last executing test programs: 1m14.544112844s ago: executing program 3 (id=47): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@local=@item_012={0x0, 0x2, 0x7}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x1, '<'}, 0x0}) 1m11.400000186s ago: executing program 3 (id=58): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) lseek(r2, 0x7, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 1m10.356154954s ago: executing program 3 (id=61): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0xfffffc00}, 0x0, [0x0, 0x10000, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa058, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x5, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x100000000002, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa228, 0x4, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x801, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000000000, 0xfffffffffffffffd, 0x0, 0x7ffffff, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800003, 0x9, 0x100000001]}) 1m10.0121536s ago: executing program 3 (id=65): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000740)=0xc) 1m9.821109993s ago: executing program 3 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setpgid(r0, 0x0) setpgid(0x0, r0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1, 0x495, &(0x7f0000000a40)="$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") 1m9.420157739s ago: executing program 3 (id=68): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x20, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r4}, @acquire_done], 0x0, 0x0, 0x0}) 54.182002264s ago: executing program 32 (id=68): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x20, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r4}, @acquire_done], 0x0, 0x0, 0x0}) 45.152143365s ago: executing program 0 (id=207): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d34", 0x7e}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65", 0x37}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc99951", 0x25}], 0x3}}], 0x1, 0xc0) 44.920454409s ago: executing program 0 (id=210): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001200)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 44.728120522s ago: executing program 0 (id=212): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 44.530765986s ago: executing program 0 (id=214): socket(0x840000000002, 0x3, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x3, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x24000000) sendfile(r5, r4, 0x0, 0x100000002) 25.788315479s ago: executing program 0 (id=214): socket(0x840000000002, 0x3, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x3, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x24000000) sendfile(r5, r4, 0x0, 0x100000002) 4.959879637s ago: executing program 2 (id=381): keyctl$session_to_parent(0x12) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) 4.824316239s ago: executing program 2 (id=382): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000011140100000000000000000008004b001300000008004a"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x410) 4.632149702s ago: executing program 2 (id=384): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 4.315016928s ago: executing program 0 (id=214): socket(0x840000000002, 0x3, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x3, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x24000000) sendfile(r5, r4, 0x0, 0x100000002) 3.551955881s ago: executing program 2 (id=392): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 3.061569649s ago: executing program 2 (id=397): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$getsig(0x4202, r0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r3, 0x0, 0x1500}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000806010100000000000000fbffffff000500010007000000b4b78496a3b3c9bba3664e86cb344bb60e3011db4c3472cd1f579ee587fbf17cf6447b527329eaa3726ff1aa9661714e38631fea4cba2e6f8a3d0ab652ec74ef8e77cbb31822dbe1428ca28bced9"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1480c, &(0x7f0000033380)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r4, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="c85fb6eba7e56788375cd72fce22a1abfcd6d806077c0ace8719da9e7cc6e83ba005b48ddc42acd013bbade11c45e63987cb0b242bef8593c4bf44b1c946746cba0a85ae7b00b3698e4f445f", @ANYBLOB="108f2bbc120007171ae540810800f1d9ed7e6b556183cf5283da18c329fc2d1132e25424748c5ce2f044a26a71a4de16e74d22c6a1c791fde85bd9a764fe6fce36aa6b3fa6955e74b5b00555552570a64d455cedd37b6ad3f685ff3807c16bc31bc554aedf0b654e4fd98d6fee2d132b17cfa29e5cb8ad61cfa808973a8765ee335d3d94ed492ec65735a9789fec9e90fcf11ddc857c39ecfaeff5d28676fb5647093c8d4c7ed6ffe24515ce75f94c6e71ba05f8f7afb787856e3c7f6296f2b92894e189750940ccc0dda4db6115e9c8399bc0805eaf4cd1cd0824c2ac82d9a43f9e763a90b662", @ANYRES64=r2, @ANYRES8=r5, @ANYRES16], 0x1, 0xa5b, &(0x7f0000001640)="$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") madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) 2.952241611s ago: executing program 4 (id=398): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000d00)=""/4096, 0x1000}], 0x1) 2.951976741s ago: executing program 1 (id=399): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0xc26080b) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) 2.878810772s ago: executing program 4 (id=400): creat(&(0x7f0000000080)='./file0\x00', 0x248) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x2000000) 2.812658673s ago: executing program 5 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x38}}, 0x0) 1.913914808s ago: executing program 4 (id=402): creat(&(0x7f0000000080)='./file0\x00', 0x248) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400"], 0x48) syz_read_part_table(0x618, &(0x7f0000002200)="$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") r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39ea, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x2000000) 1.913604478s ago: executing program 5 (id=403): ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x7, 0x9, 0x3}) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, &(0x7f0000000100)={0x11, 0x4}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[], 0x0) 1.912084178s ago: executing program 2 (id=404): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.856231189s ago: executing program 1 (id=405): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70bd26, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x4000800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 1.529556115s ago: executing program 5 (id=406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0xfffe, 0x0, 0xf}}}}}}}, 0x0) 1.396626717s ago: executing program 1 (id=407): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) 1.136169201s ago: executing program 5 (id=408): r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x681, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) 1.135880771s ago: executing program 4 (id=409): bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@fallback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) 1.021566823s ago: executing program 1 (id=410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) 964.677844ms ago: executing program 1 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = fanotify_init(0x4, 0x101000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = inotify_init1(0x0) inotify_add_watch(r2, 0x0, 0x46) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x201, 0x4800003e, r1, 0x0) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x1019, r4, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x4800, 0x16c) 857.350646ms ago: executing program 1 (id=412): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x6e45, 0x2, 0x0) 356.174514ms ago: executing program 5 (id=413): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10008095, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 206.867487ms ago: executing program 4 (id=414): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44) 152.310608ms ago: executing program 5 (id=415): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000d80)={0x0, 0x1, 0x7}) 0s ago: executing program 4 (id=416): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) kernel console output (not intermixed with test programs): .741734][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.761296][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.807829][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.822923][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.847629][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.854824][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.863603][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.872723][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.897612][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.904787][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.922673][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.947793][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.962966][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.977603][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.994867][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.029487][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.038922][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.051082][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.061330][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.072176][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.119222][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.133116][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.142729][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.153340][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.163827][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.174569][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.184687][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.194580][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.203876][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.213065][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.228829][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.239467][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.248839][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.257942][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.266455][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.284448][ T4258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.294604][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.341355][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.362719][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.374463][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.385793][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.407107][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.428521][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.449250][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.463055][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.475832][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.489986][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.505107][ T4249] device veth0_vlan entered promiscuous mode [ 80.522376][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.620132][ T4249] device veth1_vlan entered promiscuous mode [ 80.633205][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.645039][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.666054][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.732785][ T4263] device veth0_vlan entered promiscuous mode [ 80.765630][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.789976][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.799667][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.818789][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.848788][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.883849][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.908077][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.944979][ T4249] device veth0_macvtap entered promiscuous mode [ 80.969766][ T4263] device veth1_vlan entered promiscuous mode [ 80.992637][ T4249] device veth1_macvtap entered promiscuous mode [ 81.060415][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.070014][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.087866][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.098286][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.110389][ T4263] device veth0_macvtap entered promiscuous mode [ 81.131321][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.153096][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.168070][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.186169][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.195940][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.205920][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.215235][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.229562][ T4263] device veth1_macvtap entered promiscuous mode [ 81.244029][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.253283][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.262291][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.278705][ T4249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.293360][ T4249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.304432][ T4249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.314063][ T4249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.335890][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.363163][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.374956][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.387487][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.408795][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.420861][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.432697][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.446687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.455641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.466386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.474392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.482591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.491978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.506791][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 81.512955][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 81.519970][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 81.520176][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 81.526106][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 81.548896][ T4263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.558378][ T4263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.568093][ T4263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.580057][ T4263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.597236][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.606062][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.702232][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.717563][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.738085][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.855684][ T4251] device veth0_vlan entered promiscuous mode [ 81.876150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.885740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.901636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.914319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.929555][ T4258] device veth0_vlan entered promiscuous mode [ 81.952587][ T4251] device veth1_vlan entered promiscuous mode [ 81.987917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.995996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.008818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.017446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.025606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.034844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.044609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.054347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.075059][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.107629][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.124263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.141112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.151448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.170205][ T4251] device veth0_macvtap entered promiscuous mode [ 82.184125][ T4258] device veth1_vlan entered promiscuous mode [ 82.197003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.207931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.217663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.226257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.240125][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.247780][ T4251] device veth1_macvtap entered promiscuous mode [ 82.261458][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.264115][ T4250] device veth0_vlan entered promiscuous mode [ 82.289215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.299385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.308594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.320948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.330952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.394035][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.397891][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.420230][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.426573][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.437611][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.450036][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.462191][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.491608][ T4250] device veth1_vlan entered promiscuous mode [ 82.499494][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.509294][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.517936][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.527126][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.542457][ T4258] device veth0_macvtap entered promiscuous mode [ 82.552963][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.563748][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.580967][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.591740][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.604331][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.624435][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.633455][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.643775][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.652532][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.661521][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.672717][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.681946][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.695844][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.706131][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.721584][ T4258] device veth1_macvtap entered promiscuous mode [ 82.736242][ T4251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.746470][ T4251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.760760][ T4251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.769794][ T4251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.841084][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.878060][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.894642][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.914949][ T4250] device veth0_macvtap entered promiscuous mode [ 82.953101][ T4250] device veth1_macvtap entered promiscuous mode [ 82.971449][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.990289][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.009187][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.023544][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.036388][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.047533][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.059706][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.065291][ T4345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.101878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.112191][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.134402][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.160776][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.193260][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.227275][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.246561][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.261389][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.273472][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.285446][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.315505][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.331741][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.343609][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.354951][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.365243][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.377098][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.392371][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.404403][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.423692][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.445322][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.462672][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.474399][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.494035][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.548758][ T4258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.566954][ T4258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.579178][ T4258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.588185][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 83.588230][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 83.588256][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 83.596728][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 83.607099][ T4261] Bluetooth: hci2: command 0x0419 tx timeout [ 83.648858][ T4258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.665199][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.685615][ T4359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.695827][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.721579][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.733204][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.744279][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.763423][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.774447][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.790355][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.804403][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.917082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.926641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 83.956652][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.153849][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.324736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.331980][ T4349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.386565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 84.400991][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.405911][ T4250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.457423][ T4250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.466373][ T4250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.477916][ T4250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.501916][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.536527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 84.544811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 84.553068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.557414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.561312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.569563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.577634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.648750][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.818341][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.840912][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.857482][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.865519][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.930248][ T4350] syz.0.7 (4350) used greatest stack depth: 19440 bytes left [ 84.947532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.980651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.070014][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.107960][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.121009][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.131869][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.175049][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.209529][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.310029][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.345496][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.459435][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.793320][ T4387] loop0: detected capacity change from 0 to 2048 [ 85.917548][ T4387] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.217176][ T4388] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.709413][ T34] cfg80211: failed to load regulatory.db [ 86.947529][ T4400] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 87.160876][ T4378] loop1: detected capacity change from 0 to 32768 [ 87.241021][ T4378] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.10 (4378) [ 87.387151][ T4378] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 87.412819][ T4378] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 87.416013][ T4386] loop4: detected capacity change from 0 to 32768 [ 87.429719][ T4378] BTRFS info (device loop1): using free space tree [ 87.484729][ T4386] ======================================================= [ 87.484729][ T4386] WARNING: The mand mount option has been deprecated and [ 87.484729][ T4386] and is ignored by this kernel. Remove the mand [ 87.484729][ T4386] option from the mount to silence this warning. [ 87.484729][ T4386] ======================================================= [ 88.066450][ T4378] BTRFS info (device loop1): enabling ssd optimizations [ 88.315291][ T4249] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 88.406932][ T4296] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.672004][ T4296] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.702825][ T4296] usb 1-1: config 0 has no interface number 0 [ 88.744959][ T4296] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 88.785370][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.810749][ T4296] usb 1-1: Product: syz [ 88.823972][ T4296] usb 1-1: Manufacturer: syz [ 88.836681][ T4296] usb 1-1: SerialNumber: syz [ 88.878516][ T4296] usb 1-1: config 0 descriptor?? [ 89.059336][ T4450] sp0: Synchronizing with TNC [ 89.116053][ T4430] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.174259][ T4296] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 89.211406][ T4296] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 89.242123][ T4296] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 89.284238][ T4296] usb 1-1: media controller created [ 89.472388][ T4430] usb 1-1: dvb_usb_ec168: I2C read not implemented [ 89.640664][ T4458] loop4: detected capacity change from 0 to 2048 [ 90.031635][ T4458] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 90.333047][ T4296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.349322][ T4459] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.612247][ T4296] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 90.747302][ T4296] usb 1-1: USB disconnect, device number 2 [ 90.756404][ T4468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28'. [ 90.803700][ T4468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28'. [ 90.848399][ T4468] device bridge0 entered promiscuous mode [ 90.877652][ T4468] device ip6gretap0 entered promiscuous mode [ 90.929172][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 91.407469][ T26] audit: type=1326 audit(1749794451.047:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 91.451013][ T26] audit: type=1326 audit(1749794451.077:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 91.472956][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.506853][ T4296] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.541937][ T26] audit: type=1326 audit(1749794451.087:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 91.624499][ T26] audit: type=1326 audit(1749794451.087:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 91.649286][ T4472] loop1: detected capacity change from 0 to 32768 [ 91.678206][ T26] audit: type=1326 audit(1749794451.087:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4481 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 91.706911][ T4296] usb 4-1: Using ep0 maxpacket: 32 [ 91.717613][ T4296] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.738663][ T4296] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.751560][ T4296] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 91.763587][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.790182][ T4296] usb 4-1: config 0 descriptor?? [ 92.344747][ T4296] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 92.369160][ T4296] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 92.427804][ T26] audit: type=1326 audit(1749794452.067:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7fc00000 [ 92.549757][ T4501] loop1: detected capacity change from 0 to 2048 [ 92.587684][ T4501] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 92.894546][ T4502] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.035718][ T4296] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.05 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 93.066626][ T26] audit: type=1326 audit(1749794452.707:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f257798e929 code=0x7fc00000 [ 93.178102][ T26] audit: type=1326 audit(1749794452.707:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7fc00000 [ 93.200578][ T4296] usb 4-1: USB disconnect, device number 2 [ 93.236566][ T26] audit: type=1326 audit(1749794452.707:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7fc00000 [ 93.388795][ T26] audit: type=1326 audit(1749794452.707:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7fc00000 [ 93.462588][ T4507] input: syz1 as /devices/virtual/input/input6 [ 93.734193][ T4503] fido_id[4503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 93.878779][ T4296] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.026052][ T4262] Bluetooth: Wrong link type (-22) [ 94.119309][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.135603][ T4517] loop2: detected capacity change from 0 to 32768 [ 94.160755][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.202855][ T4296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.251968][ T4296] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.284178][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.333486][ T4296] usb 4-1: config 0 descriptor?? [ 94.767078][ T4296] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 94.866329][ T4296] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 94.901693][ T4535] loop1: detected capacity change from 0 to 4096 [ 95.065990][ T4535] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 95.118142][ T4535] ntfs3: loop1: Failed to load $Extend. [ 95.295574][ T4296] usb 4-1: USB disconnect, device number 3 [ 95.351582][ T4545] fido_id[4545]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 95.886601][ T4550] loop1: detected capacity change from 0 to 2048 [ 95.923730][ T4550] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.100118][ T4551] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.663369][ T4540] loop0: detected capacity change from 0 to 32768 [ 96.826621][ T4304] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.430664][ T4563] loop4: detected capacity change from 0 to 65536 [ 97.466572][ T4304] usb 2-1: Using ep0 maxpacket: 32 [ 97.473586][ T4304] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 97.498177][ T4304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 97.538985][ T4304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 97.572303][ T4563] XFS (loop4): Mounting V5 Filesystem [ 97.620374][ T4304] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 97.629719][ T4304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.638724][ T4304] usb 2-1: Product: syz [ 97.656869][ T4304] usb 2-1: Manufacturer: syz [ 97.666874][ T4304] usb 2-1: SerialNumber: syz [ 97.729100][ T4304] usb 2-1: config 0 descriptor?? [ 97.796425][ T4558] loop2: detected capacity change from 0 to 32768 [ 97.826767][ T4563] XFS (loop4): Ending clean mount [ 97.858414][ T4304] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 97.879939][ T4558] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.54 (4558) [ 97.889978][ T4304] XFS (loop4): Unmount and run xfs_repair [ 97.921218][ T4304] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 97.941461][ T4304] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 97.981906][ T4304] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 98.036514][ T4304] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 98.070331][ T4304] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 98.101917][ T4304] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 98.140025][ T4304] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 98.169674][ T4304] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.198792][ T4304] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.220768][ T4563] XFS (loop4): metadata I/O error in "xfs_read_agf+0x2a0/0x620" at daddr 0x1 len 1 error 74 [ 98.242587][ T4563] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1784/0x1e50 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 98.246610][ T4296] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.259935][ T4563] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 98.292195][ T4586] loop3: detected capacity change from 0 to 128 [ 98.299579][ T4558] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 98.320130][ T4558] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 98.355130][ T4558] BTRFS info (device loop2): using free space tree [ 98.378228][ T4258] XFS (loop4): Unmounting Filesystem [ 98.498973][ T4296] usb 1-1: Using ep0 maxpacket: 32 [ 98.509281][ T4296] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.533117][ T4296] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 98.565112][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.576137][ T4296] usb 1-1: Product: syz [ 98.585933][ T4296] usb 1-1: Manufacturer: syz [ 98.593358][ T4296] usb 1-1: SerialNumber: syz [ 98.605046][ T4296] usb 1-1: config 0 descriptor?? [ 98.620728][ T4558] BTRFS info (device loop2): enabling ssd optimizations [ 98.823959][ T4306] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 98.914872][ T4251] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 99.055036][ T4296] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 99.456857][ T4296] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 99.484316][ T4296] usb 1-1: USB disconnect, device number 3 [ 99.584919][ T4318] usb 2-1: USB disconnect, device number 2 [ 99.865687][ T4634] syz.4.77 uses obsolete (PF_INET,SOCK_PACKET) [ 100.334151][ T4642] loop2: detected capacity change from 0 to 128 [ 100.344313][ T4642] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.360056][ T4644] netlink: 'syz.0.82': attribute type 12 has an invalid length. [ 100.370481][ T4644] netlink: 248 bytes leftover after parsing attributes in process `syz.0.82'. [ 100.379884][ T4642] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.391029][ T4644] Zero length message leads to an empty skb [ 100.535560][ T4646] loop4: detected capacity change from 0 to 2048 [ 100.562012][ T4646] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.824947][ T4647] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.176765][ T46] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.450341][ T4660] mmap: syz.2.88 (4660) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.487328][ T4661] netlink: 'syz.1.87': attribute type 39 has an invalid length. [ 101.497674][ T4661] device veth0_macvtap left promiscuous mode [ 101.526788][ T4318] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.709751][ T4665] loop2: detected capacity change from 0 to 4096 [ 101.721779][ T4318] usb 1-1: Using ep0 maxpacket: 16 [ 101.732063][ T4318] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.756332][ T4318] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.791317][ T4318] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.822503][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.852316][ T4318] usb 1-1: Product: syz [ 101.865453][ T4318] usb 1-1: Manufacturer: syz [ 101.882901][ T4318] usb 1-1: SerialNumber: syz [ 102.117563][ T4318] usb 1-1: 0:2 : does not exist [ 102.138467][ T4318] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 102.190966][ T4318] usb 1-1: USB disconnect, device number 4 [ 102.372397][ T4676] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.393723][ T4676] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.440231][ T4464] udevd[4464]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.637506][ T4682] loop2: detected capacity change from 0 to 2048 [ 102.691116][ T4682] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 102.836720][ T4685] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.431041][ T4700] tipc: Started in network mode [ 103.444108][ T4700] tipc: Node identity 2000007, cluster identity 4711 [ 103.472579][ T4700] tipc: Node number set to 33554439 [ 103.534889][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 103.680005][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 103.708860][ T4708] netlink: 'syz.4.108': attribute type 2 has an invalid length. [ 104.176169][ T4713] loop0: detected capacity change from 0 to 32768 [ 104.195555][ T4713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.111 (4713) [ 104.228040][ T4713] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.238342][ T4713] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 104.247297][ T4713] BTRFS info (device loop0): setting nodatacow, compression disabled [ 104.255799][ T4713] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 104.266732][ T4713] BTRFS info (device loop0): trying to use backup root at mount time [ 104.274862][ T4713] BTRFS info (device loop0): enabling auto defrag [ 104.281660][ T4713] BTRFS info (device loop0): max_inline at 4096 [ 104.288080][ T4713] BTRFS info (device loop0): using free space tree [ 104.835158][ T4720] loop1: detected capacity change from 0 to 65536 [ 104.869413][ T4713] BTRFS info (device loop0): enabling ssd optimizations [ 104.913462][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 104.913479][ T26] audit: type=1800 audit(1749794464.557:73): pid=4713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.111" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 104.965934][ T4713] BTRFS info (device loop0): balance: start -sconvert=raid0,soft [ 104.976085][ T4713] BTRFS info (device loop0): left=0, need=98304, flags=10 [ 104.983820][ T4713] BTRFS info (device loop0): space_info SYSTEM has 0 free, is not full [ 104.992674][ T4713] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 105.006940][ T4713] BTRFS info (device loop0): global_block_rsv: size 1441792 reserved 1441792 [ 105.016368][ T4713] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 105.024115][ T4713] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 105.031867][ T4713] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 105.039789][ T4713] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 105.058864][ T4713] BTRFS info (device loop0): relocating block group 1048576 flags system [ 105.120263][ T4713] BTRFS info (device loop0): balance: ended with status: 0 [ 105.356780][ T4720] XFS (loop1): Mounting V5 Filesystem [ 105.698295][ T4720] XFS (loop1): Ending clean mount [ 105.758459][ T4338] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 105.930057][ T4338] XFS (loop1): Unmount and run xfs_repair [ 106.054260][ T4338] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 106.104851][ T4338] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 106.197221][ T4338] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 106.235336][ T4338] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 106.263010][ T4338] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 106.314655][ T4338] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 106.325988][ T4762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.117'. [ 106.334099][ T4338] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 106.361730][ T4762] unsupported nlmsg_type 40 [ 106.365055][ T4338] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.381908][ T4338] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.407850][ T4720] XFS (loop1): metadata I/O error in "xfs_read_agf+0x2a0/0x620" at daddr 0x1 len 1 error 74 [ 106.431592][ T4720] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1784/0x1e50 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 106.448237][ T4720] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 106.458494][ T4263] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.527400][ T4249] XFS (loop1): Unmounting Filesystem [ 107.191781][ T4765] loop4: detected capacity change from 0 to 32768 [ 107.230841][ T4775] loop2: detected capacity change from 0 to 64 [ 107.421271][ T4775] hfs: request for non-existent node 56 in B*Tree [ 107.483056][ T4775] hfs: request for non-existent node 56 in B*Tree [ 107.507691][ T4775] hfs: request for non-existent node 57 in B*Tree [ 107.528468][ T4775] hfs: request for non-existent node 57 in B*Tree [ 107.716974][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 108.006037][ T4788] loop4: detected capacity change from 0 to 2048 [ 108.102207][ T4788] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.646797][ T4799] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.262662][ T4810] loop4: detected capacity change from 0 to 4096 [ 109.305468][ T4813] mmap: syz.0.135 (4813): VmData 176009216 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 109.376068][ T4816] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.384503][ T4815] loop2: detected capacity change from 0 to 512 [ 109.434880][ T26] audit: type=1800 audit(1749794469.077:74): pid=4810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.133" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 109.475056][ T4815] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.612067][ T4815] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.691407][ T4815] EXT4-fs (loop2): 1 truncate cleaned up [ 109.771915][ T4815] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.782279][ T4808] loop1: detected capacity change from 0 to 32768 [ 109.892139][ T4815] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.136: corrupted in-inode xattr [ 109.966737][ T4815] EXT4-fs (loop2): Remounting filesystem read-only [ 109.973353][ T4815] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1732: inode #15: comm syz.2.136: unable to update i_inline_off [ 110.116632][ T4815] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.259623][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 111.594857][ T4844] loop4: detected capacity change from 0 to 2048 [ 111.639776][ T4844] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 111.770279][ T4857] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.881426][ T4859] loop0: detected capacity change from 0 to 128 [ 111.902367][ T4859] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.945573][ T4861] loop1: detected capacity change from 0 to 1024 [ 111.995653][ T4859] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.220523][ T4863] loop2: detected capacity change from 0 to 32768 [ 112.298043][ T4863] process 'syz.2.151' launched './file1' with NULL argv: empty string added [ 112.784820][ T4874] loop2: detected capacity change from 0 to 4096 [ 112.871074][ T4874] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.664832][ T4878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 113.675635][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 114.408262][ T4901] loop0: detected capacity change from 0 to 256 [ 114.427497][ T4262] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 114.561132][ T26] audit: type=1804 audit(1749794474.207:75): pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.163" name="/newroot/36/file1/file0" dev="loop0" ino=1048596 res=1 errno=0 [ 114.660984][ T26] audit: type=1326 audit(1749794474.257:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14518e929 code=0x7ffc0000 [ 114.760554][ T26] audit: type=1326 audit(1749794474.257:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd14518e929 code=0x7ffc0000 [ 114.843619][ T26] audit: type=1326 audit(1749794474.257:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14518e929 code=0x7ffc0000 [ 114.925276][ T26] audit: type=1326 audit(1749794474.257:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14518e929 code=0x7ffc0000 [ 114.966879][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.977585][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.986012][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.007514][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.015236][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 115.024988][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.347232][ T4935] loop0: detected capacity change from 0 to 2048 [ 116.409257][ T4935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.922307][ T4946] netlink: 176 bytes leftover after parsing attributes in process `syz.0.178'. [ 117.111200][ T4268] Bluetooth: hci1: command 0x0409 tx timeout [ 118.331117][ T4957] loop0: detected capacity change from 0 to 32768 [ 118.341124][ T4957] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.182 (4957) [ 118.380994][ T4957] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.391273][ T4957] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 118.400035][ T4957] BTRFS info (device loop0): using free space tree [ 118.556630][ T4957] BTRFS info (device loop0): enabling ssd optimizations [ 118.829953][ T4263] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.833011][ T4389] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 119.186755][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 120.238767][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 120.545107][ T4997] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 120.990132][ T5011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 121.097661][ T4298] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.118526][ T4911] chnl_net:caif_netlink_parms(): no params data found [ 121.152252][ T5005] could not allocate digest TFM handle cryptd(blake2b-160) [ 121.234547][ T4911] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.248615][ T4911] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.261970][ T4911] device bridge_slave_0 entered promiscuous mode [ 121.268784][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 121.285684][ T4911] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.295484][ T4911] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.296673][ T4298] usb 5-1: Using ep0 maxpacket: 16 [ 121.305357][ T4911] device bridge_slave_1 entered promiscuous mode [ 121.357749][ T4298] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 121.421190][ T4298] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 121.431114][ T4298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.452248][ T4298] usb 5-1: config 0 descriptor?? [ 121.462186][ T4911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.501682][ T4911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.517944][ T4298] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 121.602431][ T4911] team0: Port device team_slave_0 added [ 121.631289][ T4911] team0: Port device team_slave_1 added [ 121.733228][ T4911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.777679][ T4911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.808406][ T3608] bcm5974 5-1:0.0: could not read from device [ 121.824538][ T4911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.856024][ T4298] usb 5-1: USB disconnect, device number 2 [ 121.866405][ T5007] bcm5974 5-1:0.0: could not read from device [ 121.899039][ T4911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.907505][ T4911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.946815][ T4911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.060021][ T5031] loop0: detected capacity change from 0 to 512 [ 122.072674][ T4911] device hsr_slave_0 entered promiscuous mode [ 122.088951][ T4911] device hsr_slave_1 entered promiscuous mode [ 122.095289][ T5031] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.122225][ T4911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.131345][ T4911] Cannot create hsr debugfs directory [ 122.156072][ T5031] EXT4-fs (loop0): 1 truncate cleaned up [ 122.162749][ T5031] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 122.214396][ T5031] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.198: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 122.437730][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 122.574943][ T4911] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.602772][ T4911] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.625199][ T4911] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.707565][ T4911] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.979948][ T4911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.035473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.075130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.110132][ T4911] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.166810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.211237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.261692][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.268965][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.297979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.308520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.317369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.326023][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.333311][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.346656][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 123.363001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.507155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.537033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.570014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.625717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.655425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.681061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.724212][ T4911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.769455][ T4911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.917664][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.941752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.969905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.996052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.021850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.036110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.090946][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.106650][ T4318] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.192338][ T4253] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.212132][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.291185][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.302847][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.312498][ T4318] usb 2-1: Using ep0 maxpacket: 32 [ 124.322050][ T4262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.332306][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.345735][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 124.353292][ T4262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.362341][ T4318] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 124.400510][ T4318] usb 2-1: config 0 has no interface number 0 [ 124.407224][ T4318] usb 2-1: config 0 interface 184 has no altsetting 0 [ 124.408312][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.419672][ T4318] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 124.433771][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.435317][ T4253] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 124.442189][ T4318] usb 2-1: Product: syz [ 124.442209][ T4318] usb 2-1: Manufacturer: syz [ 124.442224][ T4318] usb 2-1: SerialNumber: syz [ 124.465950][ T4318] usb 2-1: config 0 descriptor?? [ 124.481219][ T4253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.486317][ T4318] smsc75xx v1.0.0 [ 124.497217][ T4253] usb 3-1: config 0 descriptor?? [ 124.505450][ T4253] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 124.710774][ T4253] gspca_sn9c2028: read1 error -71 [ 124.725866][ T4253] gspca_sn9c2028: read1 error -71 [ 124.748795][ T4253] gspca_sn9c2028: read1 error -71 [ 124.768211][ T4253] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 124.830550][ T4253] usb 3-1: USB disconnect, device number 2 [ 124.994979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.004048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.141745][ T4911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.246341][ T5098] syz.4.221 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 125.280409][ T5080] chnl_net:caif_netlink_parms(): no params data found [ 125.291819][ T4318] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 125.338195][ T4318] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 125.383597][ T4318] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 125.426081][ T4318] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 125.478229][ T4318] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 125.507132][ T4318] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 125.706305][ T4318] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 125.730287][ T4318] usb 2-1: USB disconnect, device number 3 [ 126.548854][ T4262] Bluetooth: hci4: command 0x0409 tx timeout [ 126.585011][ T5111] loop4: detected capacity change from 0 to 2048 [ 126.594609][ T5111] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 126.694120][ T5113] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.716145][ T5117] loop1: detected capacity change from 0 to 256 [ 127.130702][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.162739][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.200046][ T5080] device bridge_slave_0 entered promiscuous mode [ 127.294845][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.308132][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.330737][ T5128] xt_CT: No such helper "pptp" [ 127.332122][ T5080] device bridge_slave_1 entered promiscuous mode [ 127.428318][ T5130] loop1: detected capacity change from 0 to 4096 [ 127.441088][ T5136] loop2: detected capacity change from 0 to 256 [ 127.581969][ T5080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.599097][ T5136] FAT-fs (loop2): Directory bread(block 64) failed [ 127.622869][ T5136] FAT-fs (loop2): Directory bread(block 65) failed [ 127.657668][ T5136] FAT-fs (loop2): Directory bread(block 66) failed [ 127.677592][ T5136] FAT-fs (loop2): Directory bread(block 67) failed [ 127.684288][ T5136] FAT-fs (loop2): Directory bread(block 68) failed [ 127.711656][ T5136] FAT-fs (loop2): Directory bread(block 69) failed [ 127.714017][ T5080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.747234][ T5136] FAT-fs (loop2): Directory bread(block 70) failed [ 127.776808][ T5136] FAT-fs (loop2): Directory bread(block 71) failed [ 127.821547][ T5136] FAT-fs (loop2): Directory bread(block 72) failed [ 127.857689][ T5136] FAT-fs (loop2): Directory bread(block 73) failed [ 127.874366][ T26] audit: type=1326 audit(1749794487.517:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3d98e929 code=0x7ffc0000 [ 127.966598][ T26] audit: type=1326 audit(1749794487.517:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3d98e929 code=0x7ffc0000 [ 127.977914][ T5140] kvm [5139]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 128.048660][ T5140] kvm [5139]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 128.060683][ T26] audit: type=1326 audit(1749794487.587:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe3d98e929 code=0x7ffc0000 [ 128.126242][ T5140] kvm [5139]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 128.175371][ T5140] kvm [5139]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 128.193606][ T5080] team0: Port device team_slave_0 added [ 128.206726][ T26] audit: type=1326 audit(1749794487.587:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3d98e929 code=0x7ffc0000 [ 128.231502][ T5080] team0: Port device team_slave_1 added [ 128.250923][ T5140] kvm [5139]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 128.286780][ T5140] kvm [5139]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 128.319606][ T5140] kvm [5139]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 128.326969][ T26] audit: type=1326 audit(1749794487.587:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3d98e929 code=0x7ffc0000 [ 128.329181][ T5140] kvm [5139]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 128.375971][ T26] audit: type=1326 audit(1749794487.587:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fbe3d98e929 code=0x7ffc0000 [ 128.435607][ T26] audit: type=1326 audit(1749794487.587:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3d98e929 code=0x7ffc0000 [ 128.471232][ T26] audit: type=1326 audit(1749794487.587:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3d98e929 code=0x7ffc0000 [ 128.595229][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.627115][ T4262] Bluetooth: hci4: command 0x041b tx timeout [ 128.627634][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.705327][ T5080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.719364][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.726368][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.753483][ T5080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.772892][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.782178][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.004694][ T5162] loop2: detected capacity change from 0 to 512 [ 129.057009][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.111325][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.165869][ T4911] device veth0_vlan entered promiscuous mode [ 129.314837][ T5168] loop1: detected capacity change from 0 to 2048 [ 129.330373][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.417420][ T5168] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 129.511717][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.552943][ T5169] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.809234][ T56] device hsr_slave_0 left promiscuous mode [ 129.852693][ T5162] EXT4-fs (loop2): 1 orphan inode deleted [ 129.909135][ T5112] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 129.966928][ T5112] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:13: Failed to release dquot type 1 [ 129.968837][ T5162] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.004245][ T56] device hsr_slave_1 left promiscuous mode [ 130.023109][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.032676][ T5162] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.049562][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.099307][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.134205][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.197541][ T56] device bridge_slave_1 left promiscuous mode [ 130.214765][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.251216][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 130.263473][ T56] device bridge_slave_0 left promiscuous mode [ 130.300172][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.346953][ T4298] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.408429][ T56] device veth1_macvtap left promiscuous mode [ 130.426159][ T56] device veth0_macvtap left promiscuous mode [ 130.442620][ T56] device veth1_vlan left promiscuous mode [ 130.453367][ T56] device veth0_vlan left promiscuous mode [ 130.550687][ T4298] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.574736][ T4298] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.615527][ T4298] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.656435][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.664803][ T4298] usb 2-1: Product: syz [ 130.690874][ T4298] usb 2-1: Manufacturer: syz [ 130.695560][ T4298] usb 2-1: SerialNumber: syz [ 130.707181][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 130.749181][ T4298] usb 2-1: config 0 descriptor?? [ 130.786129][ T4298] usb 2-1: selecting invalid altsetting 0 [ 130.997890][ T22] usb 2-1: USB disconnect, device number 4 [ 131.297590][ T5201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 131.643023][ T56] team0 (unregistering): Port device team_slave_1 removed [ 131.690859][ T56] team0 (unregistering): Port device team_slave_0 removed [ 131.740153][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.836049][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.176699][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.359107][ T56] bond0 (unregistering): Released all slaves [ 132.366872][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 132.374090][ T22] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.389353][ T22] usb 2-1: config 0 has no interface number 0 [ 132.407244][ T22] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 132.416333][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.429230][ T22] usb 2-1: Product: syz [ 132.433505][ T22] usb 2-1: Manufacturer: syz [ 132.440027][ T22] usb 2-1: SerialNumber: syz [ 132.457431][ T22] usb 2-1: config 0 descriptor?? [ 132.471207][ T22] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 132.472369][ T5080] device hsr_slave_0 entered promiscuous mode [ 132.480317][ T22] usb 2-1: selecting invalid altsetting 1 [ 132.492377][ T22] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 132.504974][ T22] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 132.517239][ T22] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 132.526348][ T22] usb 2-1: media controller created [ 132.534343][ T5080] device hsr_slave_1 entered promiscuous mode [ 132.543974][ T5080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.545499][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.563695][ T5080] Cannot create hsr debugfs directory [ 132.575802][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 132.620180][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 132.671645][ T4911] device veth1_vlan entered promiscuous mode [ 132.787444][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 132.801956][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.808806][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.918316][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.938607][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.012219][ T5212] tipc: Started in network mode [ 133.017476][ T5212] tipc: Node identity 4, cluster identity 4711 [ 133.024180][ T5212] tipc: Node number set to 4 [ 133.033217][ T4911] device veth0_macvtap entered promiscuous mode [ 133.075203][ T4911] device veth1_macvtap entered promiscuous mode [ 133.134171][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.177403][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.225192][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.261726][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.299268][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.310285][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.320757][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.334893][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.361629][ T4911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.531316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.546620][ T4338] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.557401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.565821][ T5223] loop2: detected capacity change from 0 to 1024 [ 133.584394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.652193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.677621][ T22] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 133.691794][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.707209][ T22] zl10353_read_register: readreg error (reg=127, ret==-110) [ 133.718872][ T5207] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 133.722804][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.743416][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.758848][ T5223] syz.2.252: attempt to access beyond end of device [ 133.758848][ T5223] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 133.776167][ T4338] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 133.792578][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.802544][ T4338] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.816642][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.842723][ T4338] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.843963][ T22] usb 2-1: USB disconnect, device number 5 [ 133.865942][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.886429][ T4338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.916577][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.938448][ T4338] usb 5-1: config 0 descriptor?? [ 133.944614][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.961470][ T4338] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 133.978117][ T4911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.054008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.073344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.106074][ T4911] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.115520][ T4911] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.130447][ T4911] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.144867][ T4911] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.154612][ T26] audit: type=1326 audit(1749794493.807:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5231 comm="syz.2.253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd14518e929 code=0x0 [ 134.548119][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.565347][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.633524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.669323][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.701836][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.721118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.751988][ T5080] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.821028][ T5080] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.856378][ T5080] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.886146][ T5080] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.207002][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.360473][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.380207][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.434095][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.620818][ T5261] loop1: detected capacity change from 0 to 2048 [ 135.658305][ T5261] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 135.843179][ T5262] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.224542][ T5266] loop2: detected capacity change from 0 to 128 [ 136.249773][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.262234][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.288469][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.295679][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.374995][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.401057][ T5268] syz.2.260: attempt to access beyond end of device [ 136.401057][ T5268] loop2: rw=2049, sector=145, nr_sectors = 336 limit=128 [ 136.434096][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.449487][ T4301] usb 5-1: USB disconnect, device number 3 [ 136.464396][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.471637][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.494951][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.504335][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.514900][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.533147][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.563085][ T5266] syz.2.260: attempt to access beyond end of device [ 136.563085][ T5266] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 136.617756][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.648867][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.689806][ T5266] syz.2.260: attempt to access beyond end of device [ 136.689806][ T5266] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 136.722059][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.730486][ T5269] loop1: detected capacity change from 0 to 32768 [ 136.739413][ T5266] syz.2.260: attempt to access beyond end of device [ 136.739413][ T5266] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 136.752722][ T5269] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.261 (5269) [ 136.769856][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.797059][ T5266] syz.2.260: attempt to access beyond end of device [ 136.797059][ T5266] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 136.805949][ T5080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.824150][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.831711][ T5269] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.842435][ T5269] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 136.851206][ T5269] BTRFS info (device loop1): enabling disk space caching [ 136.858912][ T5269] BTRFS info (device loop1): doing ref verification [ 136.865556][ T5269] BTRFS info (device loop1): turning on flush-on-commit [ 136.872723][ T5269] BTRFS info (device loop1): enabling ssd optimizations [ 136.879782][ T5269] BTRFS info (device loop1): using spread ssd allocation scheme [ 136.887548][ T5269] BTRFS info (device loop1): not using ssd optimizations [ 136.894717][ T5269] BTRFS info (device loop1): not using spread ssd allocation scheme [ 136.902816][ T5269] BTRFS info (device loop1): doing ref verification [ 136.909753][ T5269] BTRFS error (device loop1): cannot disable free space tree [ 136.922055][ T5269] BTRFS error (device loop1): open_ctree failed: -22 [ 136.929275][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.936836][ T5266] syz.2.260: attempt to access beyond end of device [ 136.936836][ T5266] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 136.950430][ T5266] syz.2.260: attempt to access beyond end of device [ 136.950430][ T5266] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 136.972534][ T5266] syz.2.260: attempt to access beyond end of device [ 136.972534][ T5266] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 136.987023][ T5277] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 136.994214][ T5277] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 137.006366][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.032173][ T5266] syz.2.260: attempt to access beyond end of device [ 137.032173][ T5266] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 137.056286][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.077643][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.106818][ T5277] vhci_hcd vhci_hcd.0: Device attached [ 137.134368][ T5278] vhci_hcd: connection closed [ 137.138017][ T32] vhci_hcd: stop threads [ 137.184839][ T32] vhci_hcd: release socket [ 137.203907][ T32] vhci_hcd: disconnect device [ 137.338499][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.265'. [ 137.422476][ T4464] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4464) [ 137.450652][ T5290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.266'. [ 137.466962][ T5290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 137.794023][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 138.115591][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.180031][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.194456][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.227087][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.267639][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.283574][ T4253] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.303970][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.321897][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.332730][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.340848][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.494914][ T5313] loop1: detected capacity change from 0 to 2048 [ 138.578956][ T5313] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 138.726796][ T5314] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.079051][ T5080] device veth0_vlan entered promiscuous mode [ 139.096330][ T5080] device veth1_vlan entered promiscuous mode [ 139.187623][ T4253] usb 3-1: Using ep0 maxpacket: 32 [ 139.199597][ T4253] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 139.229158][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.237300][ T4253] usb 3-1: config 0 has no interface number 0 [ 139.252849][ T4253] usb 3-1: config 0 interface 184 has no altsetting 0 [ 139.257507][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.270004][ T4253] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 139.299012][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.314971][ T4253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.347060][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.351816][ T4253] usb 3-1: Product: syz [ 139.383054][ T4253] usb 3-1: Manufacturer: syz [ 139.395355][ T5080] device veth0_macvtap entered promiscuous mode [ 139.401900][ T4253] usb 3-1: SerialNumber: syz [ 139.423205][ T4253] usb 3-1: config 0 descriptor?? [ 139.443340][ T5080] device veth1_macvtap entered promiscuous mode [ 139.455204][ T4253] smsc75xx v1.0.0 [ 139.522365][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.557217][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.576525][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.637111][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.686785][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.746514][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.787471][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.838958][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.857934][ T4253] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 139.884098][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.886656][ T4253] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 139.895966][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.953102][ T4253] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 139.964974][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.001497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.010353][ T4253] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 140.018138][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.041296][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.079723][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.101226][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.122508][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.145369][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.157605][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.168908][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.179725][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.196644][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.213187][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.246585][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.268222][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.287955][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.307547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.321163][ T5080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.337224][ T5080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.362490][ T5080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.384394][ T4984] usb 3-1: USB disconnect, device number 3 [ 140.397018][ T5080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.745842][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.775139][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.898922][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.946910][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.973251][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.022268][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.221028][ T5362] loop4: detected capacity change from 0 to 128 [ 141.836548][ T4318] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.906914][ T4268] Bluetooth: hci5: command 0x1003 tx timeout [ 141.915430][ T4262] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 142.057318][ T4318] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 142.076603][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.094900][ T4318] usb 3-1: Product: syz [ 142.094941][ T4318] usb 3-1: Manufacturer: syz [ 142.094957][ T4318] usb 3-1: SerialNumber: syz [ 142.097407][ T4318] usb 3-1: config 0 descriptor?? [ 142.239913][ T32] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.731178][ T32] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.878802][ T32] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.892314][ T5377] loop5: detected capacity change from 0 to 32768 [ 143.088590][ T32] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.587996][ T4268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.632664][ T4268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.643889][ T4261] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.659029][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.669062][ T4261] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 143.676630][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.753489][ T4437] usb 3-1: USB disconnect, device number 4 [ 144.890224][ T5413] chnl_net:caif_netlink_parms(): no params data found [ 144.893734][ T5438] loop5: detected capacity change from 0 to 512 [ 145.061820][ T5440] loop1: detected capacity change from 0 to 2048 [ 145.098140][ T5440] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 145.235151][ T5441] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.592947][ T5438] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 145.643219][ T5438] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.728488][ T5451] loop2: detected capacity change from 0 to 512 [ 145.744555][ T5451] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size [ 145.754964][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 145.864667][ T5438] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 145.930958][ T5438] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 145.941640][ T5438] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.305: Failed to acquire dquot type 0 [ 146.023586][ T4911] EXT4-fs (loop5): unmounting filesystem. [ 146.245763][ T5464] loop1: detected capacity change from 0 to 512 [ 146.287828][ T5464] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.438677][ T5464] EXT4-fs (loop1): 1 truncate cleaned up [ 146.464217][ T5464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 146.526901][ T129] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 146.575350][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.585374][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.621176][ T5413] device bridge_slave_0 entered promiscuous mode [ 146.682335][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 146.688672][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.688749][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.690230][ T5413] device bridge_slave_1 entered promiscuous mode [ 146.751887][ T129] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.775018][ T129] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 146.787903][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.805897][ T129] usb 6-1: config 0 descriptor?? [ 146.826049][ T129] pwc: Askey VC010 type 2 USB webcam detected. [ 146.994134][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 147.136598][ T32] device hsr_slave_0 left promiscuous mode [ 147.169049][ T32] device hsr_slave_1 left promiscuous mode [ 147.185305][ T5463] loop2: detected capacity change from 0 to 32768 [ 147.195630][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.215892][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.224343][ T129] pwc: recv_control_msg error -32 req 02 val 2b00 [ 147.237699][ T129] pwc: recv_control_msg error -32 req 02 val 2700 [ 147.258096][ T129] pwc: recv_control_msg error -32 req 02 val 2c00 [ 147.274497][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.282948][ T129] pwc: recv_control_msg error -32 req 04 val 1000 [ 147.292442][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.311187][ T129] pwc: recv_control_msg error -32 req 04 val 1300 [ 147.328713][ T129] pwc: recv_control_msg error -32 req 04 val 1400 [ 147.357829][ T32] device bridge_slave_1 left promiscuous mode [ 147.368856][ T129] pwc: recv_control_msg error -32 req 02 val 2000 [ 147.375679][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.417303][ T129] pwc: recv_control_msg error -32 req 02 val 2100 [ 147.439454][ T32] device bridge_slave_0 left promiscuous mode [ 147.447016][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.636736][ T129] pwc: recv_control_msg error -71 req 02 val 2500 [ 147.645877][ T129] pwc: recv_control_msg error -71 req 02 val 2400 [ 147.692963][ T32] device veth1_macvtap left promiscuous mode [ 147.699691][ T129] pwc: recv_control_msg error -71 req 02 val 2600 [ 147.716631][ T32] device veth0_macvtap left promiscuous mode [ 147.765479][ T129] pwc: recv_control_msg error -71 req 02 val 2900 [ 147.775498][ T32] device veth1_vlan left promiscuous mode [ 147.826095][ T129] pwc: recv_control_msg error -71 req 02 val 2800 [ 147.826971][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 147.857540][ T32] device veth0_vlan left promiscuous mode [ 147.891959][ T129] pwc: recv_control_msg error -71 req 04 val 1100 [ 147.990349][ T5498] loop2: detected capacity change from 0 to 2048 [ 148.019070][ T5498] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.150882][ T5499] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.333482][ T129] pwc: recv_control_msg error -71 req 04 val 1200 [ 148.484007][ T129] pwc: Registered as video103. [ 148.541429][ T129] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 148.669349][ T129] usb 6-1: USB disconnect, device number 2 [ 148.916783][ T4437] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.987980][ T5505] loop5: detected capacity change from 0 to 32768 [ 149.006704][ T5505] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.322 (5505) [ 149.023659][ T5505] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 149.034135][ T5505] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 149.044677][ T5505] BTRFS info (device loop5): force zlib compression, level 3 [ 149.052195][ T5505] BTRFS info (device loop5): force clearing of disk cache [ 149.059601][ T5505] BTRFS info (device loop5): setting nodatasum [ 149.065813][ T5505] BTRFS info (device loop5): disabling free space tree [ 149.072795][ T5505] BTRFS info (device loop5): enabling disk space caching [ 149.080013][ T5505] BTRFS info (device loop5): disk space caching is enabled [ 149.117094][ T4437] usb 2-1: Using ep0 maxpacket: 16 [ 149.130412][ T4437] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 149.193102][ T4437] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 149.272810][ T4437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.292345][ T5505] BTRFS info (device loop5): rebuilding free space tree [ 149.295526][ T4437] usb 2-1: Product: syz [ 149.335147][ T4437] usb 2-1: Manufacturer: syz [ 149.337210][ T5505] BTRFS info (device loop5): disabling free space tree [ 149.346982][ T5505] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 149.357985][ T5505] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 149.366732][ T4437] usb 2-1: SerialNumber: syz [ 149.387869][ T4437] usb 2-1: config 0 descriptor?? [ 149.471319][ T5505] BTRFS error (device loop5): balance: invalid convert metadata profile raid0 [ 149.510877][ T4911] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 149.906624][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 150.126688][ T129] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 150.328621][ T129] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 150.351342][ T129] usb 6-1: config 0 has no interface number 0 [ 150.369076][ T129] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 150.382689][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.391388][ T129] usb 6-1: Product: syz [ 150.395614][ T129] usb 6-1: Manufacturer: syz [ 150.400666][ T129] usb 6-1: SerialNumber: syz [ 150.406964][ T129] usb 6-1: config 0 descriptor?? [ 150.414807][ T32] team0 (unregistering): Port device team_slave_1 removed [ 150.470968][ T32] team0 (unregistering): Port device team_slave_0 removed [ 150.519860][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.571418][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.832220][ T4318] usb 2-1: USB disconnect, device number 6 [ 150.954693][ T5543] loop1: detected capacity change from 0 to 4096 [ 151.042737][ T129] usb 6-1: Firmware version (0.0) predates our first public release. [ 151.052513][ T129] usb 6-1: Please update to version 0.2 or newer [ 151.061348][ T5544] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.086691][ T5543] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 151.136579][ T5546] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 151.212675][ T5543] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 151.262347][ T5543] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 151.307697][ T5546] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 151.484220][ T5548] xt_hashlimit: size too large, truncated to 1048576 [ 151.559173][ T32] bond0 (unregistering): Released all slaves [ 151.646129][ T5551] loop5: detected capacity change from 0 to 128 [ 151.684918][ T5413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.710392][ T5507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 151.747483][ T5551] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 151.767065][ T5507] device netdevsim0 entered promiscuous mode [ 151.824730][ T5413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.868392][ T129] usb 6-1: USB disconnect, device number 3 [ 151.899670][ T5551] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.987076][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 152.086872][ T26] audit: type=1326 audit(1749794511.737:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5557 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 152.167105][ T26] audit: type=1326 audit(1749794511.767:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5557 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 152.239411][ T26] audit: type=1326 audit(1749794511.767:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5557 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 152.313516][ T26] audit: type=1326 audit(1749794511.767:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5557 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 152.366839][ T26] audit: type=1326 audit(1749794511.767:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5557 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 152.436731][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 152.634931][ T22] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.651288][ T22] usb 3-1: config 0 has no interface number 0 [ 152.665735][ T22] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 152.683640][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.692969][ T22] usb 3-1: Product: syz [ 152.698103][ T22] usb 3-1: Manufacturer: syz [ 152.702946][ T22] usb 3-1: SerialNumber: syz [ 152.719566][ T22] usb 3-1: config 0 descriptor?? [ 153.047031][ T22] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 153.074395][ T22] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 153.102734][ T22] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 153.121447][ T22] usb 3-1: media controller created [ 153.152665][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.765464][ T4911] EXT4-fs (loop5): unmounting filesystem. [ 153.924373][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 153.955350][ T5559] netlink: 84 bytes leftover after parsing attributes in process `syz.2.330'. [ 153.989593][ T5413] team0: Port device team_slave_0 added [ 154.079190][ T5413] team0: Port device team_slave_1 added [ 154.154290][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.176559][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.267258][ T5413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.299402][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.313133][ T22] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 154.319425][ T5576] usb 3-1: dvb_usb_ec168: I2C read not implemented [ 154.325542][ T4318] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 154.356131][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.444459][ T5413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.480736][ T5584] loop5: detected capacity change from 0 to 2048 [ 154.487665][ T4301] usb 3-1: USB disconnect, device number 5 [ 154.527888][ T5584] UDF-fs: bad mount option "e" or missing value [ 154.536723][ T4318] usb 5-1: Using ep0 maxpacket: 16 [ 154.547610][ T4318] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 154.589683][ T4318] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 154.615141][ T5413] device hsr_slave_0 entered promiscuous mode [ 154.642770][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.651621][ T5413] device hsr_slave_1 entered promiscuous mode [ 154.681974][ T4318] usb 5-1: Product: syz [ 154.685288][ T5413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.686187][ T4318] usb 5-1: Manufacturer: syz [ 154.717466][ T5413] Cannot create hsr debugfs directory [ 154.731332][ T4318] usb 5-1: SerialNumber: syz [ 154.755952][ T4318] usb 5-1: config 0 descriptor?? [ 154.786700][ T4318] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 154.818698][ T4318] usb 5-1: Detected FT232R [ 154.977658][ T4318] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 154.998188][ T4318] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 155.022298][ T4318] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 155.043576][ T4318] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 155.084460][ T4318] usb 5-1: USB disconnect, device number 4 [ 155.116231][ T4318] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 155.150126][ T4318] ftdi_sio 5-1:0.0: device disconnected [ 155.316018][ T5598] loop2: detected capacity change from 0 to 2048 [ 155.433987][ T5598] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.653611][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 155.992548][ T5413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 156.027744][ T5413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.083783][ T5413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.111149][ T5413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.446759][ T5413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.511529][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.557982][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.595650][ T5413] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.638154][ T5626] loop5: detected capacity change from 0 to 2048 [ 156.649486][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.667447][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.684131][ T5626] UDF-fs: bad mount option "e" or missing value [ 156.690737][ T26] audit: type=1326 audit(1749794516.327:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 156.697262][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.713089][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.726402][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.795651][ T26] audit: type=1326 audit(1749794516.337:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 156.877902][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.896780][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.937937][ T26] audit: type=1326 audit(1749794516.337:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 156.938102][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.069590][ T26] audit: type=1326 audit(1749794516.337:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 157.191546][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.198775][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.206975][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.218455][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.370645][ T5645] loop2: detected capacity change from 0 to 2048 [ 157.444650][ T5645] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 157.502915][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.673352][ T5646] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.894806][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.952380][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.060366][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.097164][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.135683][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.187720][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.249557][ T5413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.271868][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.315999][ T5656] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 158.322586][ T5656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 158.356171][ T5649] device batadv1 entered promiscuous mode [ 158.364122][ T5656] vhci_hcd vhci_hcd.0: Device attached [ 158.459129][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.468998][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.535377][ T5657] vhci_hcd: connection closed [ 158.540359][ T4389] vhci_hcd: stop threads [ 158.578776][ T4389] vhci_hcd: release socket [ 158.597091][ T4389] vhci_hcd: disconnect device [ 158.626653][ T4338] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 158.651784][ T4338] usb 41-1: enqueue for inactive port 0 [ 158.696753][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 158.757529][ T4338] vhci_hcd: vhci_device speed not set [ 158.903600][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 158.915511][ T22] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 158.961051][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.985199][ T22] usb 3-1: Product: syz [ 159.005664][ T22] usb 3-1: Manufacturer: syz [ 159.018575][ T22] usb 3-1: SerialNumber: syz [ 159.054691][ T22] usb 3-1: config 0 descriptor?? [ 159.104159][ T5680] loop1: detected capacity change from 0 to 1024 [ 159.247073][ T5442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.254832][ T5680] hfsplus: bad catalog entry type [ 159.262924][ T5442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.294235][ T5413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.380901][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.399330][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.418530][ T4368] hfsplus: b-tree write err: -5, ino 4 [ 159.469484][ T5682] loop4: detected capacity change from 0 to 32768 [ 159.490117][ T22] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 159.518877][ T5413] device veth0_vlan entered promiscuous mode [ 159.546927][ T5682] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.557238][ T5682] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 159.565993][ T5682] BTRFS info (device loop4): enabling disk space caching [ 159.573162][ T5682] BTRFS info (device loop4): doing ref verification [ 159.579891][ T5682] BTRFS info (device loop4): use zlib compression, level 3 [ 159.587336][ T5682] BTRFS info (device loop4): force clearing of disk cache [ 159.595464][ T5682] BTRFS info (device loop4): doing ref verification [ 159.602288][ T5682] BTRFS info (device loop4): disk space caching is enabled [ 159.618062][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.628308][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.702327][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.711813][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.729086][ T5413] device veth1_vlan entered promiscuous mode [ 159.765459][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.796574][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.808825][ T5413] device veth0_macvtap entered promiscuous mode [ 159.848726][ T5413] device veth1_macvtap entered promiscuous mode [ 159.869952][ T5682] BTRFS info (device loop4): rebuilding free space tree [ 159.894574][ T5682] BTRFS info (device loop4): disabling free space tree [ 159.902487][ T5682] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.912410][ T5682] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.952469][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.964053][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.001167][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.042645][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.052762][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.063338][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.075334][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.086196][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.096140][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.108967][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.184158][ T4258] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.353583][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.503101][ T5715] loop1: detected capacity change from 0 to 2048 [ 160.533774][ T5715] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 160.659039][ T5716] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.718857][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.999059][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.099862][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.166685][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.224943][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.276506][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.316136][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.356104][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.403397][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.474037][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.500848][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.543173][ T22] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 161.607898][ T22] usb 3-1: USB disconnect, device number 6 [ 161.625750][ T5442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.657398][ T5442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.686125][ T5442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.717161][ T5442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.737255][ T5442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.750268][ T5442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.805199][ T5413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.824671][ T5413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.847437][ T5413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.864513][ T5413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.003191][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.025408][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.057114][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.072189][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.084616][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.114768][ T5444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.609352][ T5755] netlink: 'syz.4.375': attribute type 4 has an invalid length. [ 162.871948][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 162.896577][ T4301] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.096645][ T4301] usb 2-1: Using ep0 maxpacket: 16 [ 163.114994][ T4301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.122857][ T5770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.382'. [ 163.144963][ T4301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.168906][ T4301] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.199039][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.216524][ T4301] usb 2-1: Product: syz [ 163.220820][ T4301] usb 2-1: Manufacturer: syz [ 163.225460][ T4301] usb 2-1: SerialNumber: syz [ 163.359668][ T5759] loop4: detected capacity change from 0 to 32768 [ 163.455557][ T4301] usb 2-1: 0:2 : does not exist [ 163.495950][ T4301] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 163.565324][ T4301] usb 2-1: USB disconnect, device number 7 [ 163.710375][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.878762][ T4464] udevd[4464]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.996716][ T4440] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 164.186650][ T4440] usb 6-1: Using ep0 maxpacket: 8 [ 164.226798][ T4440] usb 6-1: unable to get BOS descriptor or descriptor too short [ 164.257305][ T4440] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 164.264956][ T4440] usb 6-1: can't read configurations, error -71 [ 164.458455][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.661802][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.788215][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.798966][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.810528][ T4262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.820090][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.829731][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 164.848209][ T4262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.940941][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.409498][ T5817] loop2: detected capacity change from 0 to 2048 [ 165.458626][ T5817] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 165.612175][ T5818] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.216204][ T5821] loop4: detected capacity change from 0 to 2048 [ 166.309194][ T5828] smc: net device lo applied user defined pnetid SYZ1 [ 166.356344][ T5821] loop4: p1 < > p4 [ 166.357555][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 166.418167][ T5821] loop4: p4 size 8388608 extends beyond EOD, truncated [ 166.481289][ T3623] loop4: p1 < > p4 [ 166.485181][ T26] audit: type=1326 audit(1749794526.127:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 166.523585][ T3623] loop4: p4 size 8388608 extends beyond EOD, truncated [ 166.536902][ T26] audit: type=1326 audit(1749794526.127:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 166.539730][ T4440] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 166.655239][ T26] audit: type=1326 audit(1749794526.127:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 166.726435][ T26] audit: type=1326 audit(1749794526.127:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 166.816791][ T4440] usb 3-1: Using ep0 maxpacket: 16 [ 166.832381][ T4440] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.845492][ T26] audit: type=1326 audit(1749794526.127:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 166.874825][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 166.886617][ T4440] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.951634][ T4440] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.020550][ T26] audit: type=1326 audit(1749794526.127:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 167.042760][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.050006][ T4440] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 167.101152][ T4440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.132879][ T4431] udevd[4431]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 167.135609][ T4464] udevd[4464]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 167.159102][ T4440] usb 3-1: config 0 descriptor?? [ 167.212324][ T26] audit: type=1326 audit(1749794526.277:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 167.266741][ T26] audit: type=1326 audit(1749794526.277:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257798e929 code=0x7ffc0000 [ 167.272181][ T4512] udevd[4512]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 167.315520][ T4464] udevd[4464]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 167.349637][ T5854] loop1: detected capacity change from 0 to 1024 [ 167.480219][ T5854] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.513179][ T5854] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.604770][ T4440] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 167.653595][ T4440] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 167.685225][ T4440] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 167.728341][ T4440] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 167.758970][ T4440] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 167.819791][ T4440] hid-u2fzero 0003:10C4:8ACF.0003: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 167.896189][ T4440] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero LED initialised [ 167.946970][ T4440] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 167.958758][ T4440] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 167.967228][ T4440] CPU: 1 PID: 4440 Comm: kworker/1:11 Not tainted 6.1.141-syzkaller #0 [ 167.975508][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.985604][ T4440] Workqueue: usb_hub_wq hub_event [ 167.990776][ T4440] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 167.996474][ T4440] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 de 88 2d fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 36 89 2d fa 48 8d 84 24 80 00 00 00 [ 168.016140][ T4440] RSP: 0018:ffffc90004c1e7c0 EFLAGS: 00010202 [ 168.022240][ T4440] RAX: 0000000000000015 RBX: ffff88805591b030 RCX: dffffc0000000000 [ 168.030243][ T4440] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88807dde2e69 [ 168.038242][ T4440] RBP: ffffc90004c1e970 R08: 0000000000000001 R09: ffff88807dde2e2e [ 168.046243][ T4440] R10: ffffed100fbbc5cd R11: 1ffff1100fbbc5c5 R12: 1ffff1100ab23606 [ 168.054343][ T4440] R13: dffffc0000000000 R14: 1ffff1100ab23605 R15: 00000000000000a8 [ 168.062340][ T4440] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 168.071299][ T4440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.077903][ T4440] CR2: 0000200000029000 CR3: 00000000592e1000 CR4: 00000000003506e0 [ 168.085927][ T4440] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 168.093926][ T4440] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 168.101928][ T4440] Call Trace: [ 168.105233][ T4440] [ 168.108186][ T4440] ? rcu_is_watching+0x11/0xa0 [ 168.112995][ T4440] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 168.118592][ T4440] ? mutex_lock_nested+0x10/0x10 [ 168.123573][ T4440] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 168.129155][ T4440] add_early_randomness+0x7a/0x150 [ 168.134329][ T4440] hwrng_register+0x398/0x440 [ 168.139049][ T4440] devm_hwrng_register+0x43/0xb0 [ 168.144016][ T4440] u2fzero_probe+0x355/0x470 [ 168.148648][ T4440] ? twinhan_input_mapping+0x2210/0x2210 [ 168.154328][ T4440] hid_device_probe+0x25c/0x350 [ 168.159229][ T4440] ? hid_uevent+0x340/0x340 [ 168.163778][ T4440] really_probe+0x2aa/0xc70 [ 168.168320][ T4440] ? pm_runtime_barrier+0x147/0x1c0 [ 168.173557][ T4440] __driver_probe_device+0x18c/0x330 [ 168.178882][ T4440] driver_probe_device+0x4f/0x420 [ 168.183942][ T4440] __device_attach_driver+0x2c6/0x510 [ 168.189353][ T4440] ? coredump_store+0x90/0x90 [ 168.194078][ T4440] bus_for_each_drv+0x175/0x200 [ 168.198973][ T4440] ? _raw_spin_unlock+0x40/0x40 [ 168.203867][ T4440] ? subsys_find_device_by_id+0x350/0x350 [ 168.209650][ T4440] __device_attach+0x29b/0x460 [ 168.214450][ T4440] ? device_attach+0x20/0x20 [ 168.219067][ T4440] ? __kmem_cache_free+0xb6/0x1f0 [ 168.224131][ T4440] ? kobject_uevent_env+0x35f/0x8a0 [ 168.229362][ T4440] bus_probe_device+0xbc/0x1e0 [ 168.234167][ T4440] ? device_add+0x97c/0xfb0 [ 168.238626][ T5878] loop4: detected capacity change from 0 to 40427 [ 168.238691][ T4440] device_add+0xa00/0xfb0 [ 168.246682][ T4268] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 168.249433][ T4440] hid_add_device+0x389/0x530 [ 168.257744][ T4268] Bluetooth: hci0: Injecting HCI hardware error event [ 168.262362][ T4440] usbhid_probe+0xc09/0xfe0 [ 168.269532][ T4262] Bluetooth: hci0: hardware error 0x00 [ 168.273632][ T4440] usb_probe_interface+0x5a0/0xaf0 [ 168.284305][ T4440] ? usb_register_driver+0x3d0/0x3d0 [ 168.284601][ T5878] F2FS-fs (loop4): invalid crc value [ 168.289618][ T4440] really_probe+0x2aa/0xc70 [ 168.289646][ T4440] ? pm_runtime_barrier+0x147/0x1c0 [ 168.289678][ T4440] __driver_probe_device+0x18c/0x330 [ 168.289699][ T4440] driver_probe_device+0x4f/0x420 [ 168.289718][ T4440] __device_attach_driver+0x2c6/0x510 [ 168.289736][ T4440] ? coredump_store+0x90/0x90 [ 168.289754][ T4440] bus_for_each_drv+0x175/0x200 [ 168.289781][ T4440] ? _raw_spin_unlock+0x40/0x40 [ 168.334903][ T4440] ? subsys_find_device_by_id+0x350/0x350 [ 168.340682][ T4440] __device_attach+0x29b/0x460 [ 168.345489][ T4440] ? device_attach+0x20/0x20 [ 168.350117][ T4440] ? kobject_uevent_env+0x35f/0x8a0 [ 168.355352][ T4440] bus_probe_device+0xbc/0x1e0 [ 168.360202][ T4440] ? device_add+0x97c/0xfb0 [ 168.364743][ T4440] device_add+0xa00/0xfb0 [ 168.369139][ T4440] usb_set_configuration+0x1991/0x1fd0 [ 168.374677][ T4440] usb_generic_driver_probe+0x89/0x150 [ 168.380272][ T4440] usb_probe_device+0x139/0x270 [ 168.385172][ T4440] ? usb_register_device_driver+0x230/0x230 [ 168.391108][ T4440] really_probe+0x2aa/0xc70 [ 168.395656][ T4440] ? pm_runtime_barrier+0x147/0x1c0 [ 168.400907][ T4440] __driver_probe_device+0x18c/0x330 [ 168.406229][ T4440] driver_probe_device+0x4f/0x420 [ 168.411291][ T4440] __device_attach_driver+0x2c6/0x510 [ 168.416699][ T4440] ? coredump_store+0x90/0x90 [ 168.421419][ T4440] bus_for_each_drv+0x175/0x200 [ 168.426311][ T4440] ? _raw_spin_unlock+0x40/0x40 [ 168.427064][ T4984] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 168.431185][ T4440] ? subsys_find_device_by_id+0x350/0x350 [ 168.431228][ T4440] __device_attach+0x29b/0x460 [ 168.449283][ T4440] ? device_attach+0x20/0x20 [ 168.453914][ T4440] ? __kmem_cache_free+0xb6/0x1f0 [ 168.458987][ T4440] ? kobject_uevent_env+0x35f/0x8a0 [ 168.464233][ T4440] bus_probe_device+0xbc/0x1e0 [ 168.469040][ T4440] ? device_add+0x97c/0xfb0 [ 168.473589][ T4440] device_add+0xa00/0xfb0 [ 168.477973][ T4440] usb_new_device+0xd4d/0x1620 [ 168.482801][ T4440] ? lock_chain_count+0x20/0x20 [ 168.487696][ T4440] ? usb_disconnect+0x8a0/0x8a0 [ 168.492595][ T4440] ? _raw_spin_unlock_irq+0x1f/0x40 [ 168.497860][ T4440] ? lockdep_hardirqs_on+0x94/0x140 [ 168.503098][ T4440] hub_event+0x2b02/0x5210 [ 168.507569][ T4440] ? led_work+0x6e0/0x6e0 [ 168.511928][ T4440] ? read_lock_is_recursive+0x10/0x10 [ 168.517346][ T4440] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 168.523294][ T4440] ? _raw_spin_unlock+0x40/0x40 [ 168.528197][ T4440] ? _raw_spin_unlock_irq+0x1f/0x40 [ 168.533447][ T4440] ? process_one_work+0x7a1/0x1160 [ 168.538602][ T4440] process_one_work+0x898/0x1160 [ 168.543677][ T4440] ? worker_detach_from_pool+0x240/0x240 [ 168.549352][ T4440] ? _raw_spin_lock_irq+0xab/0xe0 [ 168.554425][ T4440] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 168.559842][ T4440] ? kthread_data+0x4b/0xc0 [ 168.564405][ T4440] worker_thread+0xaa2/0x1250 [ 168.569138][ T4440] kthread+0x29d/0x330 [ 168.573271][ T4440] ? worker_clr_flags+0x1a0/0x1a0 [ 168.578339][ T4440] ? kthread_blkcg+0xd0/0xd0 [ 168.582977][ T4440] ret_from_fork+0x1f/0x30 [ 168.587443][ T4440] [ 168.590501][ T4440] Modules linked in: [ 168.594465][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.609956][ T5878] F2FS-fs (loop4): Found nat_bits in checkpoint [ 168.644196][ T4440] ---[ end trace 0000000000000000 ]--- [ 168.649895][ T4440] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 168.655797][ T4440] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 de 88 2d fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 36 89 2d fa 48 8d 84 24 80 00 00 00 [ 168.655926][ T5878] F2FS-fs (loop4): Start checkpoint disabled! [ 168.676019][ T4440] RSP: 0018:ffffc90004c1e7c0 EFLAGS: 00010202 [ 168.682135][ T4984] usb 6-1: Using ep0 maxpacket: 32 [ 168.684729][ T4440] [ 168.696083][ T4984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.696941][ T4440] RAX: 0000000000000015 RBX: ffff88805591b030 RCX: dffffc0000000000 [ 168.711598][ T4984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.721923][ T4440] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88807dde2e69 [ 168.733803][ T4984] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 168.733831][ T4984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.734632][ T5878] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 168.758882][ T4440] RBP: ffffc90004c1e970 R08: 0000000000000001 R09: ffff88807dde2e2e [ 168.758905][ T4440] R10: ffffed100fbbc5cd R11: 1ffff1100fbbc5c5 R12: 1ffff1100ab23606 [ 168.776891][ T4984] usb 6-1: config 0 descriptor?? [ 168.777944][ T4440] R13: dffffc0000000000 R14: 1ffff1100ab23605 R15: 00000000000000a8 [ 168.792198][ T4440] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 168.801449][ T4440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.809414][ T4440] CR2: 000055558a41b5c8 CR3: 000000002f73d000 CR4: 00000000003506e0 [ 168.818000][ T4440] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 168.826298][ T4440] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 168.834656][ T4440] Kernel panic - not syncing: Fatal exception [ 168.841088][ T4440] Kernel Offset: disabled [ 168.845430][ T4440] Rebooting in 86400 seconds..