last executing test programs: 18.578497067s ago: executing program 5 (id=1504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x6, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @ldst={0x0, 0x0, 0x0, 0x6, 0x7, 0xfffffffffffffffc, 0x8}, @cb_func={0x18, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x40, 0xed, &(0x7f0000000500)=""/237, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0xffffffffffffffff, r3], &(0x7f0000000680)=[{0x1, 0x4, 0x4, 0x5}], 0x10, 0xfffffff9, @void, @value}, 0x94) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 14.305700802s ago: executing program 5 (id=1513): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0xf, {0xf, 0x0, "a7ea3163fdfa964e45d3456808"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.884185628s ago: executing program 5 (id=1521): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000001640), 0x0, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a060040000000fe9c02a09f195677f344"], 0x0) 7.426905918s ago: executing program 3 (id=1526): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000104355810000000000000109022400010000000009042000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, 'bH\x00V'}]}}, 0x0}, 0x0) 7.002009033s ago: executing program 1 (id=1531): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.125163667s ago: executing program 5 (id=1533): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"a2e3ad21ed0d30f91b5d390987f70906d038e7ff7fc6e5539b3271298b089b0708356e090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a3c8f674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea50900000000000000987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cfcdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe673852be227e4247caf9b059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2b9fe00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d2e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab422f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5182cff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec6800068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1056}}, 0x100) 5.799746271s ago: executing program 5 (id=1537): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f00000004c0)={[{@autodefrag}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}]}, 0x1, 0x55a4, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569H33HvrFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vujlRmD2XzllB11x7Q9AUd8+Mj5aGxsU+xmnbQ87xu0zkztibda16HsQMN2+V1+EDtpPrL3p548MqT/3j6vvPXTt3Wbj6Xs0lz0ztadZjZNqvzNddrnsdogs+TXvD2K9hLGmqnK4Rw/J8+X/bMnJd23/jBqydOvP2Fi6+etvCaKROfHfSLsf947S53T7u8YP7f8NHz//hyjrflebljqx/WJ3Pz+EhdTGysT+bmAAAA0Gv0hqOmXx396kunPnT3oheXH1fx3XG/Omm3+oqzv99x/K4rx3/x0ivbH9+lYP4/tLTz//GUf13uaFeHMKErccGAEHbrejwJ/Cx25+QBIezVlWrJDxyWCqwO4Qtdif2zVaVK9I0lhqYCv6/PBCakAmtioCUVuDEGlqQCF8bAilRgRgysTgUOj4HQnj+OA+oz4yg5UBMDrclGXBGvQninPraW2lbrslUBAABsJ5nZYWX+3ZxrHbY1Q5xerqjpKUO8ArtohupUDekZbHZaVbSGip5qKO+phuy4F3308AtqLuup5oLLMMryM3w45DvlAybu/aO7bhxxU/OLE7/77tjjv/LnN99dvf8//fd7zpl/3QEF8/+mj57/V3fTkbKC8/8hTO76G3OXZyId2XhrS14GAAAAYBtc9djSJ2844Kj/c9/L9935pWtvKF999df/7ysbL9h71HHDy/r+3bdXFMz/J5R2/X88JtInJ3N4NB6GmD0ghKb8QFLtwYWB5Kx3v0wAAAAAeoPs+fjsufD2zG1yiXZ6Pl2Yv2Ur88cT/xO6zX/5pr9+9svXPnniwmH7bLjiv535Qdnnx/5ul2PXjnz8rT2H/UND38Lr/1tKu/6/Nv826cSa2IsrB4TQNyfwSOxlZ6DL0Bh4+dD8QGb8a+IGWByrylyYkK1qcSzRGgNNqcCyYiV+my2xW34g82RlG78gO472TImcAAAAAHzi4uGAeF4+Xv9/z+QDvrT/oJfGvLjnvQtfm7D0hFNrf7jPLbu+PqBj0pgDJxxyxDMF8//Wrbv+v2seXHB5f0e/EEZWhNAn/cWAR2uThQFjoK4sk7i/NqmrT7qq82pDGN85sHRVr2TW/69IrzH4RE1SVQzstvdPNw3rTNxQE8LI3MAz37x+TGdifiqQbfwbNSEM6RxtuvGVfZPGK9ONX9M3hD1zAtmqTu4bQmdjVemqHqzO/I5BuqrbqkMYmBPIVnVgdQgLAwC9VPxXOjP3wXkLz549vaOj7YwdmIjH8GvCrPaOtsYZczpmVhfp08xUn/OWMTqvcEyl/vLN85kliqYOuX14Kens9wSbctvKHMcvuHAwcz/uC1V2jbO5Mu/u6PSQh+9T2ETI2ZMqNuTyHTzk2txKtjyJBfXH/FWhX+i7YF7bGY1nTZ8//4xRyd9Sszcnf+NppmRbjUpvq9ru+lbCy6PoalkpH3db7Zdbycj5p80dOW/h2SPaT5t+Stspbd9pHjuquXnMV8eOaR7ZOaqm5G8PQ92vu6pTQ918fYnj2o5D3b0ip5JP4lNDQkKityWmLyk7f8K0X9//rT3WnHbWSXv8/R4zR5z0V5f/Zu6JjYdM/tX1f7m2YP4/96Pn//FTJ37yZ9ZnKHb+vyGe5k8e33KavzUGlpV6/r+h2Nn87IUBQ1OBRTGwyGl+AAAAPhvi4ch4NDMelb6u7p/uPnLmjEPe/+UJU67+27HjTj1r/b4NF1997JL/sP6dJauOeLtg/r+otO//b6f1/7NL13+t2DL/+8cSTcXW/08v859d/39RsfX/08v8Z9f/X/YprP+/IBtIbZJ3rP8PAAB8Fnxy6//3uLx/+gcCCjL0uLx/+gcCCjL0uIx/qT8QsNXr/8/p+IvaQZfPGXfoiLk/fmTV3ksG3val5yf+ep+lB424d+Ut7426tWD+v6S0+b+F+wEAAGDn8dAv+3774neH3f/UI+8fWXbpbzfedPxftR1wyB8GNp8y+eia79/0bwXz/2Wlzf8/+fX/QrHr/4cWC7QUWxjQ+n8AAAD0UsXW/7t54MtDV88fceNjP3/zlpdafzFz/Gv/bskPvjJ9WNPNa9b9pmHG+oL5/4rS5v/xsovyvNyxNx/WJ2vahfSadhvrs18ZAAAAgN6hPDQ2VpaYN29l1MM+fpvrMkuBflQ619P3DVq1oPyhq8qqN/7gkmmHNJ577Jlzjrxo/fdrn/xJ7dTG6jMK5v+rS5v/530v44HaSfWXvT3x4A9XnvzH0/edv3bqlvP/AAAAwI5T6nEJAAAAAAAAAAAAAADg0/dU69KDPhh19Bsz9xr1p28c+8IPFn/xm4/8zbV/PvPnh9+3V/vmYVMKvv8fJneVK/b9//i7f/H7Bbvm5Y6t9rz+X+b+lGNuXdi1ZOGj9SHskxuYff7sz4XMb/PvlxtYNXX/wZ2J89Ml7nvx8Nc6E9PSgaNG7PJeZ2J8KtAaF0n8QjoQf1Xxvf6pQFxe8cl0IG6PFelAVSZwSf9kHGXpbbWhLtlWZelt9VxdCANyAtltdXdd0kZZeoBXpQLZAZ6eDsQBTsoEytO9urVf0qsYqItF/6Zf0isAAHZacS+wMsxq72hrirvw8Xb3ivzbKG/JsvMKqy0rsfnnM0uTTR1y+/BS0n3S+6Jbfmu8MlR3DmFUwe5qbpayrlFun1p62HS7FhlyT6u9lRcpl7a1m66q+IhqkhE1zpjTMbOyx4GP7jlLc0WPWUYVTHZys5R3bdISaimhLyWMqMRtU0KX4/3y0NjYJ5VrXAw2hDw9vSJK/b5+7jp/xV4FuXn+tubaS/sM7vP+v42/6KEHB1R2nDq57aLdH/vngaNm/viHD7Ze8/uC+X9DafP/6txxvZf5MYBF8Zf1Dh4QQmuJIwIAAIDPvv957vI7TpyzZsOs1RXP/u53s8uPO7Fy8zl3nXP2Rc/dv/ioS/79zdsaX1H21KYT39h01l+/8ZOvXPfwWS8dPuOsuyatO2R9W/WN3/2L5acOKZj/Dy1t/h+PYGVOBSdHO1bH3/+/YEAIXT+t35AEfhaHe/KAEPbqSrXEEskP6n8tlmhKAj+LB0z2jyVaW/Kr6hsDK1KB39dnAqtTgTUxkDlK8dOQOZRzRX0IY7pSk/NLzI0lGlKB42JgaCrQGANNqUD/GJiQCrzZPxNoSQX+MQZCe/62urN/ZlsBAABsjcw8qzL/bkjP81ZU9JShrKcMtT1lKO8pQ3VPGYqNIt6/I2aoTF28UpaTqTJda02qloIM8cfwt7pfBRnCb/NzpgsWNB2vP8heb1CWn2HcD+9oPehr83686eIfPX7kgRceueTKty89ut/gK5/93+3n9uu/qbZg/t9U2vy/Nv82aX1NnP9v+f2/JPBI7N6V8dLxoTHw8qH5gcyBgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4eIAgHqaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKIxzHq4tfj96gL4XM5BziyJdpqkxJVqYbDwzXJN9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35yjL9k2XqhO2qhJB4ZVJYHadGBORRKIR36ygXvKkwBss+xRwfiCylzqktXQfbkir7/Pym+CpodXcAy0m3zdfedqR6lOP5A5ppq1dU9bQXXsEAVvj9Xebb3x3dbg3Za7I5XZQ9m8JVQdyme2zZq+oGN+fCT3m6wFdtDznPst1VLS2+F1uOjj97Zn1ekONKU+Ppq6L9f967AsVvdA7aT6y96eePDKk/94+r7z104tuRtFxC8KH3zr3AOey9m8O1p1yLzmet3nSYvPk974b2Copy2EsPyCWU8+8S/vP1+xvvm/HDh2+W1vPrb8Jwc9MGvEFzZc8uWNb717VMH8v6W0+X9F6rbLB3FjzhsQwvCcjfto3PwTBySfgzmB5FNyYGEgOeW+vr7oJycAAABsb9nDHdnjBe2Z2+SC8PQ8uTB/y1bmj8crJnSbv9R+DxzzD9879KrXv/H19btf/ujSp9b9pzdfOWLaoQ9senrFytebj/380wXz/9aPnv/3TXXT+X/n/9lBnP/v1s5+KLpv+oFF23QouqA6dgjn/7u1s7/bnP/vlvP/zv93x/n/Hjj/362d/Wkr2Euaa6crhNA64Ibbf1E7fXi/K8751oy1P3/6naZxL9Sde/Sd/+PwxeGa81b9uWD+P7e0+b/1/7pftC+7/l9rsfX/5hZb/2+R9f8AAIAdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fVq//V3vS2Se9Uv/WXtdMvP0/3zn9wudPOvHZffs8f8LtJ9w08urhL315Q8H8f1Fp8//4cuiX23pvWf9v6OQiVS2JgbkWBgQAAGBnVOwAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ+uFQ8u/uLmxfscdNOzn7/p8H9dtmbW3r86YPPoMSc3Dl88sOzKv/uXtwYtWPhG26Qzr22ZvvyaDSuXhtDeVa4sKV720KDy8tF/OOau2654uGna4CnnVmfqrczcfjEvd2z1w/oQluU8UhcTG+s772wJTDnm1oUVnYlH60PYJzcw+/zZn+tM3Fgfwn65gVVT9x/cmTg/XeK+Fw9/rTMxLR04asQu73UmxmcCZenuXtc/6W5ZuruX9Q9hQE4g291v98+vKtvGf8wEytNt3FyXtBEDdbHoj+qSNmKgI5Zo7xvCyIoQ+qSr+nV1UlWfdFV/X51U1Sdd1X+tDmF8CKEiXdWLVUlVFemRr61KqoqB3fb+6aZhnYllVSGMzA08883rx3QmTk8Fso1/vSqEIZ0vmXTjd1QmjVemG7+qMoQ9QwhV6RL/WpGUqEqXeKUihIE5gWzjp1aEsDDwmRA/fGbmPjhv4dmzp3d0tJ2xAxNVmbZqwqz2jrbGGXM6Zlan+lRMWU5683kff+zPbzpnRuft1CG3Dy8lXZEpV9nV5ebKvLujd/bex37V5lay5fkoqD/mrwr9Qt8F89rOaDxr+vz5Z4xK/paavTn52ycTTbbVqN6yrfbLrWTk/NPmjpy38OwR7adNP6XtlLbvNI8d1dw85qtjxzSP7BxVU/J3ewz1+k9+qLtX5FTySXwASEhI9LZEed6nW9PO/kFesKO/paOVobrrA7pgWpGbpaxrlNtj0Id9zBF/nP2UHkc0qmDiUJCluecsowsmE1uy1CRZuvbrCiaHuTWVd23SeL88NDb2KbYdGvLv5m7et7Zh867LbLpS0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+VuH0bMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcCgAA//9aTM01") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 5.641721783s ago: executing program 2 (id=1539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x34}}, 0x8c4) 5.412385165s ago: executing program 2 (id=1541): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}}, 0x0) 5.397842713s ago: executing program 0 (id=1542): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x31, 0x107, 0x0, 0x0, {0x3, 0x7c}}, 0x14}}, 0x0) 5.294872528s ago: executing program 2 (id=1543): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) 5.244340315s ago: executing program 0 (id=1544): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) 5.106264128s ago: executing program 0 (id=1545): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 4.796074747s ago: executing program 0 (id=1546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x6, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @ldst={0x0, 0x0, 0x0, 0x6, 0x7, 0xfffffffffffffffc, 0x8}, @cb_func={0x18, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x40, 0xed, &(0x7f0000000500)=""/237, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0xffffffffffffffff, r3], &(0x7f0000000680)=[{0x1, 0x4, 0x4, 0x5}], 0x10, 0xfffffff9, @void, @value}, 0x94) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 4.716379321s ago: executing program 2 (id=1547): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) 4.514808391s ago: executing program 2 (id=1548): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x87, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)={0x0, 0x0, 0x4, {0x4, 0x0, "7dea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.51267061s ago: executing program 3 (id=1549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000300030000005800018044000400200001000a000000000000000000004000000000000000000000002e00000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 3.757145046s ago: executing program 1 (id=1550): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.621779632s ago: executing program 0 (id=1551): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="1a", 0x1}], 0x1) 3.596737128s ago: executing program 3 (id=1552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0xd8}}, 0x4000040) syz_emit_ethernet(0x66, &(0x7f0000000100)={@random="5b37182347bc", @random='a\t\x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x30, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x5, {0xa, 0x6, "e397f7", 0x5, 0x6, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}}, 0x0) 3.372306413s ago: executing program 1 (id=1553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@generic={0xfe, 0x2}]}}}}}}}, 0x0) 3.371612699s ago: executing program 3 (id=1554): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00*'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.359734303s ago: executing program 4 (id=1555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x40004) 3.081153456s ago: executing program 1 (id=1556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ptrace$setsig(0x4203, r0, 0xa9, &(0x7f0000000000)={0x39, 0x8, 0x6}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000O00000,erroRs=coe,uid<\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x1bf, &(0x7f0000000640)="$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") chdir(&(0x7f0000000380)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./bus\x00', 0x0) unlinkat(r5, &(0x7f0000000180)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, 0x0) lstat(&(0x7f00000000c0)='./bus\x00', 0x0) 3.040353173s ago: executing program 5 (id=1557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) 2.935344964s ago: executing program 4 (id=1558): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2a}]}, 0x3c}}, 0x0) 2.552533373s ago: executing program 4 (id=1559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x3, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.988128964s ago: executing program 1 (id=1560): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x4, 0xfffff033}]}, 0x10) 1.95234622s ago: executing program 4 (id=1561): setreuid(0x0, 0xee01) r0 = shmget$private(0x0, 0x4000, 0x1944, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0xc) 1.677438039s ago: executing program 2 (id=1562): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 1.425695828s ago: executing program 4 (id=1563): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x27, 0x4b, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.336186835s ago: executing program 3 (id=1564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0) 1.328379414s ago: executing program 1 (id=1565): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x811010, &(0x7f0000000340)=ANY=[], 0x6, 0x647, &(0x7f0000000e80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x71}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r4 = creat(0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x1670e68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x16000}]) 242.107094ms ago: executing program 4 (id=1566): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000040)='\x00', 0x1}], 0x2, 0x19, 0x0) 148.342286ms ago: executing program 3 (id=1567): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x12, &(0x7f0000000140)={[{@enospc_debug}, {@enospc_debug}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x510c, &(0x7f0000005180)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x404) 0s ago: executing program 0 (id=1568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) kernel console output (not intermixed with test programs): 971][T12330] loop0: detected capacity change from 0 to 256 [ 932.841640][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.990'. [ 933.397530][ T5294] usb 5-1: Using ep0 maxpacket: 16 [ 933.423238][ T5294] usb 5-1: config 2 has an invalid interface number: 170 but max is 3 [ 933.582082][ T5294] usb 5-1: config 2 has an invalid interface number: 72 but max is 3 [ 933.590501][ T5294] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 933.607665][ T5294] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 4 [ 933.671095][ T5294] usb 5-1: config 2 has no interface number 0 [ 933.677262][ T5294] usb 5-1: config 2 has no interface number 1 [ 933.734397][ T5294] usb 5-1: config 2 interface 170 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 933.796778][ T5294] usb 5-1: config 2 interface 170 altsetting 1 endpoint 0xA has invalid maxpacket 1439, setting to 64 [ 933.890503][ T5294] usb 5-1: config 2 interface 72 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 933.980966][ T5294] usb 5-1: config 2 interface 170 has no altsetting 0 [ 934.028583][ T5294] usb 5-1: config 2 interface 72 has no altsetting 0 [ 934.067691][T12346] loop1: detected capacity change from 0 to 2048 [ 934.082870][ T5294] usb 5-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=41.72 [ 934.092204][ T5294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.100213][ T5294] usb 5-1: Product: syz [ 934.104692][ T5294] usb 5-1: Manufacturer: syz [ 934.110837][ T5294] usb 5-1: SerialNumber: syz [ 934.211196][T12351] loop5: detected capacity change from 0 to 256 [ 934.366865][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1003'. [ 934.599890][ T5294] kl5kusb105 5-1:2.170: KL5KUSB105D / PalmConnect converter detected [ 934.616828][ T5294] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 935.198363][ T5294] kl5kusb105 5-1:2.72: KL5KUSB105D / PalmConnect converter detected [ 935.450754][T12372] netlink: 'syz.0.1009': attribute type 1 has an invalid length. [ 935.458672][T12372] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1009'. [ 935.617297][ T5294] usb 5-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB1 [ 935.795346][T12384] loop0: detected capacity change from 0 to 2048 [ 935.890185][T12386] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 935.898254][T12386] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1010'. [ 935.941132][T12380] netlink: 'syz.5.1013': attribute type 3 has an invalid length. [ 935.949002][T12380] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.1013'. [ 935.987392][ T5294] usb 5-1: USB disconnect, device number 12 [ 936.733704][ T5294] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 937.037158][ T5294] kl5kusb105 5-1:2.170: device disconnected [ 937.046775][ T5294] kl5kusb105d ttyUSB1: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB1 [ 937.057764][ T5294] kl5kusb105 5-1:2.72: device disconnected [ 937.102314][T12402] netlink: 6776 bytes leftover after parsing attributes in process `syz.5.1022'. [ 938.124552][T12409] netlink: 'syz.4.1024': attribute type 7 has an invalid length. [ 938.133172][T12409] netlink: 'syz.4.1024': attribute type 8 has an invalid length. [ 938.192939][T12399] loop2: detected capacity change from 0 to 4096 [ 938.239869][T12399] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 938.340762][T12399] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 938.392699][T12399] ntfs3(loop2): ino=5, "/" directory corrupted [ 938.586217][T12419] Cannot find set identified by id 0 to match [ 938.944517][T12428] loop4: detected capacity change from 0 to 2048 [ 939.941439][ T5242] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 939.953302][ T5242] Bluetooth: hci5: Injecting HCI hardware error event [ 939.961713][ T5242] Bluetooth: hci5: hardware error 0x00 [ 941.101275][T12020] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 941.268917][T12020] usb 2-1: Using ep0 maxpacket: 16 [ 941.295023][T12020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 941.879033][T12020] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 942.015931][T12457] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 942.108033][T12020] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 942.142384][T12020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.150475][T12020] usb 2-1: Product: syz [ 942.155224][T12020] usb 2-1: Manufacturer: syz [ 942.161301][T12020] usb 2-1: SerialNumber: syz [ 942.221968][T12020] usb 2-1: config 0 descriptor?? [ 942.262200][T12463] loop3: detected capacity change from 0 to 512 [ 942.289006][T12020] opticon 2-1:0.0: opticon converter detected [ 942.391299][T12465] binder: Bad value for 'stats' [ 943.282526][ T5242] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 943.554970][T12020] usb 2-1: opticon converter now attached to ttyUSB0 [ 943.989093][T12478] loop5: detected capacity change from 0 to 1024 [ 944.209695][T12478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.921116][ T5242] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 944.929971][ T5242] Bluetooth: hci6: Injecting HCI hardware error event [ 944.940719][ T5242] Bluetooth: hci6: hardware error 0x00 [ 945.012884][T12482] loop2: detected capacity change from 0 to 2048 [ 945.062743][T12020] usb 2-1: USB disconnect, device number 11 [ 945.137648][T12020] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 945.146284][T12020] opticon 2-1:0.0: device disconnected [ 945.336887][T11418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.219125][T12497] loop2: detected capacity change from 0 to 256 [ 947.321149][ T5242] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 948.181893][T12523] loop5: detected capacity change from 0 to 512 [ 949.517950][T12535] loop1: detected capacity change from 0 to 1024 [ 949.684097][ T5242] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 949.697509][ T5242] Bluetooth: hci2: Injecting HCI hardware error event [ 949.995525][ T5242] Bluetooth: hci2: hardware error 0x00 [ 950.181648][T12535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 950.251188][T12020] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 950.310796][T12522] loop4: detected capacity change from 0 to 1024 [ 950.432111][T12020] usb 1-1: Using ep0 maxpacket: 16 [ 950.452188][T12020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 950.467910][T12020] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 950.496510][T12020] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 950.545403][T12020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.579494][T12020] usb 1-1: Product: syz [ 950.593719][T12020] usb 1-1: Manufacturer: syz [ 950.595483][T11575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.598322][T12020] usb 1-1: SerialNumber: syz [ 950.664061][T12020] usb 1-1: config 0 descriptor?? [ 950.675772][T12020] opticon 1-1:0.0: opticon converter detected [ 950.699939][T12020] usb 1-1: opticon converter now attached to ttyUSB0 [ 952.158645][T11635] usb 1-1: USB disconnect, device number 12 [ 952.258942][ T5242] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 952.273190][T11635] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 952.282538][T11635] opticon 1-1:0.0: device disconnected [ 952.706258][T12566] loop2: detected capacity change from 0 to 256 [ 954.209678][T12585] loop4: detected capacity change from 0 to 32768 [ 954.333080][T12585] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1087 (12585) [ 954.456757][T12594] loop1: detected capacity change from 0 to 1024 [ 954.576562][T12585] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 955.142029][T12585] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 955.299728][T12585] BTRFS info (device loop4): using free-space-tree [ 955.314747][ T5339] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 955.322512][T11635] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 955.623621][ T5339] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 955.637763][T11635] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 955.651747][ T5339] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 955.665086][T11635] usb 1-1: config 0 has no interface number 0 [ 955.763639][ T5339] usb 4-1: config 0 interface 0 has no altsetting 0 [ 955.835024][ T5339] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 955.851093][ T5339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.911405][ T5339] usb 4-1: Product: syz [ 955.915734][ T5339] usb 4-1: Manufacturer: syz [ 955.921151][ T5339] usb 4-1: SerialNumber: syz [ 955.930046][ T5339] usb 4-1: config 0 descriptor?? [ 955.959721][T11635] usb 1-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=c9.c0 [ 955.985107][T11635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.008252][ T5339] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24 [ 956.032310][T11635] usb 1-1: Product: syz [ 956.036511][T11635] usb 1-1: Manufacturer: syz [ 956.695493][T11635] usb 1-1: SerialNumber: syz [ 956.709574][T11635] usb 1-1: config 0 descriptor?? [ 956.721044][T11635] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 956.925492][T12585] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 956.946308][T12585] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 956.966783][T12585] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 956.977673][T12585] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 956.988033][T12585] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 956.998356][T12585] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 957.119213][T12020] usb 4-1: USB disconnect, device number 5 [ 957.222530][T12585] BTRFS error (device loop4): open_ctree failed [ 957.240036][T11635] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 957.247605][T11635] gspca_pac7302 1-1:0.183: probe with driver gspca_pac7302 failed with error -71 [ 957.341098][ T5333] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 957.561037][ T5333] usb 6-1: Using ep0 maxpacket: 16 [ 957.594544][T11635] usb 1-1: USB disconnect, device number 13 [ 957.617677][ T5333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 958.554417][T12640] loop2: detected capacity change from 0 to 256 [ 958.728608][T12641] loop4: detected capacity change from 0 to 1024 [ 958.757086][ T5333] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 959.049924][T12643] x_tables: (null)_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 96 [ 959.915236][T12649] loop2: detected capacity change from 0 to 256 [ 960.022197][T12649] FAT-fs (loop2): Directory bread(block 64) failed [ 960.039033][T12649] FAT-fs (loop2): Directory bread(block 65) failed [ 960.090101][ T5333] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 960.149218][ T5333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.243926][ T5333] usb 6-1: config 0 descriptor?? [ 961.039236][ T5333] usb 6-1: can't set config #0, error -71 [ 961.045897][T12649] FAT-fs (loop2): Directory bread(block 66) failed [ 961.052625][T12649] FAT-fs (loop2): Directory bread(block 67) failed [ 961.060037][T12649] FAT-fs (loop2): Directory bread(block 68) failed [ 961.069121][T12649] FAT-fs (loop2): Directory bread(block 69) failed [ 961.076092][T12649] FAT-fs (loop2): Directory bread(block 70) failed [ 961.087927][T12649] FAT-fs (loop2): Directory bread(block 71) failed [ 961.117657][T12657] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 961.177510][T12649] FAT-fs (loop2): Directory bread(block 72) failed [ 961.184234][T12649] FAT-fs (loop2): Directory bread(block 73) failed [ 961.211088][T12657] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1106'. [ 961.212369][ T5333] usb 6-1: USB disconnect, device number 13 [ 961.220385][T12657] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1106'. [ 961.398297][T12664] loop5: detected capacity change from 0 to 512 [ 961.405382][T12660] loop1: detected capacity change from 0 to 2048 [ 963.132419][T12682] loop2: detected capacity change from 0 to 1024 [ 963.224583][T12689] loop1: detected capacity change from 0 to 256 [ 965.116013][T12699] loop0: detected capacity change from 0 to 2048 [ 965.510151][T12699] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 965.929907][T12704] loop4: detected capacity change from 0 to 1024 [ 966.040291][T12699] syz.0.1118: attempt to access beyond end of device [ 966.040291][T12699] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 966.065185][T12709] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 966.329478][T12699] syz.0.1118: attempt to access beyond end of device [ 966.329478][T12699] loop0: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 966.447084][T12711] loop2: detected capacity change from 0 to 2048 [ 966.649303][T12699] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0) [ 967.028557][T12719] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 967.517307][T12733] loop5: detected capacity change from 0 to 1024 [ 969.226582][T12750] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1140'. [ 969.668094][T12756] loop4: detected capacity change from 0 to 2048 [ 969.765754][T12762] loop2: detected capacity change from 0 to 256 [ 969.893485][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 969.893508][ T29] audit: type=1800 audit(2000000128.349:478): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1145" name="file0" dev="loop2" ino=1048912 res=0 errno=0 [ 969.951099][T11635] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 970.112876][T11635] usb 2-1: config 0 has an invalid interface number: 224 but max is 0 [ 970.205540][T12737] loop0: detected capacity change from 0 to 32768 [ 970.221254][T12737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1135 (12737) [ 970.234190][T11635] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 970.234227][T11635] usb 2-1: config 0 has no interface number 0 [ 970.261158][T12737] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 970.271418][T12737] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 970.280681][T12737] BTRFS info (device loop0): using free-space-tree [ 970.387536][T11635] usb 2-1: config 0 interface 224 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 970.408180][T11635] usb 2-1: config 0 interface 224 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 970.419246][T11635] usb 2-1: config 0 interface 224 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 970.430185][T11635] usb 2-1: config 0 interface 224 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 970.440108][T11635] usb 2-1: config 0 interface 224 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 970.450007][T11635] usb 2-1: config 0 interface 224 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 970.557312][T12737] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 970.558100][T12737] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 970.571283][T12737] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 970.581630][T12737] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 970.592257][T12737] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 970.616748][T12777] loop4: detected capacity change from 0 to 512 [ 970.683329][T12777] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 970.730784][T12737] BTRFS error (device loop0): open_ctree failed [ 970.796493][T12777] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1149: invalid indirect mapped block 83886080 (level 1) [ 970.861522][T12777] EXT4-fs (loop4): Remounting filesystem read-only [ 970.890584][T12777] EXT4-fs (loop4): 1 orphan inode deleted [ 970.923136][T12777] EXT4-fs (loop4): 1 truncate cleaned up [ 970.957040][T12777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 970.977288][T11635] usb 2-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=69.e2 [ 970.986513][T11635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.994823][T11635] usb 2-1: Product: syz [ 970.999293][T11635] usb 2-1: Manufacturer: syz [ 971.004326][T11635] usb 2-1: SerialNumber: syz [ 971.236391][T11635] usb 2-1: config 0 descriptor?? [ 971.262713][T11635] keyspan 2-1:0.224: Keyspan 4 port adapter converter detected [ 971.274555][T11635] keyspan 2-1:0.224: found no endpoint descriptor for endpoint 87 [ 971.283541][T11635] keyspan 2-1:0.224: found no endpoint descriptor for endpoint 7 [ 971.301546][T11635] keyspan 2-1:0.224: found no endpoint descriptor for endpoint 81 [ 972.051323][T11635] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 972.066375][T11635] keyspan 2-1:0.224: found no endpoint descriptor for endpoint 82 [ 972.075097][T11635] keyspan 2-1:0.224: found no endpoint descriptor for endpoint 2 [ 972.143104][T11757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.152555][T11635] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 972.164641][T11635] keyspan 2-1:0.224: found no endpoint descriptor for endpoint 83 [ 972.172826][T11635] keyspan 2-1:0.224: found no endpoint descriptor for endpoint 3 [ 972.183572][T11635] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 972.192717][T11635] keyspan 2-1:0.224: found no endpoint descriptor for endpoint 84 [ 972.201643][T11635] keyspan 2-1:0.224: found no endpoint descriptor for endpoint 4 [ 972.226096][T11635] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 972.247719][T11635] usb 2-1: USB disconnect, device number 12 [ 972.699319][T12807] loop2: detected capacity change from 0 to 512 [ 973.577220][T11635] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 973.606081][T11635] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 974.363428][T11635] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 974.503322][T12807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.515967][T12807] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 974.550577][ T29] audit: type=1800 audit(2000000132.999:479): pid=12806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1152" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 974.653111][ T29] audit: type=1800 audit(2000000133.029:480): pid=12806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1152" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 974.673708][ C0] vkms_vblank_simulate: vblank timer overrun [ 974.844726][T11635] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 974.854923][T11635] keyspan 2-1:0.224: device disconnected [ 974.922464][T12003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.079091][T12820] tmpfs: Bad value for 'mpol' [ 976.611712][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 976.672415][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 976.692268][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 976.863588][T12837] loop5: detected capacity change from 0 to 2048 [ 976.865755][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 976.878543][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 976.887022][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 978.628623][T12870] netlink: 'syz.5.1175': attribute type 1 has an invalid length. [ 978.658463][T12870] netlink: 'syz.5.1175': attribute type 1 has an invalid length. [ 978.921662][T12833] chnl_net:caif_netlink_parms(): no params data found [ 979.001040][ T5245] Bluetooth: hci4: command tx timeout [ 979.028301][T12853] loop2: detected capacity change from 0 to 32768 [ 979.056472][T12853] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1170 (12853) [ 979.157862][T12853] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 979.220357][T12853] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 979.297347][T12853] BTRFS info (device loop2): disk space caching is enabled [ 979.321465][T12851] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 979.341371][T12853] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 979.528918][T12851] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 980.482789][T12853] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 980.483090][T12853] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 980.511777][T12853] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 980.593970][T12853] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 980.654009][T12900] loop1: detected capacity change from 0 to 512 [ 980.870149][T12833] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.900506][T12833] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.925945][T12853] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 980.926144][T12853] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 981.168115][T12833] bridge_slave_0: entered allmulticast mode [ 981.237086][T12853] BTRFS error (device loop2): open_ctree failed [ 981.567696][T12833] bridge_slave_0: entered promiscuous mode [ 984.035084][T12833] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.044354][T12833] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.051775][T12833] bridge_slave_1: entered allmulticast mode [ 984.061927][T12833] bridge_slave_1: entered promiscuous mode [ 987.687825][T12960] netlink: 'syz.2.1198': attribute type 1 has an invalid length. [ 988.015644][T12833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.027976][T12833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.269221][T11101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.345738][T12967] netlink: 'syz.1.1201': attribute type 7 has an invalid length. [ 989.354345][T12967] netlink: 'syz.1.1201': attribute type 5 has an invalid length. [ 989.381036][T12967] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1201'. [ 990.061767][T12833] team0: Port device team_slave_0 added [ 990.795345][T11101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.084649][T12833] team0: Port device team_slave_1 added [ 991.500700][T12997] loop1: detected capacity change from 0 to 256 [ 993.144080][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.150448][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.459001][T11101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.739692][T12833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.752354][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 993.832945][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 993.843573][T12833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.869805][T12833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.909810][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 993.911596][T13011] openvswitch: netlink: Flow actions attr not present in new flow. [ 993.938494][T13014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1212'. [ 993.947925][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 993.961199][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 993.990360][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 994.031817][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 994.039232][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 994.051363][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 994.061962][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 994.069769][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 994.077542][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 994.592828][T13003] loop0: detected capacity change from 0 to 32768 [ 994.630523][T13003] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1211 (13003) [ 994.849978][T11101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.958427][T13021] overlayfs: failed to resolve './file1': -2 [ 995.182862][T13003] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 995.221534][ T5340] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 995.561989][T13003] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 995.570490][T13003] BTRFS info (device loop0): using free-space-tree [ 995.648615][T12833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.674756][T12833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.779333][T12833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.125176][ T5242] Bluetooth: hci3: command tx timeout [ 996.156373][T13034] loop1: detected capacity change from 0 to 736 [ 996.982247][ T5340] usb 6-1: Using ep0 maxpacket: 16 [ 996.993931][T13003] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 996.994314][T13003] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 996.996680][ T5340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 997.026529][T13034] iso9660: Bad value for 'mode' [ 997.029279][ T5340] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 997.042374][T13003] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 997.042689][T13003] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 997.321857][T12833] hsr_slave_0: entered promiscuous mode [ 997.365112][T13003] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 997.365443][T13003] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 997.375474][T13003] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 997.402800][ T5340] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 997.415861][T12833] hsr_slave_1: entered promiscuous mode [ 997.421565][ T5340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.435106][ T5340] usb 6-1: Product: syz [ 997.439294][ T5340] usb 6-1: Manufacturer: syz [ 997.447420][ T5340] usb 6-1: SerialNumber: syz [ 997.454865][ T5340] usb 6-1: config 0 descriptor?? [ 997.463493][ T5340] opticon 6-1:0.0: opticon converter detected [ 997.481425][ T5340] usb 6-1: opticon converter now attached to ttyUSB0 [ 997.727621][ T5340] usb 6-1: USB disconnect, device number 14 [ 997.768402][T12833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 997.859110][ T5340] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 998.051956][T13049] loop1: detected capacity change from 0 to 2048 [ 998.071514][T13003] BTRFS error (device loop0): open_ctree failed [ 998.238942][ T5242] Bluetooth: hci3: command tx timeout [ 998.253656][T13050] loop1: p1 < > p4 [ 998.266844][T13050] loop1: p4 size 8388608 extends beyond EOD, truncated [ 998.358367][T13049] loop1: p1 < > p4 [ 998.370270][T13049] loop1: p4 size 8388608 extends beyond EOD, truncated [ 998.539522][ T5340] opticon 6-1:0.0: device disconnected [ 998.576715][T12833] Cannot create hsr debugfs directory [ 998.696274][ T6187] udevd[6187]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 998.706671][ T6608] udevd[6608]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 999.276023][T13059] loop1: detected capacity change from 0 to 256 [ 1000.361003][ T5242] Bluetooth: hci3: command tx timeout [ 1000.753517][T10578] udevd[10578]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1000.863220][T10583] udevd[10583]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1000.937096][T13070] loop1: detected capacity change from 0 to 512 [ 1002.071260][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1230'. [ 1002.156756][T13069] loop5: detected capacity change from 0 to 4096 [ 1002.441090][ T5242] Bluetooth: hci3: command tx timeout [ 1002.919779][ T5339] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1003.630987][ T5339] usb 2-1: Using ep0 maxpacket: 16 [ 1003.670227][ T5339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1003.719606][ T5339] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 1003.757260][ T5339] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 1003.772911][ T5339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.810475][ T5339] usb 2-1: Product: syz [ 1003.825381][ T5339] usb 2-1: Manufacturer: syz [ 1003.830001][ T5339] usb 2-1: SerialNumber: syz [ 1003.866080][ T5339] usb 2-1: config 0 descriptor?? [ 1003.904212][ T5339] opticon 2-1:0.0: opticon converter detected [ 1003.924233][ T5339] usb 2-1: opticon converter now attached to ttyUSB0 [ 1004.113747][T11101] bridge_slave_1: left allmulticast mode [ 1004.121156][ T5339] usb 2-1: USB disconnect, device number 13 [ 1004.150563][T11101] bridge_slave_1: left promiscuous mode [ 1004.172117][T11101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.191635][ T5339] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1004.232784][ T5339] opticon 2-1:0.0: device disconnected [ 1004.331739][T11101] bridge_slave_0: left allmulticast mode [ 1004.337430][T11101] bridge_slave_0: left promiscuous mode [ 1004.371133][T11101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.540271][T13106] loop5: detected capacity change from 0 to 256 [ 1005.628840][T13108] loop1: detected capacity change from 0 to 512 [ 1006.987855][T13126] loop1: detected capacity change from 0 to 256 [ 1008.239334][T13138] loop1: detected capacity change from 0 to 256 [ 1009.216269][T11101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.228710][T11101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.240125][T11101] bond0 (unregistering): Released all slaves [ 1009.275743][T13007] chnl_net:caif_netlink_parms(): no params data found [ 1009.343334][T13103] vcan0 speed is unknown, defaulting to 1000 [ 1009.640566][T13152] loop5: detected capacity change from 0 to 512 [ 1009.691795][T13103] vcan0 speed is unknown, defaulting to 1000 [ 1009.901980][T13103] vcan0 speed is unknown, defaulting to 1000 [ 1010.208770][T13103] infiniband syz1: set active [ 1010.231737][T13007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.238846][T13007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.255050][T13007] bridge_slave_0: entered allmulticast mode [ 1010.262367][T13007] bridge_slave_0: entered promiscuous mode [ 1010.264761][T13103] infiniband syz1: added vcan0 [ 1010.270307][T13007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.282780][T13007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.290712][T13007] bridge_slave_1: entered allmulticast mode [ 1010.297835][T13007] bridge_slave_1: entered promiscuous mode [ 1010.321049][T11635] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1010.359223][ T5365] vcan0 speed is unknown, defaulting to 1000 [ 1010.373519][T13103] syz1: rxe_create_cq: returned err = -12 [ 1010.399378][T13103] infiniband syz1: Couldn't create ib_mad CQ [ 1010.414646][T11101] hsr_slave_0: left promiscuous mode [ 1010.434738][T11101] hsr_slave_1: left promiscuous mode [ 1010.444816][T13103] infiniband syz1: Couldn't open port 1 [ 1010.502550][T11101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.510288][T11101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.530650][T11101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.549222][T11101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.616855][T13103] RDS/IB: syz1: added [ 1010.632150][T13103] smc: adding ib device syz1 with port count 1 [ 1010.638564][T13103] smc: ib device syz1 port 1 has pnetid [ 1010.646804][T13170] loop0: detected capacity change from 0 to 4096 [ 1010.682111][T13170] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1010.759034][T11101] veth1_macvtap: left promiscuous mode [ 1010.771421][T11101] veth0_macvtap: left promiscuous mode [ 1010.781468][T11101] veth1_vlan: left promiscuous mode [ 1010.786809][T11101] veth0_vlan: left promiscuous mode [ 1011.140461][T11635] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1011.159767][T11635] usb 2-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=77.7d [ 1011.181117][T13170] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1011.194143][T11635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.202321][T11635] usb 2-1: Product: syz [ 1011.207534][T11635] usb 2-1: Manufacturer: syz [ 1011.212482][T11635] usb 2-1: SerialNumber: syz [ 1011.219525][T11635] usb 2-1: config 0 descriptor?? [ 1011.232902][T13170] ntfs3(loop0): ino=1f, "file2" attr_set_size [ 1011.256528][T11635] usb 2-1: bad CDC descriptors [ 1011.511597][T11635] usb 2-1: USB disconnect, device number 14 [ 1011.787059][T13182] loop0: detected capacity change from 0 to 1024 [ 1013.079673][T11101] team0 (unregistering): Port device team_slave_1 removed [ 1013.331728][T11101] team0 (unregistering): Port device team_slave_0 removed [ 1013.397513][T13189] loop0: detected capacity change from 0 to 32768 [ 1013.410018][T13189] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1266 (13189) [ 1014.259123][T13189] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1014.270869][T13189] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1014.331186][T13189] BTRFS info (device loop0): using free-space-tree [ 1014.785477][T11623] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1014.866733][T13224] loop1: detected capacity change from 0 to 4096 [ 1014.907286][T13224] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1015.045558][ T5245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1015.054964][ T5245] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1015.071191][ T5245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1015.095652][T13224] ntfs3(loop1): failed to convert "c46c" to cp862 [ 1015.201200][ T5245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1015.219233][ T5245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1015.226550][ T5245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1015.477438][T13233] loop0: detected capacity change from 0 to 1024 [ 1016.588419][ T8] IPVS: starting estimator thread 0... [ 1016.711873][T13243] IPVS: using max 17 ests per chain, 40800 per kthread [ 1017.026834][T13253] loop0: detected capacity change from 0 to 256 [ 1017.742839][ T5242] Bluetooth: hci6: command tx timeout [ 1017.890132][T13256] openvswitch: netlink: Actions may not be safe on all matching packets [ 1018.078093][T12020] vcan0 speed is unknown, defaulting to 1000 [ 1018.100966][T13246] netlink: 'syz.1.1281': attribute type 6 has an invalid length. [ 1018.257271][T13007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.282831][T13007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.383961][T12833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1018.391318][T13103] vcan0 speed is unknown, defaulting to 1000 [ 1018.447256][T12833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1018.469335][T12833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1018.571117][ T5295] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1018.781424][ T5295] usb 2-1: Using ep0 maxpacket: 16 [ 1018.807104][ T5295] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1018.949090][ T5295] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.010351][T13007] team0: Port device team_slave_0 added [ 1019.076528][T12833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1019.107765][ C1] vkms_vblank_simulate: vblank timer overrun [ 1019.132370][ T5295] usb 2-1: config 0 has no interface number 0 [ 1019.153883][ T5295] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1019.153922][ T5295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.153953][ T5295] usb 2-1: Product: syz [ 1019.153976][ T5295] usb 2-1: Manufacturer: syz [ 1019.154000][ T5295] usb 2-1: SerialNumber: syz [ 1019.177731][T13007] team0: Port device team_slave_1 added [ 1019.213090][ T5295] usb 2-1: config 0 descriptor?? [ 1019.428218][ T5295] usb 2-1: USB disconnect, device number 15 [ 1019.562892][T13225] vcan0 speed is unknown, defaulting to 1000 [ 1019.614546][T13007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.655870][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.757605][T13007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.770520][T13007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.777730][T13007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.803638][ C1] vkms_vblank_simulate: vblank timer overrun [ 1019.809774][T13007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.852877][ T5242] Bluetooth: hci6: command tx timeout [ 1020.112995][T13103] vcan0 speed is unknown, defaulting to 1000 [ 1020.160726][T13007] hsr_slave_0: entered promiscuous mode [ 1020.210822][T13298] loop1: detected capacity change from 0 to 2048 [ 1020.237332][T13007] hsr_slave_1: entered promiscuous mode [ 1020.251239][T13007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1020.258821][T13007] Cannot create hsr debugfs directory [ 1020.319842][T13302] loop5: detected capacity change from 0 to 512 [ 1020.320476][T13298] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1020.760273][T13103] vcan0 speed is unknown, defaulting to 1000 [ 1021.737005][T13103] vcan0 speed is unknown, defaulting to 1000 [ 1021.927858][ T5242] Bluetooth: hci6: command tx timeout [ 1022.428007][T13314] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1303'. [ 1022.641686][T11114] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.671138][T13103] vcan0 speed is unknown, defaulting to 1000 [ 1023.410635][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 1023.608026][T12833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.795821][T13331] netlink: 'syz.0.1308': attribute type 8 has an invalid length. [ 1023.803880][T13331] netlink: 'syz.0.1308': attribute type 7 has an invalid length. [ 1023.811755][T13331] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1308'. [ 1023.887986][T11114] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.961271][ T5242] Bluetooth: hci6: command tx timeout [ 1024.095853][T12833] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.152251][T11114] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.200050][T13103] vcan0 speed is unknown, defaulting to 1000 [ 1024.432372][ T5561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.439502][ T5561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.525217][ T5561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.532363][ T5561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.645334][T13103] vcan0 speed is unknown, defaulting to 1000 [ 1024.786090][T13344] loop0: detected capacity change from 0 to 1024 [ 1025.545826][T13356] loop5: detected capacity change from 0 to 256 [ 1026.424715][ C1] vkms_vblank_simulate: vblank timer overrun [ 1026.531860][T13358] loop1: detected capacity change from 0 to 8 [ 1026.568113][T11114] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.576734][T13358] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1026.607009][T13358] SQUASHFS error: Failed to read block 0x91: -5 [ 1026.635779][T13358] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1026.649205][T13360] loop5: detected capacity change from 0 to 512 [ 1026.652376][T13358] SQUASHFS error: Unable to read inode 0x11f [ 1026.694214][T13225] chnl_net:caif_netlink_parms(): no params data found [ 1026.755199][T13360] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1026.817295][T13358] loop1: detected capacity change from 0 to 512 [ 1026.828687][T13363] loop0: detected capacity change from 0 to 1024 [ 1026.840189][T13360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c198, mo2=0002] [ 1026.851259][T13360] System zones: 1-12 [ 1026.860203][T13360] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1319: corrupted in-inode xattr: e_value size too large [ 1026.878192][T13103] vcan0 speed is unknown, defaulting to 1000 [ 1026.890836][T12833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1026.933389][T13360] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.1319: couldn't read orphan inode 15 (err -117) [ 1026.951168][T12833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1026.989872][T13363] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 1027.029606][T13360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.586400][T11418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.875917][T13376] loop0: detected capacity change from 0 to 8 [ 1027.882617][T13372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1318'. [ 1027.949874][T11114] bridge_slave_1: left allmulticast mode [ 1027.971010][T13376] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1027.978853][T13376] SQUASHFS error: Failed to read block 0x91: -5 [ 1028.012874][T11114] bridge_slave_1: left promiscuous mode [ 1028.062029][T11114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.069761][T13376] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1028.098843][T13376] SQUASHFS error: Unable to read inode 0x11f [ 1028.106300][T11114] bridge_slave_0: left allmulticast mode [ 1028.112451][T11114] bridge_slave_0: left promiscuous mode [ 1028.118186][T11114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.207974][T13382] IPVS: length: 174 != 8 [ 1028.871062][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.075707][T13394] loop0: detected capacity change from 0 to 64 [ 1029.390599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.487249][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.507293][T13400] loop5: detected capacity change from 0 to 2048 [ 1029.556782][T13400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1029.759512][T11418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.236351][T13410] loop1: detected capacity change from 0 to 4096 [ 1030.251010][T13410] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1030.318439][T13410] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1030.363674][T13410] ntfs3(loop1): Failed to load $Extend (-22). [ 1030.369995][T13410] ntfs3(loop1): Failed to initialize $Extend. [ 1030.489752][T13405] loop0: detected capacity change from 0 to 32768 [ 1030.652119][T13419] loop5: detected capacity change from 0 to 256 [ 1031.103205][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.395617][T13405] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1031.557379][T13428] loop5: detected capacity change from 0 to 256 [ 1031.629834][T13405] XFS (loop0): Ending clean mount [ 1031.639002][T11114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.656155][T11114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.693175][T11114] bond0 (unregistering): Released all slaves [ 1031.707838][T13428] FAT-fs (loop5): Directory bread(block 64) failed [ 1031.721244][T13428] FAT-fs (loop5): Directory bread(block 65) failed [ 1031.736724][T13428] FAT-fs (loop5): Directory bread(block 66) failed [ 1031.745687][T11623] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1031.760322][T13225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.780002][T13431] loop1: detected capacity change from 0 to 1024 [ 1031.790780][T13428] FAT-fs (loop5): Directory bread(block 67) failed [ 1031.836868][T13225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.850760][T13428] FAT-fs (loop5): Directory bread(block 68) failed [ 1032.060083][T13225] bridge_slave_0: entered allmulticast mode [ 1032.069483][T13225] bridge_slave_0: entered promiscuous mode [ 1032.078269][T13225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.085560][T13225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.108013][T13225] bridge_slave_1: entered allmulticast mode [ 1032.112231][T13428] FAT-fs (loop5): Directory bread(block 69) failed [ 1032.115303][T13225] bridge_slave_1: entered promiscuous mode [ 1032.163548][T13428] FAT-fs (loop5): Directory bread(block 70) failed [ 1032.170342][T13428] FAT-fs (loop5): Directory bread(block 71) failed [ 1032.423457][T13428] FAT-fs (loop5): Directory bread(block 72) failed [ 1032.430040][T13428] FAT-fs (loop5): Directory bread(block 73) failed [ 1034.319592][T13225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.821571][T13473] loop5: detected capacity change from 0 to 256 [ 1036.370756][T13477] loop1: detected capacity change from 0 to 256 [ 1036.448991][T13225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.468568][T13477] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1037.805514][T13225] team0: Port device team_slave_0 added [ 1037.893757][T13225] team0: Port device team_slave_1 added [ 1037.909892][T13496] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1037.933755][T13496] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1037.981925][T13496] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1038.001676][T13496] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1038.013165][T13496] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1038.027673][T13496] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1038.193066][T13225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.207854][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.235753][T13225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.251510][T13225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.258632][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.266057][ T5295] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1038.306620][T13225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.322929][T11114] hsr_slave_0: left promiscuous mode [ 1038.329015][T11114] hsr_slave_1: left promiscuous mode [ 1038.335547][T11114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.343212][T11114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.352206][T11114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.359690][T11114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.366946][T12020] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1038.392573][T11114] veth1_macvtap: left promiscuous mode [ 1038.398200][T11114] veth0_macvtap: left promiscuous mode [ 1038.404158][T11114] veth1_vlan: left promiscuous mode [ 1038.409524][T11114] veth0_vlan: left promiscuous mode [ 1038.461056][ T5295] usb 6-1: Using ep0 maxpacket: 16 [ 1038.471703][ T5295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.492850][ T5295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.515698][ T5295] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1038.521087][T12020] usb 1-1: Using ep0 maxpacket: 8 [ 1038.534844][ T5295] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1038.544751][ T5295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.553844][T12020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.556134][ T5295] usb 6-1: config 0 descriptor?? [ 1038.583537][T12020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.602176][T12020] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1038.628710][T12020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.671931][T12020] usb 1-1: config 0 descriptor?? [ 1038.883372][T13506] loop1: detected capacity change from 0 to 1024 [ 1039.222401][ T5295] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 1039.235613][ T5295] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 1039.288915][ T5295] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1039.495633][ T5295] microsoft 0003:045E:07DA.0003: no inputs found [ 1039.576603][ T5295] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 1039.749515][ T5295] usb 6-1: USB disconnect, device number 15 [ 1039.879591][T12020] lenovo 0003:17EF:60A3.0004: item fetching failed at offset 2/5 [ 1039.888219][T12020] lenovo 0003:17EF:60A3.0004: hid_parse failed [ 1039.895317][T12020] lenovo 0003:17EF:60A3.0004: probe with driver lenovo failed with error -22 [ 1039.910200][T12020] usb 1-1: USB disconnect, device number 14 [ 1039.941570][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.006862][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.121050][ T5242] Bluetooth: hci2: command tx timeout [ 1040.217091][ T931] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1040.371090][ T931] usb 2-1: Using ep0 maxpacket: 8 [ 1040.377898][ T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.389627][ T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.408969][ T931] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1040.419453][ T931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.453480][ T931] usb 2-1: config 0 descriptor?? [ 1040.500440][T11114] team0 (unregistering): Port device team_slave_1 removed [ 1040.543778][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.708461][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'. [ 1040.727709][T11114] team0 (unregistering): Port device team_slave_0 removed [ 1040.757005][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.791110][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.830749][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.858612][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.883710][ T931] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 1040.901877][ T931] steelseries 0003:1038:1410.0005: report_id 0 is invalid [ 1040.909089][ T931] steelseries 0003:1038:1410.0005: item 0 0 1 8 parsing failed [ 1040.917282][ T931] steelseries 0003:1038:1410.0005: parse failed [ 1040.923800][ T931] steelseries 0003:1038:1410.0005: probe with driver steelseries failed with error -22 [ 1040.951900][T13513] loop5: detected capacity change from 0 to 32768 [ 1041.107950][ T8] usb 2-1: USB disconnect, device number 16 [ 1041.711872][T13517] loop1: detected capacity change from 0 to 128 [ 1041.752220][T13517] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1041.766841][T13517] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.870983][T11575] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1042.251973][ T5242] Bluetooth: hci2: command tx timeout [ 1042.967971][T13515] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1043.020388][T13515] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1043.276587][T13494] vcan0 speed is unknown, defaulting to 1000 [ 1043.465691][T13225] hsr_slave_0: entered promiscuous mode [ 1043.525898][T13225] hsr_slave_1: entered promiscuous mode [ 1043.619062][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 1043.702836][T13007] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1043.724114][T13007] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1043.914223][T13550] sp0: Synchronizing with TNC [ 1043.976952][T13007] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1044.009442][T13554] geneve0: entered allmulticast mode [ 1044.083945][T13007] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1044.182333][T13560] loop5: detected capacity change from 0 to 8 [ 1044.219153][T13560] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1044.239871][T13560] SQUASHFS error: Failed to read block 0x91: -5 [ 1044.285854][ T5242] Bluetooth: hci2: command tx timeout [ 1044.294771][T13560] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1044.294796][T13560] SQUASHFS error: Unable to read inode 0x11f [ 1044.444164][T13007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.268117][T13225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.403667][T13007] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.516987][T13557] loop1: detected capacity change from 0 to 32768 [ 1045.616667][T13581] loop5: detected capacity change from 0 to 8 [ 1045.637182][T13581] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1045.647578][T13581] SQUASHFS error: Failed to read block 0x91: -5 [ 1045.654605][T13581] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1045.662420][T13581] SQUASHFS error: Unable to read inode 0x11f [ 1045.665481][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.675603][ T6369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.775496][T11116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.782718][T11116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.881495][T13557] XFS (loop1): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1045.944269][T13225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.202605][T13557] XFS (loop1): Ending clean mount [ 1046.361099][ T5242] Bluetooth: hci2: command tx timeout [ 1046.427192][T13557] XFS (loop1): Quotacheck needed: Please wait. [ 1046.672128][T13557] XFS (loop1): Quotacheck: Done. [ 1046.717662][T13494] chnl_net:caif_netlink_parms(): no params data found [ 1046.728916][T11575] XFS (loop1): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1046.775652][T13225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.804112][T13588] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1380'. [ 1046.991811][T13591] loop5: detected capacity change from 0 to 512 [ 1047.008471][T13591] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1047.045931][T13571] loop0: detected capacity change from 0 to 40427 [ 1047.052836][T13591] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1382: bad orphan inode 131083 [ 1047.056258][T13571] F2FS-fs (loop0): invalid crc value [ 1047.101667][T13591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.128649][T13571] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1047.243611][T13225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.264769][T11418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.346288][T13571] F2FS-fs (loop0): Start checkpoint disabled! [ 1047.451341][T13494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.458460][T13494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.460040][T13571] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1047.482695][T13494] bridge_slave_0: entered allmulticast mode [ 1047.499796][T13494] bridge_slave_0: entered promiscuous mode [ 1047.518250][T13494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.535837][T13494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.569425][T13494] bridge_slave_1: entered allmulticast mode [ 1047.577163][T13571] syz.0.1378: attempt to access beyond end of device [ 1047.577163][T13571] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1047.584195][T13494] bridge_slave_1: entered promiscuous mode [ 1047.700584][ T78] kworker/u8:4: attempt to access beyond end of device [ 1047.700584][ T78] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1047.732307][T13494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.743480][ T78] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1047.750629][ T78] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1047.770631][T13007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.863885][T13494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.263782][T13494] team0: Port device team_slave_0 added [ 1048.273219][T11114] bridge_slave_1: left allmulticast mode [ 1048.278896][T11114] bridge_slave_1: left promiscuous mode [ 1048.327985][T11114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.397675][T11114] bridge_slave_0: left allmulticast mode [ 1048.411068][T11114] bridge_slave_0: left promiscuous mode [ 1048.416822][T11114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.465484][T11114] bridge_slave_1: left allmulticast mode [ 1048.481808][T11114] bridge_slave_1: left promiscuous mode [ 1048.492084][T11114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.514825][T11114] bridge_slave_0: left allmulticast mode [ 1048.520504][T11114] bridge_slave_0: left promiscuous mode [ 1048.537284][T11114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.565757][T13623] loop0: detected capacity change from 0 to 1024 [ 1049.743321][T13641] loop0: detected capacity change from 0 to 256 [ 1050.602970][T13644] loop0: detected capacity change from 0 to 512 [ 1051.464169][T13496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1051.475823][T13496] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1051.484877][T13496] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1051.495780][T13496] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1051.503868][T13496] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1051.511210][T13496] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1052.028925][T11114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.071726][T11114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.093993][T11114] bond0 (unregistering): Released all slaves [ 1052.243223][T11114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.254965][T11114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.266354][T11114] bond0 (unregistering): Released all slaves [ 1052.298828][T13494] team0: Port device team_slave_1 added [ 1052.341075][ T5295] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1052.514443][ T5295] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1052.526979][ T5295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.533541][T13225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1052.571439][ T5295] usb 1-1: Product: syz [ 1052.575639][ T5295] usb 1-1: Manufacturer: syz [ 1052.580250][ T5295] usb 1-1: SerialNumber: syz [ 1052.603607][ T5295] usb 1-1: config 0 descriptor?? [ 1052.683892][T13494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.690863][T13494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.770525][T13657] loop1: detected capacity change from 0 to 128 [ 1052.831289][T13657] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 1052.856395][T13494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.874183][T13648] vcan0 speed is unknown, defaulting to 1000 [ 1052.887220][ T5340] usb 1-1: USB disconnect, device number 15 [ 1052.903467][T13657] syz.1.1393: attempt to access beyond end of device [ 1052.903467][T13657] loop1: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1052.988069][T13657] Buffer I/O error on dev loop1, logical block 3245768, async page read [ 1052.989617][T10583] udevd[10583]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.053461][T13225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1053.089409][T13494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.113715][T13494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.113884][T13657] syz.1.1393: attempt to access beyond end of device [ 1053.113884][T13657] loop1: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1053.177567][T13494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.194658][T13657] Buffer I/O error on dev loop1, logical block 3245768, async page read [ 1053.300541][T13225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1053.330035][T13225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1053.372620][T11575] sysv_free_block: flc_count > flc_size [ 1053.379402][T11575] sysv_free_block: flc_count > flc_size [ 1053.399609][T11575] sysv_free_block: flc_count > flc_size [ 1053.416941][T11575] sysv_free_block: flc_count > flc_size [ 1053.471008][T11575] sysv_free_block: flc_count > flc_size [ 1053.476609][T11575] sysv_free_block: flc_count > flc_size [ 1053.485435][T11575] sysv_free_block: flc_count > flc_size [ 1053.491481][T11575] sysv_free_block: flc_count > flc_size [ 1053.497045][T11575] sysv_free_block: flc_count > flc_size [ 1053.503307][T11575] sysv_free_block: flc_count > flc_size [ 1053.510378][T11575] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1053.561135][T13496] Bluetooth: hci4: command tx timeout [ 1053.775414][T13676] loop0: detected capacity change from 0 to 1024 [ 1053.876436][T13494] hsr_slave_0: entered promiscuous mode [ 1053.971429][T13494] hsr_slave_1: entered promiscuous mode [ 1053.981733][T13681] overlayfs: lower data-only dirs require metacopy support. [ 1053.998323][T13494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1054.021354][T13494] Cannot create hsr debugfs directory [ 1054.532111][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.550056][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.040558][T13688] tipc: Started in network mode [ 1055.045871][T13688] tipc: Node identity 5f5f2eaa, cluster identity 4711 [ 1055.066910][T13688] tipc: Enabling of bearer rejected, failed to enable media [ 1055.643139][T13496] Bluetooth: hci4: command tx timeout [ 1056.156270][T13702] loop5: detected capacity change from 0 to 256 [ 1057.031578][T11114] hsr_slave_0: left promiscuous mode [ 1057.040958][T11114] hsr_slave_1: left promiscuous mode [ 1057.048363][T11114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.073957][T11114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.111127][T11114] hsr_slave_0: left promiscuous mode [ 1057.117142][T11114] hsr_slave_1: left promiscuous mode [ 1057.132663][T11114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.140102][T11114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.154205][T12020] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1057.163019][T11114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.170488][T11114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.211162][ T5295] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1057.237652][T11114] veth1_macvtap: left promiscuous mode [ 1057.250732][T11114] veth0_macvtap: left promiscuous mode [ 1057.260699][T11114] veth1_vlan: left promiscuous mode [ 1057.268702][T11114] veth0_vlan: left promiscuous mode [ 1057.341124][T12020] usb 1-1: Using ep0 maxpacket: 16 [ 1057.351715][T12020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.372925][ T5295] usb 6-1: Using ep0 maxpacket: 32 [ 1057.373737][T12020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.393878][ T5295] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1057.399942][T12020] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1057.402156][ T5295] usb 6-1: config 0 has no interface number 0 [ 1057.427251][T12020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.450649][ T5295] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1057.459979][T12020] usb 1-1: config 0 descriptor?? [ 1057.467821][ T5295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.492703][ T5295] usb 6-1: Product: syz [ 1057.496913][ T5295] usb 6-1: Manufacturer: syz [ 1057.512128][ T5295] usb 6-1: SerialNumber: syz [ 1057.526411][ T5295] usb 6-1: config 0 descriptor?? [ 1057.539677][T11114] infiniband syz1: set down [ 1057.654914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.702600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.742705][T13496] Bluetooth: hci4: command tx timeout [ 1057.755010][ T5295] radio-si470x 6-1:0.35: this is not a si470x device. [ 1057.793607][ T5295] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1057.895118][T12020] elan 0003:04F3:0755.0006: item fetching failed at offset 2/5 [ 1057.915915][T12020] elan 0003:04F3:0755.0006: Hid Parse failed [ 1057.948074][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.948080][T12020] elan 0003:04F3:0755.0006: probe with driver elan failed with error -22 [ 1058.002471][T11114] team0 (unregistering): Port device team_slave_1 removed [ 1058.011261][ T5295] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 1058.053666][ T5295] radio-raremono 6-1:0.35: V4L2 device registered as radio32 [ 1058.096299][ T5295] usb 6-1: USB disconnect, device number 16 [ 1058.111903][ T5295] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 1058.174224][T12020] usb 1-1: USB disconnect, device number 16 [ 1058.184007][T11114] team0 (unregistering): Port device team_slave_0 removed [ 1058.632839][ C1] vkms_vblank_simulate: vblank timer overrun [ 1058.757805][T13717] loop5: detected capacity change from 0 to 256 [ 1059.751109][T13723] loop5: detected capacity change from 0 to 1024 [ 1059.801278][T13496] Bluetooth: hci4: command tx timeout [ 1059.842818][T13723] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 1059.850196][T13723] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 1059.921383][T11101] hfsplus: b-tree write err: -5, ino 4 [ 1059.921492][ T5295] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1060.045190][T13725] loop5: detected capacity change from 0 to 8 [ 1060.063586][T13725] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1060.071670][T13725] SQUASHFS error: Failed to read block 0x91: -5 [ 1060.078371][T13725] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1060.088922][T13725] SQUASHFS error: Unable to read inode 0x11f [ 1060.152119][ T5295] usb 1-1: Using ep0 maxpacket: 16 [ 1060.168970][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.184832][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.195368][ T5295] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1060.216623][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.260020][ T5295] usb 1-1: config 0 descriptor?? [ 1061.251445][ T5295] uclogic 0003:28BD:0071.0007: interface is invalid, ignoring [ 1061.399494][ T5295] usb 1-1: USB disconnect, device number 17 [ 1062.207972][T11114] team0 (unregistering): Port device team_slave_1 removed [ 1062.289333][T11114] team0 (unregistering): Port device team_slave_0 removed [ 1062.367183][T13744] loop0: detected capacity change from 0 to 256 [ 1063.219547][T13746] loop0: detected capacity change from 0 to 512 [ 1063.263433][T13746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.276140][T13746] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.406218][T11623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.653078][T13753] loop0: detected capacity change from 0 to 256 [ 1064.722771][T13759] loop0: detected capacity change from 0 to 256 [ 1066.849914][ T78] smc: removing ib device syz1 [ 1067.133950][ T5340] vcan0 speed is unknown, defaulting to 1000 [ 1067.821438][ T5339] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1067.987815][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1068.002968][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1068.010042][ T5339] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 1068.011510][T13648] chnl_net:caif_netlink_parms(): no params data found [ 1068.022175][ T5339] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 1068.036636][ T5339] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.047450][ T5339] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1068.056784][ T5339] usb 1-1: config 0 has no interface number 0 [ 1068.063706][ T5339] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1068.076497][ T5339] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1068.086876][ T5339] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1068.100093][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1068.109068][ T5339] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1068.121570][ T5339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.137518][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1068.150150][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1068.158149][ T5339] usb 1-1: config 0 descriptor?? [ 1068.163395][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1068.183141][ T5339] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1068.390441][ T5339] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 1068.428557][ T5339] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1068.453401][ T5339] usb 1-1: MIDIStreaming interface descriptor not found [ 1068.688886][T13225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.700709][ T5339] usb 1-1: USB disconnect, device number 18 [ 1069.255067][T13648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.281301][T13648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.291603][T13648] bridge_slave_0: entered allmulticast mode [ 1069.433477][T13648] bridge_slave_0: entered promiscuous mode [ 1069.449741][T13795] loop0: detected capacity change from 0 to 1024 [ 1069.673082][T13648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.680294][T13648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.894507][T13648] bridge_slave_1: entered allmulticast mode [ 1070.009855][T13648] bridge_slave_1: entered promiscuous mode [ 1070.069319][T13225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.201174][T13496] Bluetooth: hci0: command tx timeout [ 1070.482889][ T5319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.490072][ T5319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.515954][ T5319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.523127][ T5319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.606735][T13648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.694679][T13648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.865386][T13648] team0: Port device team_slave_0 added [ 1070.887440][T13648] team0: Port device team_slave_1 added [ 1070.911967][T13494] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1070.922244][T13802] loop5: detected capacity change from 0 to 32768 [ 1070.930245][T13802] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1435 (13802) [ 1070.993231][T13802] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1071.041162][T13802] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 1071.068381][T13802] BTRFS info (device loop5): using free-space-tree [ 1071.083101][T13494] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1071.109331][T13494] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1071.159844][T13648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.190720][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.228047][T13648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.245252][T13494] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1071.416033][T13648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.431535][T13648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.472964][T13648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.627507][T11418] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1071.774295][T11114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.917135][T13777] chnl_net:caif_netlink_parms(): no params data found [ 1071.978313][T13840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1439'. [ 1072.181857][T11114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.273319][T13648] hsr_slave_0: entered promiscuous mode [ 1072.281607][T13496] Bluetooth: hci0: command tx timeout [ 1072.296575][T13648] hsr_slave_1: entered promiscuous mode [ 1072.320880][T13648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.341314][T13648] Cannot create hsr debugfs directory [ 1072.500789][T11114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.532728][ T5295] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1072.637997][T11114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.681616][T13225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.706447][T13494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.721269][ T5295] usb 1-1: Using ep0 maxpacket: 16 [ 1072.734762][ T5295] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1072.760652][ T5295] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1072.793821][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 1072.815668][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 1072.836187][T13777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.840957][ T5295] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1072.853038][T13777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.869252][T13777] bridge_slave_0: entered allmulticast mode [ 1072.882456][ T5295] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1072.901441][T13777] bridge_slave_0: entered promiscuous mode [ 1072.911700][ T5295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.919836][ T5295] usb 1-1: Product: syz [ 1072.926010][T13777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.944514][ T5295] usb 1-1: Manufacturer: syz [ 1072.949150][ T5295] usb 1-1: SerialNumber: syz [ 1072.954099][T13777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.971303][T13777] bridge_slave_1: entered allmulticast mode [ 1072.981986][ T5295] usb 1-1: config 0 descriptor?? [ 1072.983602][T13777] bridge_slave_1: entered promiscuous mode [ 1073.124592][T13777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.180414][T13494] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.199532][ T5295] appledisplay: Apple Cinema Display connected [ 1073.240817][T13777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.306675][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.313947][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.424089][ T8] usb 1-1: USB disconnect, device number 19 [ 1073.424429][ C1] usb 1-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1073.449307][T13777] team0: Port device team_slave_0 added [ 1073.449498][ T8] appledisplay: Apple Cinema Display disconnected [ 1073.475178][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.482345][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.547527][T13777] team0: Port device team_slave_1 added [ 1073.616320][T13883] loop5: detected capacity change from 0 to 512 [ 1073.691265][T13777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.702911][T13777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.768464][T13777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.087195][T13777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.101407][T13777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.136412][T13777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.197807][T13225] veth0_vlan: entered promiscuous mode [ 1074.363877][T13496] Bluetooth: hci0: command tx timeout [ 1074.482489][T13777] hsr_slave_0: entered promiscuous mode [ 1074.501623][T13777] hsr_slave_1: entered promiscuous mode [ 1074.517912][T13777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1074.889368][T13777] Cannot create hsr debugfs directory [ 1075.639205][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1075.648479][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1075.661876][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1075.696671][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1075.708156][T13494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1075.719454][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1075.726966][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1076.441819][ T5242] Bluetooth: hci0: command tx timeout [ 1076.598579][T11114] bridge_slave_1: left allmulticast mode [ 1076.605957][T11114] bridge_slave_1: left promiscuous mode [ 1076.615827][T11114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.637322][T11114] bridge_slave_0: left allmulticast mode [ 1076.649513][T11114] bridge_slave_0: left promiscuous mode [ 1076.656652][T11114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.675405][T11114] bridge_slave_1: left allmulticast mode [ 1076.681867][T11114] bridge_slave_1: left promiscuous mode [ 1076.687566][T11114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.697413][T11114] bridge_slave_0: left allmulticast mode [ 1076.701464][T11635] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1076.709441][T11114] bridge_slave_0: left promiscuous mode [ 1076.719075][T11114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.871208][T11635] usb 1-1: Using ep0 maxpacket: 16 [ 1076.887140][T11635] usb 1-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 1076.897794][T11635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.915173][T11635] usb 1-1: Product: syz [ 1076.919375][T11635] usb 1-1: Manufacturer: syz [ 1076.937357][T11635] usb 1-1: SerialNumber: syz [ 1076.952147][T11635] usb 1-1: config 0 descriptor?? [ 1077.398954][T11635] mxuport 1-1:0.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 1077.413707][T11635] mxuport 1-1:0.0: probe with driver mxuport failed with error -5 [ 1077.596838][T11114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.615042][T11114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.629759][T11635] usb 1-1: USB disconnect, device number 20 [ 1077.645790][T11114] bond0 (unregistering): Released all slaves [ 1077.785582][T11114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.798570][T11114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.807397][ T5242] Bluetooth: hci3: command tx timeout [ 1077.818695][T11114] bond0 (unregistering): Released all slaves [ 1078.097352][T13494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.136583][T13913] chnl_net:caif_netlink_parms(): no params data found [ 1078.414376][T11114] hsr_slave_0: left promiscuous mode [ 1078.439431][T11114] hsr_slave_1: left promiscuous mode [ 1078.450185][T11114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.458640][T11114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.468937][T11114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.477186][T11114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.496293][T11114] hsr_slave_0: left promiscuous mode [ 1078.506769][T11114] hsr_slave_1: left promiscuous mode [ 1078.530743][T11114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.558723][T11114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.594081][T11114] veth1_macvtap: left promiscuous mode [ 1078.599618][T11114] veth0_macvtap: left promiscuous mode [ 1078.606471][T11114] veth1_vlan: left promiscuous mode [ 1078.611897][T11114] veth0_vlan: left promiscuous mode [ 1078.808626][T12020] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1078.965181][T12020] usb 1-1: Using ep0 maxpacket: 16 [ 1079.000047][T12020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.012664][T12020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.034267][T12020] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1079.056263][T12020] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1079.069792][T12020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.088858][T12020] usb 1-1: config 0 descriptor?? [ 1079.309607][T11114] team0 (unregistering): Port device team_slave_1 removed [ 1079.379708][T11114] team0 (unregistering): Port device team_slave_0 removed [ 1079.533572][T12020] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 1079.575532][T12020] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1079.575577][T12020] microsoft 0003:045E:07DA.0008: no inputs found [ 1079.575598][T12020] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 1079.750216][ T5340] usb 1-1: USB disconnect, device number 21 [ 1079.890130][ T5242] Bluetooth: hci3: command tx timeout [ 1081.223373][T13983] loop5: detected capacity change from 0 to 256 [ 1081.971059][ T5242] Bluetooth: hci3: command tx timeout [ 1082.203818][T13980] loop0: detected capacity change from 0 to 32768 [ 1082.346195][T13980] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1082.642247][T11114] team0 (unregistering): Port device team_slave_1 removed [ 1082.733536][T11623] ocfs2: Unmounting device (7,0) on (node local) [ 1082.907348][T11114] team0 (unregistering): Port device team_slave_0 removed [ 1083.265590][ T5365] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1083.431380][ T5365] usb 1-1: Using ep0 maxpacket: 8 [ 1083.438266][ T5365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1083.460971][ T5365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 1083.479823][ T5365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1083.489847][ T5365] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1083.510968][ T5365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1083.520724][ T5365] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1083.530633][ T5365] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 1083.539801][ T5365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.562530][ T5365] usb 1-1: config 0 descriptor?? [ 1083.569152][T13913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.576855][T13995] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1083.581119][T13913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.621493][ T5242] Bluetooth: hci6: urb ffff8880312c0d00 submission failed (90) [ 1083.632654][T13913] bridge_slave_0: entered allmulticast mode [ 1083.639731][T13913] bridge_slave_0: entered promiscuous mode [ 1083.687795][T13648] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1083.704677][T13913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.711949][T13913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.719270][T13913] bridge_slave_1: entered allmulticast mode [ 1083.726688][T13913] bridge_slave_1: entered promiscuous mode [ 1083.797666][ T5365] usb 1-1: USB disconnect, device number 22 [ 1083.827878][T13648] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1083.875321][T13913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.917516][T13648] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1083.931801][T13648] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1083.963101][T13913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.048184][ T5242] Bluetooth: hci3: command tx timeout [ 1084.083236][T13913] team0: Port device team_slave_0 added [ 1084.102047][T13913] team0: Port device team_slave_1 added [ 1084.162213][T13494] veth0_vlan: entered promiscuous mode [ 1084.286896][T13913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.296484][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.364004][T13913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.393739][T13913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.400725][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.426688][ C0] vkms_vblank_simulate: vblank timer overrun [ 1084.456341][T13913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.567485][T13494] veth1_vlan: entered promiscuous mode [ 1084.843130][T13913] hsr_slave_0: entered promiscuous mode [ 1085.052111][T13913] hsr_slave_1: entered promiscuous mode [ 1085.156474][T13913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1085.232508][T13913] Cannot create hsr debugfs directory [ 1085.713825][T13494] veth0_macvtap: entered promiscuous mode [ 1085.720610][T13777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1085.769323][T13777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1085.817850][T13777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1085.866110][T13777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1085.923944][T13494] veth1_macvtap: entered promiscuous mode [ 1085.965319][T13648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.020129][T13494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.068141][T13494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.091400][T13494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1086.117834][T13494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.155199][T13494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.350369][T13494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.371782][T13494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.389774][T13494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.401691][T13494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.410264][T14044] loop0: detected capacity change from 0 to 2048 [ 1086.421133][T13494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1086.438499][T13494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.460748][T13494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.473560][T14044] loop0: p3 < > p4 < > [ 1086.477797][T14044] loop0: partition table partially beyond EOD, truncated [ 1086.485057][T13494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.494532][T14044] loop0: p3 start 4284289 is beyond EOD, truncated [ 1086.533101][T13494] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.547353][T13494] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.566403][T13494] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.666483][T10578] udevd[10578]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1086.871776][T14052] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 1086.885389][T13648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.922035][ T5561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.929164][ T5561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.088348][T14057] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1486'. [ 1087.114618][ T5561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.121749][ T5561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.129212][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1486'. [ 1087.248019][T13648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1087.277060][T13648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1087.341297][T14061] netlink: 9412 bytes leftover after parsing attributes in process `syz.5.1489'. [ 1087.353846][ T5561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.372843][ T5561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.618577][T13777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.642813][T11114] bridge_slave_1: left allmulticast mode [ 1087.651462][T11114] bridge_slave_1: left promiscuous mode [ 1087.657165][T11114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.684601][T11114] bridge_slave_0: left allmulticast mode [ 1087.690395][T11114] bridge_slave_0: left promiscuous mode [ 1087.706051][T11114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.741539][T14059] loop0: detected capacity change from 0 to 32768 [ 1087.756498][T14059] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1488 (14059) [ 1087.776677][T14059] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1087.790075][T14059] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1087.798829][T14059] BTRFS info (device loop0): using free-space-tree [ 1088.043212][T11623] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1088.458068][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.539216][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 1088.691373][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.757874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.867995][T14090] loop0: detected capacity change from 0 to 1024 [ 1089.120598][T11114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.142447][T11114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.159133][T11114] bond0 (unregistering): Released all slaves [ 1089.561518][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.624672][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.664724][T13777] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.860040][T11101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.867260][T11101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.879377][T11101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.886562][T11101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.030250][T11114] hsr_slave_0: left promiscuous mode [ 1090.040415][T11114] hsr_slave_1: left promiscuous mode [ 1090.052465][T11114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.078288][T11114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.194614][T11114] veth0_vlan: left promiscuous mode [ 1091.913476][T14123] tmpfs: Bad value for 'mpol' [ 1092.268708][T14125] loop3: detected capacity change from 0 to 1024 [ 1092.290373][T14125] EXT4-fs: Ignoring removed i_version option [ 1092.337418][T14125] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1092.422398][T14125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1092.458111][ T29] audit: type=1326 audit(2000000250.909:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748477dff9 code=0x7ffc0000 [ 1092.480587][ C0] vkms_vblank_simulate: vblank timer overrun [ 1092.487093][ T29] audit: type=1326 audit(2000000250.909:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748477dff9 code=0x7ffc0000 [ 1092.548650][ T29] audit: type=1326 audit(2000000250.939:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f748477dff9 code=0x7ffc0000 [ 1092.602826][T13494] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.621064][ T29] audit: type=1326 audit(2000000250.969:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748477dff9 code=0x7ffc0000 [ 1092.701131][ T29] audit: type=1326 audit(2000000250.969:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748477dff9 code=0x7ffc0000 [ 1093.010137][T11114] team0 (unregistering): Port device team_slave_1 removed [ 1093.837790][T11114] team0 (unregistering): Port device team_slave_0 removed [ 1094.290258][T14133] loop5: detected capacity change from 0 to 65536 [ 1094.412492][T14133] XFS (loop5): Mounting V5 filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 in no-recovery mode. Filesystem will be inconsistent. [ 1094.455927][T14133] XFS (loop5): Quotacheck needed: Please wait. [ 1094.533735][T14133] XFS (loop5): Quotacheck: Done. [ 1094.568279][T13648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.593313][T14097] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1495'. [ 1094.628416][T11418] XFS (loop5): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 1094.763906][T13777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1094.815011][T14149] loop3: detected capacity change from 0 to 8 [ 1094.876925][T14149] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1094.885150][T14149] SQUASHFS error: Failed to read block 0x91: -5 [ 1094.906626][T14151] loop0: detected capacity change from 0 to 1024 [ 1094.921946][T14149] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1094.931407][T14149] SQUASHFS error: Unable to read inode 0x11f [ 1097.103945][T14166] loop0: detected capacity change from 0 to 128 [ 1097.238008][T14166] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1097.347087][T14166] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.375985][T13913] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1097.703884][T13913] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1097.865888][T13777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.009003][T13913] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1098.168249][T11623] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1098.377682][T13913] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1098.896003][T13648] veth0_vlan: entered promiscuous mode [ 1099.018012][T13648] veth1_vlan: entered promiscuous mode [ 1099.157644][T13777] veth0_vlan: entered promiscuous mode [ 1099.176323][T13648] veth0_macvtap: entered promiscuous mode [ 1099.202851][T13648] veth1_macvtap: entered promiscuous mode [ 1099.233712][T13777] veth1_vlan: entered promiscuous mode [ 1099.256496][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.267739][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.278891][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.289679][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.300025][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.311023][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.322807][T13648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.361718][T13913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.381493][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.401393][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.421098][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.431702][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.440137][T14198] loop0: detected capacity change from 0 to 32768 [ 1099.441545][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.441573][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.441599][T13648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.479171][T13648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.491173][T13648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.501336][T13648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.510058][T13648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.518860][T13648] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.527747][T13648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.565399][T13913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.575671][T14198] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1099.615658][T14198] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 1099.633234][T14198] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1099.643643][T14198] OCFS2: File system is now read-only. [ 1099.658661][T14198] (syz.0.1511,14198,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 1099.664183][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.674110][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.683207][T14198] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 1099.699957][T13777] veth0_macvtap: entered promiscuous mode [ 1099.725013][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.732176][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.741354][T14198] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1099.767701][T14198] (syz.0.1511,14198,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 1099.816269][T13777] veth1_macvtap: entered promiscuous mode [ 1099.838677][T14198] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 1099.898726][T11114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.920365][T11114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.922145][T13777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.942457][T14198] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1099.955298][T13777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.965423][T14198] (syz.0.1511,14198,1):ocfs2_prepare_dx_dir_for_insert:4147 ERROR: status = -30 [ 1099.967516][T14208] loop3: detected capacity change from 0 to 512 [ 1099.974697][T13777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.974730][T13777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.974759][T13777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.974786][T13777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.974815][T13777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.974844][T13777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.048127][T14198] (syz.0.1511,14198,0):ocfs2_prepare_dir_for_insert:4266 ERROR: status = -30 [ 1100.049700][T13777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.075593][T14198] (syz.0.1511,14198,0):ocfs2_mknod:296 ERROR: status = -30 [ 1100.115244][T14198] (syz.0.1511,14198,1):ocfs2_mknod:500 ERROR: status = -30 [ 1100.131026][T14198] (syz.0.1511,14198,1):ocfs2_create:674 ERROR: status = -30 [ 1100.200257][T13913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1100.215357][T13777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.237411][T13777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.259531][T13777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.284133][T13777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.299059][T13777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.318195][T13777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.333237][T13777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.348041][T13777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.360998][T13777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.372210][T13777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.399586][T13777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.410872][T11623] ocfs2: Unmounting device (7,0) on (node local) [ 1100.556600][T13777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.629912][T13777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.677462][T13777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.729145][T13777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.767906][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.840516][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.140456][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.149704][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.280653][ T6369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.291910][T13913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1101.314337][ T6369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.396423][T13913] veth0_vlan: entered promiscuous mode [ 1101.433895][T13913] veth1_vlan: entered promiscuous mode [ 1101.464317][T11789] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1101.472160][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1101.512627][T14228] loop1: detected capacity change from 0 to 1024 [ 1101.745588][T13913] veth0_macvtap: entered promiscuous mode [ 1101.762271][T14229] loop0: detected capacity change from 0 to 1024 [ 1102.014729][T13913] veth1_macvtap: entered promiscuous mode [ 1102.197403][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.210839][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.227617][T11789] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1102.241878][T11789] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1102.360148][T11789] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.672478][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1103.239872][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.271897][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.351087][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.392099][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.468616][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.498478][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.520217][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.532881][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.550804][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.571188][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.596684][T13913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.622245][T10960] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1103.660693][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.679384][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.698890][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.710479][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.730043][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.737559][ T8] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1103.749771][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.771036][T11789] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1103.780101][T11789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1103.783550][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.793359][T11789] usb 5-1: SerialNumber: syz [ 1103.805279][ T8] usb 4-1: config 0 descriptor?? [ 1103.816202][T11789] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1103.828531][T10960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1103.854257][T10960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.861583][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.864426][T10960] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 1103.875113][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.883708][T10960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.909329][T10960] usb 2-1: config 0 descriptor?? [ 1103.933091][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.950412][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.971058][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.991185][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.010858][T13913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.047459][T14242] netlink: 'syz.0.1522': attribute type 30 has an invalid length. [ 1104.085095][T11789] usb 5-1: USB disconnect, device number 13 [ 1104.185833][T13913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.218103][T13913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.238840][ T8] elecom 0003:056E:00FD.0009: unknown main item tag 0x0 [ 1104.265580][ T8] elecom 0003:056E:00FD.0009: unknown main item tag 0x0 [ 1104.281695][T13913] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.290418][T13913] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.308432][ T8] elecom 0003:056E:00FD.0009: unknown main item tag 0x0 [ 1104.315603][ T8] elecom 0003:056E:00FD.0009: unknown main item tag 0x0 [ 1104.330384][ T8] elecom 0003:056E:00FD.0009: unknown main item tag 0x0 [ 1104.358747][T10960] wacom 0003:056A:00CC.000A: hidraw0: USB HID v0.00 Device [HID 056a:00cc] on usb-dummy_hcd.1-1/input0 [ 1104.366189][ T8] elecom 0003:056E:00FD.0009: hidraw1: USB HID v0.00 Device [HID 056e:00fd] on usb-dummy_hcd.3-1/input0 [ 1104.480414][T11116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.489765][ T8] usb 4-1: USB disconnect, device number 6 [ 1104.508774][T11116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.522528][ T5242] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1104.531832][ T5242] Bluetooth: hci2: Injecting HCI hardware error event [ 1104.540722][T13496] Bluetooth: hci2: hardware error 0x00 [ 1104.552784][T10960] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1104.596187][T11101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.605304][T11101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.686612][ T931] usb 2-1: USB disconnect, device number 17 [ 1104.722472][T10960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.733783][T10960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.743732][T10960] usb 1-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 1104.752887][T10960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.764097][T10960] usb 1-1: config 0 descriptor?? [ 1104.883256][T14252] loop2: detected capacity change from 0 to 1024 [ 1105.872321][T14259] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1527'. [ 1105.914342][T10960] wacom 0003:056A:00B8.000B: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 1106.012727][T10960] wacom 0003:056A:00B8.000B: hidraw0: USB HID v0.00 Device [HID 056a:00b8] on usb-dummy_hcd.0-1/input0 [ 1106.037646][T10960] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B8.000B/input/input29 [ 1106.209890][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1106.303292][T10960] usb 1-1: USB disconnect, device number 23 [ 1106.761087][T13496] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1107.140997][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1107.147884][ T8] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 1107.154134][T14272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1532'. [ 1107.158331][ T8] usb 4-1: config 0 has no interface number 0 [ 1107.185428][ T8] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.202299][ T8] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.212249][ T8] usb 4-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 1107.221574][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.232237][ T8] usb 4-1: config 0 descriptor?? [ 1107.261133][ T5365] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1107.346391][T14280] netlink: 191384 bytes leftover after parsing attributes in process `syz.4.1535'. [ 1107.388642][T14280] netlink: 8446 bytes leftover after parsing attributes in process `syz.4.1535'. [ 1107.419531][ T5365] usb 2-1: Using ep0 maxpacket: 8 [ 1107.431428][ T5365] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1107.460683][ T5365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.500979][ T5365] usb 2-1: Product: syz [ 1107.525584][ T5365] usb 2-1: Manufacturer: syz [ 1107.530280][ T5365] usb 2-1: SerialNumber: syz [ 1107.564914][ T5365] usb 2-1: config 0 descriptor?? [ 1107.610815][T14286] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1538'. [ 1107.634912][T14286] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1538'. [ 1107.672861][ T8] uclogic 0003:5543:0081.000C: interface is invalid, ignoring [ 1107.816626][ T5365] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1107.926669][ T8] usb 4-1: USB disconnect, device number 7 [ 1107.951085][ T931] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1108.122100][ T931] usb 5-1: Using ep0 maxpacket: 16 [ 1108.147789][ T931] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1108.167647][ T931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.188499][ T931] usb 5-1: Product: syz [ 1108.198061][ T931] usb 5-1: Manufacturer: syz [ 1108.230309][ T931] usb 5-1: SerialNumber: syz [ 1108.236937][ T5365] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1108.266161][ T931] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1108.272716][ T5365] usb 2-1: USB disconnect, device number 18 [ 1108.287336][ T931] r8152-cfgselector 5-1: config 0 descriptor?? [ 1108.642402][T14284] loop5: detected capacity change from 0 to 32768 [ 1108.691935][T14284] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1537 (14284) [ 1108.739652][ T931] r8152-cfgselector 5-1: USB disconnect, device number 14 [ 1108.766493][T14308] tipc: Started in network mode [ 1108.775786][T14308] tipc: Node identity , cluster identity 4711 [ 1108.807732][T14308] tipc: Failed to set node id, please configure manually [ 1108.818903][T14308] tipc: Enabling of bearer rejected, failed to enable media [ 1108.955167][T14284] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1109.350442][T14284] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 1109.401020][ T5340] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1109.441129][T14284] BTRFS info (device loop5): using free-space-tree [ 1109.624650][ T5340] usb 3-1: Using ep0 maxpacket: 16 [ 1109.651570][ T5340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.688080][ T5340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.720493][ T5340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1109.791095][ T5340] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1109.808038][ T5340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.862298][ T5340] usb 3-1: config 0 descriptor?? [ 1110.024184][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1110.177952][T11418] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1110.201422][ T5365] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1110.209965][ T8] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1110.231445][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.278127][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1110.324347][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.367914][ T8] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1110.377754][ T5365] usb 4-1: Using ep0 maxpacket: 16 [ 1110.411908][ T5365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.426661][ T5340] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1110.439608][ T8] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1110.439641][ T8] usb 1-1: Product: syz [ 1110.439662][ T8] usb 1-1: Manufacturer: syz [ 1110.458836][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 1110.458859][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 1110.460382][ T5365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.460429][ T5365] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1110.460460][ T5365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.468270][ T8] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1110.468296][ T8] cdc_wdm 1-1:1.0: Unknown control protocol [ 1110.478344][ T5365] usb 4-1: config 0 descriptor?? [ 1110.538431][T14347] loop1: detected capacity change from 0 to 256 [ 1110.919988][ T5365] samsung 0003:0419:0001.000E: unknown main item tag 0x0 [ 1110.958510][ T5365] samsung 0003:0419:0001.000E: unknown main item tag 0x0 [ 1110.976483][T14349] netlink: 'syz.4.1559': attribute type 3 has an invalid length. [ 1111.005922][ T5365] samsung 0003:0419:0001.000E: unknown main item tag 0x0 [ 1111.029914][ T5365] samsung 0003:0419:0001.000E: unknown main item tag 0x0 [ 1111.048992][ T5365] samsung 0003:0419:0001.000E: unknown main item tag 0x0 [ 1111.081495][ T5365] samsung 0003:0419:0001.000E: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 1111.196461][ T5365] usb 4-1: USB disconnect, device number 8 [ 1112.887576][ T5365] usb 1-1: USB disconnect, device number 24 [ 1112.996165][T14362] loop1: detected capacity change from 0 to 1024 [ 1119.924148][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 1119.930756][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.290934][ C1] sched: DL replenish lagged too much [ 1125.401225][ T6370] kworker/u8:12 (6370) used greatest stack depth: 17720 bytes left [ 1177.326526][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.333077][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.004770][ T4677] udevd[4677]: worker [10578] /devices/virtual/block/loop5 is taking a long time [ 1238.772252][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.778608][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.601348][ T30] INFO: task udevd:10578 blocked for more than 143 seconds. [ 1274.608725][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1274.658980][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1274.701083][ T30] task:udevd state:D stack:21664 pid:10578 tgid:10578 ppid:4677 flags:0x00000002 [ 1274.735867][ T30] Call Trace: [ 1274.739211][ T30] [ 1274.756968][ T30] __schedule+0x1895/0x4b30 [ 1274.777109][ T30] ? __pfx___schedule+0x10/0x10 [ 1274.782309][ T30] ? __pfx_lock_release+0x10/0x10 [ 1274.787393][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1274.819548][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1274.837011][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1274.856918][ T30] ? schedule+0x90/0x320 [ 1274.861431][ T30] schedule+0x14b/0x320 [ 1274.865631][ T30] ? down_read+0x6a5/0xa40 [ 1274.870077][ T30] schedule_preempt_disabled+0x13/0x30 [ 1274.901445][ T30] down_read+0x705/0xa40 [ 1274.905790][ T30] ? __pfx_down_read+0x10/0x10 [ 1274.910592][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1274.940943][ T30] ? __d_lookup+0x64/0x7b0 [ 1274.945439][ T30] ? __d_lookup+0x64/0x7b0 [ 1274.949881][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1274.988263][ T30] ? __d_lookup+0x706/0x7b0 [ 1274.996716][ T30] kernfs_dop_revalidate+0xd4/0x560 [ 1275.017150][ T30] lookup_fast+0x1f6/0x4a0 [ 1275.031123][ T30] ? inode_permission+0xff/0x460 [ 1275.036119][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.061043][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.066757][ T30] ? security_inode_permission+0xbc/0x320 [ 1275.094219][ T30] link_path_walk+0x672/0xea0 [ 1275.119673][ T30] path_openat+0x266/0x3590 [ 1275.130929][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.136613][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1275.161138][ T30] ? __pfx_path_openat+0x10/0x10 [ 1275.166159][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.199573][ T30] do_filp_open+0x235/0x490 [ 1275.211116][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1275.216230][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.240449][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1275.260207][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.279173][ T30] ? alloc_fd+0x5a1/0x640 [ 1275.288928][ T30] do_sys_openat2+0x13e/0x1d0 [ 1275.304142][ T30] ? __pfx___se_sys_flock+0x10/0x10 [ 1275.309396][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1275.347938][ T30] __x64_sys_openat+0x247/0x2a0 [ 1275.361063][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1275.366490][ T30] ? do_syscall_64+0x100/0x230 [ 1275.385889][ T30] ? do_syscall_64+0xb6/0x230 [ 1275.390617][ T30] do_syscall_64+0xf3/0x230 [ 1275.411115][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1275.416821][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.450945][ T30] RIP: 0033:0x7f8c76f169a4 [ 1275.455446][ T30] RSP: 002b:00007ffee72c74d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1275.489312][ T30] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f8c76f169a4 [ 1275.508568][ T30] RDX: 0000000000080000 RSI: 00007ffee72c7608 RDI: 00000000ffffff9c [ 1275.537382][ T30] RBP: 00007ffee72c7608 R08: 0000000000000008 R09: 0000000000000001 [ 1275.581017][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 [ 1275.589076][ T30] R13: 000055b3299fdb42 R14: 0000000000000001 R15: 000055b329a19160 [ 1275.633651][ T30] [ 1275.647563][ T30] INFO: task syz-executor:11623 blocked for more than 144 seconds. [ 1275.665655][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1275.687784][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1275.707197][ T30] task:syz-executor state:D stack:20600 pid:11623 tgid:11623 ppid:1 flags:0x00004006 [ 1275.741424][ T30] Call Trace: [ 1275.745195][ T30] [ 1275.748155][ T30] __schedule+0x1895/0x4b30 [ 1275.769678][ T30] ? __pfx___schedule+0x10/0x10 [ 1275.781118][ T30] ? __pfx_lock_release+0x10/0x10 [ 1275.786235][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1275.816171][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1275.840434][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1275.861549][ T30] ? schedule+0x90/0x320 [ 1275.865844][ T30] schedule+0x14b/0x320 [ 1275.870044][ T30] ? down_read+0x6a5/0xa40 [ 1275.911060][ T30] schedule_preempt_disabled+0x13/0x30 [ 1275.916574][ T30] down_read+0x705/0xa40 [ 1275.960147][ T30] ? __pfx_down_read+0x10/0x10 [ 1275.971149][ T30] ? __mutex_lock+0x2ef/0xd70 [ 1275.975869][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.010976][ T30] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1276.016660][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1276.071013][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1276.077081][ T30] kernfs_find_and_get_ns+0x71/0x110 [ 1276.121059][ T30] sysfs_unmerge_group+0x62/0x130 [ 1276.126927][ T30] dpm_sysfs_remove+0x5d/0xc0 [ 1276.160987][ T30] device_del+0x291/0x9b0 [ 1276.165369][ T30] ? __pfx_enable_work+0x10/0x10 [ 1276.170339][ T30] ? __pfx_device_del+0x10/0x10 [ 1276.209334][ T30] ? hci_sock_dev_event+0x2ef/0x5f0 [ 1276.214783][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1276.219779][ T30] rfkill_unregister+0xc2/0x230 [ 1276.235669][ T30] hci_unregister_dev+0x366/0x510 [ 1276.240761][ T30] vhci_release+0x80/0xd0 [ 1276.254487][ T30] ? __pfx_vhci_release+0x10/0x10 [ 1276.259567][ T30] __fput+0x241/0x880 [ 1276.269034][ T30] task_work_run+0x251/0x310 [ 1276.277985][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1276.288079][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1276.297058][ T30] ? do_exit+0xa2a/0x28e0 [ 1276.306211][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.315579][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1276.320570][ T30] ? do_exit+0xa2a/0x28e0 [ 1276.331006][ T30] do_exit+0xa2f/0x28e0 [ 1276.335209][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.348771][ T30] ? __pfx_do_exit+0x10/0x10 [ 1276.354042][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1276.359465][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.389312][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1276.398275][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1276.410706][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1276.418529][ T30] do_group_exit+0x207/0x2c0 [ 1276.430077][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1276.439977][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.449947][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1276.459954][ T30] get_signal+0x16a3/0x1740 [ 1276.468702][ T30] ? __pfx_get_signal+0x10/0x10 [ 1276.479705][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1276.488961][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1276.499911][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1276.509610][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1276.520192][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1276.530314][ T30] do_syscall_64+0x100/0x230 [ 1276.541079][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.547030][ T30] RIP: 0033:0x7fdb1017ca3c [ 1276.559434][ T30] RSP: 002b:00007ffec14b9dc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1276.568205][ T30] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fdb1017ca3c [ 1276.580921][ T30] RDX: 0000000000000028 RSI: 00007ffec14b9e70 RDI: 00000000000000f9 [ 1276.588928][ T30] RBP: 00007ffec14b9e1c R08: 0000000000000000 R09: 0079746972756365 [ 1276.608353][ T30] R10: 00007fdb103087e0 R11: 0000000000000246 R12: 0000000000000032 [ 1276.620250][ T30] R13: 0000000000111922 R14: 000000000011190d R15: 00007ffec14b9e70 [ 1276.631122][ T30] [ 1276.641052][ T30] INFO: task syz-executor:13494 blocked for more than 145 seconds. [ 1276.648972][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1276.666414][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1276.677727][ T30] task:syz-executor state:D stack:21072 pid:13494 tgid:13494 ppid:1 flags:0x00004006 [ 1276.697060][ T30] Call Trace: [ 1276.700366][ T30] [ 1276.707049][ T30] __schedule+0x1895/0x4b30 [ 1276.717718][ T30] ? __pfx___schedule+0x10/0x10 [ 1276.725189][ T30] ? __pfx_lock_release+0x10/0x10 [ 1276.730272][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1276.741073][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1276.747454][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1276.766718][ T30] ? schedule+0x90/0x320 [ 1276.779216][ T30] schedule+0x14b/0x320 [ 1276.783818][ T30] ? down_read+0x6a5/0xa40 [ 1276.788270][ T30] schedule_preempt_disabled+0x13/0x30 [ 1276.802783][ T30] down_read+0x705/0xa40 [ 1276.807332][ T30] ? __pfx_down_read+0x10/0x10 [ 1276.818092][ T30] ? __mutex_lock+0x2ef/0xd70 [ 1276.826841][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1276.838526][ T30] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1276.850997][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1276.857084][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1276.874526][ T30] kernfs_find_and_get_ns+0x71/0x110 [ 1276.879896][ T30] sysfs_unmerge_group+0x62/0x130 [ 1276.891937][ T30] dpm_sysfs_remove+0x5d/0xc0 [ 1276.896673][ T30] device_del+0x291/0x9b0 [ 1276.909615][ T30] ? __pfx_enable_work+0x10/0x10 [ 1276.915007][ T30] ? __pfx_device_del+0x10/0x10 [ 1276.919889][ T30] ? hci_sock_dev_event+0x2ef/0x5f0 [ 1276.934223][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1276.939228][ T30] rfkill_unregister+0xc2/0x230 [ 1276.951073][ T30] hci_unregister_dev+0x366/0x510 [ 1276.956158][ T30] vhci_release+0x80/0xd0 [ 1276.960536][ T30] ? __pfx_vhci_release+0x10/0x10 [ 1276.974537][ T30] __fput+0x241/0x880 [ 1276.978679][ T30] task_work_run+0x251/0x310 [ 1276.988394][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1276.997677][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1277.009843][ T30] ? do_exit+0xa2a/0x28e0 [ 1277.015998][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.030594][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1277.036477][ T30] ? do_exit+0xa2a/0x28e0 [ 1277.040847][ T30] do_exit+0xa2f/0x28e0 [ 1277.049138][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.062318][ T30] ? __pfx_do_exit+0x10/0x10 [ 1277.066956][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1277.083742][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.089419][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1277.102929][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1277.109308][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1277.120773][ T30] do_group_exit+0x207/0x2c0 [ 1277.130186][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1277.140921][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.148529][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1277.164634][ T30] get_signal+0x16a3/0x1740 [ 1277.169207][ T30] ? __pfx_get_signal+0x10/0x10 [ 1277.180937][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1277.186542][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1277.202867][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1277.208923][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1277.220927][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1277.226533][ T30] do_syscall_64+0x100/0x230 [ 1277.239803][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.248095][ T30] RIP: 0033:0x7f748477ca3c [ 1277.260926][ T30] RSP: 002b:00007fff4b18b610 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1277.269394][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f748477ca3c [ 1277.286375][ T30] RDX: 0000000000000028 RSI: 00007fff4b18b6c0 RDI: 00000000000000f9 [ 1277.297153][ T30] RBP: 00007fff4b18b66c R08: 0000000000000000 R09: 0079746972756365 [ 1277.310926][ T30] R10: 00007f74849087e0 R11: 0000000000000246 R12: 000000000000004f [ 1277.318945][ T30] R13: 000000000010fc3f R14: 000000000010fc3f R15: 00007fff4b18b6c0 [ 1277.337863][ T30] [ 1277.344840][ T30] INFO: task syz-executor:13648 blocked for more than 146 seconds. [ 1277.359058][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1277.371949][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1277.389969][ T30] task:syz-executor state:D stack:21520 pid:13648 tgid:13648 ppid:1 flags:0x00004006 [ 1277.400978][ T30] Call Trace: [ 1277.404283][ T30] [ 1277.407238][ T30] __schedule+0x1895/0x4b30 [ 1277.430194][ T30] ? __pfx___schedule+0x10/0x10 [ 1277.440942][ T30] ? __pfx_lock_release+0x10/0x10 [ 1277.446032][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1277.461445][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1277.467837][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1277.480376][ T30] ? schedule+0x90/0x320 [ 1277.486659][ T30] schedule+0x14b/0x320 [ 1277.490865][ T30] ? down_read+0x6a5/0xa40 [ 1277.506370][ T30] schedule_preempt_disabled+0x13/0x30 [ 1277.519253][ T30] down_read+0x705/0xa40 [ 1277.523872][ T30] ? __pfx_down_read+0x10/0x10 [ 1277.528673][ T30] ? __mutex_lock+0x2ef/0xd70 [ 1277.541701][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.547371][ T30] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1277.561099][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1277.567044][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.581664][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1277.588136][ T30] kernfs_find_and_get_ns+0x71/0x110 [ 1277.602607][ T30] sysfs_unmerge_group+0x62/0x130 [ 1277.607693][ T30] dpm_sysfs_remove+0x5d/0xc0 [ 1277.622522][ T30] device_del+0x291/0x9b0 [ 1277.626899][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.639879][ T30] ? device_find_child+0x198/0x1e0 [ 1277.648521][ T30] ? __pfx_device_del+0x10/0x10 [ 1277.658825][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1277.669088][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.679828][ T30] device_unregister+0x20/0xc0 [ 1277.689217][ T30] hci_conn_del+0x8c4/0xc40 [ 1277.698348][ T30] hci_conn_hash_flush+0x18e/0x240 [ 1277.709235][ T30] hci_dev_close_sync+0x9ef/0x11a0 [ 1277.719865][ T30] hci_unregister_dev+0x20b/0x510 [ 1277.728724][ T30] vhci_release+0x80/0xd0 [ 1277.740478][ T30] ? __pfx_vhci_release+0x10/0x10 [ 1277.749122][ T30] __fput+0x241/0x880 [ 1277.758017][ T30] task_work_run+0x251/0x310 [ 1277.767442][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1277.777589][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1277.786342][ T30] ? do_exit+0xa2a/0x28e0 [ 1277.798701][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.810262][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1277.820031][ T30] ? do_exit+0xa2a/0x28e0 [ 1277.827711][ T30] do_exit+0xa2f/0x28e0 [ 1277.838103][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.846325][ T30] ? __pfx_do_exit+0x10/0x10 [ 1277.858416][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1277.867620][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.879418][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1277.891016][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1277.897406][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1277.916607][ T30] do_group_exit+0x207/0x2c0 [ 1277.925077][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1277.930327][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1277.941318][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1277.946854][ T30] get_signal+0x16a3/0x1740 [ 1277.959160][ T30] ? __pfx_get_signal+0x10/0x10 [ 1277.964627][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1277.981697][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1277.987917][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1278.003157][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1278.008942][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1278.020608][ T30] do_syscall_64+0x100/0x230 [ 1278.027855][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.041056][ T30] RIP: 0033:0x7fc6ced7ca3c [ 1278.045510][ T30] RSP: 002b:00007ffc72e5cb50 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1278.063992][ T30] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fc6ced7ca3c [ 1278.078115][ T30] RDX: 0000000000000028 RSI: 00007ffc72e5cc00 RDI: 00000000000000f9 [ 1278.096295][ T30] RBP: 00007ffc72e5cbac R08: 0000000000000000 R09: 0079746972756365 [ 1278.108012][ T30] R10: 00007fc6cef087e0 R11: 0000000000000246 R12: 0000000000000032 [ 1278.120857][ T30] R13: 00000000001129de R14: 000000000011290a R15: 00007ffc72e5cc00 [ 1278.129141][ T30] [ 1278.140668][ T30] INFO: task syz-executor:13777 blocked for more than 146 seconds. [ 1278.150863][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1278.166963][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1278.185759][ T30] task:syz-executor state:D stack:20992 pid:13777 tgid:13777 ppid:1 flags:0x00004006 [ 1278.198632][ T30] Call Trace: [ 1278.210367][ T30] [ 1278.215873][ T30] __schedule+0x1895/0x4b30 [ 1278.220455][ T30] ? __pfx___schedule+0x10/0x10 [ 1278.230928][ T30] ? __pfx_lock_release+0x10/0x10 [ 1278.236013][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1278.249781][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1278.256426][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1278.265725][ T30] ? schedule+0x90/0x320 [ 1278.270023][ T30] schedule+0x14b/0x320 [ 1278.285581][ T30] ? down_read+0x6a5/0xa40 [ 1278.290057][ T30] schedule_preempt_disabled+0x13/0x30 [ 1278.299452][ T30] down_read+0x705/0xa40 [ 1278.309197][ T30] ? __pfx_down_read+0x10/0x10 [ 1278.317845][ T30] ? __mutex_lock+0x2ef/0xd70 [ 1278.328927][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1278.338298][ T30] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1278.349467][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1278.359298][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1278.370231][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1278.380946][ T30] kernfs_find_and_get_ns+0x71/0x110 [ 1278.386278][ T30] sysfs_unmerge_group+0x62/0x130 [ 1278.401411][ T30] dpm_sysfs_remove+0x5d/0xc0 [ 1278.406540][ T30] device_del+0x291/0x9b0 [ 1278.419409][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1278.425345][ T30] ? device_find_child+0x198/0x1e0 [ 1278.430495][ T30] ? __pfx_device_del+0x10/0x10 [ 1278.452072][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1278.458101][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1278.478531][ T30] device_unregister+0x20/0xc0 [ 1278.490974][ T30] hci_conn_del+0x8c4/0xc40 [ 1278.495551][ T30] hci_conn_hash_flush+0x18e/0x240 [ 1278.500702][ T30] hci_dev_close_sync+0x9ef/0x11a0 [ 1278.515775][ T30] hci_unregister_dev+0x20b/0x510 [ 1278.520866][ T30] vhci_release+0x80/0xd0 [ 1278.530325][ T30] ? __pfx_vhci_release+0x10/0x10 [ 1278.539085][ T30] __fput+0x241/0x880 [ 1278.548036][ T30] task_work_run+0x251/0x310 [ 1278.560927][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1278.566269][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1278.579062][ T30] ? do_exit+0xa2a/0x28e0 [ 1278.584957][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1278.590631][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1278.604871][ T30] ? do_exit+0xa2a/0x28e0 [ 1278.609248][ T30] do_exit+0xa2f/0x28e0 [ 1278.621009][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1278.626690][ T30] ? __pfx_do_exit+0x10/0x10 [ 1278.638628][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1278.644309][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1278.649977][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1278.660949][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1278.667335][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1278.685492][ T30] do_group_exit+0x207/0x2c0 [ 1278.690130][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1278.700943][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1278.707219][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1278.720577][ T30] get_signal+0x16a3/0x1740 [ 1278.727498][ T30] ? __pfx_get_signal+0x10/0x10 [ 1278.740623][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1278.746550][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1278.760924][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1278.767039][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1278.782457][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1278.789439][ T30] do_syscall_64+0x100/0x230 [ 1278.801381][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.807341][ T30] RIP: 0033:0x7fbd0237ca3c [ 1278.820411][ T30] RSP: 002b:00007ffe487838e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1278.829171][ T30] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fbd0237ca3c [ 1278.847785][ T30] RDX: 0000000000000028 RSI: 00007ffe48783990 RDI: 00000000000000f9 [ 1278.860377][ T30] RBP: 00007ffe4878393c R08: 0000000000000000 R09: 0079746972756365 [ 1278.874528][ T30] R10: 00007fbd025087e0 R11: 0000000000000246 R12: 0000000000000024 [ 1278.886526][ T30] R13: 0000000000111948 R14: 000000000010f7dd R15: 00007ffe48783990 [ 1278.902879][ T30] [ 1278.906448][ T30] INFO: task syz.5.1448:13907 blocked for more than 147 seconds. [ 1278.920666][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1278.937909][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1278.954682][ T30] task:syz.5.1448 state:D stack:25648 pid:13907 tgid:13907 ppid:11418 flags:0x00004006 [ 1278.968883][ T30] Call Trace: [ 1278.977106][ T30] [ 1278.980071][ T30] __schedule+0x1895/0x4b30 [ 1278.988567][ T30] ? __pfx___schedule+0x10/0x10 [ 1278.999901][ T30] ? __pfx_lock_release+0x10/0x10 [ 1279.011035][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1279.017092][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1279.033036][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1279.038226][ T30] ? schedule+0x90/0x320 [ 1279.048955][ T30] schedule+0x14b/0x320 [ 1279.060827][ T30] ? down_read+0x6a5/0xa40 [ 1279.065349][ T30] schedule_preempt_disabled+0x13/0x30 [ 1279.070853][ T30] down_read+0x705/0xa40 [ 1279.087972][ T30] ? __pfx_down_read+0x10/0x10 [ 1279.100946][ T30] ? __mutex_lock+0x2ef/0xd70 [ 1279.105685][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1279.119828][ T30] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1279.127184][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1279.140950][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1279.147009][ T30] kernfs_find_and_get_ns+0x71/0x110 [ 1279.160544][ T30] sysfs_unmerge_group+0x62/0x130 [ 1279.166524][ T30] dpm_sysfs_remove+0x5d/0xc0 [ 1279.179618][ T30] device_del+0x291/0x9b0 [ 1279.187278][ T30] ? __pfx_enable_work+0x10/0x10 [ 1279.200938][ T30] ? __pfx_device_del+0x10/0x10 [ 1279.205855][ T30] ? hci_sock_dev_event+0x2ef/0x5f0 [ 1279.218970][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1279.224728][ T30] rfkill_unregister+0xc2/0x230 [ 1279.229630][ T30] hci_unregister_dev+0x366/0x510 [ 1279.241296][ T30] vhci_release+0x80/0xd0 [ 1279.245689][ T30] ? __pfx_vhci_release+0x10/0x10 [ 1279.250765][ T30] __fput+0x241/0x880 [ 1279.266885][ T30] task_work_run+0x251/0x310 [ 1279.277136][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1279.286384][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1279.297267][ T30] ? do_exit+0xa2a/0x28e0 [ 1279.306061][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1279.317862][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1279.327901][ T30] ? do_exit+0xa2a/0x28e0 [ 1279.336123][ T30] do_exit+0xa2f/0x28e0 [ 1279.340332][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1279.352443][ T30] ? __pfx_do_exit+0x10/0x10 [ 1279.357092][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1279.370928][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1279.376985][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1279.392199][ T30] do_group_exit+0x207/0x2c0 [ 1279.396857][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1279.410797][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1279.420043][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1279.431135][ T30] get_signal+0x16a3/0x1740 [ 1279.435710][ T30] ? __pfx_get_signal+0x10/0x10 [ 1279.440614][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1279.454387][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1279.460612][ T30] ? irqentry_exit_to_user_mode+0x53/0x280 [ 1279.472866][ T30] irqentry_exit_to_user_mode+0x79/0x280 [ 1279.478564][ T30] exc_page_fault+0x590/0x8c0 [ 1279.500425][ T30] asm_exc_page_fault+0x26/0x30 [ 1279.507598][ T30] RIP: 0033:0x7f00d9044984 [ 1279.520480][ T30] RSP: 002b:00007f00d9f59ff0 EFLAGS: 00010217 [ 1279.528865][ T30] RAX: 0000000000000000 RBX: 00007f00d9335f80 RCX: 00007f00d917dff9 [ 1279.545282][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1279.557534][ T30] RBP: 00007f00d91f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1279.570479][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1279.582363][ T30] R13: 0000000000000001 R14: 00007f00d9335f80 R15: 00007fffaf73b168 [ 1279.590389][ T30] [ 1279.601023][ T30] INFO: task syz-executor:13913 blocked for more than 148 seconds. [ 1279.618156][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1279.627803][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1279.645538][ T30] task:syz-executor state:D stack:20432 pid:13913 tgid:13913 ppid:1 flags:0x00004006 [ 1279.660970][ T30] Call Trace: [ 1279.664277][ T30] [ 1279.667231][ T30] __schedule+0x1895/0x4b30 [ 1279.679495][ T30] ? __pfx___schedule+0x10/0x10 [ 1279.684652][ T30] ? __pfx_lock_release+0x10/0x10 [ 1279.689744][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1279.700927][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1279.716715][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1279.727549][ T30] ? schedule+0x90/0x320 [ 1279.738599][ T30] schedule+0x14b/0x320 [ 1279.745369][ T30] ? down_read+0x6a5/0xa40 [ 1279.749831][ T30] schedule_preempt_disabled+0x13/0x30 [ 1279.763316][ T30] down_read+0x705/0xa40 [ 1279.767622][ T30] ? __pfx_down_read+0x10/0x10 [ 1279.780526][ T30] ? __mutex_lock+0x2ef/0xd70 [ 1279.785562][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1279.799669][ T30] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1279.805651][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1279.820942][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1279.826636][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1279.842262][ T30] kernfs_find_and_get_ns+0x71/0x110 [ 1279.847602][ T30] sysfs_unmerge_group+0x62/0x130 [ 1279.858917][ T30] dpm_sysfs_remove+0x5d/0xc0 [ 1279.866342][ T30] device_del+0x291/0x9b0 [ 1279.870714][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1279.884208][ T30] ? device_find_child+0x198/0x1e0 [ 1279.889370][ T30] ? __pfx_device_del+0x10/0x10 [ 1279.900928][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1279.906948][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1279.921994][ T30] device_unregister+0x20/0xc0 [ 1279.926801][ T30] hci_conn_del+0x8c4/0xc40 [ 1279.939288][ T30] hci_conn_hash_flush+0x18e/0x240 [ 1279.947584][ T30] hci_dev_close_sync+0x9ef/0x11a0 [ 1279.960350][ T30] hci_unregister_dev+0x20b/0x510 [ 1279.971508][ T30] vhci_release+0x80/0xd0 [ 1279.975934][ T30] ? __pfx_vhci_release+0x10/0x10 [ 1279.991311][ T30] __fput+0x241/0x880 [ 1279.995374][ T30] task_work_run+0x251/0x310 [ 1280.000003][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1280.015188][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1280.020345][ T30] ? do_exit+0xa2a/0x28e0 [ 1280.030787][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.039654][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1280.050688][ T30] ? do_exit+0xa2a/0x28e0 [ 1280.058699][ T30] do_exit+0xa2f/0x28e0 [ 1280.069344][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.077644][ T30] ? __pfx_do_exit+0x10/0x10 [ 1280.088068][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1280.096107][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.107799][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1280.119157][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1280.130995][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1280.136165][ T30] do_group_exit+0x207/0x2c0 [ 1280.148539][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1280.154311][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.159997][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1280.172967][ T30] get_signal+0x16a3/0x1740 [ 1280.177535][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.191434][ T30] ? __pfx_get_signal+0x10/0x10 [ 1280.196342][ T30] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1280.208900][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1280.215969][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1280.231083][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1280.237136][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1280.251434][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1280.257053][ T30] do_syscall_64+0x100/0x230 [ 1280.269790][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.277306][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.290997][ T30] RIP: 0033:0x7fa5b05b00e5 [ 1280.295446][ T30] RSP: 002b:00007ffc8eeb9f30 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1280.311940][ T30] RAX: 0000000000000000 RBX: 000000000000001a RCX: 00007fa5b05b00e5 [ 1280.319945][ T30] RDX: 00007ffc8eeb9f70 RSI: 0000000000000000 RDI: 0000000000000000 [ 1280.341119][ T30] RBP: 00007ffc8eeb9fcc R08: 0000000000000000 R09: 7fffffffffffffff [ 1280.349129][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000002d [ 1280.365382][ T30] R13: 000000000010f67a R14: 000000000010f67a R15: 00007ffc8eeba020 [ 1280.377380][ T30] [ 1280.380525][ T30] INFO: task syz.2.1562:14354 blocked for more than 149 seconds. [ 1280.395579][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1280.407780][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1280.420922][ T30] task:syz.2.1562 state:D stack:23808 pid:14354 tgid:14354 ppid:13913 flags:0x00004006 [ 1280.440798][ T30] Call Trace: [ 1280.444473][ T30] [ 1280.447439][ T30] __schedule+0x1895/0x4b30 [ 1280.460964][ T30] ? __pfx___schedule+0x10/0x10 [ 1280.465879][ T30] ? __pfx_lock_release+0x10/0x10 [ 1280.478948][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1280.485303][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1280.501661][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1280.506861][ T30] ? schedule+0x90/0x320 [ 1280.520243][ T30] schedule+0x14b/0x320 [ 1280.535058][ T30] schedule_preempt_disabled+0x13/0x30 [ 1280.540607][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 1280.548574][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 1280.563288][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1280.569511][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1280.583270][ T30] ? __pfx___might_resched+0x10/0x10 [ 1280.588728][ T30] down_write+0x1d7/0x220 [ 1280.599487][ T30] ? __pfx_down_write+0x10/0x10 [ 1280.607094][ T30] ? synchronize_rcu+0x11b/0x360 [ 1280.618142][ T30] ? __pfx_synchronize_rcu+0x10/0x10 [ 1280.630118][ T30] kernfs_remove_by_name_ns+0x7a/0x160 [ 1280.640929][ T30] module_remove_driver+0x5e/0x1d0 [ 1280.646087][ T30] bus_remove_driver+0x1fb/0x320 [ 1280.659921][ T30] usb_gadget_unregister_driver+0x4e/0x70 [ 1280.666081][ T30] raw_release+0xf6/0x1e0 [ 1280.670480][ T30] ? __pfx_raw_release+0x10/0x10 [ 1280.680937][ T30] __fput+0x241/0x880 [ 1280.685001][ T30] task_work_run+0x251/0x310 [ 1280.689642][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1280.705773][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.716733][ T30] ? switch_task_namespaces+0xe4/0x110 [ 1280.726075][ T30] do_exit+0xa2f/0x28e0 [ 1280.731978][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.737670][ T30] ? __pfx_do_exit+0x10/0x10 [ 1280.753588][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1280.759054][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.775590][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1280.785747][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1280.797374][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1280.808872][ T30] do_group_exit+0x207/0x2c0 [ 1280.818468][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1280.827572][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.839502][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1280.850929][ T30] get_signal+0x16a3/0x1740 [ 1280.856048][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1280.871958][ T30] ? __pfx_get_signal+0x10/0x10 [ 1280.876876][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1280.890956][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1280.897169][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1280.912546][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1280.918341][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1280.936165][ T30] do_syscall_64+0x100/0x230 [ 1280.940827][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.956833][ T30] RIP: 0033:0x7fa5b057dff9 [ 1280.970685][ T30] RSP: 002b:00007ffc8eeb9d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1280.981491][ T30] RAX: ffffffffffffff92 RBX: 00007ffc8eeb9e90 RCX: 00007fa5b057dff9 [ 1280.989503][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa5b0735f8c [ 1281.001357][ T30] RBP: 00007fa5b0735f8c R08: 7fffffffffffffff R09: 00007ffc8eeba05f [ 1281.020928][ T30] R10: 00007ffc8eeb9e70 R11: 0000000000000246 R12: 000000000011026f [ 1281.028955][ T30] R13: 00007ffc8eeb9e70 R14: 0000000000000bea R15: 000000000010f685 [ 1281.052708][ T30] [ 1281.056398][ T30] INFO: task syz-executor:14371 blocked for more than 149 seconds. [ 1281.072105][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1281.079770][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1281.097595][ T30] task:syz-executor state:D stack:22688 pid:14371 tgid:14371 ppid:5214 flags:0x00000000 [ 1281.111249][ T30] Call Trace: [ 1281.114564][ T30] [ 1281.117523][ T30] __schedule+0x1895/0x4b30 [ 1281.129677][ T30] ? __pfx___schedule+0x10/0x10 [ 1281.136071][ T30] ? __pfx_lock_release+0x10/0x10 [ 1281.150974][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1281.157032][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1281.174188][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1281.179370][ T30] ? schedule+0x90/0x320 [ 1281.188854][ T30] schedule+0x14b/0x320 [ 1281.196962][ T30] ? down_read+0x6a5/0xa40 [ 1281.208791][ T30] schedule_preempt_disabled+0x13/0x30 [ 1281.218801][ T30] down_read+0x705/0xa40 [ 1281.228230][ T30] ? __pfx_down_read+0x10/0x10 [ 1281.236950][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1281.248418][ T30] ? __d_lookup+0x64/0x7b0 [ 1281.256786][ T30] ? __d_lookup+0x64/0x7b0 [ 1281.270449][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1281.279911][ T30] ? __d_lookup+0x706/0x7b0 [ 1281.289607][ T30] kernfs_dop_revalidate+0xd4/0x560 [ 1281.298640][ T30] lookup_fast+0x1f6/0x4a0 [ 1281.308072][ T30] ? inode_permission+0xff/0x460 [ 1281.316874][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1281.329907][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1281.339312][ T30] ? security_inode_permission+0xbc/0x320 [ 1281.350930][ T30] link_path_walk+0x672/0xea0 [ 1281.355678][ T30] path_openat+0x266/0x3590 [ 1281.360240][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1281.374486][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1281.379945][ T30] ? __pfx_path_openat+0x10/0x10 [ 1281.392304][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1281.398283][ T30] do_filp_open+0x235/0x490 [ 1281.410942][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1281.416070][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1281.430149][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1281.436039][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1281.453017][ T30] ? alloc_fd+0x5a1/0x640 [ 1281.457412][ T30] do_sys_openat2+0x13e/0x1d0 [ 1281.468336][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1281.477694][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1281.489064][ T30] ? vm_mmap_pgoff+0x2ca/0x3d0 [ 1281.496550][ T30] __x64_sys_openat+0x247/0x2a0 [ 1281.509044][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1281.517207][ T30] ? do_syscall_64+0x100/0x230 [ 1281.528087][ T30] ? do_syscall_64+0xb6/0x230 [ 1281.535412][ T30] do_syscall_64+0xf3/0x230 [ 1281.539960][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.551417][ T30] RIP: 0033:0x7fcfe417c911 [ 1281.555869][ T30] RSP: 002b:00007ffeb27718e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1281.589996][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fcfe417c911 [ 1281.598451][ T30] RDX: 0000000000000002 RSI: 00007fcfe41f033b RDI: 00000000ffffff9c [ 1281.614928][ T30] RBP: 00007fcfe41f033b R08: 00000000000000d8 R09: 0000000000000000 [ 1281.628214][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1281.640922][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1281.648954][ T30] [ 1281.662029][ T30] INFO: task syz-executor:14373 blocked for more than 150 seconds. [ 1281.669953][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1281.687021][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1281.699528][ T30] task:syz-executor state:D stack:23392 pid:14373 tgid:14373 ppid:5214 flags:0x00000000 [ 1281.714743][ T30] Call Trace: [ 1281.718140][ T30] [ 1281.726006][ T30] __schedule+0x1895/0x4b30 [ 1281.730590][ T30] ? __pfx___schedule+0x10/0x10 [ 1281.740927][ T30] ? __pfx_lock_release+0x10/0x10 [ 1281.746011][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1281.761523][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1281.767912][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1281.782178][ T30] ? schedule+0x90/0x320 [ 1281.786483][ T30] schedule+0x14b/0x320 [ 1281.790679][ T30] ? down_read+0x6a5/0xa40 [ 1281.801225][ T30] schedule_preempt_disabled+0x13/0x30 [ 1281.806825][ T30] down_read+0x705/0xa40 [ 1281.821262][ T30] ? __pfx_down_read+0x10/0x10 [ 1281.826095][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1281.839147][ T30] ? __d_lookup+0x64/0x7b0 [ 1281.843922][ T30] ? __d_lookup+0x64/0x7b0 [ 1281.848377][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1281.860975][ T30] ? __d_lookup+0x706/0x7b0 [ 1281.865612][ T30] kernfs_dop_revalidate+0xd4/0x560 [ 1281.870868][ T30] lookup_fast+0x1f6/0x4a0 [ 1281.885296][ T30] ? inode_permission+0xff/0x460 [ 1281.890276][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1281.900922][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1281.906599][ T30] ? security_inode_permission+0xbc/0x320 [ 1281.922507][ T30] link_path_walk+0x672/0xea0 [ 1281.927255][ T30] path_openat+0x266/0x3590 [ 1281.940295][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1281.946252][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1281.960102][ T30] ? __pfx_path_openat+0x10/0x10 [ 1281.968029][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1281.979773][ T30] do_filp_open+0x235/0x490 [ 1281.990494][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1282.001217][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1282.006891][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1282.019698][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1282.025662][ T30] ? alloc_fd+0x5a1/0x640 [ 1282.030049][ T30] do_sys_openat2+0x13e/0x1d0 [ 1282.041261][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1282.046524][ T30] __x64_sys_openat+0x247/0x2a0 [ 1282.066299][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1282.076843][ T30] ? exc_page_fault+0x590/0x8c0 [ 1282.086155][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1282.099539][ T30] ? do_syscall_64+0xb6/0x230 [ 1282.107948][ T30] do_syscall_64+0xf3/0x230 [ 1282.117501][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.128411][ T30] RIP: 0033:0x7f5d6957c911 [ 1282.137688][ T30] RSP: 002b:00007ffe6d537a70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1282.155877][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5d6957c911 [ 1282.167754][ T30] RDX: 0000000000000002 RSI: 00007f5d695f033b RDI: 00000000ffffff9c [ 1282.181201][ T30] RBP: 00007f5d695f033b R08: 0000000000000005 R09: 0000000000000000 [ 1282.204832][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1282.220936][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1282.228991][ T30] [ 1282.239853][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1282.249227][ T30] INFO: task syz-executor:14374 blocked for more than 151 seconds. [ 1282.267287][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1282.277854][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1282.293246][ T30] task:syz-executor state:D stack:23120 pid:14374 tgid:14374 ppid:5214 flags:0x00000000 [ 1282.310002][ T30] Call Trace: [ 1282.316376][ T30] [ 1282.319616][ T30] __schedule+0x1895/0x4b30 [ 1282.331145][ T30] ? __pfx___schedule+0x10/0x10 [ 1282.336065][ T30] ? __pfx_lock_release+0x10/0x10 [ 1282.349638][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1282.356064][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1282.369272][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1282.377608][ T30] ? schedule+0x90/0x320 [ 1282.388674][ T30] schedule+0x14b/0x320 [ 1282.397274][ T30] ? down_read+0x6a5/0xa40 [ 1282.406662][ T30] schedule_preempt_disabled+0x13/0x30 [ 1282.415896][ T30] down_read+0x705/0xa40 [ 1282.420188][ T30] ? __pfx_down_read+0x10/0x10 [ 1282.430445][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1282.446192][ T30] ? __d_lookup+0x64/0x7b0 [ 1282.450648][ T30] ? __d_lookup+0x64/0x7b0 [ 1282.458775][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1282.469160][ T30] ? __d_lookup+0x706/0x7b0 [ 1282.478667][ T30] kernfs_dop_revalidate+0xd4/0x560 [ 1282.488615][ T30] lookup_fast+0x1f6/0x4a0 [ 1282.497194][ T30] ? inode_permission+0xff/0x460 [ 1282.509024][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1282.518509][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1282.529340][ T30] ? security_inode_permission+0xbc/0x320 [ 1282.539339][ T30] link_path_walk+0x672/0xea0 [ 1282.548965][ T30] path_openat+0x266/0x3590 [ 1282.557511][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1282.569475][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1282.579805][ T30] ? __pfx_path_openat+0x10/0x10 [ 1282.589618][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1282.599485][ T30] do_filp_open+0x235/0x490 [ 1282.622419][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1282.627541][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1282.641784][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1282.646683][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1282.659689][ T30] ? alloc_fd+0x5a1/0x640 [ 1282.664394][ T30] do_sys_openat2+0x13e/0x1d0 [ 1282.669122][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1282.680997][ T30] __x64_sys_openat+0x247/0x2a0 [ 1282.685902][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1282.699040][ T30] ? exc_page_fault+0x590/0x8c0 [ 1282.704279][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1282.709958][ T30] ? do_syscall_64+0xb6/0x230 [ 1282.721299][ T30] do_syscall_64+0xf3/0x230 [ 1282.725842][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.742030][ T30] RIP: 0033:0x7fece877c911 [ 1282.746480][ T30] RSP: 002b:00007fff04fbc4c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1282.761006][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fece877c911 [ 1282.769011][ T30] RDX: 0000000000000002 RSI: 00007fece87f033b RDI: 00000000ffffff9c [ 1282.789814][ T30] RBP: 00007fece87f033b R08: 0000000000000005 R09: 0000000000000000 [ 1282.800633][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1282.815267][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1282.827097][ T30] [ 1282.830147][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1282.845838][ T30] INFO: task syz-executor:14376 blocked for more than 151 seconds. [ 1282.859803][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1282.872933][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1282.888931][ T30] task:syz-executor state:D stack:24128 pid:14376 tgid:14376 ppid:5214 flags:0x00000000 [ 1282.904127][ T30] Call Trace: [ 1282.907873][ T30] [ 1282.910832][ T30] __schedule+0x1895/0x4b30 [ 1282.925965][ T30] ? __pfx___schedule+0x10/0x10 [ 1282.931175][ T30] ? __pfx_lock_release+0x10/0x10 [ 1282.936599][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1282.951281][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1282.957669][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1282.972182][ T30] ? schedule+0x90/0x320 [ 1282.976577][ T30] schedule+0x14b/0x320 [ 1282.980775][ T30] ? down_read+0x6a5/0xa40 [ 1282.995687][ T30] schedule_preempt_disabled+0x13/0x30 [ 1283.005760][ T30] down_read+0x705/0xa40 [ 1283.010151][ T30] ? __pfx_down_read+0x10/0x10 [ 1283.023067][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1283.028320][ T30] ? __d_lookup+0x64/0x7b0 [ 1283.040152][ T30] ? __d_lookup+0x64/0x7b0 [ 1283.046020][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1283.058683][ T30] ? __d_lookup+0x706/0x7b0 [ 1283.064657][ T30] kernfs_dop_revalidate+0xd4/0x560 [ 1283.069901][ T30] lookup_fast+0x1f6/0x4a0 [ 1283.081220][ T30] ? inode_permission+0xff/0x460 [ 1283.100815][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1283.106836][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1283.120977][ T30] ? security_inode_permission+0xbc/0x320 [ 1283.126759][ T30] link_path_walk+0x672/0xea0 [ 1283.140728][ T30] path_openat+0x266/0x3590 [ 1283.145549][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1283.159645][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1283.165421][ T30] ? __pfx_path_openat+0x10/0x10 [ 1283.170432][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1283.185481][ T30] do_filp_open+0x235/0x490 [ 1283.196724][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1283.207159][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1283.216949][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1283.226534][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1283.236336][ T30] ? alloc_fd+0x5a1/0x640 [ 1283.240789][ T30] do_sys_openat2+0x13e/0x1d0 [ 1283.250935][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1283.256207][ T30] __x64_sys_openat+0x247/0x2a0 [ 1283.271597][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1283.277025][ T30] ? exc_page_fault+0x590/0x8c0 [ 1283.290829][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1283.296592][ T30] ? do_syscall_64+0xb6/0x230 [ 1283.309164][ T30] do_syscall_64+0xf3/0x230 [ 1283.317315][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.331126][ T30] RIP: 0033:0x7f7dd457c911 [ 1283.335577][ T30] RSP: 002b:00007fff8ce94030 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1283.351943][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7dd457c911 [ 1283.360035][ T30] RDX: 0000000000000002 RSI: 00007f7dd45f033b RDI: 00000000ffffff9c [ 1283.373177][ T30] RBP: 00007f7dd45f033b R08: 0000000000000005 R09: 0000000000000000 [ 1283.390020][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1283.399839][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1283.418648][ T30] [ 1283.424948][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1283.440284][ T30] [ 1283.440284][ T30] Showing all locks held in the system: [ 1283.450917][ T30] 1 lock held by khungtaskd/30: [ 1283.455794][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1283.474395][ T30] 2 locks held by getty/4985: [ 1283.479101][ T30] #0: ffff8880321fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1283.496841][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1283.511137][ T30] 3 locks held by kworker/1:4/5295: [ 1283.516447][ T30] 10 locks held by kworker/1:8/5340: [ 1283.531337][ T30] 4 locks held by kworker/u8:9/5561: [ 1283.536918][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1283.558645][ T30] #1: ffffc900020dfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1283.579496][ T30] #2: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1283.601513][ T30] #3: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_remove_by_name_ns+0x7a/0x160 [ 1283.619635][ T30] 1 lock held by udevd/10578: [ 1283.626420][ T30] #0: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 [ 1283.641190][ T30] 3 locks held by kworker/u8:14/11101: [ 1283.646680][ T30] 1 lock held by syz-executor/11623: [ 1283.671372][ T30] #0: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_find_and_get_ns+0x71/0x110 [ 1283.690310][ T30] 1 lock held by syz-executor/13494: [ 1283.695982][ T30] #0: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_find_and_get_ns+0x71/0x110 [ 1283.710928][ T30] 3 locks held by syz-executor/13648: [ 1283.716330][ T30] #0: ffff888068f14d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1283.736852][ T30] #1: ffff888068f14078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1283.750451][ T30] #2: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_find_and_get_ns+0x71/0x110 [ 1283.769599][ T30] 3 locks held by syz-executor/13777: [ 1283.777985][ T30] #0: ffff8880543f0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1283.790941][ T30] #1: ffff8880543f0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1283.800700][ T30] #2: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_find_and_get_ns+0x71/0x110 [ 1283.822610][ T30] 1 lock held by syz.5.1448/13907: [ 1283.827755][ T30] #0: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_find_and_get_ns+0x71/0x110 [ 1283.847827][ T30] 3 locks held by syz-executor/13913: [ 1283.855910][ T30] #0: ffff88805bae8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1283.871264][ T30] #1: ffff88805bae8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1283.892867][ T30] #2: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_find_and_get_ns+0x71/0x110 [ 1283.912882][ T30] 1 lock held by syz.2.1562/14354: [ 1283.918023][ T30] #0: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_remove_by_name_ns+0x7a/0x160 [ 1283.937892][ T30] 1 lock held by syz-executor/14370: [ 1283.945157][ T30] #0: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 [ 1283.961689][ T30] 1 lock held by syz-executor/14371: [ 1283.967004][ T30] #0: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 [ 1283.985713][ T30] 1 lock held by syz-executor/14372: [ 1283.995414][ T30] #0: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 [ 1284.011000][ T30] 1 lock held by syz-executor/14373: [ 1284.016313][ T30] #0: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 [ 1284.037267][ T30] 1 lock held by syz-executor/14374: [ 1284.047686][ T30] #0: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 [ 1284.065505][ T30] 1 lock held by syz-executor/14376: [ 1284.070815][ T30] #0: ffff88801bae6948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 [ 1284.090085][ T30] [ 1284.096195][ T30] ============================================= [ 1284.096195][ T30] [ 1284.117231][ T30] NMI backtrace for cpu 0 [ 1284.121585][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1284.132106][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1284.142179][ T30] Call Trace: [ 1284.145470][ T30] [ 1284.148417][ T30] dump_stack_lvl+0x241/0x360 [ 1284.153131][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1284.158352][ T30] ? __pfx__printk+0x10/0x10 [ 1284.162999][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1284.167972][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1284.173458][ T30] ? _printk+0xd5/0x120 [ 1284.177650][ T30] ? __pfx__printk+0x10/0x10 [ 1284.182278][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1284.187169][ T30] ? __pfx__printk+0x10/0x10 [ 1284.191793][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.197453][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1284.202521][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1284.208543][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1284.214560][ T30] watchdog+0xff4/0x1040 [ 1284.218845][ T30] ? watchdog+0x1ea/0x1040 [ 1284.223302][ T30] ? __pfx_watchdog+0x10/0x10 [ 1284.228012][ T30] kthread+0x2f2/0x390 [ 1284.232105][ T30] ? __pfx_watchdog+0x10/0x10 [ 1284.236811][ T30] ? __pfx_kthread+0x10/0x10 [ 1284.241430][ T30] ret_from_fork+0x4d/0x80 [ 1284.245886][ T30] ? __pfx_kthread+0x10/0x10 [ 1284.250497][ T30] ret_from_fork_asm+0x1a/0x30 [ 1284.255317][ T30] [ 1284.259545][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1284.265297][ C1] NMI backtrace for cpu 1 [ 1284.265312][ C1] CPU: 1 UID: 0 PID: 5295 Comm: kworker/1:4 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1284.265340][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1284.265357][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 1284.265394][ C1] RIP: 0010:debug_object_activate+0x1b0/0x510 [ 1284.265437][ C1] Code: 3c fd 4c 89 7c 24 30 4d 8b 3f 45 31 e4 eb 06 4d 8b 3f 41 ff c4 4d 85 ff 74 40 49 8d 5f 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 <74> 08 48 89 df e8 a6 36 3c fd 48 8b 44 24 10 48 39 03 0f 84 1a 01 [ 1284.265458][ C1] RSP: 0018:ffffc90000a17ee0 EFLAGS: 00000046 [ 1284.265483][ C1] RAX: 1ffff11004679e65 RBX: ffff8880233cf328 RCX: 0000000000000001 [ 1284.265501][ C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90000a17dc0 [ 1284.265518][ C1] RBP: ffffc90000a17ff0 R08: 0000000000000003 R09: fffff52000142fb8 [ 1284.265536][ C1] R10: dffffc0000000000 R11: fffff52000142fb8 R12: 0000000000000000 [ 1284.265553][ C1] R13: 1ffff92000142fe4 R14: dffffc0000000000 R15: ffff8880233cf310 [ 1284.265575][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1284.265596][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1284.265613][ C1] CR2: 00007fbd0323af98 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 1284.265632][ C1] Call Trace: [ 1284.265641][ C1] [ 1284.265651][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1284.265684][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1284.265726][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1284.265755][ C1] ? nmi_handle+0x2a/0x5a0 [ 1284.265791][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1284.265829][ C1] ? nmi_handle+0x151/0x5a0 [ 1284.265854][ C1] ? nmi_handle+0x2a/0x5a0 [ 1284.265881][ C1] ? debug_object_activate+0x1b0/0x510 [ 1284.265915][ C1] ? default_do_nmi+0x63/0x160 [ 1284.265948][ C1] ? exc_nmi+0x123/0x1f0 [ 1284.265976][ C1] ? end_repeat_nmi+0xf/0x53 [ 1284.266008][ C1] ? debug_object_activate+0x1b0/0x510 [ 1284.266042][ C1] ? debug_object_activate+0x1b0/0x510 [ 1284.266078][ C1] ? debug_object_activate+0x1b0/0x510 [ 1284.266113][ C1] [ 1284.266122][ C1] [ 1284.266130][ C1] ? ip_finish_output2+0x45f/0x1390 [ 1284.266175][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 1284.266216][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.266242][ C1] ? rcuref_put_slowpath+0x138/0x340 [ 1284.266278][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1284.266304][ C1] call_rcu+0x97/0xa70 [ 1284.266334][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.266364][ C1] ? __pfx_call_rcu+0x10/0x10 [ 1284.266389][ C1] ? rcuref_put+0x1e3/0x240 [ 1284.266411][ C1] ? __pfx_rcuref_put+0x10/0x10 [ 1284.266442][ C1] skb_release_head_state+0x73/0x250 [ 1284.266471][ C1] consume_skb+0x60/0xf0 [ 1284.266499][ C1] nft_synproxy_eval_v4+0x3d2/0x610 [ 1284.266544][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1284.266581][ C1] ? nf_ip_checksum+0x13a/0x500 [ 1284.266625][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 1284.266664][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1284.266700][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.266728][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1284.266759][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.266789][ C1] nft_do_chain+0x4af/0x1da0 [ 1284.266840][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1284.266874][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 1284.266914][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.266952][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1284.266981][ C1] nft_do_chain_inet+0x418/0x6b0 [ 1284.267024][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1284.267058][ C1] ? ipt_do_table+0x312/0x1860 [ 1284.267109][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1284.267143][ C1] nf_hook_slow+0xc5/0x220 [ 1284.267175][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1284.267204][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1284.267232][ C1] NF_HOOK+0x29e/0x450