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.581840][T30527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2413.626119][T30527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2413.740941][ T6209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2413.769586][ T6209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2417.223617][T30628] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2417.743963][T30642] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2420.555449][T30662] gfs2: not a GFS2 filesystem [ 2420.562991][T13821] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2420.983119][T13821] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2421.158191][T13821] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2421.178634][T30664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7016'. [ 2421.209771][T13821] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2421.220061][T13821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2421.238267][T13821] usb 6-1: SerialNumber: syz [ 2421.850688][T13821] usb 6-1: 0:2 : does not exist [ 2422.001125][T13821] usb 6-1: USB disconnect, device number 59 [ 2422.055459][T25477] udevd[25477]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2422.352286][T30671] loop6: detected capacity change from 0 to 40427 [ 2422.448671][T30671] F2FS-fs (loop6): invalid crc value [ 2422.459016][T30671] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2422.495641][T30671] F2FS-fs (loop6): Start checkpoint disabled! [ 2422.582461][T30671] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 2425.929202][T23714] kworker/u4:7: attempt to access beyond end of device [ 2425.929202][T23714] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 2425.998849][T23714] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2426.015100][T23714] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2426.072922][T23714] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2433.211968][T30727] loop1: detected capacity change from 0 to 256 [ 2433.256821][T30727] exfat: Deprecated parameter 'utf8' [ 2433.321884][T30727] exfat: Deprecated parameter 'namecase' [ 2433.364620][T30727] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2433.551255][T30729] gfs2: not a GFS2 filesystem [ 2434.780982][T30742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2435.037544][T18560] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2435.731790][T18560] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.772665][T18560] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2435.785237][T18560] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2435.796237][T18560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2435.813083][T18560] usb 1-1: SerialNumber: syz [ 2435.957891][T24583] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2436.148349][T24583] usb 6-1: Using ep0 maxpacket: 8 [ 2436.170444][T24583] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 2436.181436][T18560] usb 1-1: 0:2 : does not exist [ 2436.225596][T24583] usb 6-1: config 0 has no interface number 0 [ 2436.264755][T24583] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=9f.7a [ 2436.340864][T24583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2436.373957][T24583] usb 6-1: Product: syz [ 2436.395477][T24583] usb 6-1: Manufacturer: syz [ 2436.402353][T18560] usb 1-1: USB disconnect, device number 53 [ 2436.408661][T24583] usb 6-1: SerialNumber: syz [ 2436.463410][T24583] usb 6-1: config 0 descriptor?? [ 2436.633710][T24583] mvusb_mdio: probe of 6-1:0.168 failed with error -5 [ 2436.641877][T25477] udevd[25477]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2438.333880][T18551] usb 6-1: USB disconnect, device number 60 [ 2441.898047][T30789] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2442.352287][T30795] ERROR: device name not specified. [ 2443.492258][T30798] loop6: detected capacity change from 0 to 1024 [ 2443.754322][T30800] loop5: detected capacity change from 0 to 40427 [ 2443.806088][T30800] F2FS-fs (loop5): invalid crc value [ 2443.814856][T30800] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2443.865583][T30800] F2FS-fs (loop5): Start checkpoint disabled! [ 2443.891486][T30800] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 2443.907366][T30787] loop0: detected capacity change from 0 to 32768 [ 2443.978060][T30787] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 2444.372025][T30787] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2444.538375][ T28] audit: type=1800 audit(2000002042.410:588): pid=30798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7053" name="file1" dev="loop6" ino=2 res=0 errno=0 [ 2444.563453][T30787] XFS (loop0): Ending clean mount [ 2445.261187][T30787] XFS (loop0): Quotacheck needed: Please wait. [ 2445.490884][ T6209] kworker/u4:10: attempt to access beyond end of device [ 2445.490884][ T6209] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 2445.557602][ T6209] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 2445.564872][ T6209] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 2445.597700][ T6209] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 2445.728713][T30787] XFS (loop0): Quotacheck: Done. [ 2445.908588][T30289] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2447.346029][T30831] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2447.530888][ T5817] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2447.871483][T30839] ERROR: device name not specified. [ 2447.959545][ T5817] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2448.406580][ T5817] usb 6-1: config 0 has no interface number 0 [ 2448.413146][ T5817] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2448.427285][ T5817] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 2448.436675][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2448.450676][ T5817] usb 6-1: config 0 descriptor?? [ 2448.460434][ T5817] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 2448.551000][T30841] gfs2: not a GFS2 filesystem [ 2451.173219][T30588] usb 6-1: USB disconnect, device number 61 [ 2451.327808][T30861] loop6: detected capacity change from 0 to 256 [ 2453.300728][T30868] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2454.017933][T13821] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2454.239741][T13821] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2454.250217][T13821] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2454.269513][T13821] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2454.279143][T13821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2454.327689][T13821] usb 7-1: SerialNumber: syz [ 2454.474648][T30878] ERROR: device name not specified. [ 2455.281765][T13821] usb 7-1: 0:2 : does not exist [ 2455.372731][T13821] usb 7-1: USB disconnect, device number 19 [ 2457.141823][T30858] udevd[30858]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2459.221623][T30896] gfs2: not a GFS2 filesystem [ 2459.486820][T30905] ERROR: device name not specified. [ 2460.254293][T30904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7076'. [ 2461.407542][ T5817] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2462.527558][ T5817] usb 6-1: Using ep0 maxpacket: 8 [ 2462.686002][ T5817] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 2462.707564][ T5817] usb 6-1: config 0 has no interface number 0 [ 2462.721418][ T5817] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=9f.7a [ 2462.741213][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2462.769232][ T5817] usb 6-1: Product: syz [ 2462.774369][ T5817] usb 6-1: Manufacturer: syz [ 2462.786791][ T5817] usb 6-1: SerialNumber: syz [ 2462.802486][ T5817] usb 6-1: config 0 descriptor?? [ 2462.854915][ T5817] mvusb_mdio: probe of 6-1:0.168 failed with error -5 [ 2464.152009][T30588] usb 6-1: USB disconnect, device number 62 [ 2467.966616][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.470883][T30957] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2468.891996][T30966] ERROR: device name not specified. [ 2470.484836][T30978] gfs2: not a GFS2 filesystem [ 2473.614044][T31001] ERROR: device name not specified. [ 2474.503321][T31003] loop0: detected capacity change from 0 to 256 [ 2475.133306][T31009] gfs2: not a GFS2 filesystem [ 2475.549238][T31008] fuse: Bad value for 'fd' [ 2480.527758][T18551] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2481.485816][T31031] syz.6.7124 (31031): drop_caches: 2 [ 2481.600178][T18551] usb 1-1: Using ep0 maxpacket: 8 [ 2481.717369][T18551] usb 1-1: device descriptor read/all, error -71 [ 2482.290665][T31043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7127'. [ 2482.299847][T31043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7127'. [ 2482.328752][T31043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7127'. [ 2484.247859][T31047] Bluetooth: MGMT ver 1.22 [ 2489.405295][T31084] gfs2: not a GFS2 filesystem [ 2497.684546][T31112] syz.5.7149 (31112): drop_caches: 2 [ 2497.942363][T31123] loop0: detected capacity change from 0 to 8192 [ 2501.095252][T30291] Bluetooth: hci0: command 0x0406 tx timeout [ 2506.199912][T31167] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2508.187634][T18560] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2508.284132][T31165] syz.6.7162 (31165): drop_caches: 2 [ 2508.393402][T18560] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2508.458173][T18560] usb 1-1: config 0 has no interface number 0 [ 2508.555904][T18560] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2508.607648][T18560] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2508.636263][T18560] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 2508.690070][T18560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2508.701968][T31181] loop1: detected capacity change from 0 to 128 [ 2508.738327][T18560] usb 1-1: config 0 descriptor?? [ 2509.009709][T31182] syz.1.7161: attempt to access beyond end of device [ 2509.009709][T31182] loop1: rw=2049, sector=145, nr_sectors = 768 limit=128 [ 2509.409493][T18560] usbhid 1-1:0.1: can't add hid device: -71 [ 2509.424264][T18560] usbhid: probe of 1-1:0.1 failed with error -71 [ 2509.465585][T31186] loop6: detected capacity change from 0 to 512 [ 2509.488395][T18560] usb 1-1: USB disconnect, device number 56 [ 2509.610473][T31186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2510.207317][T31186] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2510.224057][T31186] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2512.592658][T25906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2514.429436][T31214] loop6: detected capacity change from 0 to 256 [ 2514.436805][T31214] exfat: Deprecated parameter 'utf8' [ 2514.442394][T31214] exfat: Deprecated parameter 'namecase' [ 2514.739687][T31214] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2515.388828][T31216] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2518.911333][T18560] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2519.149821][T18560] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2519.188675][T18560] usb 6-1: config 0 has no interface number 0 [ 2519.217724][T18560] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2519.257727][T18560] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2519.307643][T18560] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 2519.327826][T18560] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.368240][T18560] usb 6-1: config 0 descriptor?? [ 2520.229196][T31235] syz.0.7175 (31235): drop_caches: 2 [ 2522.118356][T18560] usbhid 6-1:0.1: can't add hid device: -71 [ 2522.143351][T18560] usbhid: probe of 6-1:0.1 failed with error -71 [ 2522.210706][T18560] usb 6-1: USB disconnect, device number 63 [ 2524.829866][T31243] loop5: detected capacity change from 0 to 40427 [ 2524.854797][T31243] F2FS-fs (loop5): invalid crc value [ 2524.869506][T31243] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2524.921190][T31246] loop0: detected capacity change from 0 to 512 [ 2524.974792][T31246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2525.582329][T31243] F2FS-fs (loop5): Start checkpoint disabled! [ 2525.623150][T31246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2525.636269][T31243] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 2525.669764][T31246] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2527.453665][T25836] kworker/u4:9: attempt to access beyond end of device [ 2527.453665][T25836] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 2527.468210][T25836] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 2527.475506][T25836] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 2527.483206][T25836] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 2527.972003][T30289] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2528.076796][T31270] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2528.496449][T31280] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2529.458095][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2530.053706][T18560] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2531.412314][T18560] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2531.460484][T18560] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2531.499458][T18560] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2531.546504][T18560] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2531.602230][T18560] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2531.666340][T18560] usb 7-1: string descriptor 0 read error: -71 [ 2531.686185][T18560] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2531.717358][T18560] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2531.748523][T18551] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2531.767731][T18560] usb 7-1: can't set config #1, error -71 [ 2531.779470][T18560] usb 7-1: USB disconnect, device number 20 [ 2531.961155][T18551] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2531.997682][T18551] usb 6-1: config 0 has no interface number 0 [ 2532.027476][T18551] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2532.217667][T18551] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2532.233646][T18551] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 2532.489124][T18551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.546449][T18551] usb 6-1: config 0 descriptor?? [ 2533.167086][T31304] loop1: detected capacity change from 0 to 512 [ 2533.193328][T18551] usbhid 6-1:0.1: can't add hid device: -71 [ 2533.209748][T18551] usbhid: probe of 6-1:0.1 failed with error -71 [ 2533.241254][T18551] usb 6-1: USB disconnect, device number 64 [ 2533.277688][T31304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2533.931502][T31304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2533.974106][T31298] loop6: detected capacity change from 0 to 40427 [ 2534.010001][T31298] F2FS-fs (loop6): invalid crc value [ 2534.016336][T31304] ext4 filesystem being mounted at /572/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2534.040616][T31298] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2534.327219][T31298] F2FS-fs (loop6): Start checkpoint disabled! [ 2534.344784][T31298] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 2535.635582][T31324] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2536.383285][T22799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2536.684250][ T7485] kworker/u4:11: attempt to access beyond end of device [ 2536.684250][ T7485] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 2536.712549][ T7485] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2536.762547][ T7485] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2536.781852][ T7485] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2540.159696][T31348] gfs2: not a GFS2 filesystem [ 2541.078732][T31357] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2543.704220][T18559] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2543.999615][T18559] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2544.038135][T18559] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2544.049514][T18559] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2544.061640][T18559] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2544.073306][T18559] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2544.087293][T18559] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2544.103984][T18559] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2544.114600][T18559] usb 6-1: Product: syz [ 2544.120691][T18559] usb 6-1: Manufacturer: syz [ 2544.130937][T18559] cdc_wdm 6-1:1.0: skipping garbage [ 2544.146599][T18559] cdc_wdm 6-1:1.0: skipping garbage [ 2544.179499][T18559] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2544.185492][T18559] cdc_wdm 6-1:1.0: Unknown control protocol [ 2544.905079][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 6 bytes [ 2545.847048][T31392] syzkaller0: entered promiscuous mode [ 2545.854562][T31392] syzkaller0: entered allmulticast mode [ 2546.080876][T31395] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2547.032802][T30588] usb 6-1: USB disconnect, device number 65 [ 2547.691734][T31414] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2548.076840][T31423] syzkaller0: entered promiscuous mode [ 2548.087587][T31423] syzkaller0: entered allmulticast mode [ 2548.111005][T31407] loop0: detected capacity change from 0 to 32768 [ 2548.149708][T31407] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 2548.301483][T30858] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 2549.257596][ T5817] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2549.478904][ T5817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2549.489408][ T5817] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2549.500196][ T5817] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2549.509954][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2549.518415][ T5817] usb 1-1: SerialNumber: syz [ 2549.714405][T31434] loop5: detected capacity change from 0 to 256 [ 2549.763340][ T5817] usb 1-1: 0:2 : does not exist [ 2549.822700][ T5817] usb 1-1: USB disconnect, device number 57 [ 2549.945781][T30858] udevd[30858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2555.238524][T31477] fuse: Unknown parameter 'grou00000000000000000000' [ 2556.744691][T31483] ERROR: device name not specified. [ 2557.529853][T31494] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2558.573280][T31506] syz.0.7258 (31506): drop_caches: 2 [ 2559.584048][T31511] fuse: Unknown parameter 'grou00000000000000000000' [ 2559.948803][T31518] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2562.182590][T31539] syz.6.7268 (31539): drop_caches: 2 [ 2563.187491][T31537] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2564.287810][T30588] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2564.489941][T30588] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2564.511641][T30588] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2564.542917][T30588] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2564.569613][T30588] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2564.601648][T30588] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2564.639178][T30588] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2564.657555][T30588] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2564.665629][T30588] usb 1-1: Product: syz [ 2564.687952][T30588] usb 1-1: Manufacturer: syz [ 2564.701504][T30588] cdc_wdm 1-1:1.0: skipping garbage [ 2564.706809][T30588] cdc_wdm 1-1:1.0: skipping garbage [ 2564.732807][T30588] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2564.747448][T30588] cdc_wdm 1-1:1.0: Unknown control protocol [ 2564.838928][T31570] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2565.838741][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 7 bytes [ 2566.516230][T31579] syz.6.7277 (31579): drop_caches: 2 [ 2567.559399][ T5817] usb 1-1: USB disconnect, device number 58 [ 2567.713384][T31583] syzkaller0: entered promiscuous mode [ 2567.736270][T31583] syzkaller0: entered allmulticast mode [ 2568.918020][T31586] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2569.773213][T31601] gfs2: not a GFS2 filesystem [ 2570.477543][T31604] syz.1.7286 (31604): drop_caches: 2 [ 2571.558236][T31607] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2571.860146][T31612] loop5: detected capacity change from 0 to 256 [ 2573.970917][T31621] loop6: detected capacity change from 0 to 128 [ 2573.998808][T31621] ext4: Unknown parameter 'hash' [ 2577.538149][T31633] syzkaller0: entered promiscuous mode [ 2577.544234][T31633] syzkaller0: entered allmulticast mode [ 2578.167748][T31640] ERROR: device name not specified. [ 2578.978345][T31647] loop5: detected capacity change from 0 to 1024 [ 2579.043848][ T28] audit: type=1800 audit(2000002176.930:589): pid=31647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7296" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 2583.540464][T31663] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2584.355900][T31670] syzkaller0: entered promiscuous mode [ 2584.379424][T31670] syzkaller0: entered allmulticast mode [ 2584.674870][T31675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7303'. [ 2585.358227][T31678] 9pnet_fd: Insufficient options for proto=fd [ 2585.557544][T30291] Bluetooth: hci0: command 0x0406 tx timeout [ 2587.269281][T31699] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2589.019689][T31710] syzkaller0: entered promiscuous mode [ 2589.025253][T31710] syzkaller0: entered allmulticast mode [ 2589.219517][ C1] vkms_vblank_simulate: vblank timer overrun [ 2589.394550][T31721] ERROR: device name not specified. [ 2590.851782][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2592.227792][T31739] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2592.650935][T22799] syz_tun (unregistering): left promiscuous mode [ 2592.724339][T25591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2592.746000][T25591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2592.760377][T25591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2592.780290][T25591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2592.794815][T25591] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2592.802551][T25591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2592.881891][T31748] syzkaller0: entered promiscuous mode [ 2592.888222][T31748] syzkaller0: entered allmulticast mode [ 2594.761340][T31745] chnl_net:caif_netlink_parms(): no params data found [ 2594.847558][T30291] Bluetooth: hci2: command tx timeout [ 2596.502673][T31784] loop5: detected capacity change from 0 to 1024 [ 2596.557972][ T28] audit: type=1800 audit(2000002194.440:590): pid=31784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7332" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 2597.064817][T30291] Bluetooth: hci2: command tx timeout [ 2597.101254][T31745] bridge0: port 1(bridge_slave_0) entered blocking state [ 2597.159848][T31745] bridge0: port 1(bridge_slave_0) entered disabled state [ 2597.167225][T31745] bridge_slave_0: entered allmulticast mode [ 2597.235066][T31745] bridge_slave_0: entered promiscuous mode [ 2597.295181][T31745] bridge0: port 2(bridge_slave_1) entered blocking state [ 2597.307780][T31745] bridge0: port 2(bridge_slave_1) entered disabled state [ 2597.315503][T31745] bridge_slave_1: entered allmulticast mode [ 2597.340932][T31787] xt_hashlimit: size too large, truncated to 1048576 [ 2597.356823][T31745] bridge_slave_1: entered promiscuous mode [ 2597.504197][T31745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2597.571931][T31745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2597.783491][T31745] team0: Port device team_slave_0 added [ 2597.822285][T31745] team0: Port device team_slave_1 added [ 2597.984874][T31745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2598.005749][T31745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2598.067237][T31745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2598.135381][T31745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2598.171087][T31745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2598.265697][T31745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2598.510800][T31745] hsr_slave_0: entered promiscuous mode [ 2598.538083][T31745] hsr_slave_1: entered promiscuous mode [ 2599.157742][T30291] Bluetooth: hci2: command tx timeout [ 2599.591552][T31745] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2599.750793][T31745] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2599.796559][T31799] syzkaller0: entered promiscuous mode [ 2599.812757][T31799] syzkaller0: entered allmulticast mode [ 2600.212530][T31745] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2600.433274][T31745] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2600.856667][T31745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2600.893501][T31745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2600.923127][T31745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2600.950314][T31745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2601.237621][T30291] Bluetooth: hci2: command tx timeout [ 2601.328123][T31745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2601.408432][T31745] 8021q: adding VLAN 0 to HW filter on device team0 [ 2601.490179][T23714] bridge0: port 1(bridge_slave_0) entered blocking state [ 2601.497483][T23714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2601.581410][T23714] bridge0: port 2(bridge_slave_1) entered blocking state [ 2601.588657][T23714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2602.041633][T31826] syzkaller0: entered promiscuous mode [ 2602.047254][T31826] syzkaller0: entered allmulticast mode [ 2602.496226][T31745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2602.797084][T31745] veth0_vlan: entered promiscuous mode [ 2602.843284][T31745] veth1_vlan: entered promiscuous mode [ 2602.964246][T31745] veth0_macvtap: entered promiscuous mode [ 2603.022249][T31745] veth1_macvtap: entered promiscuous mode [ 2603.528888][T31745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2604.127417][T31745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2604.147513][T31745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2604.165718][T31745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2604.198227][T31745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2604.216029][T31745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2604.236931][T31745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2604.247898][T31745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2604.273083][T31745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2604.360648][T31745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2604.421842][T31745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2604.460850][T31745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2604.492227][T31745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2604.518120][T31745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2604.541135][T31745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2604.557813][T31745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2604.577416][T31745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2604.609321][T31745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2604.646091][T31745] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2604.659506][T31745] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2604.717579][T31745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2604.743293][T31745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2604.997317][T31841] loop5: detected capacity change from 0 to 512 [ 2605.100651][T31841] EXT4-fs (loop5): bad block size 65536 [ 2605.102059][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2605.161086][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2605.190623][T23714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2605.266031][T23714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2605.478430][T24583] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2607.587616][T24583] usb 6-1: Using ep0 maxpacket: 32 [ 2607.618623][T24583] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 2607.626789][T24583] usb 6-1: config 0 has no interface number 0 [ 2607.664223][T24583] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2607.718611][T24583] usb 6-1: config 0 interface 85 has no altsetting 0 [ 2607.737666][T24583] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2607.757890][T24583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2607.787594][T24583] usb 6-1: Product: syz [ 2607.791853][T24583] usb 6-1: Manufacturer: syz [ 2607.796499][T24583] usb 6-1: SerialNumber: syz [ 2607.835893][T24583] usb 6-1: config 0 descriptor?? [ 2607.997537][T24583] appletouch 6-1:0.85: Failed to read mode from device. [ 2608.021708][T24583] appletouch: probe of 6-1:0.85 failed with error -5 [ 2608.068332][T24583] usb 6-1: USB disconnect, device number 66 [ 2608.092341][T31853] syzkaller0: entered promiscuous mode [ 2608.135413][T31853] syzkaller0: entered allmulticast mode [ 2609.710319][T31869] xt_hashlimit: size too large, truncated to 1048576 [ 2609.967767][T18551] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2610.177619][T18551] usb 6-1: Using ep0 maxpacket: 32 [ 2610.228365][T18551] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 2610.254121][T18551] usb 6-1: config 0 has no interface number 0 [ 2610.262463][T18551] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2610.315940][T18551] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2610.341206][T18551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2610.354792][T18551] usb 6-1: Product: syz [ 2612.233651][T18551] usb 6-1: Manufacturer: syz [ 2612.274232][T18551] usb 6-1: SerialNumber: syz [ 2612.338285][T18551] usb 6-1: config 0 descriptor?? [ 2612.344383][T31870] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2612.589406][T31870] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2613.089536][T31881] loop0: detected capacity change from 0 to 512 [ 2613.107481][T31881] EXT4-fs (loop0): bad block size 65536 [ 2613.397760][T18560] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2613.611193][T18560] usb 1-1: Using ep0 maxpacket: 32 [ 2613.624979][T18560] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 2613.647481][T18560] usb 1-1: config 0 has no interface number 0 [ 2613.653752][T18560] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2613.683929][T18560] usb 1-1: config 0 interface 85 has no altsetting 0 [ 2613.706598][T18560] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2613.729031][T18560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2613.737121][T18560] usb 1-1: Product: syz [ 2613.753488][T18560] usb 1-1: Manufacturer: syz [ 2613.759756][T18560] usb 1-1: SerialNumber: syz [ 2613.789500][T18560] usb 1-1: config 0 descriptor?? [ 2614.248570][T18551] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2614.269971][T18551] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2614.291721][T18551] asix: probe of 6-1:0.188 failed with error -71 [ 2614.314474][T18551] usb 6-1: USB disconnect, device number 67 [ 2614.408193][T18560] appletouch 1-1:0.85: Failed to request geyser raw mode [ 2614.416689][T18560] appletouch: probe of 1-1:0.85 failed with error -5 [ 2614.438185][T18560] usb 1-1: USB disconnect, device number 59 [ 2614.735803][T31890] syzkaller0: entered promiscuous mode [ 2614.742820][T31890] syzkaller0: entered allmulticast mode [ 2618.397597][T31913] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2619.889042][T31937] gfs2: not a GFS2 filesystem [ 2621.573240][T25591] Bluetooth: hci2: command tx timeout [ 2624.318812][T31961] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2629.784404][T31991] loop5: detected capacity change from 0 to 1024 [ 2629.891807][ T28] audit: type=1800 audit(2000002227.780:591): pid=31991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7393" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 2631.077862][T30291] Bluetooth: hci2: command tx timeout [ 2631.375794][T32002] fuse: Bad value for 'user_id' [ 2631.677572][T32006] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2635.101396][T32024] xt_hashlimit: size too large, truncated to 1048576 [ 2636.997727][T25591] Bluetooth: hci2: command tx timeout [ 2638.275908][T32039] loop5: detected capacity change from 0 to 1024 [ 2638.448691][ T28] audit: type=1800 audit(2000002236.310:592): pid=32039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7406" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 2640.788152][T13821] IPVS: starting estimator thread 0... [ 2640.897658][T32059] IPVS: using max 17 ests per chain, 40800 per kthread [ 2642.257234][T32064] syz.5.7414 (32064): drop_caches: 2 [ 2643.486732][T18560] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2643.707871][T18560] usb 7-1: Using ep0 maxpacket: 8 [ 2643.738618][T18560] usb 7-1: config 0 has an invalid interface number: 168 but max is 0 [ 2643.752757][T18560] usb 7-1: config 0 has no interface number 0 [ 2643.774026][T18560] usb 7-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=9f.7a [ 2643.802062][T18560] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2643.827715][T18560] usb 7-1: Product: syz [ 2643.832194][T18560] usb 7-1: Manufacturer: syz [ 2643.836944][T18560] usb 7-1: SerialNumber: syz [ 2643.871092][T18560] usb 7-1: config 0 descriptor?? [ 2643.924622][T18560] mvusb_mdio: probe of 7-1:0.168 failed with error -5 [ 2644.288043][T32070] IPVS: sed: FWM 3 0x00000003 - no destination available [ 2644.295308][T30439] IPVS: starting estimator thread 0... [ 2644.387497][T32071] IPVS: using max 17 ests per chain, 40800 per kthread [ 2644.818630][T32075] loop0: detected capacity change from 0 to 1024 [ 2645.216883][T30439] usb 7-1: USB disconnect, device number 21 [ 2645.389083][ T28] audit: type=1800 audit(2000002243.240:593): pid=32075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7418" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 2647.499092][T32088] loop1: detected capacity change from 0 to 32768 [ 2647.559062][T32088] JBD2: Ignoring recovery information on journal [ 2647.703479][T32088] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2648.381098][T31745] ocfs2: Unmounting device (7,1) on (node local) [ 2648.779614][T32110] fuse: Bad value for 'fd' [ 2648.991165][T32115] xt_hashlimit: size too large, truncated to 1048576 [ 2650.050171][T32125] loop5: detected capacity change from 0 to 1024 [ 2650.184340][ T28] audit: type=1800 audit(2000002248.070:594): pid=32125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7431" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 2650.757326][T32134] loop5: detected capacity change from 0 to 40427 [ 2650.792876][T32134] F2FS-fs (loop5): invalid crc value [ 2650.814609][T32134] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2650.854653][T32134] F2FS-fs (loop5): Start checkpoint disabled! [ 2650.865030][T32134] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 2651.300584][ T12] kworker/u4:1: attempt to access beyond end of device [ 2651.300584][ T12] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 2651.345964][ T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 2651.359865][ T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 2651.381482][ T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 2652.283280][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.434574][T32148] loop0: detected capacity change from 0 to 512 [ 2652.473860][T32148] EXT4-fs (loop0): bad block size 65536 [ 2652.817574][T13821] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2652.862761][T32153] SET target dimension over the limit! [ 2653.017645][T13821] usb 1-1: Using ep0 maxpacket: 32 [ 2653.034654][T13821] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 2653.051892][T13821] usb 1-1: config 0 has no interface number 0 [ 2653.063209][T13821] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2653.084224][T13821] usb 1-1: config 0 interface 85 has no altsetting 0 [ 2653.095045][T13821] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2653.115823][T13821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2653.125876][T13821] usb 1-1: Product: syz [ 2653.134908][T13821] usb 1-1: Manufacturer: syz [ 2653.142608][T13821] usb 1-1: SerialNumber: syz [ 2653.159532][T13821] usb 1-1: config 0 descriptor?? [ 2653.629081][T13821] appletouch 1-1:0.85: Failed to read mode from device. [ 2653.656715][T13821] appletouch: probe of 1-1:0.85 failed with error -5 [ 2653.761133][T13821] usb 1-1: USB disconnect, device number 60 [ 2654.497290][T32158] fuse: Bad value for 'fd' [ 2655.016034][T32161] loop1: detected capacity change from 0 to 1024 [ 2655.092041][ T28] audit: type=1800 audit(2000002252.980:595): pid=32161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7442" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 2655.444343][T32167] fuse: Bad value for 'rootmode' [ 2655.665406][T32163] loop1: detected capacity change from 0 to 40427 [ 2655.752693][T32163] F2FS-fs (loop1): invalid crc value [ 2655.822000][T32163] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2655.949826][T32163] F2FS-fs (loop1): Start checkpoint disabled! [ 2656.093606][T32163] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2657.268851][T32183] loop5: detected capacity change from 0 to 512 [ 2657.311499][T10480] kworker/u4:3: attempt to access beyond end of device [ 2657.311499][T10480] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 2657.326331][T32183] EXT4-fs (loop5): bad block size 65536 [ 2657.346461][T10480] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2657.365000][T10480] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2657.373344][T10480] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2657.649352][T18559] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2657.847820][T18559] usb 6-1: Using ep0 maxpacket: 32 [ 2657.871821][T18559] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 2657.917583][T18559] usb 6-1: config 0 has no interface number 0 [ 2657.938060][T18559] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2657.950016][T18559] usb 6-1: config 0 interface 85 has no altsetting 0 [ 2657.984070][T18559] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2657.994722][T18559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2658.003777][T18559] usb 6-1: Product: syz [ 2658.009334][T18559] usb 6-1: Manufacturer: syz [ 2658.014139][T18559] usb 6-1: SerialNumber: syz [ 2658.068855][T18559] usb 6-1: config 0 descriptor?? [ 2658.488947][T18559] appletouch 6-1:0.85: Failed to read mode from device. [ 2658.496188][T18559] appletouch: probe of 6-1:0.85 failed with error -5 [ 2658.548012][T18559] usb 6-1: USB disconnect, device number 68 [ 2658.609765][T32196] fuse: Bad value for 'fd' [ 2658.679374][T30439] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2658.881274][T30439] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2658.907479][T30439] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2658.924918][T30439] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2658.934235][T30439] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2658.947768][T30439] usb 7-1: SerialNumber: syz [ 2659.136914][T32203] fuse: Bad value for 'rootmode' [ 2659.167318][T30439] usb 7-1: 0:2 : does not exist [ 2659.227724][T30439] usb 7-1: USB disconnect, device number 22 [ 2659.297285][T30858] udevd[30858]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2660.325999][T32214] loop6: detected capacity change from 0 to 40427 [ 2660.366546][T32214] F2FS-fs (loop6): invalid crc value [ 2660.377146][T32214] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2660.415024][T32214] F2FS-fs (loop6): Start checkpoint disabled! [ 2660.425729][T32214] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 2661.453808][T31630] kworker/u4:4: attempt to access beyond end of device [ 2661.453808][T31630] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 2661.487794][T31630] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2661.513729][T31630] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2661.617908][T31630] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2662.657244][T32234] fuse: Bad value for 'rootmode' [ 2670.732372][T32289] loop1: detected capacity change from 0 to 256 [ 2672.207312][T32307] 9pnet_fd: Insufficient options for proto=fd [ 2677.632614][T32326] gfs2: not a GFS2 filesystem [ 2678.807801][T32341] 9pnet_fd: Insufficient options for proto=fd [ 2678.897537][T18560] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2678.907230][T32343] fuse: Unknown parameter 'group_id00000000000000000000' [ 2679.214159][T18560] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2679.355395][T18560] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2679.470533][T18560] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2679.576920][T18560] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2679.586758][T18560] usb 6-1: SerialNumber: syz [ 2679.926434][T18560] usb 6-1: 0:2 : does not exist [ 2682.053504][T18560] usb 6-1: USB disconnect, device number 69 [ 2682.323327][T30858] udevd[30858]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2684.531312][T32370] gfs2: not a GFS2 filesystem [ 2685.034813][T32372] fuse: Unknown parameter 'group_id00000000000000000000' [ 2685.381178][T32375] 9pnet_fd: Insufficient options for proto=fd [ 2687.717739][T18551] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2687.911867][T18551] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2687.958361][T18551] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2688.009355][T18551] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2688.048883][T18551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2688.207136][T18551] usb 6-1: SerialNumber: syz [ 2688.435120][T18551] usb 6-1: 0:2 : does not exist [ 2688.567909][T18551] usb 6-1: USB disconnect, device number 70 [ 2688.707578][T30858] udevd[30858]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2689.735804][T32408] fuse: Unknown parameter 'group_id00000000000000000000' [ 2693.016660][T32425] ERROR: device name not specified. [ 2693.770241][T32426] 9pnet_fd: Insufficient options for proto=fd [ 2695.830893][T32438] fuse: Bad value for 'user_id' [ 2696.822350][T32443] loop5: detected capacity change from 0 to 64 [ 2696.962345][T25477] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2697.973228][T32450] loop6: detected capacity change from 0 to 128 [ 2698.064041][T32453] ERROR: device name not specified. [ 2698.874901][T32450] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 2698.888581][T32450] hpfs: filesystem error: improperly stopped [ 2698.894657][T32450] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 2698.902992][T32450] hpfs: You really don't want any checks? You are crazy... [ 2698.911431][T32450] hpfs: hpfs_map_sector(): read error [ 2698.916886][T32450] hpfs: code page support is disabled [ 2698.928667][T32450] hpfs: hpfs_map_4sectors(): unaligned read [ 2698.938111][T32450] hpfs: hpfs_map_4sectors(): unaligned read [ 2698.944322][T32450] hpfs: filesystem error: unable to find root dir [ 2699.918101][T32468] fuse: Bad value for 'fd' [ 2704.226146][T32488] loop6: detected capacity change from 0 to 40427 [ 2704.289053][T32488] F2FS-fs (loop6): invalid crc value [ 2704.297178][T32488] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2704.332445][T32488] F2FS-fs (loop6): Start checkpoint disabled! [ 2704.363752][T32488] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 2705.417598][T18559] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2705.677867][T18559] usb 6-1: Using ep0 maxpacket: 32 [ 2705.700796][T18559] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 2705.709904][T18559] usb 6-1: config 0 has no interface number 0 [ 2705.716500][T18559] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2705.728373][T18559] usb 6-1: config 0 interface 85 has no altsetting 0 [ 2705.809066][T18559] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2705.818296][T18559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2705.826343][T18559] usb 6-1: Product: syz [ 2705.850946][T18559] usb 6-1: Manufacturer: syz [ 2705.856089][T18559] usb 6-1: SerialNumber: syz [ 2705.894120][T18559] usb 6-1: config 0 descriptor?? [ 2705.950914][T31630] kworker/u4:4: attempt to access beyond end of device [ 2705.950914][T31630] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 2706.035910][T31630] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2706.082553][T31630] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2708.782244][T18559] appletouch 6-1:0.85: Failed to request geyser raw mode [ 2708.797695][T18559] appletouch: probe of 6-1:0.85 failed with error -5 [ 2708.829410][T18559] usb 6-1: USB disconnect, device number 71 [ 2713.067971][T32511] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2713.441440][T32518] fuse: Unknown parameter 'user_id00000000000000000000' [ 2713.577990][T18559] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 2713.725201][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.777524][T18559] usb 7-1: device descriptor read/64, error -71 [ 2713.851752][T32523] fuse: Bad value for 'fd' [ 2714.067558][T18559] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 2714.237687][T18559] usb 7-1: device descriptor read/64, error -71 [ 2714.400558][T18559] usb usb7-port1: attempt power cycle [ 2714.827536][T18559] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 2714.889845][T18559] usb 7-1: device descriptor read/8, error -71 [ 2716.030270][T32521] Bluetooth: hci2: command 0x0406 tx timeout [ 2716.137510][T18559] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 2716.179218][T18559] usb 7-1: device descriptor read/8, error -71 [ 2716.297720][T18559] usb usb7-port1: unable to enumerate USB device [ 2720.575473][T32552] fuse: Bad value for 'fd' [ 2720.807598][T32554] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2721.360166][T32560] loop0: detected capacity change from 0 to 40427 [ 2721.395332][T32560] F2FS-fs (loop0): invalid crc value [ 2721.451980][T32560] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2721.506476][T32560] F2FS-fs (loop0): Start checkpoint disabled! [ 2721.532935][T32560] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 2722.183564][ T7485] kworker/u4:11: attempt to access beyond end of device [ 2722.183564][ T7485] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 2722.200555][ T7485] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 2722.227492][ T7485] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 2722.249553][ T7485] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 2722.357447][T30439] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 2722.557465][T30439] usb 7-1: Using ep0 maxpacket: 8 [ 2722.570043][T30439] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2722.597738][T30439] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2722.668325][T30439] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2722.675505][T30439] pvrusb2: ********** [ 2722.705223][T30439] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2722.736438][T30439] pvrusb2: Important functionality might not be entirely working. [ 2722.767408][T30439] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2722.803737][T30439] pvrusb2: ********** [ 2722.858737][ T2320] pvrusb2: Invalid write control endpoint [ 2723.290537][ T2320] pvrusb2: Invalid write control endpoint [ 2724.320198][T32580] syz.0.7562 (32580): drop_caches: 2 [ 2724.332541][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2724.389852][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2724.407579][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2724.427516][ T2320] pvrusb2: Device being rendered inoperable [ 2724.435288][T32569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7557'. [ 2724.463485][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2724.504820][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2724.634414][ T2320] pvrusb2: Attached sub-driver cx25840 [ 2724.655027][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2724.778518][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2725.392124][T32592] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2726.708240][T32585] syzkaller0: entered promiscuous mode [ 2726.733468][T32585] syzkaller0: entered allmulticast mode [ 2727.081315][T32601] fuse: Bad value for 'fd' [ 2727.594450][ T5817] IPVS: starting estimator thread 0... [ 2727.682924][T30439] usb 7-1: USB disconnect, device number 27 [ 2727.707522][T32605] IPVS: using max 21 ests per chain, 50400 per kthread [ 2727.882174][T32609] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2728.163096][T32617] 9pnet_fd: Insufficient options for proto=fd [ 2729.478805][T32628] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 2730.441775][T32636] fuse: Bad value for 'fd' [ 2731.327873][T32646] loop0: detected capacity change from 0 to 32768 [ 2731.386141][T32646] JBD2: Ignoring recovery information on journal [ 2731.529869][T32653] 9pnet_fd: Insufficient options for proto=fd [ 2732.284879][T32646] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 2733.320396][ T28] audit: type=1800 audit(2000002331.210:596): pid=32657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7581" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 2733.829123][T32665] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2734.080260][T18559] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2734.143079][T30289] ocfs2: Unmounting device (7,0) on (node local) [ 2734.307724][T18559] usb 6-1: Using ep0 maxpacket: 8 [ 2734.327688][T18559] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 2734.336049][T18559] usb 6-1: config 0 has no interface number 0 [ 2734.364561][T18559] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=9f.7a [ 2734.414744][T18559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2734.474604][T18559] usb 6-1: Product: syz [ 2734.506973][T18559] usb 6-1: Manufacturer: syz [ 2734.537883][T18559] usb 6-1: SerialNumber: syz [ 2734.904505][T18559] usb 6-1: config 0 descriptor?? [ 2734.934805][T18559] mvusb_mdio: probe of 6-1:0.168 failed with error -5 [ 2735.744108][T32674] syz.0.7586 (32674): drop_caches: 2 [ 2736.251101][T18551] usb 6-1: USB disconnect, device number 72 [ 2736.283965][T32676] fuse: Bad value for 'fd' [ 2736.449793][T32680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7590'. [ 2736.812302][T32687] 9pnet_fd: Insufficient options for proto=fd [ 2739.822858][T32707] syz.1.7597 (32707): drop_caches: 2 [ 2741.173771][T32700] loop6: detected capacity change from 0 to 32768 [ 2741.206915][T32700] JBD2: Ignoring recovery information on journal [ 2741.380808][T32700] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 2741.600965][T25906] ocfs2: Unmounting device (7,6) on (node local) [ 2741.747913][T30439] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2741.786969][T32718] netlink: 172 bytes leftover after parsing attributes in process `syz.6.7601'. [ 2741.924861][T32718] netlink: 172 bytes leftover after parsing attributes in process `syz.6.7601'. [ 2741.957960][T30439] usb 1-1: Using ep0 maxpacket: 8 [ 2741.979639][T30439] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 2742.002479][T30439] usb 1-1: config 0 has no interface number 0 [ 2742.027642][T30439] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=9f.7a [ 2742.048640][T30439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2742.056723][T30439] usb 1-1: Product: syz [ 2742.070479][T30439] usb 1-1: Manufacturer: syz [ 2742.075277][T30439] usb 1-1: SerialNumber: syz [ 2742.083686][T30439] usb 1-1: config 0 descriptor?? [ 2742.109013][T30439] mvusb_mdio: probe of 1-1:0.168 failed with error -5 [ 2742.198204][T32723] 9pnet_fd: Insufficient options for proto=fd [ 2743.017694][T30439] usb 1-1: USB disconnect, device number 61 [ 2744.712590][T32738] fuse: Bad value for 'fd' [ 2744.893419][T32741] loop6: detected capacity change from 0 to 1024 [ 2744.983176][T32741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2744.997717][T32741] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2745.946193][T25906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2746.837788][T32762] 9pnet_fd: Insufficient options for proto=fd [ 2748.268451][T32767] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2748.803840][ T308] 9pnet_fd: Insufficient options for proto=fd [ 2752.987503][ T332] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2754.680325][ T344] fuse: Bad value for 'fd' [ 2754.858090][ T347] 9pnet_fd: Insufficient options for proto=fd [ 2759.729759][ T372] loop0: detected capacity change from 0 to 1024 [ 2759.898327][ T28] audit: type=1800 audit(2000002357.790:597): pid=372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7625" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 2760.318568][ T382] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2760.875994][ T388] fuse: Bad value for 'fd' [ 2761.920196][ T395] 9pnet_fd: Insufficient options for proto=fd [ 2762.094947][ T397] xt_hashlimit: size too large, truncated to 1048576 [ 2768.184129][ T428] loop5: detected capacity change from 0 to 1024 [ 2768.206663][ T430] fuse: Bad value for 'fd' [ 2768.478827][ T28] audit: type=1800 audit(2000002366.370:598): pid=428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7648" name="file1" dev="loop5" ino=2 res=0 errno=0 [ 2768.913942][ T438] 9pnet_fd: Insufficient options for proto=fd [ 2772.277561][T18561] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 2772.567432][T18561] usb 7-1: Using ep0 maxpacket: 8 [ 2772.589887][T18561] usb 7-1: config 0 has an invalid interface number: 168 but max is 0 [ 2772.619687][T18561] usb 7-1: config 0 has no interface number 0 [ 2772.640020][T18561] usb 7-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=9f.7a [ 2772.661457][T18561] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2772.723290][T18561] usb 7-1: Product: syz [ 2772.747523][T18561] usb 7-1: Manufacturer: syz [ 2772.777860][T18561] usb 7-1: SerialNumber: syz [ 2772.795120][T18561] usb 7-1: config 0 descriptor?? [ 2772.927252][T18561] mvusb_mdio: probe of 7-1:0.168 failed with error -5 [ 2773.025390][T18561] usb 7-1: USB disconnect, device number 28 [ 2775.282679][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2776.177076][ T471] fuse: Unknown parameter 'use00000000000000000000' [ 2777.867080][T25591] Bluetooth: hci2: command 0x0406 tx timeout [ 2783.594273][ T5817] IPVS: starting estimator thread 0... [ 2784.818419][T32521] Bluetooth: hci2: command 0x0406 tx timeout [ 2784.833043][ T501] IPVS: using max 26 ests per chain, 62400 per kthread [ 2789.067797][ T532] 9pnet_fd: Insufficient options for proto=fd [ 2791.392568][ T546] xt_hashlimit: size too large, truncated to 1048576 [ 2792.687615][T25591] Bluetooth: hci2: command 0x0406 tx timeout [ 2796.077795][ T563] syz.6.7685 (563): drop_caches: 2 [ 2797.304760][ T566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7688'. [ 2799.957725][T25591] Bluetooth: hci2: command 0x0406 tx timeout [ 2799.974328][ T582] 9pnet_fd: Insufficient options for proto=fd [ 2804.058347][ T595] fuse: Unknown parameter '0x0000000000000003' serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.