last executing test programs: 10.911003451s ago: executing program 4 (id=766): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecomp\a\x00e,decompnsd=\x00'/36, @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', 0x9100) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000002140)={0x4, 0x0, [{0x275, 0x0, 0x8}, {0xaf9, 0x0, 0x1}, {0x824, 0x0, 0x7}, {0xb15, 0x0, 0x1ff}]}) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) pipe2$9p(&(0x7f00000020c0), 0x0) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x10000}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000001340), 0x0, 0x20000001) read$FUSE(r9, &(0x7f0000003000)={0x2020}, 0x2020) recvmsg(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/137, 0x89}], 0x1}, 0x142) read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) 10.905466962s ago: executing program 0 (id=767): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) 10.71494172s ago: executing program 0 (id=769): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz0\x00') 10.652388365s ago: executing program 0 (id=771): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x7, {0x7, 0xa, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.862078329s ago: executing program 4 (id=773): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x20000804) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@mpls_mc={0x806, {[], @ipv6=@generic={0x5, 0x6, "c99b1b", 0x0, 0x29, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}, 0x0) 8.020486756s ago: executing program 2 (id=777): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000000)=0x3b) 7.879036969s ago: executing program 2 (id=779): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9, 0xf8, 0x87, 0x20, 0x93a, 0x2460, 0x31fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xb0, 0x5, [{{0x9, 0x4, 0x44, 0x0, 0x0, 0x24, 0x87, 0xa4}}]}}]}}, 0x0) 7.10316293s ago: executing program 4 (id=781): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000100)={0x89, 0x28, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra, @generic={0x0, 0x135, "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"}]}, 0x148) 6.966854392s ago: executing program 4 (id=782): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x5}) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x3000)=nil) 6.966209712s ago: executing program 1 (id=783): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecomp\a\x00e,decompnsd=\x00'/36, @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', 0x9100) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000002140)={0x4, 0x0, [{0x275, 0x0, 0x8}, {0xaf9, 0x0, 0x1}, {0x824, 0x0, 0x7}, {0xb15, 0x0, 0x1ff}]}) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) pipe2$9p(&(0x7f00000020c0), 0x0) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x10000}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000001340), 0x0, 0x20000001) read$FUSE(r9, &(0x7f0000003000)={0x2020}, 0x2020) recvmsg(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/137, 0x89}], 0x1}, 0x142) read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) 6.959995163s ago: executing program 0 (id=784): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x45, &(0x7f0000000240)={@random="e90c630faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x23, 0x0, @opaque="cba66f1099d3a415ae58e44652893f204af6ea80110ff38d5c42d3"}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) r5 = inotify_init() r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) inotify_add_watch(r5, 0x0, 0xe0000011) write$binfmt_script(r4, &(0x7f00000000c0), 0xfea7) copy_file_range(r4, &(0x7f00000001c0), r3, 0x0, 0xfffffff7a003e45c, 0x10000000000000) socket$unix(0x1, 0x1, 0x0) rmdir(&(0x7f0000000280)='./file2\x00') timer_create(0x6, &(0x7f0000000080)={0x0, 0x16, 0x1, @thr={&(0x7f0000000100)="2ba90226217513780aea2702f3b2fc86336591d1c6131542ac3905ccbe80d001cd63dbfb4736f4b932b7dc29bb1ca7ff620524ddf53b38429dac461d2f0c705e7546445f9f16e9c4a2059df97f452468a7b43b6384adda29a6f76e82de662053c1abfdf60329caafd49fd98d4de7cea2dafe2f99e25c965161b79740a7f4ecf71f28beb4b7410bbaebc1c270e7d926c24daaf4820e43b30160e742c53f4377e49f46b59750c1d6d26e18fb6394e409e931815060015d456a607630b2de144c4c1a6b58a3d976307748044f97d12ad28d4e4ebce20f9def", &(0x7f0000000000)="51a8f3578bc322646e0724ac65765f30b129d614a854878e071a9cfacec6d4e569784d"}}, &(0x7f0000000240)) 5.444969902s ago: executing program 0 (id=786): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./bus\x00') 5.293320996s ago: executing program 1 (id=787): bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r6 = accept4(r5, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000040)="cb", 0xfffffdef) accept(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x15) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{}]}) 5.234828691s ago: executing program 4 (id=788): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x820400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x9, 0xfffffff8, 0x3, 0x280, r0, 0x7, '\x00', 0x0, r0, 0x2, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 5.13940175s ago: executing program 0 (id=790): r0 = syz_open_dev$dri(&(0x7f0000000dc0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x5, 0x3}) 5.011038892s ago: executing program 3 (id=791): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x3, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x4, 0x2, 0x9, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x80, 0x0, 0x5}}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000000)={[{@shortname_winnt}, {@utf8no}, {@fat=@check_strict}, {@fat=@discard}, {@utf8}, {@fat=@nfs}, {@shortname_win95}, {@shortname_lower}, {@utf8}]}, 0xfd, 0x299, &(0x7f0000000280)="$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") 3.895297384s ago: executing program 3 (id=792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5cb8630dd656683b, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 3.532651767s ago: executing program 1 (id=793): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.471030873s ago: executing program 2 (id=794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x16, 0x1, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 3.342638955s ago: executing program 2 (id=795): socket$inet_sctp(0x2, 0x0, 0x84) 3.122670575s ago: executing program 2 (id=796): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x45, &(0x7f0000000240)={@random="e90c630faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x23, 0x0, @opaque="cba66f1099d3a415ae58e44652893f204af6ea80110ff38d5c42d3"}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) r5 = inotify_init() r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) inotify_add_watch(r5, 0x0, 0xe0000011) write$binfmt_script(r4, &(0x7f00000000c0), 0xfea7) copy_file_range(r4, &(0x7f00000001c0), r3, 0x0, 0xfffffff7a003e45c, 0x10000000000000) socket$unix(0x1, 0x1, 0x0) rmdir(&(0x7f0000000280)='./file2\x00') timer_create(0x6, &(0x7f0000000080)={0x0, 0x16, 0x1, @thr={&(0x7f0000000100)="2ba90226217513780aea2702f3b2fc86336591d1c6131542ac3905ccbe80d001cd63dbfb4736f4b932b7dc29bb1ca7ff620524ddf53b38429dac461d2f0c705e7546445f9f16e9c4a2059df97f452468a7b43b6384adda29a6f76e82de662053c1abfdf60329caafd49fd98d4de7cea2dafe2f99e25c965161b79740a7f4ecf71f28beb4b7410bbaebc1c270e7d926c24daaf4820e43b30160e742c53f4377e49f46b59750c1d6d26e18fb6394e409e931815060015d456a607630b2de144c4c1a6b58a3d976307748044f97d12ad28d4e4ebce20f9def", &(0x7f0000000000)="51a8f3578bc322646e0724ac65765f30b129d614a854878e071a9cfacec6d4e569784d"}}, &(0x7f0000000240)) 3.042026192s ago: executing program 3 (id=797): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecomp\a\x00e,decompnsd=\x00'/36, @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$eJzs3c1rHOcdB/DvrFZryQVHSezELYGKGNJSUVsvKK16iVtK0SGUkB56FrYcC6+VIClFCaWo79BTD/kD0oNuPRV6N6Tn9parjoFCLznppjKzs9LaWil6s1ZqPx/z7PM888w888xvZ2Zndi0mwP+t+Yk0n6TI/MTb62V9a3OmvbU5c6Vubicpy42k2clSLCfFZ8nddFK+Xk6s5y8OWs8nS3Pvfv7l1hedWrNO1fyNw5Y7mo06ZTzJUJ0/o/Wn4/Q33CmU/dzr398xFLtbWAbsVjdwMGg7+2wcZ/FTHrfARVB0Pjf3GUuuJhmprwNSnx0a5zu6s3essxwAAABcUi9sZzvruTbocQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBlUj//v6hTo1seT9F9/n+rnpa6fKk9GfQAAAAAAAAAAOAMfHM721nPtW59p6h+83+9qlyvXr+WD7OaxazkdtazkLWsZSVTScZ6OmqtL6ytrUwdYcnpvktOn8/2AgAAAAAAAMD/qN9kfu/3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGKShOi86xaJO17vlsTSaSUaStMr5NpJ/dcuXRNFv4pPzHwcAAACcysgJlnlhO9tZz7Vufaeo7vlfqe6XR/JhlrOWpaylncXcr++hy7v+xtbmTHtrc+Zxmfb3+8P/HGsYVY+7X0P0W/PNao7RPMhSNeV27lWDuZ9GtWTpZnc8/cf163JMxVu1I47sfp2XK/vzQd8iDMRYFZHh3YhM1mMro/Hi4ZH4yneneeiaptLY/ebn+nOI+dU6L7fnDxcz5o1UkZju2fteOTwSybf+/tefP2wvP3r4YHXi4mzSCT27T8z0ROLVSx2J5jHnn6wicWO3Pp+f5GeZyHjeyUqW8ossZC2L2anbF+r9uXwdOzxSd5+qvfNVI2nV70vnLHqUMY3nx1VpIa9Xy17LUoq8n/tZzJvVv+lM5XuZzWzmet7hGweOu9q26qhvHO+ov/XtujCa5I91Pmidj9Qyri/2xLX3nDtWtfVO2YvSS2d/bmx+oy6U6/htnV8Mz0ZiqicSLx8eib9Ux8Zqe/nRysOFDw7of+OZ+ht1Xu5xv79QnxLl/vJSRuozydN7R9n28u5Z5ul4tepfXDptjX1tN6q2ougeqT898Eht1ddw+3uartpe7ds2U7Xd7Gl76nor76e9ez0EwAV29TtXW6P/Hv3n6Kejvxt9OPr2yI+ufP/Ka60M/2P4B83JoTcarxV/y6f51d79PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHKrH338aKHdXlzpX2gc3HS2haJ+kM95rEth0IXuQwRP3eHdC7E5l7owlKRfU/0WneThosClcGft8Qd3Vj/6+LtLjxfeW3xvcXl4dnZucm72zZk7D5bai5Od10GPEnge9j70+7cXF+oBmwAAAAAAAAAAAECO9vc2O/X//zvxXxoMehsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAy21+Is0nKTI1eXuyrG9tzrTL1C3vzdlM0mgkxS+T4rPkbjopYz3dFW8dsJ5Plube/fzLrS/2+mpW85ed1vkpbNQp40mG6vys+rt36v6K3S0sA3arGzgYtP8GAAD//+IHAOM=") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', 0x9100) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000002140)={0x4, 0x0, [{0x275, 0x0, 0x8}, {0xaf9, 0x0, 0x1}, {0x824, 0x0, 0x7}, {0xb15, 0x0, 0x1ff}]}) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) pipe2$9p(&(0x7f00000020c0), 0x0) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x10000}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000001) read$FUSE(r9, &(0x7f0000003000)={0x2020}, 0x2020) recvmsg(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/137, 0x89}], 0x1}, 0x142) read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) 1.500370153s ago: executing program 1 (id=798): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000080), 0x0, 0xd99, &(0x7f0000001c40)="$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") socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x0, 0x0, 0x0, {}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.141734596s ago: executing program 4 (id=799): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 1.046949494s ago: executing program 3 (id=800): unshare(0x24000400) bpf$BPF_MAP_GET_FD_BY_ID(0x11, 0x0, 0x0) 978.336771ms ago: executing program 2 (id=801): syz_mount_image$ocfs2(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000000c0)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_buffered}, {@noacl}]}, 0x1, 0x4436, &(0x7f0000004480)="$eJzs3b9PHFceAPA3Az6Dz/aBz4VPOulWOkt3uosQuMkPLAVjbAw2ceTEVpRmvcDaJllYC5YohQvSWUoVKUWUwkqkdFQWRVrnT0iT0qktJUWaSJGsEO3uLDDDrtggFoLz+RTMzvf9hO/M27fFMnGicm9uKTe3lCss5Mozd5bO5T4ol5bniyHeJ03HP7J/49OeTlwnB33t/Zldv3j5rVvnQvhm9rtn6+vr66GqOzQ1tOX1zz89mNl6bIgzbar9Nu9tr7wbQji9bV5VXSGEd74OIQohXEhio8mxN4RwItTLbj34+HZuj2bz+GnxfP751MO14bOTq4/WWv/uUQifl/7x0t35H/7dNfz9//ZoeAAAAAAAAAAAAAAAAAAADrnxG9dvvjk4FJ5EoXs12v593fHk2Or7set75l+d/2UBAAAAAAAAAAAAAAAAAADgD2rz+/+56FST7/+PJceRFu3XX+/8HOmciTeuj10aHEqe/x5tK38lCf14oSv0N3nue/b57xcy7Zs//337OLvVmF9j3L4QxQOp8zgeGAjhy+TB72eiY3GpvFT5/53y8sLsnk3j0Ernv/70/lR2qqGX28//aKb/zj///+/brqbq+e29u8ReaOn8d7Ws99VHUVv5v5hptx/5Z/fS+e+uxXq3VhiprwnV/H/SvXP+xzL9dyr/J0MIuag611xqBajuYarxVvsV0tL5P1KLpZbO5A/Z6v7/JZP/S5n+D2r9X8m+EdFUOv9/qcV6UjU27//+eOf7/3Km/4PIf3X+K97/25LO/9F6sDtVpfaXbHf9H8/0v+f5Ty7Om3Eyz5NR6gpYjerxVv+vjrR0/nu2lW9+/ovb2v9dybTfr89/jXEbn/8ay/9/o/rnP5pL57+3Zb127/+JTLtOr/8jtf0fu5XO/7FaLL137qv9bDf/k5n+O5X/2q6kp5H/zfXk16P1+Bf2f21J5/+v9WC8tcZK7Wdt/xftvP+/mun/IPZ/1fmvxJ0d9UWRzv/xlvWq+f+2jff/a5l2nc9/CIO72E70dWIih1A6/yda1qvd/z07538q067T+f9PJzsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOARGk2NfiOKB1HkcDwyEcDE5PxOORdOF2fx0qTzz/lIIY0k8F05Fd0vl6UIpP7dQni3mC6VSeSaES0n56dATLZXKlfx84f7ljb56o3vFwmJluliohBDGk/g/w4lGX9NzlfnC/RDClY2yv8Xlxfv3Cgv52bnF1wYHBwfDxMYc+qPih5XiQqU+er00hMmNtn3RlsnViq9uzOV49F55eXGhUKrFr21pUyrPFEpb2kwlZZ+G/qiyuLwwU6gU86Xy3cZ4B2kkOY5N3Hj7xrWhbeW3o/pxdH+nBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDv9GT41c9CCN31s7jxsvoialb/8dPi+fzzqYdrw2cnVx+tPWtVDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSMUoDQRQG4DdjoXYew2rZ7WxXFNHCFcET6DE8jB7FS3iHFCnSpgiBZBbCZhe2Sarvax7Mz8x7MA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADmeXrvPt7qJiLF1eYy4u/rf3GYv5T6cz9+/+IMM3I6z6/dw2PdlH9PR/ldOVq2eZeuV9+fMVJ7v4M9Ge7TXt/nenKuqX2bmq/vexMpVxHRlvw25VxV894CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMsOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UUfRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArwAAAP//xWwfIw==") 811.898546ms ago: executing program 3 (id=802): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, r2, 0x400000}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) 658.88382ms ago: executing program 3 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ppoll(&(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000180000000600000005000000427fecd2e9571d4af4bb000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r5, &(0x7f0000000580), 0x0}, 0x20) 453.975829ms ago: executing program 1 (id=804): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000040)=ANY=[], 0x1, 0x5e7, &(0x7f0000000680)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file3\x00', 0x0) 0s ago: executing program 1 (id=805): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)='|', 0x1}], 0x1}, 0x3592de163c709bb1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) kernel console output (not intermixed with test programs): : port 2(bridge_slave_1) entered blocking state [ 198.853842][ T4573] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.863843][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.983990][ T4687] device bridge_slave_1 entered promiscuous mode [ 199.114888][ T3773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.671340][ T4710] loop4: detected capacity change from 0 to 32768 [ 199.694460][ T4710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.182 (4710) [ 199.773223][ T4687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.877276][ T4687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.955067][ T3773] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.967431][ T4710] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.977787][ T4710] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 199.986736][ T4710] BTRFS info (device loop4): turning on sync discard [ 200.001902][ T4710] BTRFS info (device loop4): unrecognized rescue option 'isuperflags' [ 200.031229][ T4710] BTRFS error (device loop4): unrecognized rescue value isuperflags [ 200.041996][ T3773] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.053025][ T4710] BTRFS error (device loop4): open_ctree failed [ 200.075339][ T3773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.094239][ T3773] usb 3-1: SerialNumber: syz [ 200.206144][ T4731] loop1: detected capacity change from 0 to 256 [ 200.211985][ T3654] Bluetooth: hci0: command tx timeout [ 200.238369][ T4731] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 200.272699][ T4687] team0: Port device team_slave_0 added [ 200.444362][ T4687] team0: Port device team_slave_1 added [ 200.514138][ T3773] usb 3-1: 0:2 : does not exist [ 200.547000][ T4687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.554517][ T4687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.586128][ T4687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.388455][ T4687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.405847][ T4687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.517767][ T4687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.823748][ T4687] device hsr_slave_0 entered promiscuous mode [ 201.845997][ T4687] device hsr_slave_1 entered promiscuous mode [ 202.103207][ T4067] device hsr_slave_0 left promiscuous mode [ 202.116388][ T4067] device hsr_slave_1 left promiscuous mode [ 202.183526][ T4067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.199399][ T4067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.243733][ T4067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.244161][ T4753] loop1: detected capacity change from 0 to 32768 [ 202.257675][ T4067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.266514][ T4067] device bridge_slave_1 left promiscuous mode [ 202.273162][ T4067] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.291256][ T4779] loop4: detected capacity change from 0 to 1024 [ 202.298960][ T4779] hfsplus: unable to parse mount options [ 202.306860][ T3654] Bluetooth: hci0: command tx timeout [ 202.309161][ T4753] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 202.309161][ T4753] [ 202.325167][ T4067] device bridge_slave_0 left promiscuous mode [ 202.338845][ T4067] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.348438][ T4753] ERROR: (device loop1): remounting filesystem as read-only [ 202.463510][ T4753] ERROR: (device loop1): jfs_unlink: [ 202.463510][ T4753] [ 203.281653][ T4223] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 203.281653][ T4223] [ 203.385375][ T4067] device veth1_macvtap left promiscuous mode [ 203.426548][ T4067] device veth0_macvtap left promiscuous mode [ 203.452209][ T3778] usb 3-1: USB disconnect, device number 5 [ 203.501035][ T4067] device veth1_vlan left promiscuous mode [ 203.506970][ T4067] device veth0_vlan left promiscuous mode [ 204.132118][ T3653] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 204.141918][ T3778] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 204.339363][ T4067] team0 (unregistering): Port device team_slave_1 removed [ 204.378358][ T4067] team0 (unregistering): Port device team_slave_0 removed [ 204.416679][ T4067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.454188][ T4067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.562380][ T3778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.574335][ T3778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.584992][ T3778] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 204.594452][ T3778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.611298][ T3778] usb 2-1: config 0 descriptor?? [ 204.838561][ T4067] bond0 (unregistering): Released all slaves [ 204.892756][ T4815] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 205.084399][ T3778] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 205.174393][ T4824] loop2: detected capacity change from 0 to 1024 [ 205.182646][ T4824] hfsplus: unable to parse mount options [ 205.327195][ T3957] usb 2-1: USB disconnect, device number 7 [ 207.846174][ T3778] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 208.101435][ T4687] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.131483][ T4687] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.149126][ T4687] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.165275][ T4826] loop4: detected capacity change from 0 to 32768 [ 208.174762][ T4687] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.239099][ T3778] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.261782][ T3778] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.261802][ T3687] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 208.297938][ T4826] XFS (loop4): Mounting V5 Filesystem [ 208.342011][ T3778] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.362244][ T4826] XFS (loop4): AIL initialisation failed: error -12 [ 208.369627][ T3778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.414334][ T4826] XFS (loop4): log mount failed [ 208.414561][ T3778] usb 3-1: SerialNumber: syz [ 208.458649][ T4687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.500053][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.509677][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.521637][ T4687] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.542700][ T3687] usb 2-1: Using ep0 maxpacket: 16 [ 208.568109][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.584647][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.623901][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.631044][ T3695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.661875][ T3687] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.673251][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.675879][ T3687] usb 2-1: config 0 has no interfaces? [ 208.684054][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.703555][ T3778] usb 3-1: 0:2 : does not exist [ 208.708210][ T3687] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 208.713113][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.757727][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.762129][ T3687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.764856][ T3695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.813751][ T3687] usb 2-1: config 0 descriptor?? [ 208.826660][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.890860][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.969617][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.028831][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.067894][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.096438][ T3874] usb 2-1: USB disconnect, device number 8 [ 209.100591][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.128747][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.186886][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.210793][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.254400][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.286771][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.310807][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.668747][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.676991][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.701219][ T4687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.759470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.797413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.833615][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.846313][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.874369][ T4687] device veth0_vlan entered promiscuous mode [ 209.930787][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.940113][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.965079][ T4687] device veth1_vlan entered promiscuous mode [ 210.007218][ T4921] loop3: detected capacity change from 0 to 1024 [ 210.007672][ T4687] device veth0_macvtap entered promiscuous mode [ 210.014286][ T4921] hfsplus: unable to parse mount options [ 210.058572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.068360][ T4573] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 210.192595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.202101][ T4920] loop4: detected capacity change from 0 to 4096 [ 210.267364][ T4920] NILFS (loop4): invalid segment: Checksum error in segment payload [ 210.281532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.291589][ T4920] NILFS (loop4): trying rollback from an earlier position [ 210.351353][ T4920] NILFS (loop4): recovery complete [ 210.361187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.412529][ T4925] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.428522][ T4687] device veth1_macvtap entered promiscuous mode [ 210.463980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.507453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.585707][ T4916] loop1: detected capacity change from 0 to 32768 [ 210.610676][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.622322][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.636496][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.647433][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.664384][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.681537][ T3874] usb 3-1: USB disconnect, device number 6 [ 210.689005][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.703192][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.764458][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.852132][ T4687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.867166][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.897381][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.947187][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.992042][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.032722][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.063347][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.083450][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.122427][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.151738][ T4687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.192969][ T4687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.231552][ T4687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.260964][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.295519][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.330254][ T4687] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.375501][ T4687] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.396760][ T4687] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.416386][ T4687] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.645856][ T3887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.670618][ T3887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.723369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.806039][ T3887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.825139][ T3887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.912287][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.122067][ T3874] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 213.512029][ T3874] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.535057][ T3874] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.649576][ T5016] loop0: detected capacity change from 0 to 2048 [ 213.765217][ T5016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.813052][ T3874] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 213.833121][ T3874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 213.841470][ T3874] usb 5-1: SerialNumber: syz [ 215.161098][ T3874] usb 5-1: 0:2 : does not exist [ 215.265842][ T3874] usb 5-1: USB disconnect, device number 4 [ 216.555034][ T4573] udevd[4573]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.627017][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 216.705040][ T5060] loop0: detected capacity change from 0 to 64 [ 217.351807][ T3964] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 217.417662][ T5081] loop4: detected capacity change from 0 to 1024 [ 217.424800][ T5081] hfsplus: unable to parse mount options [ 217.595726][ T3778] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 217.627692][ T4573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.752567][ T3964] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.823407][ T3964] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.044424][ T3964] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.093030][ T3964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 218.124464][ T3964] usb 1-1: SerialNumber: syz [ 218.454323][ T3964] usb 1-1: 0:2 : does not exist [ 218.501851][ T3687] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 218.801750][ T3687] usb 2-1: Using ep0 maxpacket: 16 [ 219.664169][ T3687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.686326][ T3687] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 219.739899][ T3687] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 219.758272][ T3687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.779892][ T3687] usb 2-1: config 0 descriptor?? [ 220.012199][ T5113] loop3: detected capacity change from 0 to 512 [ 220.064541][ T5113] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 220.081771][ T3778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.115676][ T3778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.140557][ T5113] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 220.158632][ T3778] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.208094][ T3778] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 220.241158][ T3778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.255210][ T5113] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 220.285523][ T5113] EXT4-fs (loop3): 1 truncate cleaned up [ 220.286040][ T3778] usb 3-1: config 0 descriptor?? [ 220.301371][ T5113] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 220.319655][ T3778] usb 3-1: can't set config #0, error -71 [ 220.340835][ T3778] usb 3-1: USB disconnect, device number 7 [ 220.403920][ T3687] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 220.411238][ T3687] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 220.420071][ T3687] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 220.434112][ T3687] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 220.447994][ T3687] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 220.472037][ T3687] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 220.479352][ T3687] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 220.501775][ T3687] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 220.509016][ T3687] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 220.518570][ T3687] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 220.527088][ T3687] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 220.537583][ T3687] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 220.549187][ T3687] microsoft 0003:045E:07DA.0006: no inputs found [ 220.555712][ T3687] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 220.607215][ T3687] usb 2-1: USB disconnect, device number 9 [ 220.647007][ T3962] usb 1-1: USB disconnect, device number 4 [ 220.649989][ T4215] EXT4-fs (loop3): unmounting filesystem. [ 220.696817][ T5114] loop4: detected capacity change from 0 to 32768 [ 220.709864][ T5114] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.283 (5114) [ 220.785910][ T5114] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.836905][ T5114] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 220.904178][ T5114] BTRFS info (device loop4): using free space tree [ 221.023078][ T5114] BTRFS info (device loop4): enabling ssd optimizations [ 222.242074][ T5163] loop1: detected capacity change from 0 to 1024 [ 222.249224][ T5163] hfsplus: unable to parse mount options [ 222.281985][ T4454] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 222.405102][ T4220] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.481759][ T3687] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 225.868918][ T5193] loop0: detected capacity change from 0 to 1024 [ 225.951904][ T3687] usb 4-1: device descriptor read/64, error -71 [ 226.008547][ T5202] loop4: detected capacity change from 0 to 1024 [ 226.015704][ T5202] hfsplus: unable to parse mount options [ 226.055685][ T4573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 227.279875][ T3964] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 227.287586][ T3687] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 227.369695][ T5210] libceph: resolve '. [ 227.369695][ T5210] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 227.369695][ T5210] ' (ret=-3): failed [ 227.478080][ T5219] fuse: Bad value for 'fd' [ 227.578499][ T5210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 227.586872][ T5210] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 227.597193][ T5210] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 227.609359][ T5210] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 227.620441][ T5210] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 227.627692][ T5210] Bluetooth: hci6: Suspend notifier action (1) failed: -4 [ 227.638172][ T5210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.647400][ T5210] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 227.653915][ T3964] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.664237][ T3687] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.675246][ T5210] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 227.675276][ T3687] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.682785][ T5210] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 227.698116][ T5210] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 227.702831][ T3964] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.704698][ T5210] Bluetooth: hci7: Suspend notifier action (1) failed: -4 [ 227.723372][ T5210] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.802112][ T3687] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 227.826052][ T3687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.835847][ T3687] usb 4-1: SerialNumber: syz [ 227.872017][ T3964] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.885777][ T3964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.915823][ T3964] usb 2-1: Product: syz [ 227.921536][ T3964] usb 2-1: Manufacturer: syz [ 227.927742][ T3964] usb 2-1: SerialNumber: syz [ 228.103567][ T3687] usb 4-1: 0:2 : does not exist [ 228.211769][ T26] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 228.571844][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.583025][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.593310][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 228.606614][ T26] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c04, bcdDevice= 0.00 [ 228.616628][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.637774][ T26] usb 1-1: config 0 descriptor?? [ 229.081986][ T3964] cdc_ncm 2-1:1.0: bind() failure [ 229.108878][ T5248] loop4: detected capacity change from 0 to 1024 [ 229.116108][ T5248] hfsplus: unable to parse mount options [ 229.125599][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.129125][ T5246] loop2: detected capacity change from 0 to 32768 [ 229.142005][ T5246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.318 (5246) [ 229.159573][ T5246] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.171834][ T3964] usbtest: probe of 2-1:1.1 failed with error -71 [ 229.175265][ T5246] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 229.181139][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.194988][ T3964] usb 2-1: USB disconnect, device number 10 [ 229.217375][ T5246] BTRFS info (device loop2): using free space tree [ 229.235468][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.271557][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.290115][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.314845][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.333176][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.340674][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.355343][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.355635][ T5246] BTRFS info (device loop2): enabling ssd optimizations [ 229.362890][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.377791][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.385257][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.392741][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.400153][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.407804][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.415388][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.422848][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.430325][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.437837][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.446326][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.459124][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.466612][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.479250][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.486736][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.500634][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.501765][ T3654] Bluetooth: hci4: command 0x0c1a tx timeout [ 229.508477][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.541776][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.549609][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.572185][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.662125][ T3654] Bluetooth: hci1: command 0x0c1a tx timeout [ 229.669295][ T3653] Bluetooth: hci6: command 0x0c1a tx timeout [ 229.732030][ T3654] Bluetooth: hci7: command 0x0c1a tx timeout [ 229.928428][ T3766] usb 4-1: USB disconnect, device number 7 [ 229.943438][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.950872][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.958833][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.966720][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.974218][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.981612][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.989581][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 229.997050][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 230.006301][ T26] corsair-psu 0003:1B1C:1C04.0007: unknown main item tag 0x0 [ 230.069815][ T26] corsair-psu 0003:1B1C:1C04.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1c04] on usb-dummy_hcd.0-1/input0 [ 230.171814][ T26] corsair-psu 0003:1B1C:1C04.0007: unable to initialize device (-71) [ 230.190454][ T5273] loop1: detected capacity change from 0 to 128 [ 230.200621][ T26] corsair-psu: probe of 0003:1B1C:1C04.0007 failed with error -71 [ 230.241543][ T5273] EXT4-fs: Ignoring removed nobh option [ 230.258085][ T5273] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 230.258264][ T26] usb 1-1: USB disconnect, device number 5 [ 230.339002][ T4573] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 230.515293][ T4219] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.668536][ T5291] libceph: resolve '. [ 230.668536][ T5291] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 230.668536][ T5291] ' (ret=-3): failed [ 231.053884][ T5305] loop4: detected capacity change from 0 to 1024 [ 231.060654][ T5305] hfsplus: unable to parse mount options [ 232.003473][ T3654] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.011477][ T3653] Bluetooth: hci6: command 0x0c1a tx timeout [ 232.017507][ T3655] Bluetooth: hci7: command 0x0c1a tx timeout [ 232.033840][ T5291] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.051983][ T5291] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 232.102863][ T5291] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 232.120987][ T5291] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 232.127582][ T5291] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 232.133939][ T5291] Bluetooth: hci6: Suspend notifier action (1) failed: -4 [ 232.141429][ T5291] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.148078][ T5291] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 232.154505][ T5291] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 232.165506][ T5291] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 232.172871][ T5291] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 232.190437][ T5291] Bluetooth: hci7: Suspend notifier action (1) failed: -4 [ 232.200353][ T5291] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.353171][ T5322] loop2: detected capacity change from 0 to 256 [ 232.385096][ T5321] loop4: detected capacity change from 0 to 2048 [ 232.419093][ T5322] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 232.863761][ T3964] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 232.916690][ T5321] syz.4.337 (5321) used greatest stack depth: 18720 bytes left [ 232.952980][ T3655] Bluetooth: hci4: command 0x0c1a tx timeout [ 233.647259][ T5318] loop3: detected capacity change from 0 to 32768 [ 233.693059][ T5318] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.334 (5318) [ 234.021872][ T3964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.393436][ T3653] Bluetooth: hci6: command 0x0c1a tx timeout [ 234.399559][ T3655] Bluetooth: hci7: command 0x0c1a tx timeout [ 234.399567][ T3654] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.423969][ T5318] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.454661][ T5318] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 234.478201][ T3964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.488138][ T3964] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.488764][ T5334] loop2: detected capacity change from 0 to 4096 [ 234.501274][ T3964] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 234.518607][ T3964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.519130][ T5318] BTRFS info (device loop3): using free space tree [ 234.544057][ T3964] usb 1-1: config 0 descriptor?? [ 234.805847][ T5334] NILFS (loop2): invalid segment: Checksum error in segment payload [ 234.816080][ T5334] NILFS (loop2): trying rollback from an earlier position [ 234.882911][ T5334] NILFS (loop2): recovery complete [ 234.892899][ T5340] loop4: detected capacity change from 0 to 4096 [ 234.909294][ T5346] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.922070][ T5340] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 235.022333][ T3655] Bluetooth: hci4: command 0x0c1a tx timeout [ 235.084260][ T5318] BTRFS info (device loop3): enabling ssd optimizations [ 235.321865][ T4215] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.351946][ T3964] usbhid 1-1:0.0: can't add hid device: -71 [ 235.368486][ T3964] usbhid: probe of 1-1:0.0 failed with error -71 [ 235.413659][ T3964] usb 1-1: USB disconnect, device number 6 [ 235.490413][ T5366] loop2: detected capacity change from 0 to 1024 [ 235.498697][ T5366] hfsplus: unable to parse mount options [ 235.583243][ T5367] loop4: detected capacity change from 0 to 4096 [ 235.609300][ T5367] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 235.700997][ T4573] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.471809][ T3655] Bluetooth: hci1: command 0x0c1a tx timeout [ 236.711616][ T3655] Bluetooth: hci7: command 0x0c1a tx timeout [ 236.722291][ T3653] Bluetooth: hci6: command 0x0c1a tx timeout [ 238.018117][ T5395] loop4: detected capacity change from 0 to 128 [ 238.079577][ T5395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 238.107601][ T5395] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038 (0x7fffffff) [ 238.358190][ T5387] loop2: detected capacity change from 0 to 32768 [ 238.408866][ T5387] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 238.408866][ T5387] [ 238.428137][ T5387] ERROR: (device loop2): remounting filesystem as read-only [ 238.439453][ T5387] ERROR: (device loop2): jfs_unlink: [ 238.439453][ T5387] [ 238.486864][ T4219] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 238.486864][ T4219] [ 238.502455][ T3687] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 238.576889][ T5410] loop1: detected capacity change from 0 to 1024 [ 238.584224][ T5410] hfsplus: unable to parse mount options [ 238.622424][ T4573] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.624719][ T5393] loop3: detected capacity change from 0 to 32768 [ 238.640976][ T5393] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.356 (5393) [ 238.770947][ T5393] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.786361][ T5393] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 238.798269][ T5393] BTRFS info (device loop3): using free space tree [ 238.942273][ T3687] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 238.969143][ T3687] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.057349][ T3687] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 239.139996][ T3687] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.332731][ T3687] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 239.363060][ T3687] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 239.431724][ T3687] usb 5-1: Product: syz [ 239.446286][ T3687] usb 5-1: Manufacturer: syz [ 239.478114][ T5393] BTRFS info (device loop3): enabling ssd optimizations [ 239.562911][ T3687] cdc_wdm 5-1:1.0: skipping garbage [ 239.571758][ T3687] cdc_wdm 5-1:1.0: skipping garbage [ 239.631056][ T3687] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 239.653725][ T3687] cdc_wdm 5-1:1.0: Unknown control protocol [ 239.737907][ T5437] loop1: detected capacity change from 0 to 1024 [ 239.745676][ T5437] hfsplus: unable to parse mount options [ 239.760872][ T4215] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.923408][ T3773] kernel write not supported for file /cdc-wdm0 (pid: 3773 comm: kworker/0:11) [ 240.486962][ T5455] libceph: resolve '. [ 240.486962][ T5455] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 240.486962][ T5455] ' (ret=-3): failed [ 240.922756][ T5464] loop2: detected capacity change from 0 to 128 [ 240.976743][ T5464] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz.2.372: iget: checksum invalid [ 241.000038][ T5464] EXT4-fs (loop2): get root inode failed [ 241.007373][ T5464] EXT4-fs (loop2): mount failed [ 241.043056][ T3687] usb 5-1: USB disconnect, device number 5 [ 241.149963][ T4220] EXT4-fs (loop4): unmounting filesystem. [ 241.251837][ T5455] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 241.281042][ T5455] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 241.308059][ T5455] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 241.334265][ T5455] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 241.399198][ T5455] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 241.413459][ T5472] loop4: detected capacity change from 0 to 1024 [ 241.420539][ T5472] hfsplus: unable to parse mount options [ 241.432233][ T5455] Bluetooth: hci6: Suspend notifier action (1) failed: -4 [ 241.460748][ T4573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 241.569014][ T5455] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.585496][ T5455] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 241.596449][ T5455] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 241.605771][ T5455] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 242.429187][ T5455] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 242.448824][ T5455] Bluetooth: hci7: Suspend notifier action (1) failed: -4 [ 242.472412][ T5455] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.824579][ T5483] loop2: detected capacity change from 0 to 1024 [ 242.831480][ T5483] hfsplus: unable to parse mount options [ 242.851793][ T3655] Bluetooth: hci4: command 0x0c1a tx timeout [ 242.974221][ T5463] loop1: detected capacity change from 0 to 32768 [ 243.016202][ T5463] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 243.016202][ T5463] [ 243.022261][ T5485] tipc: Enabling of bearer rejected, failed to enable media [ 243.068033][ T5463] ERROR: (device loop1): remounting filesystem as read-only [ 243.148140][ T5463] ERROR: (device loop1): jfs_unlink: [ 243.148140][ T5463] [ 243.271590][ T4223] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 243.271590][ T4223] [ 244.587748][ T3655] Bluetooth: hci6: command 0x0c1a tx timeout [ 244.593820][ T3655] Bluetooth: hci1: command 0x0c1a tx timeout [ 244.599831][ T3655] Bluetooth: hci7: command 0x0c1a tx timeout [ 244.847189][ T5504] loop2: detected capacity change from 0 to 1024 [ 244.854228][ T5504] hfsplus: unable to parse mount options [ 244.979631][ T3649] Bluetooth: hci4: command 0x0c1a tx timeout [ 246.150554][ T5520] tipc: Enabling of bearer rejected, failed to enable media [ 246.194065][ T5524] loop3: detected capacity change from 0 to 1024 [ 246.201173][ T5524] hfsplus: unable to parse mount options [ 246.248786][ T4573] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.325283][ T3655] Bluetooth: hci7: command 0x0c1a tx timeout [ 247.325305][ T3649] Bluetooth: hci1: command 0x0c1a tx timeout [ 247.331297][ T3655] Bluetooth: hci6: command 0x0c1a tx timeout [ 247.412610][ T5544] loop3: detected capacity change from 0 to 1024 [ 247.419693][ T5544] hfsplus: unable to parse mount options [ 247.467778][ T4573] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.574356][ T3766] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 248.521923][ T3766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 248.541720][ T3766] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 248.551459][ T3766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 248.562132][ T3766] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 248.761974][ T3766] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 248.772257][ T3766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.780261][ T3766] usb 2-1: Product: syz [ 248.887263][ T3766] usb 2-1: Manufacturer: syz [ 248.913815][ T3766] usb 2-1: SerialNumber: syz [ 248.933695][ T3766] usb 2-1: config 0 descriptor?? [ 248.962777][ T5564] libceph: resolve '. [ 248.962777][ T5564] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 248.962777][ T5564] ' (ret=-3): failed [ 248.988902][ T3766] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 249.141220][ T5569] loop3: detected capacity change from 0 to 256 [ 249.236280][ T5571] tipc: Enabling of bearer rejected, failed to enable media [ 249.258062][ T3766] ums-isd200: probe of 2-1:0.0 failed with error -22 [ 249.266151][ T5569] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 249.434964][ T26] usb 2-1: USB disconnect, device number 11 [ 250.243733][ T5564] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 250.283250][ T5564] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 250.296463][ T5564] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 250.324021][ T5564] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 250.364271][ T5564] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 250.374566][ T5564] Bluetooth: hci6: Suspend notifier action (1) failed: -4 [ 250.384625][ T5564] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.396438][ T5564] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 250.417900][ T5564] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 250.426912][ T5564] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 250.435494][ T5564] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 250.449886][ T5564] Bluetooth: hci7: Suspend notifier action (1) failed: -4 [ 250.458440][ T5564] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.872400][ T5595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'. [ 250.931809][ T5596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'. [ 250.961783][ T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 251.241832][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 251.259949][ T5603] tipc: Started in network mode [ 251.276029][ T5603] tipc: Node identity ac141441, cluster identity 4711 [ 251.306036][ T5588] loop0: detected capacity change from 0 to 32768 [ 251.339497][ T5605] loop1: detected capacity change from 0 to 1024 [ 251.351648][ T5603] tipc: Enabled bearer , priority 10 [ 251.438979][ T5605] process 'syz.1.419' launched './file1' with NULL argv: empty string added [ 251.568745][ T5588] XFS (loop0): Mounting V5 Filesystem [ 251.583152][ T26] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 251.598739][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.617185][ T26] usb 5-1: Product: syz [ 251.621461][ T26] usb 5-1: Manufacturer: syz [ 251.637402][ T26] usb 5-1: SerialNumber: syz [ 251.648788][ T26] usb 5-1: config 0 descriptor?? [ 251.727963][ T5588] XFS (loop0): Ending clean mount [ 251.817203][ T4687] XFS (loop0): Unmounting Filesystem [ 251.904538][ T26] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 252.154733][ T5621] loop3: detected capacity change from 0 to 32768 [ 252.241796][ T5621] JBD2: Ignoring recovery information on journal [ 252.292176][ T3649] Bluetooth: hci4: command 0x0c1a tx timeout [ 252.331502][ T5639] tipc: Started in network mode [ 252.336516][ T5639] tipc: Node identity ac141441, cluster identity 4711 [ 252.344438][ T5639] tipc: Enabled bearer , priority 10 [ 252.355423][ T5621] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 252.372442][ T3649] Bluetooth: hci6: command 0x0c1a tx timeout [ 252.452002][ T3649] Bluetooth: hci7: command 0x0c1a tx timeout [ 252.458105][ T3649] Bluetooth: hci1: command 0x0c1a tx timeout [ 252.460279][ T5621] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 252.473276][ T3776] tipc: Node number set to 2886997057 [ 252.491837][ T26] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 252.542602][ T26] usb 5-1: USB disconnect, device number 6 [ 252.620604][ T5649] libceph: resolve '. [ 252.620604][ T5649] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 252.620604][ T5649] ' (ret=-3): failed [ 252.642482][ T5621] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 252.667538][ T5621] OCFS2: Returning error to the calling process. [ 252.698337][ T5621] (syz.3.423,5621,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5 [ 252.707677][ T5621] (syz.3.423,5621,0):__ocfs2_claim_clusters:2355 ERROR: status = -5 [ 252.721309][ T5621] (syz.3.423,5621,0):__ocfs2_claim_clusters:2363 ERROR: status = -5 [ 252.754627][ T5621] (syz.3.423,5621,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -5 [ 252.766756][ T5653] loop1: detected capacity change from 0 to 1024 [ 252.773705][ T5653] hfsplus: unable to parse mount options [ 252.801140][ T5621] (syz.3.423,5621,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -5 [ 252.811604][ T4573] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.951830][ T5621] (syz.3.423,5621,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5 [ 253.692518][ T5649] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 253.705296][ T26] tipc: Node number set to 2886997057 [ 253.731240][ T5649] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 253.742093][ T5621] (syz.3.423,5621,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5 [ 253.750984][ T5621] (syz.3.423,5621,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5 [ 253.768615][ T5649] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 253.777045][ T5621] (syz.3.423,5621,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5 [ 253.794183][ T5649] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 253.825035][ T5621] (syz.3.423,5621,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5 [ 253.834555][ T5649] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 253.858442][ T5621] (syz.3.423,5621,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 253.867815][ T5649] Bluetooth: hci6: Suspend notifier action (1) failed: -4 [ 253.871835][ T5621] (syz.3.423,5621,1):ocfs2_symlink:1909 ERROR: status = -5 [ 253.894911][ T5649] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.902588][ T5649] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 253.922281][ T5649] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 253.943622][ T5649] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 253.954065][ T5649] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 253.962998][ T5649] Bluetooth: hci7: Suspend notifier action (1) failed: -4 [ 253.964794][ T5621] (syz.3.423,5621,1):ocfs2_symlink:2063 ERROR: status = -5 [ 253.971160][ T5649] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 254.321609][ T4215] ocfs2: Unmounting device (7,3) on (node local) [ 254.376261][ T5678] loop4: detected capacity change from 0 to 1024 [ 254.383576][ T5678] hfsplus: unable to parse mount options [ 255.370738][ T3649] Bluetooth: hci4: command 0x0c1a tx timeout [ 255.493589][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.499883][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.735713][ T5690] Cannot find del_set index 286 as target [ 255.819604][ T3649] Bluetooth: hci6: command 0x0c1a tx timeout [ 255.821754][ T26] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 255.972309][ T3653] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.978376][ T3649] Bluetooth: hci7: command 0x0c1a tx timeout [ 256.101838][ T5704] loop4: detected capacity change from 0 to 1024 [ 256.108686][ T5704] hfsplus: unable to parse mount options [ 256.175609][ T4573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 256.275942][ T3960] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 256.292612][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.314878][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.212064][ T26] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.221141][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.241779][ T3960] usb 3-1: Using ep0 maxpacket: 16 [ 257.247085][ T26] usb 2-1: SerialNumber: syz [ 257.361983][ T3960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 257.392567][ T3960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.411969][ T3653] Bluetooth: hci4: command 0x0c1a tx timeout [ 257.427386][ T3960] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 257.436927][ T3960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.453353][ T3960] usb 3-1: config 0 descriptor?? [ 257.484462][ T5719] loop3: detected capacity change from 0 to 1024 [ 257.491578][ T5719] hfsplus: unable to parse mount options [ 257.524140][ T26] usb 2-1: 0:2 : does not exist [ 257.552229][ T4430] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.702305][ T5700] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 257.702305][ T5700] program syz.2.448 not setting count and/or reply_len properly [ 258.709422][ T3653] Bluetooth: hci6: command 0x0c1a tx timeout [ 258.715910][ T3653] Bluetooth: hci7: command 0x0c1a tx timeout [ 259.739433][ T3655] Bluetooth: hci1: command 0x0c1a tx timeout [ 260.049042][ T26] usb 2-1: USB disconnect, device number 12 [ 260.101962][ T3960] usbhid 3-1:0.0: can't add hid device: -71 [ 260.108088][ T3960] usbhid: probe of 3-1:0.0 failed with error -71 [ 260.109877][ T4573] udevd[4573]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.121409][ T3960] usb 3-1: USB disconnect, device number 8 [ 260.194005][ T5733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.461'. [ 260.249924][ T5737] loop1: detected capacity change from 0 to 1024 [ 260.258640][ T5737] hfsplus: unable to parse mount options [ 260.309379][ T4430] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.425198][ T5739] loop4: detected capacity change from 0 to 256 [ 260.448864][ T5739] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 261.695721][ T5752] loop2: detected capacity change from 0 to 1024 [ 262.419087][ T5763] loop4: detected capacity change from 0 to 256 [ 262.531576][ T5763] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 262.641817][ T26] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 262.713026][ T5735] loop3: detected capacity change from 0 to 40427 [ 263.012730][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.023983][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.112870][ T5735] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 263.120991][ T5735] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 263.192133][ T26] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.210385][ T5735] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 263.221491][ T5769] loop2: detected capacity change from 0 to 128 [ 263.233965][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.288873][ T26] usb 2-1: SerialNumber: syz [ 263.405364][ T5774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.474'. [ 263.465709][ T5769] loop2: detected capacity change from 128 to 64 [ 263.522661][ T5777] loop4: detected capacity change from 0 to 1024 [ 263.529785][ T5777] hfsplus: unable to parse mount options [ 263.572908][ T4430] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 263.594418][ T26] usb 2-1: 0:2 : does not exist [ 264.502349][ T3646] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 264.661924][ T3687] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 264.741848][ T3646] usb 1-1: Using ep0 maxpacket: 16 [ 264.872063][ T3646] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.897151][ T3646] usb 1-1: config 0 has no interfaces? [ 264.903232][ T3687] usb 4-1: Using ep0 maxpacket: 8 [ 264.933523][ T3646] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 264.956153][ T3646] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.979749][ T3646] usb 1-1: config 0 descriptor?? [ 265.031964][ T3687] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 265.048208][ T3687] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.067048][ T3687] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 265.077840][ T3687] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.096027][ T3687] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.115331][ T3687] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 265.125981][ T3687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.186402][ T5798] loop2: detected capacity change from 0 to 256 [ 265.198213][ T5798] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 265.230794][ T3960] usb 1-1: USB disconnect, device number 7 [ 265.391874][ T3687] usb 4-1: usb_control_msg returned -32 [ 265.397564][ T3687] usbtmc 4-1:16.0: can't read capabilities [ 265.932085][ T5801] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 266.032840][ T3776] usb 4-1: USB disconnect, device number 8 [ 266.150620][ T3960] usb 2-1: USB disconnect, device number 13 [ 267.724411][ T5816] loop1: detected capacity change from 0 to 64 [ 267.813360][ T3766] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 267.854517][ T5816] hfs: get root inode failed [ 268.091804][ T3766] usb 5-1: Using ep0 maxpacket: 32 [ 268.137875][ T5820] loop2: detected capacity change from 0 to 1024 [ 268.145194][ T5820] hfsplus: unable to parse mount options [ 268.313957][ T3766] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.849438][ T3766] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.863345][ T3766] usb 5-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 268.873991][ T3766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.910485][ T3766] usb 5-1: config 0 descriptor?? [ 269.049892][ T5829] loop1: detected capacity change from 0 to 128 [ 269.149273][ T5829] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 269.187971][ T5829] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038 (0x7fffffff) [ 269.401960][ T3766] usbhid 5-1:0.0: can't add hid device: -71 [ 269.412451][ T3766] usbhid: probe of 5-1:0.0 failed with error -71 [ 269.439640][ T3766] usb 5-1: USB disconnect, device number 7 [ 269.550939][ T5850] loop2: detected capacity change from 0 to 128 [ 269.622279][ T5848] syz.0.500 uses obsolete (PF_INET,SOCK_PACKET) [ 269.661780][ T3771] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 269.804340][ T27] audit: type=1326 audit(1727514123.773:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.0.500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce57dff9 code=0x0 [ 270.122353][ T3771] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 270.145903][ T3771] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.156858][ T3771] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 270.185922][ T3771] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.281787][ T3960] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 270.342583][ T3771] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 270.371232][ T3771] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 270.541884][ T3960] usb 4-1: Using ep0 maxpacket: 32 [ 271.439078][ T3771] usb 2-1: Product: syz [ 271.441985][ T3960] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 271.443529][ T3771] usb 2-1: Manufacturer: syz [ 271.491394][ T3960] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 271.502111][ T3771] usb 2-1: can't set config #1, error -71 [ 271.515422][ T3771] usb 2-1: USB disconnect, device number 14 [ 271.531461][ T3960] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 271.547317][ T3960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 271.557449][ T3960] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 271.567523][ T3960] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 271.583102][ T3960] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 271.593508][ T3960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.614683][ T4223] EXT4-fs (loop1): unmounting filesystem. [ 271.652013][ T3960] usb 4-1: config 0 descriptor?? [ 271.934056][ T3960] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 272.018824][ T3960] usb 4-1: USB disconnect, device number 9 [ 272.066172][ T3960] usblp0: removed [ 272.238395][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 272.532140][ T3960] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 272.772095][ T3960] usb 4-1: Using ep0 maxpacket: 32 [ 272.891951][ T3960] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 272.900518][ T3960] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 272.909598][ T3960] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 272.918998][ T5874] loop2: detected capacity change from 0 to 32768 [ 272.923216][ T3960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 272.937703][ T3960] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 272.942068][ T5874] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.507 (5874) [ 272.960705][ T3960] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 272.974373][ T3960] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 272.984707][ T3960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.011557][ T3960] usb 4-1: config 0 descriptor?? [ 273.095019][ T5874] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.137423][ T5874] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 273.184896][ T5874] BTRFS info (device loop2): setting nodatacow, compression disabled [ 273.200269][ T5885] team0: Port device team_slave_0 removed [ 273.207096][ T5874] BTRFS info (device loop2): max_inline at 0 [ 273.231357][ T5874] BTRFS info (device loop2): enabling disk space caching [ 273.258404][ T5874] BTRFS info (device loop2): turning off barriers [ 273.335274][ T5890] loop1: detected capacity change from 0 to 128 [ 273.360884][ T5874] BTRFS info (device loop2): turning on flush-on-commit [ 273.393943][ T5874] BTRFS info (device loop2): doing ref verification [ 273.434552][ T5874] BTRFS info (device loop2): force clearing of disk cache [ 273.480955][ T5874] BTRFS info (device loop2): enabling ssd optimizations [ 273.533081][ T5874] BTRFS info (device loop2): max_inline at 4096 [ 273.539669][ T5874] BTRFS info (device loop2): disk space caching is enabled [ 274.002268][ T3960] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 274.073566][ T3960] usb 4-1: USB disconnect, device number 10 [ 274.089599][ T5897] loop3: detected capacity change from 0 to 256 [ 274.116378][ T5897] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 274.142070][ T3960] usblp0: removed [ 274.999177][ T5874] BTRFS info (device loop2): rebuilding free space tree [ 275.091844][ T3646] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 275.173861][ T5874] BTRFS info (device loop2): disabling free space tree [ 275.190993][ T5874] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 275.201489][ T5874] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 275.348775][ T4219] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 275.471860][ T3646] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.543295][ T3646] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.661989][ T3646] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 275.680658][ T3646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.743153][ T3646] usb 2-1: SerialNumber: syz [ 275.969945][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'. [ 276.009205][ T3646] usb 2-1: 0:2 : does not exist [ 276.210977][ T5942] loop2: detected capacity change from 0 to 256 [ 276.268336][ T5942] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 277.901781][ T3687] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 278.127192][ T3771] usb 2-1: USB disconnect, device number 15 [ 278.161864][ T3687] usb 3-1: Using ep0 maxpacket: 16 [ 278.281967][ T3687] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.298638][ T3687] usb 3-1: config 0 has no interfaces? [ 278.322547][ T3687] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 278.353706][ T3687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.419363][ T3687] usb 3-1: config 0 descriptor?? [ 278.572463][ T5972] loop1: detected capacity change from 0 to 2048 [ 278.666634][ T26] usb 3-1: USB disconnect, device number 9 [ 278.690708][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 280.671816][ T3687] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 280.863075][ T5983] loop1: detected capacity change from 0 to 32768 [ 280.915455][ T5983] XFS (loop1): Mounting V5 Filesystem [ 280.933567][ T3653] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.941439][ T3653] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.950528][ T3653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.959156][ T3653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.967074][ T3653] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.974885][ T3653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.032300][ T3687] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.042675][ T3687] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.074020][ T5983] XFS (loop1): Ending clean mount [ 281.082450][ T3778] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 281.125157][ T5983] XFS (loop1): Quotacheck needed: Please wait. [ 281.141849][ T3687] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 281.150997][ T3687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 281.160495][ T3687] usb 4-1: SerialNumber: syz [ 281.230668][ T5983] XFS (loop1): Quotacheck: Done. [ 281.293037][ T3778] usb 3-1: device descriptor read/64, error -71 [ 281.366999][ T4223] XFS (loop1): Unmounting Filesystem [ 281.431246][ T6013] chnl_net:caif_netlink_parms(): no params data found [ 281.433988][ T3687] usb 4-1: 0:2 : does not exist [ 281.488846][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 281.611930][ T3778] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 281.667649][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.690928][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.717762][ T6013] device bridge_slave_0 entered promiscuous mode [ 281.739263][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.781242][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.810692][ T6013] device bridge_slave_1 entered promiscuous mode [ 281.831861][ T3778] usb 3-1: device descriptor read/64, error -71 [ 281.961951][ T3778] usb usb3-port1: attempt power cycle [ 281.997070][ T6013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.010512][ T6013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.094374][ T6013] team0: Port device team_slave_0 added [ 282.110884][ T6013] team0: Port device team_slave_1 added [ 282.172938][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.179967][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.206399][ T6013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.223071][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.230004][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.256763][ T6013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.271789][ T3687] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 282.367524][ T6013] device hsr_slave_0 entered promiscuous mode [ 282.378241][ T6013] device hsr_slave_1 entered promiscuous mode [ 282.389196][ T6013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.391861][ T3778] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 282.405551][ T6013] Cannot create hsr debugfs directory [ 282.502484][ T3778] usb 3-1: device descriptor read/8, error -71 [ 282.521832][ T3687] usb 2-1: Using ep0 maxpacket: 16 [ 282.642527][ T3687] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.659474][ T3687] usb 2-1: config 0 has no interfaces? [ 282.684818][ T3687] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 282.695280][ T3687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.777878][ T3687] usb 2-1: config 0 descriptor?? [ 282.798953][ T6036] libceph: resolve '. [ 282.798953][ T6036] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 282.798953][ T6036] ' (ret=-3): failed [ 282.861757][ T3778] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 282.920060][ T6013] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.011900][ T3643] Bluetooth: hci2: command tx timeout [ 283.043817][ T6013] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.060913][ T26] usb 2-1: USB disconnect, device number 16 [ 283.071957][ T3778] usb 3-1: device descriptor read/8, error -71 [ 283.171977][ T3643] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.178052][ T3643] Bluetooth: hci7: command 0x0c1a tx timeout [ 283.179464][ T3653] Bluetooth: hci1: command 0x0c1a tx timeout [ 283.201924][ T3778] usb usb3-port1: unable to enumerate USB device [ 283.217889][ T6013] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.328755][ T6013] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.432280][ T3778] usb 4-1: USB disconnect, device number 11 [ 283.467456][ T6036] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 283.504741][ T6036] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 283.546894][ T6036] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 283.675022][ T6036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.810973][ T6044] loop3: detected capacity change from 0 to 128 [ 284.445723][ T6013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.463347][ T6036] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 284.491711][ T6036] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 284.516989][ T6036] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 284.562461][ T6036] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 284.569904][ T6013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.575936][ T6036] Bluetooth: hci7: Suspend notifier action (1) failed: -4 [ 284.640791][ T6013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.649428][ T6036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 284.674594][ T6013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.830346][ T6013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.861585][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.872991][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.891221][ T6013] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.909270][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.926396][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.950649][ T4067] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.957759][ T4067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.982018][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.003778][ T6036] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 285.022418][ T6036] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 285.054917][ T6036] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 285.063349][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.158524][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.207721][ T4067] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.214868][ T4067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.251901][ T3655] Bluetooth: hci4: command 0x0c1a tx timeout [ 285.294118][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.354454][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.382443][ T3771] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 285.392491][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.462612][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.474038][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.514169][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.645166][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.651905][ T3655] Bluetooth: hci1: command 0x0c1a tx timeout [ 286.022036][ T3771] usb 2-1: config 0 has no interfaces? [ 286.027591][ T3771] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 286.040844][ T3771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.070963][ T3771] usb 2-1: config 0 descriptor?? [ 286.364925][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.375259][ T3771] usb 2-1: USB disconnect, device number 17 [ 286.443596][ T6013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.513513][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.531785][ T3655] Bluetooth: hci7: command 0x0c1a tx timeout [ 286.637053][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.678538][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.725543][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.891831][ T3771] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 287.012467][ T3643] Bluetooth: hci2: command 0x040f tx timeout [ 287.042233][ T3646] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 287.074983][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.102115][ T3771] usb 3-1: device descriptor read/64, error -71 [ 287.141090][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.169847][ T6013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.179281][ T6056] loop3: detected capacity change from 0 to 32768 [ 287.244990][ T6056] XFS (loop3): Mounting V5 Filesystem [ 287.331958][ T3643] Bluetooth: hci4: command 0x0c1a tx timeout [ 287.331983][ T3646] usb 1-1: Using ep0 maxpacket: 32 [ 287.381774][ T3771] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 287.404635][ T6056] XFS (loop3): Ending clean mount [ 287.412123][ T3769] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 287.434182][ T6056] XFS (loop3): Quotacheck needed: Please wait. [ 287.476261][ T6056] XFS (loop3): Quotacheck: Done. [ 287.531964][ T3646] usb 1-1: unable to get BOS descriptor or descriptor too short [ 287.581859][ T3771] usb 3-1: device descriptor read/64, error -71 [ 287.590385][ T4215] XFS (loop3): Unmounting Filesystem [ 287.617191][ T3646] usb 1-1: config 5 has an invalid interface number: 218 but max is 0 [ 287.628151][ T3646] usb 1-1: config 5 has no interface number 0 [ 287.640080][ T3646] usb 1-1: config 5 interface 218 has no altsetting 0 [ 287.661816][ T3769] usb 2-1: Using ep0 maxpacket: 8 [ 287.706137][ T3771] usb usb3-port1: attempt power cycle [ 287.734792][ T3643] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.785013][ T3769] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.794252][ T3769] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 287.812284][ T3646] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=f4.bc [ 287.821746][ T3769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.843569][ T3646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.857049][ T3769] usb 2-1: config 0 descriptor?? [ 287.878818][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.893252][ T3646] usb 1-1: Product: syz [ 287.895162][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.918316][ T3646] usb 1-1: Manufacturer: syz [ 287.938774][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.948534][ T3646] usb 1-1: SerialNumber: syz [ 287.963615][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.002635][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.029722][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.039817][ T6013] device veth0_vlan entered promiscuous mode [ 288.106926][ T6013] device veth1_vlan entered promiscuous mode [ 288.121904][ T3771] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 288.612706][ T3643] Bluetooth: hci7: command 0x0c1a tx timeout [ 288.619676][ T5368] usb 2-1: USB disconnect, device number 18 [ 288.694967][ T3771] usb 3-1: device descriptor read/8, error -71 [ 288.740847][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 288.752016][ T3646] usbtest 1-1:5.218: couldn't get endpoints, -71 [ 288.765299][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 288.768943][ T3646] usbtest: probe of 1-1:5.218 failed with error -71 [ 288.820044][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 288.831854][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 288.843672][ T6013] device veth0_macvtap entered promiscuous mode [ 288.853635][ T3646] usb 1-1: USB disconnect, device number 8 [ 288.866527][ T6013] device veth1_macvtap entered promiscuous mode [ 288.883007][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 288.892326][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 288.918450][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.936141][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.948302][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.964032][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.971807][ T3771] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 288.974115][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.992051][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.002192][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.013453][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.024238][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.035268][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.074493][ T3771] usb 3-1: device descriptor read/8, error -71 [ 289.092163][ T3643] Bluetooth: hci2: command 0x040f tx timeout [ 289.104607][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.112665][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.122533][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.137275][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.148607][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.159494][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.215806][ T3771] usb usb3-port1: unable to enumerate USB device [ 289.289953][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.301181][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.311975][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.323779][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.335378][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.349707][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.360328][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.371921][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.391560][ T6013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.402576][ T6013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.411810][ T6013] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.421061][ T6013] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.433696][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.446899][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.565914][ T5048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.579860][ T4067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.602633][ T6114] libceph: resolve '. [ 289.602633][ T6114] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 289.602633][ T6114] ' (ret=-3): failed [ 289.638934][ T5048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.704518][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.737106][ T4067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.811527][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 290.122604][ T6114] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 290.142914][ T6114] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 290.165167][ T6114] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 290.195274][ T6114] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 290.215939][ T6114] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 290.237602][ T6114] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 290.261152][ T6114] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 290.281649][ T6114] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 290.304650][ T6114] Bluetooth: hci7: Suspend notifier action (1) failed: -4 [ 290.327621][ T6114] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 290.349715][ T6114] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 290.369191][ T6114] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 290.390408][ T6114] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 290.495498][ T6130] loop2: detected capacity change from 0 to 32768 [ 290.611362][ T6130] XFS (loop2): Mounting V5 Filesystem [ 290.744884][ T6130] XFS (loop2): Ending clean mount [ 290.753883][ T6130] XFS (loop2): Quotacheck needed: Please wait. [ 290.788345][ T6130] XFS (loop2): Quotacheck: Done. [ 290.831835][ T3771] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 290.918020][ T4219] XFS (loop2): Unmounting Filesystem [ 291.201955][ T3771] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.212259][ T3778] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 291.223469][ T3771] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.239519][ T6152] loop4: detected capacity change from 0 to 256 [ 291.281481][ T27] audit: type=1804 audit(1727514145.253:3): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.586" name="/newroot/1/file1/file0" dev="loop4" ino=1048679 res=1 errno=0 [ 291.322496][ T3771] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 291.349840][ T3771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.358724][ T3771] usb 4-1: SerialNumber: syz [ 291.462506][ T3778] usb 1-1: Using ep0 maxpacket: 8 [ 291.581885][ T3778] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.597436][ T3778] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 291.607880][ T3778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.618477][ T3778] usb 1-1: config 0 descriptor?? [ 291.636416][ T3771] usb 4-1: 0:2 : does not exist [ 291.771826][ T5180] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 292.024969][ T5180] usb 3-1: device descriptor read/64, error -71 [ 292.139181][ T3643] Bluetooth: hci4: command 0x0c1a tx timeout [ 292.218877][ T3655] Bluetooth: hci1: command 0x0c1a tx timeout [ 292.371964][ T3643] Bluetooth: hci7: command 0x0c1a tx timeout [ 292.434293][ T3643] Bluetooth: hci2: command 0x040f tx timeout [ 292.476960][ T26] usb 1-1: USB disconnect, device number 9 [ 293.780803][ T5180] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 293.899449][ T3778] usb 4-1: USB disconnect, device number 12 [ 293.982654][ T5180] usb 3-1: device descriptor read/64, error -71 [ 294.113991][ T5180] usb usb3-port1: attempt power cycle [ 294.291947][ T3643] Bluetooth: hci4: command 0x0c1a tx timeout [ 294.297964][ T3655] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.451868][ T3643] Bluetooth: hci2: command 0x040f tx timeout [ 294.458254][ T3655] Bluetooth: hci7: command 0x0c1a tx timeout [ 294.543801][ T6174] loop1: detected capacity change from 0 to 32768 [ 294.698034][ T6174] XFS (loop1): Mounting V5 Filesystem [ 294.868612][ T6174] XFS (loop1): Ending clean mount [ 294.886625][ T6174] XFS (loop1): Quotacheck needed: Please wait. [ 295.036825][ T6174] XFS (loop1): Quotacheck: Done. [ 295.119721][ T4223] XFS (loop1): Unmounting Filesystem [ 296.531949][ T3643] Bluetooth: hci2: command 0x040f tx timeout [ 296.741940][ T5180] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 296.914521][ T3771] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 296.942029][ T3778] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 297.111989][ T5180] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.134778][ T5180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.151798][ T3778] usb 1-1: device descriptor read/64, error -71 [ 297.172174][ T3771] usb 3-1: Using ep0 maxpacket: 8 [ 297.213483][ T6226] libceph: resolve '. [ 297.213483][ T6226] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 297.213483][ T6226] ' (ret=-3): failed [ 297.232189][ T5180] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.241235][ T5180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.256547][ T5180] usb 5-1: SerialNumber: syz [ 297.312237][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 297.345317][ T3771] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 297.384860][ T3771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.417079][ T3771] usb 3-1: config 0 descriptor?? [ 297.451957][ T3778] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 297.523344][ T5180] usb 5-1: 0:2 : does not exist [ 297.671917][ T3778] usb 1-1: device descriptor read/64, error -71 [ 297.683934][ T3771] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 297.812814][ T3778] usb usb1-port1: attempt power cycle [ 297.946297][ T6226] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 297.997381][ T6226] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 298.028044][ T6226] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 298.038574][ T6226] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.058967][ T6226] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 298.080676][ T6226] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 298.101413][ T6226] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 298.115130][ T6226] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 298.125183][ T6226] Bluetooth: hci7: Suspend notifier action (1) failed: -4 [ 298.137265][ T6226] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.159989][ T6226] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.168049][ T6226] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 298.188230][ T6226] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 298.225042][ T3778] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 298.322111][ T3778] usb 1-1: device descriptor read/8, error -71 [ 298.467142][ T5180] usb 3-1: USB disconnect, device number 21 [ 298.480698][ T5180] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 298.613883][ T3778] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 298.712070][ T3778] usb 1-1: device descriptor read/8, error -71 [ 298.834224][ T3778] usb usb1-port1: unable to enumerate USB device [ 299.045815][ T6238] loop1: detected capacity change from 0 to 128 [ 299.413265][ T3643] Bluetooth: hci4: command 0x0c1a tx timeout [ 299.840124][ T5180] usb 5-1: USB disconnect, device number 8 [ 300.007846][ T6246] loop4: detected capacity change from 0 to 512 [ 300.052111][ T3643] Bluetooth: hci1: command 0x0c1a tx timeout [ 300.083595][ T6246] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 300.091008][ T6246] UDF-fs: Scanning with blocksize 512 failed [ 300.131796][ T3643] Bluetooth: hci7: command 0x0c1a tx timeout [ 300.211777][ T3643] Bluetooth: hci2: command 0x040f tx timeout [ 300.426214][ T6246] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 300.472363][ T6246] UDF-fs: Scanning with blocksize 1024 failed [ 300.567735][ T6246] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 301.639721][ T3643] Bluetooth: hci4: command 0x0c1a tx timeout [ 301.646143][ T6246] UDF-fs: Scanning with blocksize 2048 failed [ 301.732798][ T6267] loop2: detected capacity change from 0 to 1024 [ 301.740484][ T6267] hfsplus: unable to parse mount options [ 301.751916][ T6246] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 301.832312][ T3778] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 301.862047][ T6246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.362084][ T3643] Bluetooth: hci1: command 0x0c1a tx timeout [ 302.368334][ T3643] Bluetooth: hci7: command 0x0c1a tx timeout [ 302.561825][ T3778] usb 2-1: Using ep0 maxpacket: 32 [ 302.671877][ T3643] Bluetooth: hci2: command 0x040f tx timeout [ 302.702161][ T3778] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 302.710523][ T3778] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 302.768236][ T3778] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 302.797840][ T3778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 302.818117][ T3778] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 302.862530][ T3778] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 302.906233][ T3778] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 302.935783][ T3778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.015654][ T3778] usb 2-1: config 0 descriptor?? [ 303.255501][ T6277] loop4: detected capacity change from 0 to 128 [ 303.341455][ T3778] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 303.943240][ T3778] usb 2-1: USB disconnect, device number 19 [ 303.972217][ T26] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 303.992555][ T3778] usblp0: removed [ 304.321826][ T5180] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 304.381844][ T3769] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 304.391960][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.409661][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.531862][ T26] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.540935][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.585005][ T3769] usb 1-1: device descriptor read/64, error -71 [ 304.600586][ T26] usb 3-1: SerialNumber: syz [ 304.691984][ T5180] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.718661][ T5180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.798666][ T3643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.822178][ T5180] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.831510][ T5180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.839603][ T3643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.848760][ T3643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.856060][ T3769] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 304.864684][ T3643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.871939][ T5180] usb 5-1: SerialNumber: syz [ 304.881986][ T3643] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 304.892767][ T3643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.061838][ T3769] usb 1-1: device descriptor read/64, error -71 [ 305.146461][ T5180] usb 5-1: 0:2 : does not exist [ 305.191895][ T3769] usb usb1-port1: attempt power cycle [ 305.320813][ T6291] loop1: detected capacity change from 0 to 32768 [ 305.453900][ T6287] chnl_net:caif_netlink_parms(): no params data found [ 305.537838][ T26] usb 3-1: 0:2 : does not exist [ 305.555545][ T6291] XFS (loop1): Mounting V5 Filesystem [ 305.601970][ T3769] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 305.635507][ T6291] XFS (loop1): Ending clean mount [ 305.645379][ T6291] XFS (loop1): Quotacheck needed: Please wait. [ 305.651283][ T26] usb 3-1: USB disconnect, device number 22 [ 305.699598][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.706984][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.714322][ T3769] usb 1-1: device descriptor read/8, error -71 [ 305.722360][ T6287] device bridge_slave_0 entered promiscuous mode [ 305.732341][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.742929][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.754880][ T6287] device bridge_slave_1 entered promiscuous mode [ 305.826463][ T6291] XFS (loop1): Quotacheck: Done. [ 305.850402][ T6287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.911250][ T4223] XFS (loop1): Unmounting Filesystem [ 305.950573][ T6287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.985655][ T3769] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 306.111891][ T3769] usb 1-1: device descriptor read/8, error -71 [ 306.232001][ T3769] usb usb1-port1: unable to enumerate USB device [ 306.288686][ T6287] team0: Port device team_slave_0 added [ 307.178859][ T3655] Bluetooth: hci3: command tx timeout [ 307.435819][ T6287] team0: Port device team_slave_1 added [ 307.481270][ T3769] usb 5-1: USB disconnect, device number 9 [ 308.060219][ T6316] loop2: detected capacity change from 0 to 40427 [ 308.098684][ T6316] F2FS-fs (loop2): invalid crc value [ 308.165036][ T6316] F2FS-fs (loop2): Found nat_bits in checkpoint [ 308.186193][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.305018][ T6316] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 308.359546][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.391320][ T6316] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 308.476082][ T6287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.509716][ T27] audit: type=1804 audit(1727514162.483:4): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.637" name="/newroot/122/bus/file1" dev="loop2" ino=10 res=1 errno=0 [ 308.539529][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.547458][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.579607][ T6287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.629548][ T4219] syz-executor: attempt to access beyond end of device [ 308.629548][ T4219] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 308.660349][ T6287] device hsr_slave_0 entered promiscuous mode [ 308.670966][ T6287] device hsr_slave_1 entered promiscuous mode [ 308.698496][ T6287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.725642][ T6287] Cannot create hsr debugfs directory [ 309.271785][ T3643] Bluetooth: hci3: command tx timeout [ 310.069819][ T6287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.411245][ T6287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.573490][ T6287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.691974][ T3778] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 310.769132][ T6287] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.841987][ T6358] sp0: Synchronizing with TNC [ 310.880834][ T6357] [U] [ 310.891771][ T3778] usb 3-1: device descriptor read/64, error -71 [ 311.003136][ T6287] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.052540][ T6287] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.075020][ T6287] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.116648][ T6287] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.172071][ T3778] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 311.304040][ T6287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.409026][ T3778] usb 3-1: device descriptor read/64, error -71 [ 311.409327][ T3655] Bluetooth: hci3: command tx timeout [ 311.467798][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.881289][ T3778] usb usb3-port1: attempt power cycle [ 311.907562][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.973433][ T6287] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.052687][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.064184][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.074817][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.081966][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.114529][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.166864][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.182652][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.218387][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.225577][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.915850][ T3778] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 313.391468][ T27] audit: type=1326 audit(1727514167.363:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.0.660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce57dff9 code=0x0 [ 313.434845][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.515293][ T3778] usb 3-1: device descriptor read/8, error -71 [ 313.515363][ T3655] Bluetooth: hci3: command tx timeout [ 313.567674][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.642873][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.687689][ T6388] input: syz1 as /devices/virtual/input/input8 [ 313.703262][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.737953][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.748281][ T6390] loop1: detected capacity change from 0 to 1024 [ 313.755451][ T6390] hfsplus: unable to parse mount options [ 313.763139][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.792473][ T4573] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 315.325058][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.431560][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.547291][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.581940][ T3655] Bluetooth: hci3: command tx timeout [ 315.633697][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.772589][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.864713][ T6287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.901573][ T6408] loop1: detected capacity change from 0 to 256 [ 316.080588][ T6408] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 317.007446][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.013826][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.214394][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.228342][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.092465][ T6442] loop1: detected capacity change from 0 to 2048 [ 319.099341][ T6442] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.105896][ T6442] EXT4-fs: Ignoring removed i_version option [ 319.119825][ T6287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.159651][ T6442] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 321.476467][ T4223] EXT4-fs (loop1): unmounting filesystem. [ 321.504836][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 321.552738][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.677916][ T6287] device veth0_vlan entered promiscuous mode [ 321.777933][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 321.903027][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.018806][ T3772] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 322.404049][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.422464][ T3772] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 322.461099][ T3772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.491884][ T27] audit: type=1326 audit(1727514176.453:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.1.678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d8837dff9 code=0x0 [ 322.558436][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.602354][ T3772] usb 5-1: config 0 descriptor?? [ 322.696291][ T6287] device veth1_vlan entered promiscuous mode [ 322.746793][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 322.911813][ T3772] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 322.929263][ T3772] hackrf 5-1:0.0: Could not detect board [ 322.969872][ T3772] hackrf: probe of 5-1:0.0 failed with error -71 [ 323.007655][ T3772] usb 5-1: USB disconnect, device number 10 [ 323.027628][ T6287] device veth0_macvtap entered promiscuous mode [ 323.075146][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.093801][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.102706][ T6481] loop1: detected capacity change from 0 to 1024 [ 323.109870][ T6481] hfsplus: unable to parse mount options [ 323.132226][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 323.173795][ T6287] device veth1_macvtap entered promiscuous mode [ 323.192020][ T14] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 323.209337][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.267751][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.310594][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.350610][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.394890][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.424968][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.469281][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.510515][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.540734][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.555890][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.566302][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.580944][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.592455][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.605278][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.621902][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.638267][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.647102][ T4573] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.668125][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 323.809348][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.842393][ T14] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 323.870467][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 323.919275][ T3646] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 324.238685][ T14] usb 1-1: SerialNumber: syz [ 324.282460][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.316600][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.344357][ T6494] loop1: detected capacity change from 0 to 1024 [ 324.351215][ T6494] hfsplus: unable to parse mount options [ 324.475916][ T6496] loop4: detected capacity change from 0 to 128 [ 324.521867][ T3646] usb 3-1: device descriptor read/64, error -71 [ 324.903083][ T14] usb 1-1: 0:2 : does not exist [ 324.917329][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.302022][ T6496] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 325.333863][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.401795][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.455225][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.476420][ T6496] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038 (0x7fffffff) [ 325.531367][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.544577][ T14] usb 1-1: USB disconnect, device number 18 [ 325.591233][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.610060][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.620840][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.621163][ T6496] 9pnet_fd: Insufficient options for proto=fd [ 325.638370][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.726603][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.760102][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.776060][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.811826][ T3646] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 325.843877][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.864753][ T6287] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.881858][ T6287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.900886][ T6287] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.944171][ T6287] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.016023][ T6013] EXT4-fs (loop4): unmounting filesystem. [ 326.031981][ T3646] usb 3-1: device descriptor read/64, error -71 [ 326.155698][ T3646] usb usb3-port1: attempt power cycle [ 326.414907][ T5048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.430649][ T5048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.473619][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 326.485820][ T3887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.509958][ T3887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.528263][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 327.765499][ T6531] loop2: detected capacity change from 0 to 16 [ 327.960624][ T6531] erofs: (device loop2): mounted with root inode @ nid 36. [ 328.645760][ T6531] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 328.779869][ T6531] syz.2.691: attempt to access beyond end of device [ 328.779869][ T6531] loop2: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 329.461834][ T6549] loop1: detected capacity change from 0 to 128 [ 329.588668][ T6549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 329.662152][ T6549] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038 (0x7fffffff) [ 329.736837][ T6549] 9pnet_fd: Insufficient options for proto=fd [ 329.935600][ T6558] loop3: detected capacity change from 0 to 1024 [ 329.942479][ T6558] hfsplus: unable to parse mount options [ 330.071770][ T4573] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.197027][ T4223] EXT4-fs (loop1): unmounting filesystem. [ 331.501768][ T5180] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 331.699268][ T6585] loop1: detected capacity change from 0 to 256 [ 331.716153][ T6569] loop2: detected capacity change from 0 to 32768 [ 331.760356][ T6569] XFS: attr2 mount option is deprecated. [ 331.785414][ T6569] XFS: ikeep mount option is deprecated. [ 331.810021][ T6569] XFS: noikeep mount option is deprecated. [ 331.871821][ T5180] usb 1-1: config 0 has an invalid interface number: 82 but max is 3 [ 331.881856][ T5180] usb 1-1: config 0 has an invalid interface number: 199 but max is 3 [ 331.900126][ T5180] usb 1-1: config 0 has an invalid interface number: 183 but max is 3 [ 331.908704][ T5180] usb 1-1: config 0 has an invalid interface number: 170 but max is 3 [ 331.917891][ T5180] usb 1-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 331.927248][ T5180] usb 1-1: config 0 has no interface number 0 [ 331.934656][ T5180] usb 1-1: config 0 has no interface number 2 [ 331.940934][ T5180] usb 1-1: config 0 has no interface number 3 [ 331.952199][ T6579] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 331.975396][ T6585] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 331.997932][ T5180] usb 1-1: config 0 has no interface number 4 [ 332.007316][ T6579] overlayfs: failed to set xattr on upper [ 332.032848][ T5180] usb 1-1: config 0 interface 82 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 332.171437][ T6579] overlayfs: ...falling back to index=off,metacopy=off. [ 332.185388][ T5180] usb 1-1: too many endpoints for config 0 interface 199 altsetting 119: 65, using maximum allowed: 30 [ 332.208420][ T5180] usb 1-1: config 0 interface 199 altsetting 119 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 332.267483][ T5180] usb 1-1: config 0 interface 82 has no altsetting 0 [ 332.302035][ T5180] usb 1-1: config 0 interface 199 has no altsetting 0 [ 332.308874][ T5180] usb 1-1: config 0 interface 183 has no altsetting 0 [ 332.315737][ T5180] usb 1-1: config 0 interface 1 has no altsetting 0 [ 332.322410][ T5180] usb 1-1: config 0 interface 170 has no altsetting 0 [ 332.347377][ T6569] XFS (loop2): Mounting V5 Filesystem [ 332.603277][ T6569] XFS (loop2): Ending clean mount [ 332.630779][ T6569] XFS (loop2): Quotacheck needed: Please wait. [ 332.642560][ T5180] usb 1-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=f3.9f [ 332.672502][ T5180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.680525][ T5180] usb 1-1: Product: syz [ 332.738718][ T5180] usb 1-1: Manufacturer: syz [ 332.756584][ T5180] usb 1-1: SerialNumber: syz [ 332.789088][ T5180] usb 1-1: config 0 descriptor?? [ 332.828255][ T6569] XFS (loop2): Quotacheck: Done. [ 332.913831][ T4219] XFS (loop2): Unmounting Filesystem [ 332.948748][ T6606] cannot load conntrack support for proto=3 [ 333.761485][ T6612] loop3: detected capacity change from 0 to 1024 [ 333.768828][ T6612] hfsplus: unable to parse mount options [ 333.982975][ T5180] usb 1-1: selecting invalid altsetting 0 [ 334.001928][ T5180] usb 1-1: Could not set interface, error -22 [ 335.339082][ T5180] usb 1-1: USB disconnect, device number 19 [ 336.697199][ T6629] netlink: 'syz.0.711': attribute type 33 has an invalid length. [ 338.181933][ T3769] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 338.421775][ T3769] usb 2-1: Using ep0 maxpacket: 32 [ 338.601900][ T3769] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 339.089360][ T5180] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 339.126493][ T3769] usb 2-1: config 0 has no interface number 0 [ 339.332856][ T3769] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 339.362265][ T3769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.394762][ T3769] usb 2-1: Product: syz [ 339.409449][ T3769] usb 2-1: Manufacturer: syz [ 339.422673][ T3769] usb 2-1: SerialNumber: syz [ 339.448333][ T3769] usb 2-1: config 0 descriptor?? [ 339.482379][ T5180] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 339.499240][ T5180] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.510819][ T3769] smsc95xx v2.0.0 [ 339.524761][ T5180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 339.539620][ T5180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.671869][ T5180] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 339.695739][ T5180] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 339.730409][ T5180] usb 5-1: Product: syz [ 339.736261][ T5180] usb 5-1: Manufacturer: syz [ 339.793458][ T5180] cdc_wdm 5-1:1.0: skipping garbage [ 339.800502][ T5180] cdc_wdm 5-1:1.0: skipping garbage [ 339.830643][ T5180] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 339.845242][ T5180] cdc_wdm 5-1:1.0: Unknown control protocol [ 339.879353][ T6683] overlayfs: failed to resolve './file0': -2 [ 339.942728][ T3769] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 339.962889][ T3769] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 340.012493][ T27] audit: type=1326 audit(1727514193.993:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.0.730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce57dff9 code=0x0 [ 340.532192][ T3769] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 340.620058][ T3769] smsc95xx: probe of 2-1:0.67 failed with error -61 [ 341.268465][ T6705] CUSE: info not properly terminated [ 341.360346][ T6709] loop2: detected capacity change from 0 to 1024 [ 341.367759][ T6709] hfsplus: unable to parse mount options [ 341.383305][ T3769] usb 5-1: USB disconnect, device number 11 [ 341.412154][ T4573] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 342.415422][ T3769] usb 2-1: USB disconnect, device number 20 [ 342.599779][ T27] audit: type=1326 audit(1727514196.573:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.1.742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d8837dff9 code=0x0 [ 342.660760][ T6724] loop3: detected capacity change from 0 to 256 [ 342.885738][ T6724] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 344.814494][ T6750] loop4: detected capacity change from 0 to 128 [ 345.648821][ T6761] loop2: detected capacity change from 0 to 1024 [ 345.655832][ T6761] hfsplus: unable to parse mount options [ 345.707155][ T5847] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 345.808934][ T3646] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 346.374869][ T3778] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 346.451917][ T3769] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 346.631790][ T3778] usb 2-1: Using ep0 maxpacket: 8 [ 346.751955][ T3778] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 346.778180][ T3778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.828527][ T3769] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 346.848311][ T3778] usb 2-1: config 0 descriptor?? [ 346.862402][ T3769] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.879872][ T3769] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 346.894563][ T3769] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.919778][ T6772] loop4: detected capacity change from 0 to 256 [ 346.940293][ T6772] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 347.041833][ T3646] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 347.090954][ T3646] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.092842][ T27] audit: type=1326 audit(1727514201.073:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.2.758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92ed97dff9 code=0x0 [ 347.272449][ T3769] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.306557][ T3769] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.370304][ T3769] usb 4-1: Product: syz [ 347.425973][ T3769] usb 4-1: Manufacturer: syz [ 347.561537][ T3769] cdc_wdm 4-1:1.0: skipping garbage [ 347.619945][ T3769] cdc_wdm 4-1:1.0: skipping garbage [ 347.718018][ T3769] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 347.792763][ T3769] cdc_wdm 4-1:1.0: Unknown control protocol [ 347.814032][ T3646] usb 1-1: config 0 descriptor?? [ 347.831479][ T3769] usb 4-1: USB disconnect, device number 13 [ 347.924181][ T3646] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 348.582049][ T3769] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 348.842016][ T3769] usb 3-1: Using ep0 maxpacket: 32 [ 348.982022][ T3769] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.002322][ T3769] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 349.154010][ T3646] usb 1-1: USB disconnect, device number 20 [ 349.182415][ T3769] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 349.207997][ T3769] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 349.239460][ T3769] usb 3-1: Product: syz [ 349.249880][ T3769] usb 3-1: Manufacturer: syz [ 349.262630][ T3769] usb 3-1: SerialNumber: syz [ 349.329302][ T3769] appletouch 3-1:1.0: Could not find int-in endpoint [ 349.350494][ T3769] appletouch: probe of 3-1:1.0 failed with error -5 [ 349.370189][ T3769] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 349.454251][ T3778] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 349.477566][ T3778] asix: probe of 2-1:0.0 failed with error -71 [ 349.511506][ T3778] usb 2-1: USB disconnect, device number 21 [ 349.780411][ T3960] usb 3-1: USB disconnect, device number 30 [ 350.705570][ T6805] loop4: detected capacity change from 0 to 1024 [ 350.865958][ T6813] loop1: detected capacity change from 0 to 256 [ 350.929837][ T6805] hfsplus: unable to parse mount options [ 350.939721][ T6813] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 350.958005][ T6791] syz.3.762 (6791): drop_caches: 2 [ 352.405980][ T3778] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 353.152578][ T3778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.272928][ T3778] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 353.321869][ T3778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.332076][ T3778] usb 1-1: config 0 descriptor?? [ 353.687949][ T6840] loop3: detected capacity change from 0 to 128 [ 354.052978][ T3778] usb 1-1: string descriptor 0 read error: -71 [ 354.092029][ T3778] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 354.161183][ T3778] letsketch: probe of 0003:6161:4D15.0008 failed with error -32 [ 354.318514][ T3778] usb 1-1: USB disconnect, device number 21 [ 354.729234][ T3771] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 354.773775][ T6851] loop1: detected capacity change from 0 to 1024 [ 354.780665][ T6851] hfsplus: unable to parse mount options [ 356.271950][ T3771] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 356.284790][ T3771] usb 3-1: config 0 has no interface number 0 [ 356.327554][ T6862] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 356.442157][ T3771] usb 3-1: New USB device found, idVendor=093a, idProduct=2460, bcdDevice=31.fe [ 356.459937][ T3771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.478315][ T3771] usb 3-1: Product: syz [ 356.500486][ T3771] usb 3-1: Manufacturer: syz [ 356.520720][ T3771] usb 3-1: SerialNumber: syz [ 356.536018][ T3771] usb 3-1: config 0 descriptor?? [ 356.582387][ T3771] hub 3-1:0.68: bad descriptor, ignoring hub [ 356.592294][ T3771] hub: probe of 3-1:0.68 failed with error -5 [ 356.608097][ T3771] gspca_main: pac207-2.14.0 probing 093a:2460 [ 356.677439][ T6870] loop3: detected capacity change from 0 to 128 [ 356.812079][ T3771] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 356.903536][ T3771] usb 3-1: USB disconnect, device number 31 [ 358.331835][ T3769] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 358.486258][ T6889] loop2: detected capacity change from 0 to 256 [ 358.529924][ T6889] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 358.563884][ T6892] loop3: detected capacity change from 0 to 1024 [ 358.570906][ T6892] hfsplus: unable to parse mount options [ 358.601801][ T3769] usb 5-1: Using ep0 maxpacket: 32 [ 358.615751][ T4573] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 360.091992][ T3769] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.155420][ T3769] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 360.370742][ T6900] loop1: detected capacity change from 0 to 4096 [ 360.414338][ T3769] usb 5-1: string descriptor 0 read error: -71 [ 360.420597][ T3769] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 360.497747][ T3769] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 360.537181][ T6901] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 360.581992][ T3769] usb 5-1: can't set config #1, error -71 [ 360.666715][ T3769] usb 5-1: USB disconnect, device number 12 [ 360.747870][ T27] audit: type=1326 audit(1727514214.723:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.4.799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd19bd7dff9 code=0x0 [ 361.287914][ T6909] loop2: detected capacity change from 0 to 32768 [ 361.368479][ T6909] JBD2: Journal too short (blocks 2-1024). [ 361.377270][ T6909] JBD2: recovery failed [ 361.381914][ T6909] (syz.2.801,6909,1):ocfs2_journal_load:1111 ERROR: Failed to load journal! [ 361.436144][ T6909] (syz.2.801,6909,1):ocfs2_check_volume:2425 ERROR: ocfs2 journal load failed! -5 [ 361.450124][ T6922] loop1: detected capacity change from 0 to 1024 [ 361.469640][ T6909] (syz.2.801,6909,0):ocfs2_check_volume:2481 ERROR: status = -5 [ 361.477595][ T6909] (syz.2.801,6909,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 361.501638][ T6909] ------------[ cut here ]------------ [ 361.507470][ T6909] kernel BUG at fs/jbd2/checkpoint.c:333! [ 361.610120][ T6909] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 361.616232][ T6909] CPU: 1 PID: 6909 Comm: syz.2.801 Not tainted 6.1.111-syzkaller #0 [ 361.624214][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 361.634280][ T6909] RIP: 0010:jbd2_cleanup_journal_tail+0x2b6/0x2c0 [ 361.640713][ T6909] Code: 4c 24 40 80 e1 07 80 c1 03 38 c1 0f 8c 69 ff ff ff 48 8d 7c 24 40 e8 e9 95 91 ff e9 5a ff ff ff e8 bf 3f 56 08 e8 aa 13 3a ff <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 [ 361.660337][ T6909] RSP: 0018:ffffc9000a14ee00 EFLAGS: 00010287 [ 361.666421][ T6909] RAX: ffffffff82509b96 RBX: 0000000000000000 RCX: 0000000000040000 [ 361.674399][ T6909] RDX: ffffc9000fbb8000 RSI: 000000000002f365 RDI: 000000000002f366 [ 361.682377][ T6909] RBP: ffffc9000a14eed0 R08: ffffffff82509a23 R09: ffffed100c7d3819 [ 361.690352][ T6909] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92001429dc4 [ 361.698331][ T6909] R13: ffff888063e9c000 R14: 1ffff92001429dca R15: 1ffff1100c7d3800 [ 361.706306][ T6909] FS: 00007f92ee7966c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 361.715236][ T6909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.721824][ T6909] CR2: 00000000200c4000 CR3: 000000007cdfa000 CR4: 00000000003506e0 [ 361.729808][ T6909] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 361.737788][ T6909] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 361.745773][ T6909] Call Trace: [ 361.749057][ T6909] [ 361.751990][ T6909] ? __die_body+0x5e/0xa0 [ 361.756331][ T6909] ? die+0x83/0xb0 [ 361.760058][ T6909] ? do_trap+0x11e/0x350 [ 361.764310][ T6909] ? jbd2_cleanup_journal_tail+0x2b6/0x2c0 [ 361.770126][ T6909] ? jbd2_cleanup_journal_tail+0x2b6/0x2c0 [ 361.775942][ T6909] ? do_error_trap+0x13d/0x1e0 [ 361.780713][ T6909] ? jbd2_cleanup_journal_tail+0x2b6/0x2c0 [ 361.786552][ T6909] ? do_int3+0x30/0x30 [ 361.790628][ T6909] ? report_bug+0x3e0/0x500 [ 361.795136][ T6909] ? rcu_is_watching+0x11/0xb0 [ 361.799906][ T6909] ? handle_invalid_op+0x2c/0x40 [ 361.804852][ T6909] ? jbd2_cleanup_journal_tail+0x2b6/0x2c0 [ 361.810667][ T6909] ? exc_invalid_op+0x2f/0x40 [ 361.815349][ T6909] ? asm_exc_invalid_op+0x16/0x20 [ 361.820388][ T6909] ? jbd2_cleanup_journal_tail+0x143/0x2c0 [ 361.826208][ T6909] ? jbd2_cleanup_journal_tail+0x2b6/0x2c0 [ 361.832031][ T6909] ? jbd2_cleanup_journal_tail+0x2b6/0x2c0 [ 361.837852][ T6909] ? jbd2_log_do_checkpoint+0x12a0/0x12a0 [ 361.843589][ T6909] ? do_raw_spin_unlock+0x137/0x8a0 [ 361.848795][ T6909] jbd2_journal_flush+0x352/0xd00 [ 361.853841][ T6909] ? jbd2_journal_lock_updates+0x2b0/0x380 [ 361.859660][ T6909] ? __bpf_trace_jbd2_shrink_checkpoint_list+0x50/0x50 [ 361.866556][ T6909] ocfs2_journal_shutdown+0x476/0xca0 [ 361.871948][ T6909] ? ocfs2_journal_init+0xe80/0xe80 [ 361.877159][ T6909] ? __kmem_cache_free+0x25c/0x3c0 [ 361.882280][ T6909] ? ocfs2_mount_volume+0x1693/0x1940 [ 361.887660][ T6909] ocfs2_mount_volume+0x169b/0x1940 [ 361.892872][ T6909] ? ocfs2_is_hard_readonly+0x60/0x60 [ 361.898255][ T6909] ? __debugfs_create_file+0x461/0x500 [ 361.903727][ T6909] ? __lock_acquire+0x1f80/0x1f80 [ 361.908772][ T6909] ? d_instantiate+0x6b/0x90 [ 361.913377][ T6909] ? up_write+0x19d/0x580 [ 361.917714][ T6909] ? __up_read+0x690/0x690 [ 361.922135][ T6909] ? do_raw_spin_unlock+0x137/0x8a0 [ 361.927341][ T6909] ? __debugfs_create_file+0x461/0x500 [ 361.932823][ T6909] ocfs2_fill_super+0x4759/0x5730 [ 361.937863][ T6909] ? ocfs2_mount+0x40/0x40 [ 361.942281][ T6909] ? validate_chain+0x112/0x5950 [ 361.947249][ T6909] ? deref_stack_reg+0x17c/0x210 [ 361.952213][ T6909] ? preempt_count_add+0x8f/0x180 [ 361.957257][ T6909] ? reacquire_held_locks+0x660/0x660 [ 361.962630][ T6909] ? is_bpf_text_address+0x22/0x2a0 [ 361.967833][ T6909] ? is_bpf_text_address+0x289/0x2a0 [ 361.973123][ T6909] ? is_bpf_text_address+0x22/0x2a0 [ 361.978323][ T6909] ? stack_trace_save+0x1c0/0x1c0 [ 361.983356][ T6909] ? validate_chain+0x112/0x5950 [ 361.988296][ T6909] ? validate_chain+0x112/0x5950 [ 361.993232][ T6909] ? arch_stack_walk+0xf3/0x140 [ 361.998094][ T6909] ? mark_lock+0x9a/0x340 [ 362.002436][ T6909] ? mark_lock+0x9a/0x340 [ 362.006783][ T6909] ? __lock_acquire+0x125b/0x1f80 [ 362.011821][ T6909] ? string+0x26a/0x2b0 [ 362.015980][ T6909] ? widen_string+0x3a/0x310 [ 362.020589][ T6909] ? string+0x26a/0x2b0 [ 362.024751][ T6909] ? bdev_name+0x297/0x3a0 [ 362.029176][ T6909] ? pointer+0x149/0x1000 [ 362.033509][ T6909] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 362.039412][ T6909] ? string+0x2b0/0x2b0 [ 362.043574][ T6909] ? vsnprintf+0x1c70/0x1c70 [ 362.048177][ T6909] ? ptr_to_hashval+0x70/0x70 [ 362.052864][ T6909] ? snprintf+0xd6/0x120 [ 362.057118][ T6909] ? vscnprintf+0x80/0x80 [ 362.061453][ T6909] ? set_blocksize+0x1c6/0x350 [ 362.066233][ T6909] mount_bdev+0x2c9/0x3f0 [ 362.070569][ T6909] ? ocfs2_mount+0x40/0x40 [ 362.074994][ T6909] legacy_get_tree+0xeb/0x180 [ 362.079678][ T6909] ? trace_raw_output_ocfs2_buffer_cached_end+0xe0/0xe0 [ 362.086622][ T6909] vfs_get_tree+0x88/0x270 [ 362.091047][ T6909] do_new_mount+0x2ba/0xb40 [ 362.095562][ T6909] ? ns_capable+0x85/0xe0 [ 362.099896][ T6909] ? do_move_mount_old+0x160/0x160 [ 362.105022][ T6909] __se_sys_mount+0x2d5/0x3c0 [ 362.109709][ T6909] ? __x64_sys_mount+0xc0/0xc0 [ 362.114483][ T6909] ? syscall_enter_from_user_mode+0x2e/0x230 [ 362.120473][ T6909] ? lockdep_hardirqs_on+0x94/0x130 [ 362.125680][ T6909] ? __x64_sys_mount+0x1c/0xc0 [ 362.130450][ T6909] do_syscall_64+0x3b/0xb0 [ 362.134882][ T6909] ? clear_bhb_loop+0x45/0xa0 [ 362.139567][ T6909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.145560][ T6909] RIP: 0033:0x7f92ed97f79a [ 362.149986][ T6909] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.169590][ T6909] RSP: 002b:00007f92ee795e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 362.178011][ T6909] RAX: ffffffffffffffda RBX: 00007f92ee795ef0 RCX: 00007f92ed97f79a [ 362.185988][ T6909] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 00007f92ee795eb0 [ 362.193960][ T6909] RBP: 0000000020000080 R08: 00007f92ee795ef0 R09: 00000000000008c0 [ 362.201937][ T6909] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000000020000040 [ 362.209908][ T6909] R13: 00007f92ee795eb0 R14: 0000000000004436 R15: 00000000200000c0 [ 362.217889][ T6909] [ 362.220907][ T6909] Modules linked in: [ 362.231757][ T6909] ---[ end trace 0000000000000000 ]--- [ 362.237235][ T6909] RIP: 0010:jbd2_cleanup_journal_tail+0x2b6/0x2c0 [ 362.268877][ T6909] Code: 4c 24 40 80 e1 07 80 c1 03 38 c1 0f 8c 69 ff ff ff 48 8d 7c 24 40 e8 e9 95 91 ff e9 5a ff ff ff e8 bf 3f 56 08 e8 aa 13 3a ff <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 [ 362.311282][ T6909] RSP: 0018:ffffc9000a14ee00 EFLAGS: 00010287 [ 362.337553][ T6909] RAX: ffffffff82509b96 RBX: 0000000000000000 RCX: 0000000000040000 [ 362.349554][ T6909] RDX: ffffc9000fbb8000 RSI: 000000000002f365 RDI: 000000000002f366 [ 362.359004][ T6909] RBP: ffffc9000a14eed0 R08: ffffffff82509a23 R09: ffffed100c7d3819 [ 362.371327][ T6909] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92001429dc4 [ 362.389940][ T6909] R13: ffff888063e9c000 R14: 1ffff92001429dca R15: 1ffff1100c7d3800 [ 362.399730][ T6909] FS: 00007f92ee7966c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 362.418319][ T6909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.427004][ T6909] CR2: 00007f5bc4d08178 CR3: 000000007cdfa000 CR4: 00000000003506f0 [ 362.440221][ T6909] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.455583][ T6909] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.467585][ T6909] Kernel panic - not syncing: Fatal exception [ 362.473872][ T6909] Kernel Offset: disabled [ 362.478177][ T6909] Rebooting in 86400 seconds..