last executing test programs: 1m12.607773201s ago: executing program 3 (id=1334): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x9, 0x3, 0x5, 0x40, 0x3, 0x8}, &(0x7f00000000c0)=0x9c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r1, 0xf8}, &(0x7f0000000240)=0x8) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x1, 0xa, 0x40, 0x20, 0x0, 0x0, 0xee01}, {}, {0x4, 0x200, 0x0, 0x1}}}, 0xb8}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r7, @ANYRESDEC], 0x52) 1m12.447519154s ago: executing program 3 (id=1336): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m12.150128258s ago: executing program 3 (id=1338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m11.835188483s ago: executing program 3 (id=1339): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c757466382c666d61736b3d30303030303030303030303030303030303030303030362c6572726f72733d636f6e74696e75652c7379735f747a2c616c6c6f775f7574696d653d30303030303030303030303030303030303134373036342c00968868822eaa4073da2a8bad3e75bf3fa58e5fe9023e2efe14b61e42154e792855b9c44517fcaf42990fa252a8fcc76df45041b88e383db02cc075636a6b415c49ee2ad1af7ecfc73f3809bce1541b2c780705cdd96cfb760a1f342582ee152abbe3f5828666937a5068d6170f62dc427b22ae7bd20a2fb9094ffaf7b7eda15af87283045448d6cabb51f8a411539d39a9d6db38d1"], 0x1, 0x1545, &(0x7f0000001a00)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 1m11.535958478s ago: executing program 3 (id=1340): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m11.246627753s ago: executing program 3 (id=1341): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0b62288a0a0002"], 0x28}}, 0x0) 1m10.942468987s ago: executing program 32 (id=1341): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0b62288a0a0002"], 0x28}}, 0x0) 11.411937501s ago: executing program 2 (id=1619): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 11.081520927s ago: executing program 2 (id=1620): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) r1 = syz_io_uring_setup(0xf84, &(0x7f0000000180)={0x0, 0xf3eb, 0x20, 0x0, 0xfe}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd_index=0x3, 0xfffffffffffffffe, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f00000000c0), 0x6, 0x18000) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x100000000]}, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ff2193716910eca2fb26a61e53204ed3a1", 0x11) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d10, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x21200000, &(0x7f0000000100), 0x36, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0xb, &(0x7f0000000000)=""/188, &(0x7f00000000c0)=0xbc) socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000000)={0x0, 0x3938700}) syz_open_procfs(0x0, 0x0) 8.9660096s ago: executing program 5 (id=1632): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) syz_usb_connect(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902"], 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x1}) 8.763901713s ago: executing program 2 (id=1633): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r1, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) 8.066266614s ago: executing program 4 (id=1635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) init_module(&(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46dc03010705000000000000000300060009000000fd0100000000000440000000000000006c0000000000000007000000070038000100ff00fedc0000020000000c03000000000000000104000000000000ff0f00000000000000000000010000000000000000000900"], 0x78, 0x0) r3 = mq_open(0x0, 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r3, 0x15b77000) close(0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) 7.018779501s ago: executing program 2 (id=1636): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000", @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b937600000000000000000000000000000000000000000002000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xc8, 0x5c, 0x160, 0xc8, 0x3e0, 0x198, 0x228, 0x25a, 0x198, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x3a}, [], [0xffffff00, 0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00', {0xff}, {}, 0x3a, 0x0, 0x4}, 0x5002, 0xa8, 0xc8, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @mcast1, [0xffffffff], [], 'veth1_to_hsr\x00', 'veth1_vlan\x00', {}, {0xff}, 0x6, 0x0, 0x2, 0x2c}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48005}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c0"], 0x398}}, 0x4) 6.972038701s ago: executing program 5 (id=1637): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.104576405s ago: executing program 4 (id=1639): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0), 0x3, 0x56a, &(0x7f00000015c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 5.889838568s ago: executing program 1 (id=1642): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 5.810610449s ago: executing program 4 (id=1643): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec010203010902"], 0x0) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 5.76385695s ago: executing program 2 (id=1644): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x1c0, 0xa, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0xc8, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xff}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x85}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xb4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x984}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5837}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe075}]}, {0x4}]}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x24000010}, 0x2400c044) unshare(0x2040400) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x0, 0xff, 0x4}, 0x20) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$watch_queue(r8, &(0x7f0000001540)=""/4111, 0x100f) sendfile(r5, r5, 0x0, 0x200000) 5.699669921s ago: executing program 1 (id=1645): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x17) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES32=r6, @ANYRES64=r4, @ANYBLOB="34810e0517a53638d8a25bc66242bf8580433caaa8d0f6900a4d437f6de3ede889a8bb42f15f33f739", @ANYRES32, @ANYRES64=r7, @ANYRESDEC, @ANYBLOB="5bc8bfa3178ce76b5c2a014efd446afcbf55f8dd679c8c1d79f3dc5d8c3a44ed9b085986ddf6cd9810c6a6a10f3c41e8080a625f484b0abf31192d4a0c50389a1db5483f312d9faa65ee2bbaab29a10c5ec199f2a97634f8ca782d6694e01c6e3429acc79cdccf9b93cad4ca5ba8a016f4aa23dd6caab780d5f130d8db801fad3be3207b954965a69d1499692a47356dc61897f8cc69e350febf9a6d3088c88a3dce5b0485f35c3110a7601d7739aee14c7f7f6cbf1e33cfd64259d1bc691bcffe1d1982a394fb44ed513975fe652678d5ce57f9b54ecd9045c02d86e82d247338"], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xa, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xa0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee5233188", 0x0, 0x8000}, 0x50) r9 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) setsockopt$XDP_TX_RING(r9, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) 5.395784696s ago: executing program 1 (id=1646): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x40, 0x8, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.290570803s ago: executing program 5 (id=1650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) init_module(&(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46dc03010705000000000000000300060009000000fd0100000000000440000000000000006c0000000000000007000000070038000100ff00fedc0000020000000c03000000000000000104000000000000ff0f00000000000000000000010000000000000000000900"], 0x78, 0x0) r3 = mq_open(0x0, 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r3, 0x15b77000) close(0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) 3.270421649s ago: executing program 0 (id=1651): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000704a012704c6f011367acc6ae8fb462852ab71c7c6f55b1b4a47a69445efcc2e32c4d490fec2c09f2a282f690ad436cb19f682e0c5057a8335d1c7b4f56aff9319a78ec3079531468811b33b5d83aa6b2fb3e91d9c8446fa08b4e3b086fb3e4699b52c12cb5346981b1411dbe467f7613e498d4858ad51883225a1fc73ed7219ec2d34c4a94b4b673866ad068b3fce87bd0504e4c6b10c84bc9520eba51484a2e3bc36d461d72"], 0x1, 0x166, &(0x7f0000000240)="$eJzs281KOmEUx/Hf+Pr/2/vbplVQUJucNGhql5ciOpk0lmQbJYgupSvrBhTqBppglKkZgiZDH9LvB2TOEQ7nPItHjwsFYG6tSrJkKSvJ9/2Hyz1LO6aHAjAVvt58APMq/WJ6AgBmDCrpYA9oS3p+va/1R69swv1hUEkFz3NJ/U/1uaT1j1bw3M5E6/OS/iXZX56G9fux/v9/2L8Qqy8krh+e/2A3Wr8gaVHSkqRlSSuj31prkta/6F+P9d9K2B/4DUvFeB55I6WLpucehXk2yEthngvyciw/DvN8kBdrN159UkcAMKbUN/c/Hbv/mdj9B/B3dbq9q6rnubcEBAQEYWD6kwnApNl3rbbd6fYOm61qw22412XnzHFKp6UTxw42fzu6/wOYHR9f+qYnAQAAAAAAAAAAAAAA49qQtGl6CAAAAABTMY2/E5k+IwAAAAAAAAAAAAAAAAAAADAr3gMAAP//s9VQng==") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a000c0, &(0x7f0000000280)={[{@utf8}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_win95}, {@uni_xlateno}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@rodir}, {@utf8no}]}, 0x3, 0x354, &(0x7f0000000900)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x1}}, &(0x7f00000000c0)) mount_setattr(0xffffffffffffffff, 0x0, 0xc100, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 3.20529002s ago: executing program 5 (id=1652): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0}, 0x0) 2.923970675s ago: executing program 0 (id=1653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) socket$unix(0x1, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x16}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0xfffffec0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x294}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 2.410908143s ago: executing program 4 (id=1654): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000", @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b937600000000000000000000000000000000000000000002000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xc8, 0x5c, 0x160, 0xc8, 0x3e0, 0x198, 0x228, 0x25a, 0x198, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x3a}, [], [0xffffff00, 0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00', {0xff}, {}, 0x3a, 0x0, 0x4}, 0x5002, 0xa8, 0xc8, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @mcast1, [0xffffffff], [], 'veth1_to_hsr\x00', 'veth1_vlan\x00', {}, {0xff}, 0x6, 0x0, 0x2, 0x2c}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48005}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c0"], 0x398}}, 0x4) 2.395614463s ago: executing program 5 (id=1655): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 2.293926055s ago: executing program 5 (id=1656): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f55, &(0x7f000000efc0)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIi4RUQD4AlD6tIEArVzDl2TU2Pexx7urrn/H7SuOrr0zV9yv+pqe6pywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL733R+f7kXE5V+nBw5HfCYGEf2I5bo+FvXMxfz8YUQcic3meC4iBosR9fKb/zwTcS4iPjoUcW/j1mr98Jk99uP8qZvXP/n+d/7xuz/dOfLTN3/yQbv9R589++Hvb0cc/uFrH35y+8msOwAAAJSiqqqqlz7mH02f7/tddwoAmIq8/6+S/LharVarn2j9x/5s9UddaN1UjXe7WUTEenOZ+j2Dw/EAMGfW4+Ouu0CH5F+0YUQ81XUngJnW67oD7It7G7dWeynfXnN/cGyrPf+dclv+673713fsNp2kfY7JtH6+7sQgnt2lP8tT6sMsyfn32/lf3mofpeftd/7Tslv+o61Ln4qT8x+082/Zlv+fI2Ju8++Pzb9UOf/ho+S/Ppjj7V/+AAAAAAAcfPnv/4c7Pv67+PirsicPO/57bEp9AAAAAAAAAIAn7XHH/7vP+H8AAAAws+rP6rW/HHrw2G73Yqsfv9SLeLr1fKAw6WKZla77AQAAAAAAAAAAAAAlGW6dw3upF7EQEU+vrFRVVX81tetH9bjLz7vS1x9K1vUveQAA2PLRoda1/L2IpYi4lO71t7CyslJVS8sr1Uq1vJjfz44Wl6rlxufaPK0fWxzt4Q3xcFTV32ypsVzTpM/Lk9rb369+rVE12EPHpqPDwAEgIrb2RvfskQ6Yqnomun6Xw3yw/R88tn/2ouufUwAAAGD/VVVV9dLtvI+mY/79rjsFAEzDUt7/t48LqNVqtVqtPnh1UzXe7WYREevNZer3DIbjB4A5sx4fd90FOiT/og0j4kjXnQBmWq/rDrAv7m3cWu2lfHvN/UEa3z2fC7It//Xe5nJ5+XHTSdrnmEzr5+tODOLZXfrz3JT6MEty/v12/pe32kfpefud/7Tsln+9noc76E/Xcv6Ddv4tByf//tj8S5XzHz5S/gP5AwAAAADADMt//z9c/PFfdz0AAAAAAAAAYH7d27i1mq97zcf/Pz/meb3mnOs/D4ycf2/P+bv+9yDJ+ffb+bdOyBk05u++8SD/f2/cWv3g5r8+l6czn//CYFS/9kKvPxim05yqhbfialyLtTi14/nDbe2nd7QvbGs/M6H97I72Ud2+nNtPxGr8Iq7Fm/fbFyecGLU0ob2a0J7zH9j+i5TzHza+6vxXUnuvNa3dfb+/Y7tvTse9zsW//ffFnVvX9N2Jwf11a6rX73gH/dn8P3lqFL+6sXb9xG+u3Lx5/XSkybZHz0SaPGE5/4X0lfN/6YWt9vx7v7m93n1/9Mj5z4o7Mdw1/xca8/X6vjzlvnUh5z9KXzn/vAcav/3Pc/67b/+vdNAfAAAAAAAAAAAAAAAAeJiqqjYvEb0YERfS9T/uhA8ARfjDD9JMlYRarVar1eoDWzdV473eLGJp+zIXIuK3474ZADDL/hcR/+y6E3RG/gXL9/urp1/oujPAVN14972fXbl2be36ja57AgAAAAAAAAB8Wnn8z2ON8Z83zwNqjRu9bfzXN+LY3I7/2R8NNsc6Tyv0fDx8/O/j8fDxv4cTXm9hQvtoQvvihPalCe1jL/RoyPk/nzLO+R9NK1bS+K8vddCfruX8j6exnnP+X2o9r5l/9dd5zr+/Lf+TN9/55ckb77736tV3rry99vbaz0+funDu7PlzZ8+fP/nW1Wtrp7b+7bDH+yvnn8e+dh5oWXL+OXP5lyXn/8VUy78sOf8XUy3/suT88/s9+Zcl558/+8i/LDn/l1Mt/7Lk/L+cavmXJef/SqrlX5ac/1dSLf+y5PxfTbX8y5LzP5Fq+Zcl538y1fIvS84/H+GSf1ly/vnMBvmXJed/JtXyL0vO/2yq5V+WnP+5VMu/LDn/86mWf1ly/hdSLf+y5Py/mmr5lyXn/7VUy78sOf/XUi3/suT8v55q+Zcl5/+NVMu/LDn/b6Za/mXJ+X8r1fIvS87/26mWf1ly/q+nWv5leXD/fzNTnvnP3yNmoBtmzIyb6fo3EwAAAAAAAAAAAADQNo3TibteRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd3cxcpX3GcDPftlrQ4IbCCHECWtjiAOLd9df4BCDSUJKSZtSEtKmJTWOvTZO/FXvOgGEylJoSxSkIrUX9KJpEqVRpLYCRZGaSjRCaqT2rlwl4iZqJS4sFSoHJZVSBbY6M+/77szs7Mz6Y+3z8fsh/PfOnJl558yZ2X3WemYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBWGz42/ecDWZbl/zf+WJdll+d/X5Ptyb+c23mpVwgAAACcr7caf/7DFemEPcu4UMs2//aB//j+/Pz8fPaFN0+//Zfz8+mMsSwbWp1ljfOif//lL+ZbtwmeykYHBlu+Huxz80N9zh/uc/5In/NX9Tl/dZ/zR/ucv2gHLLKm+fuYxpVtavx1XXOXZldlI43zNnW51FMDqwcH4+9yGgYal5kfOZgdzo5k09nkossMNP7Lspc25Ld1TxZva7DlttZnWXbmZ4/vj2sYCPt4U9Z2Yw2tj90bd2Vjb/7s8f3fmX39vd1m392waKVZtnljvs6ns2zh11XZQLY67ZO4zsGWda7vss6htnUONC6X/71znWeWuc54v0fDOl/psc714bRHrs+ybC5bcptOT2WD2dqOW037e7R5ROTXkT+U78qGz+o42bCM4yS/zGvXtx8nncdk3P8bwj4ZXmINrQ/HG0+uWrTfz/U4ye91EY7V/Lrvy290dLT1V6ttx2q+zeM3LH0MdH3suhwD6VhuOQY29jsGBlcNNY6BwYU1b2w7BqYWXWYwG2jc1ukbeh8DE7NHT0zMPPrYLYeP7js0fWj62NTkzu3bdmzftmPHxMHDR6Ynm3+e3S4tkbXZYDoGN4bXmngMfrBj29ZDcv6bF+55MFqQ50F+3z9zY76gywezJY7xfJunN5//8yB93295Hgy3PA+6vqZ2eR4ML+N5kG9zZvPyvmcOt/zfbQ0r9Vq4ruUYuJTfD/PbfPBDS78Wrg/reuams/1+OLToGIh3ayA89/JT0s97o7eF/bL4uLg2P+OyVdmpmemTWx7ZNzt7cioL46K4suWx6jxe1rbcp2zR8TJ41sfLnr//1Y3Xdjl9XdhXozf3fqzybbaP936sGq/u7ftzVdbcn22nbs3CuMAu9v7s9t0s358pS/TYn/k2T99y/j8LplzS8vo30u/1b2hkuPn6N5T2xkjb69/ih2aosbIsO3PL8l7/RsL/F/v176qCvP7l++rBLb2PgXybZybO9hgY7vn6d32YA2E9HwqJYbQl97/dOH+ueZi2PJZ9j5vh4ZFw3AzHW2w/brYtukx+bfltb548t+Nm8/Xtj1Xbzy0VPG7yffVXk72Pm3ybl6fO/7VjTfxry2vHqn7HwMjQqny9I+kgaL7eza+Jx8CWbH92PDuSHUiXyR/l/LbGty7vGFgV/r/Yrx3XFOQYyPfV81t7HwP5Nj/admF/dtocTknbtPzs1Pn7haUy/7XDC9fXudsudObP1/nxH38qndYtQ+TbvL79bHNG7/10czjlsi77qfP5s9QxfSC7OPvpmrDOIzt6/24q3+aqncs8nvZkWfbq1KuN33eF3+9+79SPv9/2e99uv1N+derVeyfu/8nZrB8AgHP3duPPuVXNnzVb/sV6Of/+DwAAAJRCzP2DYSbyPwAAAFRGzP1DYSbyPwAAAFRGzP3DYSY1yf8P37brhbeeyNK7Ac4H8fy4G+67o7ld7HjPha/H5hfkp3/02yMvfPWJ5d32YJZlv7r3fV23f/iOuK6mE3GdH24/fZFrrlvW7T/0wMJ2re+fcGZX8/rj/VnuYRC7yi9NbG1c79ijU4358r1ZY94/98xTzetvfh23P72tuf3fhDct2XNwoO3ym8N6NoU5Ft5T5r49C/shn/FyL6z/wL9e+dmF24uXG9j4zsbdfP6Pm9cb3yPquSub28f7vdT6/+Vr330h3/6RG7qv/4nB7us/Ha73tTB/ubu5fes+/2rL+v80rD/eXrzclm/9sOv6X3xPc/sXw3HxjTA713/XX7z/rW6PV7ydPbc3Lxdvf/J/tzcuF68vXn/n+kefmGrbH53X//KbzevZ/eWfD7VuH0+PtxM9dHv78T0QHt+2HnmWZd/9s6xtP2cfaV7unzvWH6/vxO3d139zxzpPDFzXuPzC/VnXdr++/ndbu97fuJ49/7iu7f48d3fYf29O/Ci/3tP3h+MxnP9/rzSvr/O9TF+8u/31Jm7/jXXN5228vomO9T/Xsf656/J913/997zZXP+Ld65uW/+eT4Tj6Z7m7Lf+Q397Rdvlv/md5uNx8ivjx47PnDp8oGWvtj6PV4+uWXvZ5e945xXhtbTz673HZx+ePjk2OTaZZWMlfMvAlV7/t8L8n+aYu/C30PSTnzePu2c/2fy+9cFfNL9+Lpz+UHg84/fHr//1SNvx2vm4z93ZnOe7/pvCOpbrPV/7r+uWteHpz7906p/+5PXOnwvi/Tnx7tHG/Xt+w9WN8wZebp7f+XrVz3++u/15/dPhycb8Qdiv8+GdmTde3by9zuuP703y7Kebz9/4k1y8fNbxfiLrhtrvx/mu/6fh55gfXtP++hePjx880fFuzuuygXwJc+H1IZtrnh+3ivv72TNXd729+D482dx7z2aZS5p5dGbiyOFjpx6ZmJ2emZ2YefSxvUePnzo2u7fx3qV7v9jv8gvP77WN5/eB6Z3bs8az/XhzrLBLvf4TD+w/cOvkjQemD+47dXD2gRPTJw/tn5nZP31g5sZ9Bw9Of6Xf5Q8f2D21dde2W7eOHzp8YPdtu3Zt2zV++NjxfBnNRfWxc/JL48dO7m1cZGb39l1TO3Zsnxw/evzA9O5bJyfHT/W7fON703h+6S+Pn5w+sm/28NHp8ZnDj03vntq1c+fWvu/+ePTEwZmxiZOnjk2cGp4+OdG8L2OzjZPz7339Lk89zBwPr3cdBsJP55+7eWd6f9zct59c8qqam7T/eJq9Ed4LKn5/6/d1zP0jYSY1yf8AAABQBzH3hzf+XzhD/gcAAIDKiLl/dZiJ/A8AAACVEXN/M/mPpo9/r0v+v1D9/yf1/xv0//X/M/3/RP9f/z/T/9f/70P/X/+/zOvX/0/9/xn9f5ZStP5/yP3Zmizz7/8AAABQUTH3rw0zkf8BAACgMmLuvyzMRP4HAACAyoi5//Iwk5rkf5//r/+v/9+r/x+31f/P9P+L0P/f9N/6/4vo/+v/Z/r/5+xS9+fLvv4C9v/X6P9TNEXr/8fc/44wk5rkfwAAAKiDmPvfGWYi/wMAAEBlxNx/RZiJ/A8AAACVEXP/ujCTmuR//X/9f/1/n/+v/1+a/r/P/+9C/1//P9P/P2eXuj9f9vUXsP/v8/8pnKL1/2Pu/7Uwk5rkfwAAAKiDmPvfFWYi/wMAAEBlxNx/ZZiJ/A8AAACVEXP/VWEmNcn/9ez/v5Zlmf5/pv+v/9+xTv1//f+VoP+v/9+L/r/+f5nXr/+v/09/Rev/x9z/7jCTmuR/AAAAqIOY+68OM5H/AQAAoDJi7n9PmIn8DwAAAJURc/81YSY1yf/17P/7/H/9/yb9//Z16v/r/68E/X/9/170/5fR/x9e+Kv+f7HWr/+v/09/Rev/x9z/3jCTmuR/AAAAqIOY+68NM5H/AQAAoDJi7n9fmIn8DwAAAJURc//6MJOa5H/9f/1//X/9f/1//f+VVK7+/+CS5+j/N+n/t7tw/f+5hQX4/P/SrF//X/+f/orW/4+5//1hJjXJ/wAAAFAHMfd/IMxE/gcAAIDKiLn/ujAT+R8AAAAqI+b+sTCTmuR//X/9f/1//X/9f/3/lVSu/v/S9P+b9P/bXZTP/2+h/1+s9ev/6//TX9H6/zH3bwgzqUn+BwAAgDqIuX9jmIn8DwAAAJURc//1YSbyPwAAAFRGzP2bwkxqkv/1//X/9f/1//X/9f9Xkv6//n8v+v/6/2Vev/6//j/9Fa3/H3P/DWEmNcn/AAAAUAcx998YZiL/AwAAQGXE3P/BMBP5HwAAACoj5v7NYSY1yf/6//r/+v8l7v8P6f9n+v+Fp/+v/9+L/r/+f5nXr/+v/09/Rev/x9z/oTCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7r85zET+BwAAgMqIuX88zKQm+V//X/9f/7/E/X+f/9+2fv3/YtL/1//vRf9f/7/M69f/1/+nv6L1/2PuvyXMpCb5HwAAAOog5v4tYSbyPwAAAFRGzP0TYSbyPwAAAFRGzP2TYSY1yf/6//r/+v/6//r/+v8rSf9f/78X/X/9/zKvX/9f/5/+itb/j7l/KsykJvkfAAAA6iDm/q1hJvI/AAAAVEbM/dvCTOR/AAAAqIyY+7eHmdQk/5ek/78lFaD0//X/9f/1//X/S0X/X/+/F/1//f8yr1//X/+fdoNdTita/z/m/h1hJjXJ/wAAAFAHMffvDDOR/wEAAKAyYu6/NcxE/gcAAIDKiLn/tjCTmuT/kvT/ff6//r/+fwv9f/3/MtH/1//vRf9f/7/M69f/1/+nv6L1/2Pu3xVmUpP8DwAAAHUQc/+Hw0zkfwAAAKiMmPtvDzOR/wEAAKBUun0OYRRz/0fCTGqS//X/q97/n1+t/6//r//fe/36/ytL/1//vxf9f/3/Mq9f/1//n/6K1v+PuX93mElN8j8AAADUQcz9d4SZyP8AAABQGTH33xlmIv8DAABAZcTcvyfMpCb5X/+/6v1/n/+v/6//32/9+v8rS/9f/78X/f9y9v/Djy36/wXq/+fHkP4/RVS0/n/M/XeFmdQk/wMAAEAdxNz/0TAT+R8AAAAqI+b+j4WZyP8AAABQGTH3fzzMpCb5X/9f/1//X/9f/1//fyXp/69Y/7/xUljk/v+aZdyM/n85+/+R/n9x+v8+/5+iKlr/P+b+u8NMapL/AQAAoA5i7v9EmIn8DwAAAJURc/+vh5nI/wAAAFAZMfffE2ZSk/yv/6//r/+v/6//r/+/kvT/ff5/L/r/+v9lXr/+v/4//RWt/x9z/2+EmdQk/wMAAEAdxNx/b5iJ/A8AAACVEXP/J8NM5H8AAAAomVVLnhNz/2+GmdQk/5ev/z9Wyv7/YLp+/X/9f/1//X/9/wtJ/1//P9P/P2eXuj9f9vXr/+v/01/R+v8x9/9WmElN8j8AAADUQcz9nwozkf8BAACgMmLu/+0wE/kfAAAAKiPm/vvCTGqS/y90/7/z8r34/H/9/0z/X/9f/1///zzp/+v/Z/r/5+xS9+fLvn79f/1/+ita/z/m/t8JM6lJ/gcAAIA6iLn//jAT+R8AAAAK6uGzvkTM/Z8OM5H/AQAAoDJi7v9MmElN8n/5Pv9f/1//X/9f/1//v0z0//X/e9H/1/8v8/r1//X/6a9o/f+Y+x8IM6lJ/gcAAIA6iLn/s2Em8j8AAABURsz9vxtmIv8DAABAZcTc/3thJj3y/9KVhPLR/9f/1//X/9f/1/9fSfr/i/v/+WuY/n+T/r/+f5nXr/+v/09/Rev/x9z/uTAT//4PAAAAlRFz/++Hmcj/AAAAUBkx9/9BmIn8DwAAAJURc/+DYSY1yf/6//r/+v/6//r/+v8rSf/f5//3ov+v/1/m9ev/6//TX9H6/zH3fz7MpCb5HwAAAOog5v4/DDOR/wEAAKAyYu7fG2Yi/wMAAEBlxNz/UJhJTfK//r/+v/6//r/+v/7/StL/1//vRf9f/7/M69f/1/+nv6L1/2Pu3xdmsqf9ZgAAAIDyirn/C2EmNfn3fwAAAKiDmPv3h5nI/wAAAFAZMfcfCDOpSf7X/9f/1//X/9f/1/9fSfr/+v+96P/r/5d5/fr/+v/0V7T+f8z902EmNcn/AAAAUAcx9x8MM5H/AQAAoDJi7j8UZiL/AwAAQGXE3P9wmElN8r/+v/6//n9t+/+vfK9jnfr/+v8rQf9f/78X/X/9/zKvX/9f/5/+itb/j7n/cJhJTfI/AAAA1EHM/V8MM5H/AQAAoDJi7v9SmIn8DwAAAJURc/+RMJOa5H/9f/1//f/a9v+X9/n/axZuV/9f//9c6P/r//ei/6//X+b16//r/9Nf0fr/MfcfDTOpSf4HAACAOoi5/1iYifwPAAAAlRFz//EwE/kfAAAAKiPm/hNhJjXJ//r/Z9X/XzWwRDdQ/7/7+vX/K9D/b6H/r/9/LvT/9f970f/X/y/z+vX/9f/pr2j9/5j7/yjMpCb5HwAAAOog5v6TYSbyPwAAAFRGzP0zYSbyPwAAAFRGzP2zYSY1yf/6/z7/X/9f/1//X/9/Jen/6//3ov+v/1/m9ev/6//TX9H6/zH3nwozqUn+B4D/Z+8+c/U6qz4OP6/zOiRCwBTCEGACDIExIDEGeknooUPovYXeQofQe++99x4IvUpB8VlrhWPsvW2f8/jc+17X9SELTpB8RzEf/kp+2gAAHeTuv1/cYv8DAADANHL33z9usf8BAABgGrn7HxC3NNn/+n/9v/5f/6//1//vk/5f/79E/6//3/L79f/6f9aN1v/n7n9g3NJk/wMAAEAHufsfFLfY/wAAADCN3P0PjlvsfwAAAJhG7v6HxC1N9r/+X/+v/9f/6//1//uk/9f/L9H/6/+3/H79v/6fdaP1/7n7Hxq3NNn/AAAA0EHu/ofFLfY/AAAATCN3/8PjFvsfAAAAppG7/9q4pcn+1//r//X/G+z//1//r//fDv2//n+J/l//v+X36//1/6wbrf/P3X9d3NJk/wMAAEAHufsfEbfY/wAAADCN3P2PjFvsfwAAAJhG7v5HxS1N9r/+X/+v/99g/+/7//r/DdH/6/+X6P/1/1t+v/5f/8+60fr/3P2Pjlua7H8AAADoIHf/Y+IW+x8AAACmkbv/sXGL/Q8AAADTyN3/uLilyf7X/+v/9f/6f/2//n+f9P/6/yX6f/3/lt+v/9f/s27v/f+9rz9zL7T/z91/fdzSZP8DAABAB7n7Hx+32P8AAAAwjdz9T4hb7H8AAACYRu7+J8YtTfa//l//f0f/f9v/6f/1//r/O36u/z8e+n/9/xL9v/5/y+/X/+v/Wbf3/n+l9z/7v+fuf1Lc0mT/AwAAQAe5+58ct9j/AAAAMI3c/U+JW+x/AAAAmEbu/qfGLU32v/5f/+/7//p//b/+f5/0/8P2/2f/X+8w/f8F0f/r/8/X/9/rAt6v/6eD0fr/3P1Pi1ua7H8AAADoIHf/0+MW+x8AAACmkbv/hrjF/gcAAIBp5O5/RtzSZP/r//X/+n/9/+H+/1TL/v/2n+n/90P/P2z/v0z/f0H0//p/3//X/7NstP4/d/8z45Ym+x8AAAA6yN3/rLjF/gcAAIBp5O5/dtxi/wMAAMA0cvc/J25psv/1//p//b/+/0jf/79ijv7f9//3R/+v/1+i/9f/b/n9+n/9P+tG6/9z9z83bmmy/wEAAGB6p3a1+58Xt9j/AAAAMI3c/c+PW+x/AAAAmEbu/hfELU32v/5f/6//1/8fqf+f5Pv/+v/90f/r/5dcaP+/0//XX4v+f5z36//1/6wbrf/P3f/CuKXJ/gcAAIAOcve/KG6x/wEAAGAauftfHLfY/wAAADCN3P0viVua7H/9v/5f/6//1//r//dJ/6//X+L7//r/Lb9f/6//Z91o/X/u/pfGLU32PwAAAHSQu/9lcYv9DwAAANPI3f/yuMX+BwAAgGnk7n9F3HL2/j91OV91+ej/9f/6f/2//l//v0/6f/3/Ev3/ufv/q87z6+n/x3q//l//z7rR+v/c/TfGLf75PwAAAEwjd/8r4xb7HwAAAKaRu/9VcYv9DwAAANPI3f/quKXJ/j9f/3/rnQ/+vP7/wuj/z/1+/b/+X/+v/9f/6/+X6P99/3/L79f/6/9ZN1r/n7v/NXFLk/0PAAAAHeTuf23cYv8DAADANHL3vy5usf8BAABgGrn7Xx+3NNn/x//9/2v0//p//X9c/b/+X/+v/9f/L9P/6/+3/H79v/6fdaP1/7n73xC3NNn/AAAA0EHu/jfGLfY/AAAATCN3/5viFvsfAAAAppG7/81xS5P9f/z9v+//6/8vsv8/pf9P+v/4+6r/1/9fBP2//n+n/79kJ93Pb/39+n/9P+tG6/9z9990Zur12/8AAADQwU1n/njV7i1xi/0PAAAA08jd/9a4xf4HAACAaeTuf1vc0mT/6//1/yfe//v+f9H/x99X/b/+/yLo//X/O/3/JTvpfn7r79f/6/9ZN1r/n7v/7XFLk/0PAAAAHeTuf0fcYv8DAADANGL3H/zL7/Y/AAAATOmdZ/541e5dcUuT/d+4/7/mqP3/1f/1n/X/536//v9Y+v+bzv69p//X/2+J/l//v0T/r//f8vvH6f/jB9fq/xnPaP1/7v53xy1N9j8AAAB0kLv/PXGL/Q8AAADTyN1/c9xi/wMAAMA0cve/N25psv8b9/+TfP//PrfEC/T/8/b/vv8fV/+v/z8X/b/+f6f/v2Qn3c9v/f3j9P++/8+4Ruv/c/e/L25psv8BAACgg9z9749b7H8AAACYRu7+D8Qt9j8AAABMI3f/B+OWJvtf/7/1/t/3//X/+n/9/9j0//r/Jfp//f+W36//1/+zbrT+P3f/h+KWJvsfAAAAOsjd/+G4xf4HAACAaeTu/0jcYv8DAADANHL3fzRuabL/9f/6/331/7f/Ivr/Jv3/dfr/nf7/vPT/+v8l+n/9/5bfr//X/7NutP4/d//H4pYm+x8AAAA6yN3/8bjF/gcAAIBp5O7/RNxi/wMAAMA0cvd/Mm64x11O7knH6/R5fh69uf5f/+/7//p/3//X/++T/l//v0T/r//f8vv1//p/1o3W/+fu/1Tc4p//AwAAwDRy9386brH/AQAAYBq5+z8Tt9j/AAAAMI3c/Z+NW5rsf/2//l//v9n+/2r9/+H36//HpP/X/y/R/+v/t/x+/b/+n3Wj9f+5+z8XtzTZ/wAAANBB7v7Pxy32PwAAAEwjd/8X4hb7HwAAAKaRu/+LcUuT/a//1//r/zfb//v+/1nv1/+PSf+v/1+i/9f/b/n9+n/9P+tG6/9z938pbmmy/wEAAKCD3P1fjlvsfwAAAJhG7v6vxC32PwAAAEwjd/9X45Ym+1//r//X/+v/9f/6/33S/+v/l+j/9f9bfr/+X//PutH6/9z9X4tbmux/AAAA6CB3/9fjFvsfAAAAppG7/xtxi/0PAAAA08jd/824pcn+n7n/X/qf6f8P6P/1/zv9v/5/z/T/+v8l+n/9/5bfr//X/7NutP4/d/+34pYm+x8AAAA6yN3/7bjF/gcAAIBp5O7/Ttxi/wMAAMA0cvd/N25psv9n7v+X6P8P6P/1/zv9v/5/z/T/+v8l+n/9/5bfr//X/7PuhPr/07vz9P+5+78XtzTZ/wAAANBB7v7vxy32PwAAAEwjd/8P4hb7HwAAAKaRu/+Hccs8+/++Ny/8Sf3/sff/Z34T6f/1/7sh+//Th96p/z+g/98v/b/+f4n+X/+/5ffr//X/rBvt+/+5+38Ut8yz/wEAAKC93P0/jlvsfwAAAJhG7v6fxC32PwAAAEwjd/9P45Ym+1//7/v/+v9O/f89r9j5/r/+/zLT/+v/l+j/9f9bfr/+X//PutH6/9z9P4tbmux/AAAA6CB3/8/jFvsfAAAAppG7/xdxi/0PAAAA08jd/8u4pcn+1//r//X/rfr/Q+/X/x/Q/++X/l//v0T/r//f8vuz/8/fd/p//T//a7T+P3f/r+KWJvsfAAAAOsjd/+u4xf4HAACAaeTu/03cYv8DAADANHL3/zZuabL/9f/6f/1/m/7/trvtdvp//f9lN1D/f+VRfh39/wH9/2H6f/2/7//r/1k2Wv+fu/+WuKXJ/gcAAIAOcvf/Lm6x/wEAAGAauft/H7fY/wAAADCN3P23xi1N9r/+X/8/Zf9/J/2/7//r/0cxUP9/JPr/A/r/w/T/+n/9v/6fZaP1/7n7/xC3NNn/AAAA0EHu/j/GLfY/AAAATCN3/5/iFvsfAAAAppG7/89xS5P9r//X/198/3+6/rqH7f99/1//r/8fxrz9/5X6f/3/kfv/G248+LH+f5vv1//r/1k3Wv+fu/8vcUuT/Q8AAAAd5O7/a9xi/wMAAMA0cvf/LW6x/wEAAGAaufv/Hrc02f/T9P93v+vB1f/7/r/+X/8fP9f/j2He/t/3//X/vv+v/9f/6/9ZM1r/n7v/H3FLk/0PAAAAHeTu/2fcYv8DAADANHL3/ytusf8BAABgGrn7/x23NNn/0/T/Sf+v/9f/6//j5/r/Mej/9f9L9P/6/y2/X/+v/2fdaP1/7v7/BAAA//9RaTCH") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b21445, 0x0, 0xfc, 0x0, &(0x7f0000000100)) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.083152448s ago: executing program 4 (id=1657): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x17) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES32=r6, @ANYRES64=r4, @ANYBLOB="34810e0517a53638d8a25bc66242bf8580433caaa8d0f6900a4d437f6de3ede889a8bb42f15f33f739", @ANYRES32, @ANYRES64=r7, @ANYRESDEC, @ANYBLOB="5bc8bfa3178ce76b5c2a014efd446afcbf55f8dd679c8c1d79f3dc5d8c3a44ed9b085986ddf6cd9810c6a6a10f3c41e8080a625f484b0abf31192d4a0c50389a1db5483f312d9faa65ee2bbaab29a10c5ec199f2a97634f8ca782d6694e01c6e3429acc79cdccf9b93cad4ca5ba8a016f4aa23dd6caab780d5f130d8db801fad3be3207b954965a69d1499692a47356dc61897f8cc69e350febf9a6d3088c88a3dce5b0485f35c3110a7601d7739aee14c7f7f6cbf1e33cfd64259d1bc691bcffe1d1982a394fb44ed513975fe652678d5ce57f9b54ecd9045c02d86e82d247338"], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xa, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xa0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee5233188", 0x0, 0x8000}, 0x50) r9 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) setsockopt$XDP_TX_RING(r9, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) 2.081771698s ago: executing program 1 (id=1658): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x1531, &(0x7f00000003c0)="$eJzs3AuYjtXaOPD7Xms9DA29TXIY1lr3w4vBIklySJJDkiRbkpwSkiRJkopxlsQkIcdJchhCcpjGpHE+H3JOmiRNkoTklKz/NW37r73b+2vv7+v77GvP/buu55p1v897r/de7z3XPIe53vfbXkn19n0HQETwP4J//pEIADEAMAwArgWAAAAqx1WOy96fR2Li/+xF2B/rgZSrXQG7mrj/ORv3P2fj/uds3P+cjfufs3H/czbuf87G/WcsJ9s+p8h1vOXc7dteSfVa1K/d7P/k/n/A9///vfDx/z9IVvnJX24sf0PvfyGF+5+zcf9zNu5/zsb9z9m4/zkb9z9n4/7nbNx/xnKyf+Ieccl8AH/n8av2v4Nc8G9w3/w/Zbvav3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKGc/4KBQB/GV/tuhhjjDHGGGOMMfbH8bmvdgWMMcYYY4wxxhj734cgQIKCAHJBboiBPJAXroFYyAf54VqIwHUQB9dDAbgBCkIhKAxFIB6KQjHQYMACQQjFoQREoSSUgtKQAGWgLJQDB+WhAtwIFeEmqAQ3Q2W4BarArVAVqkF1qAG3QU24HWrBHVAb7oQ6UBfqQX24CxrA3dAQ7oFGcC80hvugCdwPTeFP0AwegObwILSAh6AlPAytoDW0gbbQ7r+V/wK8CC9BX+gHidAfBsBAGASDYQgMhWHwMgyHmMvvzShIgtdgNLwOY+ANGAvjYDy8CRNgIkyCyTAFpkIyvAXT4G2YDu/ADJgJs2A2pMAcmAvvwjyYDwvgPVgI78MiWAxLYCmkwgeQBssgHT6E5fARZMAKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22w8ewA3bCLtgNe2Av7INPYD98CgfgM8iEz//F/LN/k98bAQEFClSoMBfmwhiMwbyYF2MxFvNjfoxgBOMwDgtgASyIBUsXxsIYj/FYDIuhQYOEhMWxOEYxiqWwFCZgApbFsujQYQWsgBXxJqyElbAyVsYqWAWrYjWshjWwBtbEmlgLa2FtrI11sA7Ww3p4F96Fd2NDbIiNsBE2xsbYBJtgVtGm2AybYXNsji2wBbbEltgKW2EbbIPtsB22x/bYATtgJ+yEnbEzdsEu2BW7Yjfsht2xO/bAHtgTe2Iv7IW98Xl8Hl/AF/AlfAn7YR3RHwfgAByEg3AIDsWh+DIOx1fwFXwVR+IoTMLX8DV8HcfgGRyL43A8jseaYiJOwslIYiomYzJOw2k4HafjDJyJM3E2puAcnItzcR7Ox/n4Hi7E9/F9XIyLcSmmYiqm4TJMx3RcjmcxA1fgSlyFq3ENrsZ1uB7X4UbchBtxC27BbbgNP8aPcSfuxN24G/eiAsBP8FP8FEdiJmbiQTyIh/AQHsbDmIVZeASP4FE8isfwGB7H43gCT+IpPImn8TSewbN4Ds/hBbyAF/HZ+K+b7y2zYSSIbEookUvkEjEiRuQVeUWsiBX5RX4RERERJ+JEAVFAFBQFBYjCIl7Ei2LivDDCCBKhKC6Ki6iIilKilEgQCaKsKCuccKKCqCAqioqikqgkKotbRBVxq6gqqomOroaoIWqKTq6WuEPUFrVFHVFX1BP1RX3RQDQQDUVD0Ug0Eo1FY9FE3C+aiv44BB8Q2Z1pIUZhS5GErURr0Ua0Fa/jI6K9GIMdREfRSTwmxuFY7CLau67iSdFNTMLu4mkxGZ8RPcVU7CWeE73F86KPeEG8KDq4vqKfmIH9xQAxGweJwWKIGCrmYV2R3bF64lUxUowSSeI1sRRfF2PEG2KsGCfGizfFBDFRTBKTxRQxVSSLt8Q08baYLt4RM8RMMUvMFilijpgr3hXzxHyxQLwnFor3xSKxWCwRS0Wq+ECkiWUiXXwolouPRIZYIVaKVWK1WCPWinVivdggNopNYrPYIraKbWK7+FjsEDvFLrFb7BF7xT7xidgvPhUHxGciU3wuDoovxCHxpTgsvhJZ4mtxRHwjjopvxTHxnTguvhcnxElxSvwgTosfxRlxVpwT58UF8ZO4KH4Wl4QXIFEKKaWSgcwlc8sYmUfmldfIWJlP5pfXyoi8TsbJ62UBeYMsKAvJwrKIjJdFZTGppZFWkgxlcVlCRmVJWUqWlgmyjCwry0kny8sK8kZZUd4kK8mbZWV5i6wib5VVZTVZXdaQt8ma8nZZS94ha8s7ZR1ZV9aT9eVdsoG8WzaU98hG8l7ZWN4nm8j7ZVP5J9lMPiCbywdlC/mQbCkflq1ka9lGtpXt5COyvXxUdpAdZSf5mOwsH5dd5BOyq3xSdpNPye7yadlDPiN7ymdlL/mc7C2fl33kz/KS9LKv7CcTZX85QA6Ug+RgOUQOlcPky3K4fEWOkK/KkXKUTJKvydHydTlGviHHynFyvHxTTpAT5SQ5WU6RU2WyfEtOk2/L6fIdOUPOlLPkbJki58ghl2da8E/kv/138kf88urb5Hb5sdwhd8pdcrfcI/fKfXKf3C/3ywPygMyUmfKgPCgPyUPysDwss2SWPCKPyKPyqDwmj8nj8rg8IU/K8/IHeVr+KM/Is/KsPC8vyAvy4uX3ABQqoaRSKlC5VG4Vo/KovOoaFavyqfzqWhVR16k4db0qoG5QBVUhVVgVUfGqqCqmtDLKKlKhKq5KqKgqiZcPmqqsKqecKq8qqBv/lXxVSpVWCarMX+X/Xn3tVDvVXrVXHVQH1Ul1Up1VZ9VFdbkpu45uqpvqrrqrHqqH6ql6ql6ql+qteqs+qo96Ub2o+qq+KlElqgFqoBqkBqshaqgapl5Ww9VwNUKNUCPVSJWkktRoNVqNUWPUWDVWjVfj1QQ1QU1Sk9QUNUUlq2Q1TU1T09V0NUPNULPULJWiUtRcNVfNU/PUArVALVQL1SK1SC1RS1SqSlVpKk2lq3S1XC1XGWqFWqFWqVVqjVqj1ql1aoPaoDapTWqL2qIycm9X29UOtUPtUrvUHrVH7VP71H61Xx1QB1SmylQH1UF1SB1Sh9VhlaWy1BF1RB1VR9UxdUwdV8fVCXVCnVKn1Gl1Wp1RZ9Q5dU5dUBfURXVRXVKXsk/7AhGIQAUqyBXkCmKCmCBvkDeIDWKD/EH+IBJEgrggLigQ3BAUDAoFhYMiQXxQNCgW6MAENqAgDIoHJYJoUDIoFZQOEoIyQdmgXOCC8kGF4MagYnBTUCm4Oagc3BJUCW4NqgbVgupBjeC2oGZwe1AruCOoHdwZ1AnqBvWC+sFdQYPg7qBhcE/QKLg3aBzcFzQJ7g+aBn8KmgUPBM2DB4MWwUNBy+DhoFXQOmgTtA3a/aHze3+m0KOur+6nE3V/PUAP1IP0YD1ED9XD9Mt6uH5Fj9Cv6pF6lE7Sr+nR+nU9Rr+hx+pxerx+U0/QE/UkPVlP0VN1sn5LT9Nv6+n6HT1Dz9Sz9GydoufoufpdPU/P1wv0e3qhfl8v0ov1Er1Up+oPdJpeptP1h3q5/khn6BV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+uP9Q69U+/Su/UevVfv05/o/fpTfUB/pjP15/qg/kIf0l/qw/ornaW/1kf0N/qo/lYf09/p4/p7fUKf1Kf0D/q0/lGf0Wf1OX1eX9A/6Yv6Z31J++yT++zDu1FGmVwml4kxMSavyWtiTazJb/KbiImYOBNnCpgCpqApaAqbwibexJtippjJRoZMcVPcRE3UlDKlTIJJMGVNWeOMMxVMBVPRVDSVTCVT2VQ2VUwVU9VUNdVNdXObuc3cbm43d5g7zJ3mTlPX1DX1TX3TwDQwDU1D08g0Mo1NY9PENDFNTVPTzDQzzU1z08K0MC1NS9PKtDJtTBvTzrQz7U1708F0MJ1MJ9PZdDZdTBfT1XQ13Uw30910Nz1MD9PT9DS9TC/T2/Q2fUwf86J50fQ1fU2iSTQDzAAzyAwyQ8wQM8wMM8PNcDPCjDAjzUiTZJLMaDPajDFjzFgzzow3b5oJZqKZZCabKWaqSTbJZpqZZqab6WaGmWFmmVkmxaSYuWaumWfmmQVmgVloFppFZpFZYpaYVJNq0kyaSTfpZrlZbjJMhllpVprVZrVZa9aa9Wa92Wg2ms1mM241W812s93sMDvMLrPL7DF7zD6zz+w3+80Bc8Bkmkxz0Bw0h8whc9gcNlkmyxwxR8xRc9QcM8fMcXPcnDAnzClzypw2p80Zc8acM+fMBfOTuWh+NpeMNzE2j81rr7GxNp/Nb6+1fxsXtkVsvC1qi1ltC9pCfxUba22CLWPL2nLW2fK2gr3RJmRfUv0qrmqr2eq2hr3N1rS321q/iRvYu21De49tZO+19e1dfxU3tvfZJvYh29Q+bJvZ1ra5bWtb2IdsS/uwbWVb2za2re1sH7dd7BO2q33SdrNP/SZOs8vservBbrSb7H77qT1nz9uj9lt7wf5k+9p+dph92Q63r9gR9lU70o76TTzevmkn2Il2kp1sp9ipv4ln2dk2xc6xc+27dp6d/5s41X5gF9p0u8gutkvs0l/i7JrS7Yd2uf3IZtgVdqVdZVfbNXatXff/a11lt9itdpvdZz+xO+xOu8vutnvs3l/i7HUcsJ/ZTPu5PWK/sYfsl/awPWaz7Ne/xNnrO2a/s8ft9/aEPWlP2R/safujPWPP/rL+7LX/YH+2l6y3QEiCJCkKKBflphjKQ3npGoqlfJSfrqUIXUdxdD0VoBuoIBWiwlSE4qkoFSNNhiwRhVScSlCUSlIpKk0JVIbKUjlyVJ4q0I1UkW6iSnQzVaZbqArdSlWpGlWnGnQb1aTbqRbdQbXpTqpDdake1ae7qAHdTQ3pHmpE91Jjuo+a0P3UlP5EzegBak4PUgt6iFrSw9SKWlMbakvt6BFqT49SB+pInegx6kyPUxd6grrSk9SNnqLu9DT1oGeoJz1Lveg56k3PUx96gV6kl6gv9aNE6k8DaCANosE0hIbSMHqZhtMrNIJepZE0ipLoNRpNr9MYeoPG0jgaT2/SBJpIk2gyTaGplExv0TR6m6bTOzSDZtIsmk0pNIfm0rs0j+bTAnqPFtL7tIgW0xJaSqn0AaXRMkqnD2k5fUQZtIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+30Me2gnbSLdtMe2kv76BPaT5/SAfqMMulzOkhf0CH6kg7TV5RFX9MR+oaO0rd0jL6j4/Q9naCTdIp+oNP0I52hs3SOztMF+oku0s90iTxBiKEIZajCIMwV5g5jwjxh3vCaMDbMF+YPrw0j4XVhXHh9WCC8ISwYFgoLh0XC+LBoWCzUoQltSGEYFg9LhNGwZFgqLB0mhGXCsmG50IXlwwrhjWHF8KawUnhzWDm8JawS3hpWDauFD91bI7wtrBneHtYK7whrh3eGdcK6Yb2wfnhX2CC8O2wY3hM2Cu8NK4X3hU3C+0O4/HmV5uGDYYvwobBl+HDYKmwdtgnbhu3CR8L24aNhh7Bj2Cl8LOwcPh52CZ8Iu4ZPht3Cp353f2LYPxwQDgwHht7fI5dEl0ZTox9E06LLounRD6PLox9FM6Iroiujq6Kro2uia6ProuujG6Ibo5uim6Nboluj26Le188NDp1w0ikXuFwut4txeVxed42Ldflcfneti7jrXJy73hVwN7iCrpAr7Iq4eFfUFXPaGWcdudAVdyVc1JV0pVxpl+DKuLKunHOuvKvg2rp2rp1r7x51HVxH18k95h5zj7vH3RPuCfek6+aect3d066He8b1dM+6Z91zrrd73vVxL7gX3Uuur+vnEl2iG+AGuEFukBvihrhhbpgb7oa7EW6EG+lGuiSX5Ea70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7ZJbtpbpqb7qa7GW6Gm+VmuRSX4ua6uW6em+cWuAVuYcJCt8gtckvcEpfqUl2aS3PpLt0td8tdhstwK91Kt9qtdmvdWrferXcb3Ua32W12W91Wt91tdzvcDrfL7XJ73B63z+1z+91+d8AdcJku0x10B90hd8gddl+5LPe1O+K+cUfdt+6Y+84dd9+7E+6kO+V+cKfdj+6MO+vOufPugvvJXXQ/u0vOu+TIW5Fpkbcj0yPvRGZEZkZmRWZHUiJzInMj70bmReZHFkTeiyyMvB9ZFFkcWRJZGkmNfBBJiyyLpEc+jCyPfBTJiKyIrIysiqyOrIl4X3RH6Iv7Ej7qS/pSvrRP8GV8WV/OO1/eV/A3+or+Jl/J3+wr+1t8FX+rr+qr+er+Yd/Kt/ZtfFvfzj/i2/tHfQff0Xfyj/nO/nHfxT/hu/onfTf/lO/un/Y9/DO+p3/W9/LP+d5/ueLyL/m+vp9P9P39AD/QD/KD/RA/1A/zL/vh/hU/wr/qR/pRPsm/5kf71/0Y/4Yf68f58f5NP8FP9JP8ZD/FT/XJ/i0/zb/tp/t3/Aw/08/ys32Kn+Pn+nf9PD/fL/Dv+YX+fb/IL/ZL/FKf6j/waX6ZT/cf+uX+I5/hV/iVfpVf7df4tX6dX+83+I1+k9/st/itfpvf7j/2O/xOv8vv9nv8Xr/Pf+L3+0/9Af+Zz/Sf+4P+C3/If+kP+698lv/aH/Hf+KP+W3/Mf+eP++/9CX/Sn/I/+NP+R3/Gn/Xn/Hl/wf/kL/qf/SX+zBpjjDHG2D9l4O/s7/93HlMAIC6PBwBAvp1Fsn69XwLA5oJ/Hg8W8Z0jAPBkv14P/GWrUycxMfHyczMkBCUWA0Dkb17gcrwCOsHj0BU6QsW/W99g8fwF+p35o7cA5P1VTgxcia/M/8U/mP+Rx8anVQnPxf0X8y8GSChxJScPXIlXQKfs1UBHqPQP5i/U/nfqz/NlMkCHX+XEwpX4Sv0V4FF4Crr+1TMZY4wxxhhjjLE/Gyyq9/i96+fs6/N4dSUnN1yJf+/6/B+J/QPXwBhjjDHGGGOMsf/aM8/3eeKRrl079vjnB7n/lSfz4L8/CP49yuDBI/DvUcb/6eBq/2VijDHGGGOM/dGunPRfeSzP1SyIMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLgX71pV95AP53vufsaq+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9r+XwAAAP//NGYv1w==") r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r0, &(0x7f0000001c80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e310000000000000000000000080001400000000008"], 0xfc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd318001806"], 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 1.837256852s ago: executing program 0 (id=1659): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32, @ANYRES16=0x0], 0x1, 0x1b1, &(0x7f0000000300)="$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") 1.105901743s ago: executing program 0 (id=1660): syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x15) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0xd}, {0x3, [{0xc8, 0x7870}, {0xc9, 0xfff5}, {0xc9, 0x7ff}]}}}, 0x10) open(0x0, 0x14927e, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x8) 1.072813534s ago: executing program 4 (id=1661): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) dup(r0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000200)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x36, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x0, 0x3, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000000000) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='\x06\x00\a0\x00') syslog(0x4, &(0x7f0000000140)=""/27, 0x1b) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x43282dcb2421f72, 0x0, 0x1ff, 0x487c, 0x10, 0x10001, 0x1}) socket$kcm(0x10, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r5, 0x11, 0xd, 0x0, &(0x7f0000002280)) 936.256055ms ago: executing program 1 (id=1662): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 392.054314ms ago: executing program 0 (id=1663): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000704a012704c6f011367acc6ae8fb462852ab71c7c6f55b1b4a47a69445efcc2e32c4d490fec2c09f2a282f690ad436cb19f682e0c5057a8335d1c7b4f56aff9319a78ec3079531468811b33b5d83aa6b2fb3e91d9c8446fa08b4e3b086fb3e4699b52c12cb5346981b1411dbe467f7613e498d4858ad51883225a1fc73ed7219ec2d34c4a94b4b673866ad068b3fce87bd0504e4c6b10c84bc9520eba51484a2e3bc36d461d72"], 0x1, 0x166, &(0x7f0000000240)="$eJzs281KOmEUx/Hf+Pr/2/vbplVQUJucNGhql5ciOpk0lmQbJYgupSvrBhTqBppglKkZgiZDH9LvB2TOEQ7nPItHjwsFYG6tSrJkKSvJ9/2Hyz1LO6aHAjAVvt58APMq/WJ6AgBmDCrpYA9oS3p+va/1R69swv1hUEkFz3NJ/U/1uaT1j1bw3M5E6/OS/iXZX56G9fux/v9/2L8Qqy8krh+e/2A3Wr8gaVHSkqRlSSuj31prkta/6F+P9d9K2B/4DUvFeB55I6WLpucehXk2yEthngvyciw/DvN8kBdrN159UkcAMKbUN/c/Hbv/mdj9B/B3dbq9q6rnubcEBAQEYWD6kwnApNl3rbbd6fYOm61qw22412XnzHFKp6UTxw42fzu6/wOYHR9f+qYnAQAAAAAAAAAAAAAA49qQtGl6CAAAAABTMY2/E5k+IwAAAAAAAAAAAAAAAAAAADAr3gMAAP//s9VQng==") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a000c0, &(0x7f0000000280)={[{@utf8}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_win95}, {@uni_xlateno}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@rodir}, {@utf8no}]}, 0x3, 0x354, &(0x7f0000000900)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x1}}, &(0x7f00000000c0)) mount_setattr(0xffffffffffffffff, 0x0, 0xc100, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 219.976917ms ago: executing program 1 (id=1664): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x1000, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0x9}, 0x8) 178.650138ms ago: executing program 0 (id=1665): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=1666): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) kernel console output (not intermixed with test programs): d wMaxPacketSize 0 [ 223.500398][ T4299] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 223.539189][ T4299] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 223.593090][ T4299] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 223.616267][ T4299] usb 4-1: Manufacturer: syz [ 223.636409][ T4299] usb 4-1: config 0 descriptor?? [ 223.670750][ T4351] pwc: recv_control_msg error -32 req 02 val 2b00 [ 223.692765][ T4351] pwc: recv_control_msg error -32 req 02 val 2700 [ 223.720055][ T4351] pwc: recv_control_msg error -32 req 02 val 2c00 [ 223.740187][ T4351] pwc: recv_control_msg error -32 req 04 val 1000 [ 223.769936][ T4351] pwc: recv_control_msg error -32 req 04 val 1300 [ 223.799021][ T4351] pwc: recv_control_msg error -32 req 04 val 1400 [ 223.934739][ T4351] pwc: recv_control_msg error -32 req 02 val 2000 [ 224.145602][ T4299] usbhid 4-1:0.0: can't add hid device: -71 [ 224.152222][ T4351] pwc: recv_control_msg error -71 req 04 val 1500 [ 224.163660][ T4299] usbhid: probe of 4-1:0.0 failed with error -71 [ 224.170130][ T4351] pwc: recv_control_msg error -71 req 02 val 2500 [ 224.177038][ T4351] pwc: recv_control_msg error -71 req 02 val 2400 [ 224.184861][ T4351] pwc: recv_control_msg error -71 req 02 val 2600 [ 224.193922][ T4299] usb 4-1: USB disconnect, device number 48 [ 224.229978][ T4351] pwc: recv_control_msg error -71 req 02 val 2900 [ 224.244897][ T4351] pwc: recv_control_msg error -71 req 02 val 2800 [ 224.265818][ T4351] pwc: recv_control_msg error -71 req 04 val 1100 [ 224.299670][ T4351] pwc: recv_control_msg error -71 req 04 val 1200 [ 224.329953][ T4351] pwc: Registered as video103. [ 224.345787][ T4351] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input56 [ 224.483815][ T4351] usb 1-1: USB disconnect, device number 41 [ 224.879672][ T7436] loop4: detected capacity change from 0 to 256 [ 224.962378][ T7436] FAT-fs (loop4): Directory bread(block 64) failed [ 225.005470][ T7436] FAT-fs (loop4): Directory bread(block 65) failed [ 225.039621][ T7436] FAT-fs (loop4): Directory bread(block 66) failed [ 225.048078][ T7436] FAT-fs (loop4): Directory bread(block 67) failed [ 225.067767][ T7436] FAT-fs (loop4): Directory bread(block 68) failed [ 225.086623][ T7436] FAT-fs (loop4): Directory bread(block 69) failed [ 225.104639][ T7436] FAT-fs (loop4): Directory bread(block 70) failed [ 225.111794][ T7436] FAT-fs (loop4): Directory bread(block 71) failed [ 225.118494][ T7436] FAT-fs (loop4): Directory bread(block 72) failed [ 225.126771][ T7436] FAT-fs (loop4): Directory bread(block 73) failed [ 225.178970][ T7436] syz.4.1066: attempt to access beyond end of device [ 225.178970][ T7436] loop4: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 225.220358][ T7436] syz.4.1066: attempt to access beyond end of device [ 225.220358][ T7436] loop4: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 225.354953][ T4351] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 225.554568][ T4351] usb 2-1: device descriptor read/64, error -71 [ 225.595489][ T7460] kvm: pic: single mode not supported [ 225.595641][ T7460] kvm: pic: single mode not supported [ 225.601121][ T7460] pic_ioport_write: 24 callbacks suppressed [ 225.601131][ T7460] kvm: pic: level sensitive irq not supported [ 225.614161][ T7460] kvm: pic: single mode not supported [ 225.689853][ T4299] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 225.830054][ T4351] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 225.891598][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.919810][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.929583][ T4299] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.944466][ T4299] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.978285][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.989926][ T4351] usb 2-1: device descriptor read/64, error -71 [ 226.005319][ T4299] usb 5-1: config 0 descriptor?? [ 226.110009][ T4351] usb usb2-port1: attempt power cycle [ 226.239835][ T5372] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 226.416852][ T4299] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 226.426991][ T4299] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 226.432515][ T5372] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.435270][ T4299] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 226.444655][ T5372] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 226.463868][ T5372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.466998][ T4299] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 226.479564][ T4299] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 226.479721][ T5372] usb 1-1: config 0 descriptor?? [ 226.492074][ T4299] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 226.504604][ T5372] pwc: Askey VC010 type 2 USB webcam detected. [ 226.507300][ T4299] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 226.523684][ T4299] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 226.529888][ T4351] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 226.580585][ T4351] usb 2-1: device descriptor read/8, error -71 [ 226.699971][ T128] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 226.849815][ T4351] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 226.880453][ T4351] usb 2-1: device descriptor read/8, error -71 [ 226.893557][ T128] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 226.909369][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.920370][ T5372] pwc: recv_control_msg error -32 req 02 val 2b00 [ 226.927353][ T5372] pwc: recv_control_msg error -32 req 02 val 2700 [ 226.934795][ T5372] pwc: recv_control_msg error -32 req 02 val 2c00 [ 226.943904][ T5372] pwc: recv_control_msg error -32 req 04 val 1000 [ 226.951413][ T5372] pwc: recv_control_msg error -32 req 04 val 1300 [ 226.965571][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.967537][ T5372] pwc: recv_control_msg error -32 req 04 val 1400 [ 226.977402][ T128] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 227.000043][ T4351] usb usb2-port1: unable to enumerate USB device [ 227.015050][ T5372] pwc: recv_control_msg error -32 req 02 val 2000 [ 227.017149][ T128] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 227.044671][ T128] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 227.057896][ T128] usb 3-1: Manufacturer: syz [ 227.078776][ T128] usb 3-1: config 0 descriptor?? [ 227.223136][ T5372] pwc: recv_control_msg error -71 req 04 val 1500 [ 227.239575][ T5372] pwc: recv_control_msg error -71 req 02 val 2500 [ 227.248585][ T5372] pwc: recv_control_msg error -71 req 02 val 2400 [ 227.263420][ T5372] pwc: recv_control_msg error -71 req 02 val 2600 [ 227.276231][ T5372] pwc: recv_control_msg error -71 req 02 val 2900 [ 227.294837][ T5372] pwc: recv_control_msg error -71 req 02 val 2800 [ 227.310943][ T5372] pwc: recv_control_msg error -71 req 04 val 1100 [ 227.326772][ T5372] pwc: recv_control_msg error -71 req 04 val 1200 [ 227.344869][ T5372] pwc: Registered as video103. [ 227.351138][ T5372] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input57 [ 227.365990][ T5372] usb 1-1: USB disconnect, device number 42 [ 227.654523][ T128] usbhid 3-1:0.0: can't add hid device: -71 [ 227.662673][ T128] usbhid: probe of 3-1:0.0 failed with error -71 [ 227.689608][ T128] usb 3-1: USB disconnect, device number 44 [ 228.582248][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'. [ 228.606130][ T4351] usb 5-1: USB disconnect, device number 46 [ 228.619810][ T4297] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 228.851513][ T4297] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.864086][ T4297] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.889210][ T4297] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.908614][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.920970][ T4297] usb 4-1: Product: syz [ 228.926564][ T4297] usb 4-1: Manufacturer: syz [ 228.944255][ T4297] usb 4-1: SerialNumber: syz [ 228.999962][ T5372] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 229.049842][ T4302] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 229.172371][ T4297] usb 4-1: 0:2 : does not exist [ 229.177316][ T4297] usb 4-1: unit 6 not found! [ 229.203798][ T5372] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.255618][ T5372] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 229.259846][ T4302] usb 1-1: Using ep0 maxpacket: 16 [ 229.268315][ T4297] usb 4-1: USB disconnect, device number 49 [ 229.287703][ T4302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.293168][ T5372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.315766][ T4302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.337625][ T5372] usb 2-1: config 0 descriptor?? [ 229.347442][ T4302] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 229.381597][ T5372] pwc: Askey VC010 type 2 USB webcam detected. [ 229.398131][ T4302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.444953][ T4302] usb 1-1: config 0 descriptor?? [ 229.762757][ T5372] pwc: recv_control_msg error -32 req 02 val 2b00 [ 229.770193][ T5372] pwc: recv_control_msg error -32 req 02 val 2700 [ 229.777290][ T5372] pwc: recv_control_msg error -32 req 02 val 2c00 [ 229.785972][ T5372] pwc: recv_control_msg error -32 req 04 val 1000 [ 229.804992][ T5372] pwc: recv_control_msg error -32 req 04 val 1300 [ 229.822331][ T5372] pwc: recv_control_msg error -32 req 04 val 1400 [ 229.834806][ T5372] pwc: recv_control_msg error -32 req 02 val 2000 [ 229.870297][ T4302] usbhid 1-1:0.0: can't add hid device: -71 [ 229.878761][ T4302] usbhid: probe of 1-1:0.0 failed with error -71 [ 229.919460][ T4302] usb 1-1: USB disconnect, device number 43 [ 229.950070][ T128] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 230.045275][ T5372] pwc: recv_control_msg error -71 req 04 val 1500 [ 230.056687][ T5372] pwc: recv_control_msg error -71 req 02 val 2500 [ 230.070024][ T5372] pwc: recv_control_msg error -71 req 02 val 2400 [ 230.087351][ T5372] pwc: recv_control_msg error -71 req 02 val 2600 [ 230.099964][ T128] usb 3-1: device descriptor read/64, error -71 [ 230.103458][ T5372] pwc: recv_control_msg error -71 req 02 val 2900 [ 230.160837][ T5372] pwc: recv_control_msg error -71 req 02 val 2800 [ 230.169302][ T5372] pwc: recv_control_msg error -71 req 04 val 1100 [ 230.184608][ T5372] pwc: recv_control_msg error -71 req 04 val 1200 [ 230.199954][ T4299] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 230.221882][ T5372] pwc: Registered as video103. [ 230.228741][ T5372] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input58 [ 230.244858][ T5372] usb 2-1: USB disconnect, device number 53 [ 230.379856][ T128] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 230.399438][ T4299] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.526392][ T4299] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.543114][ T4299] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.553023][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.580300][ T128] usb 3-1: device descriptor read/64, error -71 [ 230.709922][ T4297] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 230.740362][ T128] usb usb3-port1: attempt power cycle [ 230.914195][ T4299] usb 4-1: usb_control_msg returned -32 [ 230.919962][ T4299] usbtmc 4-1:16.0: can't read capabilities [ 230.921411][ T4297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.050622][ T4297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.065627][ T4297] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.092560][ T4297] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.104539][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.124692][ T4297] usb 1-1: config 0 descriptor?? [ 231.279890][ T128] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 231.310580][ T128] usb 3-1: device descriptor read/8, error -71 [ 231.537764][ T4297] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 231.545588][ T4297] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 231.558263][ T4297] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 231.577253][ T4297] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 231.589878][ T128] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 231.626648][ T4297] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 231.630501][ T128] usb 3-1: device descriptor read/8, error -71 [ 231.640785][ T4297] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 231.648883][ T4297] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 231.684104][ T4297] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 231.743146][ T4299] usb 1-1: USB disconnect, device number 44 [ 231.780625][ T128] usb usb3-port1: unable to enumerate USB device [ 231.835615][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1109'. [ 231.876201][ T7562] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.885826][ T7562] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.894552][ T7562] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.903267][ T7562] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.923954][ T7562] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.932997][ T7562] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.941960][ T7562] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.950845][ T7562] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.013041][ T7560] fido_id[7560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 232.778182][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 232.907141][ T7] usb 4-1: USB disconnect, device number 50 [ 233.437073][ T7599] loop6: detected capacity change from 0 to 7 [ 233.472650][ T7599] Dev loop6: unable to read RDB block 7 [ 233.519019][ T7599] loop6: unable to read partition table [ 233.534551][ T7592] loop3: detected capacity change from 0 to 64 [ 233.580110][ T7599] loop6: partition table beyond EOD, truncated [ 233.604857][ T7599] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 234.097987][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 234.219820][ T4297] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 234.230034][ T7620] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 234.300129][ T7] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 234.379892][ T4297] usb 5-1: device descriptor read/64, error -71 [ 234.495862][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.515592][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.529051][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.566185][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.639216][ T7628] sctp: [Deprecated]: syz.1.1133 (pid 7628) Use of int in max_burst socket option. [ 234.639216][ T7628] Use struct sctp_assoc_value instead [ 234.669827][ T4297] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 234.787081][ T7630] netlink: 'syz.0.1134': attribute type 10 has an invalid length. [ 234.803667][ T7] usb 4-1: usb_control_msg returned -32 [ 234.809432][ T7] usbtmc 4-1:16.0: can't read capabilities [ 234.829921][ T7630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1134'. [ 234.849836][ T4297] usb 5-1: device descriptor read/64, error -71 [ 234.969957][ T4297] usb usb5-port1: attempt power cycle [ 235.024397][ T7637] kvm: pic: single mode not supported [ 235.024540][ T7637] kvm: pic: single mode not supported [ 235.030158][ T7637] kvm: pic: level sensitive irq not supported [ 235.056219][ T7637] kvm: pic: single mode not supported [ 235.329957][ T7] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 235.390049][ T4297] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 235.431902][ T4297] usb 5-1: device descriptor read/8, error -71 [ 235.529888][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 235.536873][ T7] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 235.599921][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.610564][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.635338][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.660188][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.668608][ T7] usb 3-1: Product: syz [ 235.673184][ T7] usb 3-1: Manufacturer: syz [ 235.677998][ T7] usb 3-1: SerialNumber: syz [ 235.690364][ T5372] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 235.733791][ T4297] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 235.781872][ T4297] usb 5-1: device descriptor read/8, error -71 [ 235.892074][ T5372] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.902381][ T5372] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 235.913581][ T5372] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 235.928221][ T5372] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 235.937793][ T5372] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 235.946345][ T4297] usb usb5-port1: unable to enumerate USB device [ 235.953384][ T5372] usb 2-1: Manufacturer: syz [ 235.966384][ T5372] usb 2-1: config 0 descriptor?? [ 235.977004][ T5372] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 236.119124][ T7] usb 3-1: 0:2 : does not exist [ 236.859851][ T4351] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 236.978666][ T4297] usb 4-1: USB disconnect, device number 51 [ 237.060461][ T4351] usb 1-1: Using ep0 maxpacket: 16 [ 237.067445][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.090862][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.105974][ T4351] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 237.131991][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.148959][ T4351] usb 1-1: config 0 descriptor?? [ 237.566304][ T4351] usbhid 1-1:0.0: can't add hid device: -71 [ 237.573855][ T4351] usbhid: probe of 1-1:0.0 failed with error -71 [ 237.588401][ T4351] usb 1-1: USB disconnect, device number 45 [ 238.086848][ T7674] loop3: detected capacity change from 0 to 64 [ 238.113007][ T4297] usb 3-1: USB disconnect, device number 49 [ 238.255512][ T7674] netlink: 'syz.3.1150': attribute type 10 has an invalid length. [ 238.265523][ T7674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1150'. [ 238.328662][ T7674] team0: Port device geneve0 added [ 238.480766][ T4297] usb 2-1: USB disconnect, device number 54 [ 238.509713][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1155'. [ 238.914396][ T7699] loop3: detected capacity change from 0 to 1024 [ 239.019839][ T4297] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 239.107016][ T7389] hfsplus: b-tree write err: -5, ino 4 [ 239.227655][ T4297] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.246124][ T4297] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.277437][ T4297] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.289857][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.299895][ T7] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 239.529687][ T4297] usb 2-1: usb_control_msg returned -32 [ 239.535614][ T4297] usbtmc 2-1:16.0: can't read capabilities [ 239.690317][ T7] usb 5-1: config 0 has no interfaces? [ 239.698652][ T7] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 239.719814][ T5370] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 239.723942][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.739809][ T7] usb 5-1: Product: syz [ 239.744193][ T7] usb 5-1: Manufacturer: syz [ 239.748943][ T7] usb 5-1: SerialNumber: syz [ 239.760656][ T7] usb 5-1: config 0 descriptor?? [ 239.960626][ T5370] usb 3-1: Using ep0 maxpacket: 16 [ 239.968535][ T5370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.982703][ T5370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.015911][ T5370] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 240.037109][ T5370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.075522][ T7701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.086721][ T7701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.141104][ T5370] usb 3-1: config 0 descriptor?? [ 240.489837][ T4302] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 240.666262][ T5370] usbhid 3-1:0.0: can't add hid device: -71 [ 240.672716][ T5370] usbhid: probe of 3-1:0.0 failed with error -71 [ 240.717352][ T5370] usb 3-1: USB disconnect, device number 50 [ 240.723895][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 240.734551][ T4302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.774679][ T4302] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 240.795528][ T4302] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 240.835406][ T4302] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 240.864932][ T4302] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 240.887492][ T4302] usb 4-1: Manufacturer: syz [ 240.922854][ T4302] usb 4-1: config 0 descriptor?? [ 240.961120][ T4302] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 241.087364][ T7735] kvm: pic: single mode not supported [ 241.215832][ T7738] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 241.861077][ T5370] usb 2-1: USB disconnect, device number 55 [ 241.941922][ T7701] [U]  [ 242.036274][ T7] usb 5-1: USB disconnect, device number 51 [ 242.420162][ T5370] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 242.499935][ T4302] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 242.579986][ T5370] usb 2-1: device descriptor read/64, error -71 [ 242.690191][ T4302] usb 1-1: Using ep0 maxpacket: 32 [ 242.699843][ T4302] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 242.723394][ T4302] usb 1-1: config 0 has no interface number 0 [ 242.747119][ T4302] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 242.783079][ T4302] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 242.806609][ T4302] usb 1-1: config 0 interface 126 has no altsetting 0 [ 242.833357][ T4302] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 242.849869][ T5370] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 242.855461][ T4302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.860065][ T7765] loop4: detected capacity change from 0 to 512 [ 242.866047][ T4302] usb 1-1: Product: syz [ 242.881162][ T4302] usb 1-1: Manufacturer: syz [ 242.892741][ T4302] usb 1-1: SerialNumber: syz [ 242.902893][ T4302] usb 1-1: config 0 descriptor?? [ 242.909563][ T7761] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 242.922391][ T7761] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 243.007286][ T7765] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 243.018965][ T7765] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 243.029331][ T5370] usb 2-1: device descriptor read/64, error -71 [ 243.132250][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 243.160767][ T5370] usb usb2-port1: attempt power cycle [ 243.276829][ T4351] usb 4-1: USB disconnect, device number 52 [ 243.295952][ T7774] loop4: detected capacity change from 0 to 512 [ 243.359725][ T7774] ext4: Unknown parameter 'nouser_xattr' [ 243.389213][ T7776] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 243.467858][ T4302] ir_usb 1-1:0.126: IR Dongle converter detected [ 243.487674][ T4302] usb 1-1: IRDA class descriptor not found, device not bound [ 243.512206][ T4302] usb 1-1: USB disconnect, device number 46 [ 243.580071][ T5370] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 243.621110][ T5370] usb 2-1: device descriptor read/8, error -71 [ 243.716472][ T7781] loop3: detected capacity change from 0 to 64 [ 243.904807][ T5370] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 243.960692][ T5370] usb 2-1: device descriptor read/8, error -71 [ 244.172708][ T5370] usb usb2-port1: unable to enumerate USB device [ 244.229913][ T4302] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 244.349612][ T7] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 244.369936][ T4351] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 244.539833][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 244.546857][ T7] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 244.561079][ T4351] usb 5-1: no configurations [ 244.569623][ T4351] usb 5-1: can't read configurations, error -22 [ 244.590754][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.603843][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.612976][ T4302] usb 4-1: config 0 has no interfaces? [ 244.621040][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.634459][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.651658][ T7] usb 3-1: Product: syz [ 244.659151][ T7] usb 3-1: Manufacturer: syz [ 244.671278][ T7] usb 3-1: SerialNumber: syz [ 244.692118][ T4302] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 244.703581][ T4302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.717771][ T4302] usb 4-1: Product: syz [ 244.719943][ T4351] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 244.734324][ T4302] usb 4-1: Manufacturer: syz [ 244.738956][ T4302] usb 4-1: SerialNumber: syz [ 244.757466][ T4302] usb 4-1: config 0 descriptor?? [ 244.975864][ T4351] usb 5-1: no configurations [ 244.980643][ T4351] usb 5-1: can't read configurations, error -22 [ 244.987857][ T4351] usb usb5-port1: attempt power cycle [ 245.031178][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.053152][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.088930][ T7] usb 3-1: 0:2 : does not exist [ 245.333978][ T7808] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 245.469955][ T4351] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 245.511391][ T4351] usb 5-1: no configurations [ 245.516069][ T4351] usb 5-1: can't read configurations, error -22 [ 245.618367][ T5372] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 245.819882][ T4351] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 245.863857][ T5372] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.874261][ T4351] usb 5-1: no configurations [ 245.878984][ T4351] usb 5-1: can't read configurations, error -22 [ 245.889776][ T5372] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 245.904528][ T4351] usb usb5-port1: unable to enumerate USB device [ 245.912008][ T5372] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 245.929884][ T5372] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 245.968758][ T5372] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 245.977577][ T5372] usb 2-1: Manufacturer: syz [ 245.990792][ T5372] usb 2-1: config 0 descriptor?? [ 246.001270][ T5372] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 246.464886][ T7820] netlink: 'syz.0.1198': attribute type 10 has an invalid length. [ 246.474313][ T7820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1198'. [ 246.525049][ T7822] input: syz1 as /devices/virtual/input/input59 [ 247.079973][ T4351] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 247.093036][ T5370] usb 3-1: USB disconnect, device number 51 [ 247.135311][ T7790] [U]  [ 247.250948][ T4351] usb 1-1: device descriptor read/64, error -71 [ 247.267932][ T4302] usb 4-1: USB disconnect, device number 53 [ 247.499868][ T5372] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 247.534623][ T4351] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 247.699797][ T4351] usb 1-1: device descriptor read/64, error -71 [ 247.724642][ T5372] usb 5-1: Using ep0 maxpacket: 16 [ 247.733446][ T5372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.763349][ T5372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.783300][ T5372] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 247.802616][ T5372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.829381][ T5372] usb 5-1: config 0 descriptor?? [ 247.834815][ T4351] usb usb1-port1: attempt power cycle [ 248.259689][ T5372] usbhid 5-1:0.0: can't add hid device: -71 [ 248.271635][ T5372] usbhid: probe of 5-1:0.0 failed with error -71 [ 248.288198][ T4351] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 248.300050][ T7852] netlink: 'syz.2.1209': attribute type 10 has an invalid length. [ 248.307884][ T7852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1209'. [ 248.317838][ T5372] usb 5-1: USB disconnect, device number 56 [ 248.345316][ T4351] usb 1-1: device descriptor read/8, error -71 [ 248.365762][ T5370] usb 2-1: USB disconnect, device number 60 [ 248.403153][ T7852] device geneve0 entered promiscuous mode [ 248.433791][ T7852] team0: Port device geneve0 added [ 248.629915][ T4351] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 248.670334][ T4351] usb 1-1: device descriptor read/8, error -71 [ 248.935842][ T4351] usb usb1-port1: unable to enumerate USB device [ 248.960038][ T4302] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 249.191271][ T4302] usb 4-1: no configurations [ 249.196274][ T4302] usb 4-1: can't read configurations, error -22 [ 249.271293][ T4351] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 249.351015][ T4302] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 249.429843][ T7] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 249.479974][ T4351] usb 5-1: Using ep0 maxpacket: 32 [ 249.487792][ T4351] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 249.507443][ T4351] usb 5-1: config 0 has no interface number 0 [ 249.524238][ T4351] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 249.540456][ T4302] usb 4-1: no configurations [ 249.545239][ T4302] usb 4-1: can't read configurations, error -22 [ 249.549840][ T4351] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 249.561965][ T4302] usb usb4-port1: attempt power cycle [ 249.589583][ T4351] usb 5-1: config 0 interface 126 has no altsetting 0 [ 249.607876][ T4351] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 249.683313][ T7] usb 3-1: config 0 has no interfaces? [ 249.738665][ T4351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.753004][ T7] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 249.769903][ T4351] usb 5-1: Product: syz [ 249.779136][ T4351] usb 5-1: Manufacturer: syz [ 249.785194][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.803696][ T7] usb 3-1: Product: syz [ 249.807946][ T7] usb 3-1: Manufacturer: syz [ 249.812882][ T4351] usb 5-1: SerialNumber: syz [ 249.814505][ T4351] usb 5-1: config 0 descriptor?? [ 249.835045][ T7] usb 3-1: SerialNumber: syz [ 249.847572][ T7] usb 3-1: config 0 descriptor?? [ 249.865434][ T7872] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 249.874594][ T7872] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 249.981306][ T4302] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 250.024010][ T4302] usb 4-1: no configurations [ 250.028649][ T4302] usb 4-1: can't read configurations, error -22 [ 250.069460][ T7878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.108595][ T7878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.189900][ T4302] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 250.251591][ T4302] usb 4-1: no configurations [ 250.256311][ T4302] usb 4-1: can't read configurations, error -22 [ 250.269831][ T4302] usb usb4-port1: unable to enumerate USB device [ 250.319890][ T7] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 250.346031][ T4351] ir_usb 5-1:0.126: IR Dongle converter detected [ 250.355708][ T4351] usb 5-1: IRDA class descriptor not found, device not bound [ 250.374752][ T4351] usb 5-1: USB disconnect, device number 57 [ 250.513268][ T7] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 250.523601][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.534011][ T7] usb 2-1: Product: syz [ 250.539395][ T7] usb 2-1: Manufacturer: syz [ 250.556580][ T7] usb 2-1: SerialNumber: syz [ 250.573076][ T7] usb 2-1: config 0 descriptor?? [ 250.580898][ T7] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 250.781886][ T7] gspca_sunplus: reg_r err -32 [ 250.786850][ T7] sunplus: probe of 2-1:0.0 failed with error -32 [ 250.795317][ T7] usb 2-1: USB disconnect, device number 61 [ 251.069652][ T7893] netlink: 'syz.0.1223': attribute type 10 has an invalid length. [ 251.083224][ T7893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1223'. [ 251.739901][ T7] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 252.002844][ T7914] loop3: detected capacity change from 0 to 32768 [ 252.009917][ T7914] XFS: ikeep mount option is deprecated. [ 252.017389][ T7878] [U]  [ 252.050731][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 252.059812][ T7914] XFS (loop3): Mounting V5 Filesystem [ 252.064100][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.097334][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.113295][ T7914] XFS (loop3): Ending clean mount [ 252.125068][ T7914] XFS (loop3): Quotacheck needed: Please wait. [ 252.152317][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.188361][ T7] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 252.198566][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.206813][ T7] usb 2-1: Product: syz [ 252.211162][ T7] usb 2-1: Manufacturer: syz [ 252.215841][ T7] usb 2-1: SerialNumber: syz [ 252.236202][ T7] usb 2-1: config 0 descriptor?? [ 252.265575][ T7] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 252.273471][ T7] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -8) [ 252.284266][ T7914] XFS (loop3): Quotacheck: Done. [ 252.565325][ T4351] usb 3-1: USB disconnect, device number 52 [ 252.630260][ T7] peak_usb: probe of 2-1:0.0 failed with error -8 [ 252.632044][ T4265] XFS (loop3): Unmounting Filesystem [ 252.660181][ T7] usb 2-1: USB disconnect, device number 62 [ 252.985006][ T7938] loop3: detected capacity change from 0 to 256 [ 253.133478][ T7938] FAT-fs (loop3): Directory bread(block 64) failed [ 253.145237][ T7938] FAT-fs (loop3): Directory bread(block 65) failed [ 253.165017][ T7938] FAT-fs (loop3): Directory bread(block 66) failed [ 253.184086][ T7938] FAT-fs (loop3): Directory bread(block 67) failed [ 253.205694][ T7938] FAT-fs (loop3): Directory bread(block 68) failed [ 253.225306][ T7938] FAT-fs (loop3): Directory bread(block 69) failed [ 253.245314][ T7938] FAT-fs (loop3): Directory bread(block 70) failed [ 253.266418][ T7938] FAT-fs (loop3): Directory bread(block 71) failed [ 253.303583][ T7938] FAT-fs (loop3): Directory bread(block 72) failed [ 253.329934][ T7938] FAT-fs (loop3): Directory bread(block 73) failed [ 253.380546][ T7938] netlink: 'syz.3.1235': attribute type 10 has an invalid length. [ 253.398678][ T7938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1235'. [ 253.644931][ T7953] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1243'. [ 253.810734][ T4302] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 253.819823][ T4351] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 254.000492][ T4351] usb 3-1: no configurations [ 254.005164][ T4351] usb 3-1: can't read configurations, error -22 [ 254.034283][ T4302] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.220779][ T4302] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.234312][ T4302] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.246045][ T4302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.499831][ T4351] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 254.632455][ T4302] usb 2-1: usb_control_msg returned -32 [ 254.638135][ T4302] usbtmc 2-1:16.0: can't read capabilities [ 254.711137][ T4270] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1 [ 254.830498][ T4351] usb 3-1: no configurations [ 254.835309][ T4351] usb 3-1: can't read configurations, error -22 [ 254.880938][ T4351] usb usb3-port1: attempt power cycle [ 254.970101][ T7986] loop3: detected capacity change from 0 to 64 [ 255.086042][ T7986] netlink: 'syz.3.1255': attribute type 10 has an invalid length. [ 255.104216][ T7986] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1255'. [ 255.319930][ T4351] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 255.363728][ T4351] usb 3-1: no configurations [ 255.368427][ T4351] usb 3-1: can't read configurations, error -22 [ 255.461408][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.467710][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.520052][ T4351] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 255.664788][ T4351] usb 3-1: no configurations [ 255.669473][ T4351] usb 3-1: can't read configurations, error -22 [ 255.684608][ T4351] usb usb3-port1: unable to enumerate USB device [ 256.574003][ T4351] usb 2-1: USB disconnect, device number 63 [ 256.599810][ T4302] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 256.805318][ T8019] loop4: detected capacity change from 0 to 64 [ 256.859317][ T8023] netlink: 'syz.2.1267': attribute type 10 has an invalid length. [ 256.869710][ T8023] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1267'. [ 256.887732][ T4246] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 256.929835][ T4302] usb 1-1: Using ep0 maxpacket: 32 [ 256.938414][ T4302] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 256.950629][ T4302] usb 1-1: config 0 has no interface number 0 [ 256.963382][ T4302] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 256.974865][ T4302] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 256.986046][ T4302] usb 1-1: config 0 interface 126 has no altsetting 0 [ 257.027606][ T4302] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 257.113243][ T4302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.130725][ T4302] usb 1-1: Product: syz [ 257.134923][ T4302] usb 1-1: Manufacturer: syz [ 257.139526][ T4302] usb 1-1: SerialNumber: syz [ 257.165287][ T4302] usb 1-1: config 0 descriptor?? [ 257.183781][ T8011] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 257.196386][ T8011] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 257.553789][ T4351] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 257.785177][ T4302] ir_usb 1-1:0.126: IR Dongle converter detected [ 257.795795][ T4302] usb 1-1: IRDA class descriptor not found, device not bound [ 257.822515][ T4302] usb 1-1: USB disconnect, device number 51 [ 258.247698][ T4351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.259344][ T4351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.269606][ T4351] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.282686][ T5370] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 258.290333][ T4351] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.299410][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.313475][ T4351] usb 5-1: config 0 descriptor?? [ 258.343941][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.354404][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.362123][ T8056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.375507][ T8056] bond0: (slave bond_slave_0): Releasing backup interface [ 258.395616][ T8056] bond0: (slave bond_slave_1): Releasing backup interface [ 258.454809][ T8056] team0: Port device team_slave_0 removed [ 258.478889][ T8056] team0: Port device team_slave_1 removed [ 258.491478][ T8056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.499068][ T8056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.501532][ T5370] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.534578][ T8056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.535253][ T5370] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 258.551449][ T8056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.571687][ T8056] team0: Port device geneve0 removed [ 258.631532][ T5370] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 258.657093][ T5370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.695415][ T5370] usb 2-1: config 0 descriptor?? [ 258.729922][ T4302] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 258.739861][ T4270] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 258.742766][ T4351] usbhid 5-1:0.0: can't add hid device: -71 [ 258.748536][ T4270] Bluetooth: hci1: Injecting HCI hardware error event [ 258.764751][ T4270] Bluetooth: hci1: hardware error 0x00 [ 258.767340][ T4351] usbhid: probe of 5-1:0.0 failed with error -71 [ 258.824610][ T4351] usb 5-1: USB disconnect, device number 58 [ 259.015636][ T4302] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.119166][ T4302] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.133087][ T4302] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.143219][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.404174][ T4302] usb 3-1: usb_control_msg returned -32 [ 259.412446][ T4302] usbtmc 3-1:16.0: can't read capabilities [ 260.719983][ T4351] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 260.777154][ T4302] usb 2-1: USB disconnect, device number 64 [ 260.819934][ T4270] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 260.919898][ T4351] usb 5-1: Using ep0 maxpacket: 32 [ 261.021670][ T4351] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 261.113453][ T4351] usb 5-1: config 0 has no interface number 0 [ 261.132398][ T4351] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 261.142746][ T4351] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 261.153147][ T4351] usb 5-1: config 0 interface 126 has no altsetting 0 [ 261.171467][ T4351] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 261.181543][ T4351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.189569][ T4351] usb 5-1: Product: syz [ 261.218277][ T4351] usb 5-1: Manufacturer: syz [ 261.239669][ T4351] usb 5-1: SerialNumber: syz [ 261.252597][ T4351] usb 5-1: config 0 descriptor?? [ 261.267903][ T8091] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 261.280061][ T8091] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 261.349955][ T7] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 261.544431][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 261.556897][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.596332][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.609835][ T4297] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 261.626616][ T7] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 261.645874][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.695769][ T7] usb 4-1: config 0 descriptor?? [ 261.709853][ T4302] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 261.802674][ T4351] ir_usb 5-1:0.126: IR Dongle converter detected [ 261.816641][ T4351] usb 5-1: IRDA class descriptor not found, device not bound [ 261.828250][ T4351] usb 5-1: USB disconnect, device number 59 [ 261.906876][ T4297] usb 1-1: config 0 has no interfaces? [ 261.911662][ T4302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.938199][ T4297] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 261.953671][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.962146][ T4297] usb 1-1: Product: syz [ 261.966430][ T4297] usb 1-1: Manufacturer: syz [ 261.966433][ T4302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.976340][ T4297] usb 1-1: SerialNumber: syz [ 261.998265][ T4297] usb 1-1: config 0 descriptor?? [ 262.077327][ T4302] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.120118][ T4302] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.146435][ T4302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.161762][ T7] hid-multitouch 0003:1FD2:6007.000B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 262.188840][ T4302] usb 2-1: config 0 descriptor?? [ 262.230739][ T7] usb 3-1: USB disconnect, device number 57 [ 262.300822][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.360795][ T128] usb 4-1: USB disconnect, device number 58 [ 262.387472][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.522992][ T8120] fido_id[8120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 262.646947][ T4302] usbhid 2-1:0.0: can't add hid device: -71 [ 262.664639][ T4302] usbhid: probe of 2-1:0.0 failed with error -71 [ 262.709690][ T4302] usb 2-1: USB disconnect, device number 65 [ 263.276162][ T4302] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 263.474007][ T4302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.488803][ T4302] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 263.506293][ T4302] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 263.517334][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.554886][ T4302] usb 4-1: config 0 descriptor?? [ 264.009936][ T128] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 264.245409][ T128] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.257458][ T128] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.271184][ T128] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.280641][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.439974][ T4302] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 264.529173][ T128] usb 5-1: usb_control_msg returned -32 [ 264.536217][ T128] usbtmc 5-1:16.0: can't read capabilities [ 264.679877][ T4302] usb 3-1: Using ep0 maxpacket: 32 [ 264.686627][ T4302] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 264.697705][ T4302] usb 3-1: config 0 has no interface number 0 [ 264.704142][ T4302] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 264.718639][ T4302] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 264.748475][ T4302] usb 3-1: config 0 interface 126 has no altsetting 0 [ 264.763690][ T4302] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 264.775652][ T4302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.788871][ T4302] usb 3-1: Product: syz [ 264.793934][ T4302] usb 3-1: Manufacturer: syz [ 264.798646][ T4302] usb 3-1: SerialNumber: syz [ 264.813712][ T4302] usb 3-1: config 0 descriptor?? [ 264.822566][ T8159] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 264.838769][ T8159] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 264.880407][ T8112] [U]  [ 264.943749][ T4297] usb 1-1: USB disconnect, device number 52 [ 265.109300][ T8175] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 265.205620][ T4302] ir_usb 3-1:0.126: IR Dongle converter detected [ 265.215116][ T4302] usb 3-1: IRDA class descriptor not found, device not bound [ 265.230144][ T4302] usb 3-1: USB disconnect, device number 58 [ 265.757133][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 265.804532][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1317'. [ 265.813796][ T8186] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 265.844804][ T4302] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 265.994396][ T128] usb 4-1: USB disconnect, device number 59 [ 266.031514][ T4302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.047623][ T4302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.068419][ T4302] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.088029][ T4302] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.106369][ T4302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.116783][ T4302] usb 2-1: config 0 descriptor?? [ 266.520185][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 266.635154][ T4302] usbhid 2-1:0.0: can't add hid device: -71 [ 266.643922][ T4302] usbhid: probe of 2-1:0.0 failed with error -71 [ 266.658509][ T4302] usb 2-1: USB disconnect, device number 66 [ 266.690323][ T128] usb 5-1: USB disconnect, device number 60 [ 266.929838][ T4351] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 266.983876][ T8224] loop3: detected capacity change from 0 to 256 [ 267.004666][ T8224] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1334'. [ 267.126123][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1336'. [ 267.139993][ T4351] usb 3-1: Using ep0 maxpacket: 32 [ 267.146866][ T4351] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 267.150764][ T8230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.155868][ T4351] usb 3-1: config 0 has no interface number 0 [ 267.168068][ T4351] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 267.178986][ T4351] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 267.195031][ T4351] usb 3-1: config 0 interface 126 has no altsetting 0 [ 267.207559][ T4351] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 267.220295][ T8232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.227049][ T4351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.230409][ T8232] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 267.235423][ T4351] usb 3-1: Product: syz [ 267.249683][ T4351] usb 3-1: Manufacturer: syz [ 267.259052][ T4351] usb 3-1: SerialNumber: syz [ 267.265969][ T4351] usb 3-1: config 0 descriptor?? [ 267.272968][ T128] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 267.276998][ T8214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 267.288230][ T8214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 267.289130][ T8232] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 267.369846][ T4302] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 267.482554][ T128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.493082][ T128] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.502504][ T128] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 267.511946][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.538226][ T128] usb 5-1: config 0 descriptor?? [ 267.549903][ T4302] usb 1-1: Using ep0 maxpacket: 16 [ 267.555176][ T7] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 267.565301][ T4302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.587311][ T4302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.597629][ T4302] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 267.607166][ T4302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.633660][ T4302] usb 1-1: config 0 descriptor?? [ 267.752164][ T8241] loop3: detected capacity change from 0 to 256 [ 267.772973][ T4351] ir_usb 3-1:0.126: IR Dongle converter detected [ 267.779966][ T8241] exfat: Deprecated parameter 'namecase' [ 267.785665][ T8241] exfat: Deprecated parameter 'utf8' [ 267.790000][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 267.792627][ T4351] usb 3-1: IRDA class descriptor not found, device not bound [ 267.808113][ T7] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 267.811093][ T4351] usb 3-1: USB disconnect, device number 59 [ 267.825108][ T7] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 267.835889][ T7] usb 2-1: config 1 has no interface number 1 [ 267.842414][ T7] usb 2-1: config 1 interface 2 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 267.866120][ T8241] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 267.878994][ T7] usb 2-1: config 1 interface 2 has no altsetting 0 [ 267.892003][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.902154][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.927928][ T7] usb 2-1: Product: syz [ 267.948135][ T7] usb 2-1: Manufacturer: syz [ 267.968228][ T7] usb 2-1: SerialNumber: syz [ 268.070730][ T4302] corsair 0003:1B1C:1B02.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 268.195951][ T7] usb 2-1: USB disconnect, device number 67 [ 268.266789][ T4302] corsair 0003:1B1C:1B02.000C: Read invalid backlight brightness: f7. [ 268.406625][ T7388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.411281][ T4244] udevd[4244]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.470999][ T5370] usb 1-1: USB disconnect, device number 53 [ 268.504444][ T8243] fido_id[8243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 268.581168][ T7388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.675526][ T7388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.762351][ T7388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.836190][ T4257] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.848719][ T4257] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.858622][ T4257] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.866581][ T4257] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.878544][ T4257] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 268.885925][ T4257] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.893134][ T5372] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 269.099813][ T5372] usb 3-1: Using ep0 maxpacket: 16 [ 269.106869][ T5372] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 269.129918][ T5372] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.177542][ T5372] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.229943][ T5372] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.239540][ T5372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.259788][ T5372] usb 3-1: Product: syz [ 269.265192][ T5372] usb 3-1: Manufacturer: syz [ 269.285991][ T5372] usb 3-1: SerialNumber: syz [ 269.297335][ T8251] chnl_net:caif_netlink_parms(): no params data found [ 269.540033][ T7] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 269.566624][ T8251] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.576455][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.594260][ T8251] device bridge_slave_0 entered promiscuous mode [ 269.638988][ T8251] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.659897][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.668722][ T8251] device bridge_slave_1 entered promiscuous mode [ 269.725985][ T8251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.736129][ T5372] usb 3-1: 0:2 : does not exist [ 269.736147][ T7] usb 1-1: config index 0 descriptor too short (expected 30322, got 441) [ 269.760713][ T7] usb 1-1: config 99 has too many interfaces: 105, using maximum allowed: 32 [ 269.770831][ T8251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.776055][ T7] usb 1-1: config 99 has an invalid descriptor of length 0, skipping remainder of the config [ 269.810249][ T7] usb 1-1: config 99 has 0 interfaces, different from the descriptor's value: 105 [ 269.816549][ T8255] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 269.819497][ T7] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 269.819522][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.905184][ T8251] team0: Port device team_slave_0 added [ 269.935370][ T8251] team0: Port device team_slave_1 added [ 269.996306][ T5372] usb 5-1: USB disconnect, device number 61 [ 270.092478][ T8251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.099506][ T8251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.207579][ T8251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.258251][ T8251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.266892][ T7] usb 1-1: string descriptor 0 read error: -71 [ 270.315186][ T7] usb 1-1: USB disconnect, device number 54 [ 270.332639][ T8251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.418348][ T8251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.545152][ T8286] lo speed is unknown, defaulting to 1000 [ 270.558238][ T8286] lo speed is unknown, defaulting to 1000 [ 270.581019][ T8251] device hsr_slave_0 entered promiscuous mode [ 270.587826][ T8251] device hsr_slave_1 entered promiscuous mode [ 270.594777][ T8251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.603321][ T8251] Cannot create hsr debugfs directory [ 270.642182][ T8286] lo speed is unknown, defaulting to 1000 [ 270.667727][ T8286] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 270.710881][ T8286] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 270.817454][ T8286] lo speed is unknown, defaulting to 1000 [ 270.835728][ T8286] lo speed is unknown, defaulting to 1000 [ 270.889304][ T8286] lo speed is unknown, defaulting to 1000 [ 270.979939][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 271.045876][ T8286] lo speed is unknown, defaulting to 1000 [ 271.103488][ T8286] lo speed is unknown, defaulting to 1000 [ 271.148910][ T8286] lo speed is unknown, defaulting to 1000 [ 271.180458][ T7388] device hsr_slave_0 left promiscuous mode [ 271.205002][ T7388] device hsr_slave_1 left promiscuous mode [ 271.279833][ T5372] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 271.282358][ T7388] device veth1_macvtap left promiscuous mode [ 271.314518][ T7388] device veth0_macvtap left promiscuous mode [ 271.330756][ T7388] device veth1_vlan left promiscuous mode [ 271.345994][ T7388] device veth0_vlan left promiscuous mode [ 271.479831][ T5372] usb 5-1: Using ep0 maxpacket: 32 [ 271.486564][ T5372] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 271.516980][ T5372] usb 5-1: config 0 has no interface number 0 [ 271.545503][ T5372] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 271.575456][ T5372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.592851][ T5372] usb 5-1: Product: syz [ 271.597276][ T5372] usb 5-1: Manufacturer: syz [ 271.605703][ T5372] usb 5-1: SerialNumber: syz [ 271.618524][ T5372] usb 5-1: config 0 descriptor?? [ 271.650916][ T7] usb 3-1: USB disconnect, device number 60 [ 271.659236][ T5372] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 271.693798][ T5372] usb 5-1: selecting invalid altsetting 1 [ 271.704972][ T5372] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 271.729053][ T5372] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 271.779832][ T5372] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 271.799309][ T5372] usb 5-1: media controller created [ 271.836076][ T5372] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.900114][ T5372] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 271.912297][ T5372] zl10353_read_register: readreg error (reg=127, ret==-71) [ 271.966397][ T5372] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 272.015476][ T5372] usb 5-1: USB disconnect, device number 62 [ 272.243390][ T4297] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 272.421466][ T7388] bond1 (unregistering): Released all slaves [ 272.429855][ T4297] usb 3-1: Using ep0 maxpacket: 16 [ 272.436765][ T4297] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 272.492546][ T4297] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.569395][ T4297] usb 3-1: config 0 has no interface number 0 [ 272.594966][ T4297] usb 3-1: config 0 interface 143 has no altsetting 0 [ 272.677107][ T4297] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 272.697435][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 272.714865][ T4297] usb 3-1: Product: syz [ 272.725093][ T4297] usb 3-1: SerialNumber: syz [ 272.745767][ T4297] usb 3-1: config 0 descriptor?? [ 273.059955][ T4270] Bluetooth: hci4: command 0x041b tx timeout [ 273.235937][ T7] usb 3-1: USB disconnect, device number 61 [ 273.659928][ T4297] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 273.866917][ T4297] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 273.896613][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.929180][ T4297] usb 1-1: config 0 descriptor?? [ 274.049208][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'. [ 274.620063][ T4297] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 274.824338][ T4297] usb 5-1: Using ep0 maxpacket: 16 [ 274.847780][ T4297] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 274.861682][ T4297] usb 5-1: config 0 has no interface number 0 [ 274.869380][ T4297] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 274.898294][ T4297] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 274.930284][ T4297] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 274.939356][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 274.981245][ T4297] usb 5-1: Product: syz [ 274.985449][ T4297] usb 5-1: SerialNumber: syz [ 275.003353][ T4297] usb 5-1: config 0 descriptor?? [ 275.041435][ T4297] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 275.060285][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 275.060790][ T4297] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input60 [ 275.140622][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 275.213107][ T7388] bond0 (unregistering): Released all slaves [ 275.264269][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 275.264647][ T4302] usb 5-1: USB disconnect, device number 63 [ 275.271245][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 275.304150][ T8251] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 275.364347][ T8251] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 275.372927][ T4302] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 275.396713][ T8251] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 275.478261][ T8251] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 275.678347][ T8251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.699247][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.721680][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.738323][ T8251] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.790909][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.810944][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.838724][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.845820][ T6181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.863462][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.922449][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.957121][ T8373] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.957871][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.987527][ T8373] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.990364][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.000564][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.011505][ T8373] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 276.030686][ T8373] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 276.050046][ T8373] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 276.064232][ T8373] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 276.077304][ T8373] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 276.081170][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.108180][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.128367][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.144140][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.153042][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.171963][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.206896][ T8251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.235774][ T8251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.257416][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.267585][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.278943][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.284548][ T8388] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input61 [ 276.290026][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.306602][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.338221][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.371007][ T5372] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 276.483922][ T4351] usb 1-1: USB disconnect, device number 55 [ 276.580373][ T5372] usb 5-1: Using ep0 maxpacket: 16 [ 276.587115][ T5372] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 276.626297][ T5372] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.653972][ T5372] usb 5-1: config 0 has no interface number 0 [ 276.685000][ T5372] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 276.716103][ T5372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.770484][ T5372] usb 5-1: Product: syz [ 276.786974][ T5372] usb 5-1: Manufacturer: syz [ 276.804733][ T5372] usb 5-1: SerialNumber: syz [ 276.826939][ T5372] usb 5-1: config 0 descriptor?? [ 276.856925][ T5372] usb 5-1: Found UVC 0.00 device syz (046c:14e8) [ 276.879501][ T5372] usb 5-1: No valid video chain found. [ 277.035118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.046430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.061002][ T5372] usb 5-1: USB disconnect, device number 64 [ 277.120620][ T8251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.200015][ T4302] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 277.392008][ T4302] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 277.418050][ T4302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.465874][ T4302] usb 1-1: config 0 descriptor?? [ 277.496142][ T4302] cp210x 1-1:0.0: cp210x converter detected [ 277.891951][ T4302] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 277.935729][ T4302] usb 1-1: cp210x converter now attached to ttyUSB0 [ 277.949917][ T128] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 278.005977][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.020200][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 278.034309][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.099364][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.100259][ T4257] Bluetooth: hci4: command 0x0c1a tx timeout [ 278.119017][ T4302] usb 1-1: USB disconnect, device number 56 [ 278.135495][ T4302] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 278.143437][ T128] usb 5-1: Using ep0 maxpacket: 16 [ 278.152255][ T128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.169060][ T4302] cp210x 1-1:0.0: device disconnected [ 278.175169][ T128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.186847][ T128] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 278.196759][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.207590][ T128] usb 5-1: config 0 descriptor?? [ 278.208957][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.255949][ T8251] device veth0_vlan entered promiscuous mode [ 278.269042][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.294437][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.335694][ T8251] device veth1_vlan entered promiscuous mode [ 278.377989][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.393962][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.418313][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.464790][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.519416][ T8251] device veth0_macvtap entered promiscuous mode [ 278.548331][ T8251] device veth1_macvtap entered promiscuous mode [ 278.618931][ T128] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 278.651751][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.695051][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.719859][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.735485][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.745990][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.757397][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.768901][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.781497][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.800665][ T8251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.818818][ T128] corsair 0003:1B1C:1B02.000D: Failed to get K90 initial state (error -71). [ 278.833605][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.847083][ T128] usb 5-1: USB disconnect, device number 65 [ 278.869146][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.898931][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.926405][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.963865][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.982862][ T8452] fido_id[8452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 278.998079][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.009486][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.030336][ T5372] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 279.043863][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.054817][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.065978][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.076228][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.087022][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.102515][ T8251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.110627][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.123374][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.140394][ T8251] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.156734][ T8251] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.172692][ T8251] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.186228][ T8251] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.232301][ T5372] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 279.256624][ T5372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.289671][ T5372] usb 1-1: config 0 descriptor?? [ 279.398891][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.461196][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.540750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.559961][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.576577][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.610444][ T1304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.663921][ T8459] loop4: detected capacity change from 0 to 2048 [ 279.814853][ T8459] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 279.833789][ T8468] loop5: detected capacity change from 0 to 256 [ 279.925858][ T8468] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 279.949678][ T8468] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 280.081136][ T8476] lo speed is unknown, defaulting to 1000 [ 280.099990][ T4257] Bluetooth: hci3: command 0x0406 tx timeout [ 280.156641][ T8478] netlink: 'syz.2.1393': attribute type 10 has an invalid length. [ 280.179884][ T4257] Bluetooth: hci4: command 0x0406 tx timeout [ 280.185517][ T8478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1393'. [ 280.414418][ T4351] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 280.618398][ T4351] usb 2-1: Using ep0 maxpacket: 16 [ 280.625629][ T4351] usb 2-1: config 0 has no interfaces? [ 280.655171][ T4351] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 280.666423][ T4351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.679454][ T4351] usb 2-1: Product: syz [ 280.689184][ T4351] usb 2-1: Manufacturer: syz [ 280.698921][ T4351] usb 2-1: SerialNumber: syz [ 280.706543][ T4351] usb 2-1: config 0 descriptor?? [ 280.960023][ T4302] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 280.993926][ T8476] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.057639][ T4351] usb 2-1: USB disconnect, device number 68 [ 281.149902][ T4302] usb 3-1: Using ep0 maxpacket: 8 [ 281.161233][ T4302] usb 3-1: unable to get BOS descriptor or descriptor too short [ 281.180500][ T4302] usb 3-1: config 4 interface 0 has no altsetting 0 [ 281.201375][ T4302] usb 3-1: string descriptor 0 read error: -22 [ 281.207851][ T4302] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 281.217824][ T4302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.238426][ T4302] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 281.260802][ T4302] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.271169][ T4302] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 281.278329][ T4302] usb 3-1: media controller created [ 281.299263][ T4302] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.755931][ T4302] usb 3-1: USB disconnect, device number 62 [ 281.828788][ T5370] usb 1-1: USB disconnect, device number 57 [ 281.957695][ T8543] netlink: 'syz.0.1404': attribute type 72 has an invalid length. [ 281.991000][ T8543] netlink: 1016 bytes leftover after parsing attributes in process `syz.0.1404'. [ 282.106516][ T8553] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 282.148616][ T8553] device team0 left promiscuous mode [ 282.169543][ T8553] device team_slave_0 left promiscuous mode [ 282.187978][ T8553] device team_slave_1 left promiscuous mode [ 282.194347][ T8553] device geneve0 left promiscuous mode [ 282.200521][ T8553] bridge0: port 3(team0) entered disabled state [ 282.210631][ T8553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.218104][ T8553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.242784][ T8553] device bridge_slave_0 left promiscuous mode [ 282.249052][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.265546][ T8553] device bridge_slave_1 left promiscuous mode [ 282.285545][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.305891][ T8553] bond0: (slave bond_slave_0): Releasing backup interface [ 282.330960][ T8553] device bond_slave_0 left promiscuous mode [ 282.356128][ T8553] bond0: (slave bond_slave_1): Releasing backup interface [ 282.366647][ T8553] device bond_slave_1 left promiscuous mode [ 282.438019][ T8553] team0: Port device team_slave_0 removed [ 282.469531][ T8553] team0: Port device team_slave_1 removed [ 282.477366][ T8553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.485398][ T8553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.494600][ T8553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.503487][ T8553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.549853][ T8553] team0: Port device geneve0 removed [ 282.573455][ T8553] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 282.666385][ T8555] netlink: 'syz.1.1407': attribute type 10 has an invalid length. [ 282.689913][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1407'. [ 282.714007][ T8565] loop5: detected capacity change from 0 to 40427 [ 282.807028][ T8565] F2FS-fs (loop5): Found nat_bits in checkpoint [ 282.878047][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 282.901867][ T8565] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 283.075032][ T4302] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 283.249797][ T5370] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 283.279862][ T4302] usb 3-1: Using ep0 maxpacket: 16 [ 283.300756][ T4302] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 283.322358][ T4302] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.357601][ T8251] syz-executor: attempt to access beyond end of device [ 283.357601][ T8251] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 283.379927][ T4302] usb 3-1: config 0 has no interface number 0 [ 283.386055][ T4302] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.445146][ T4302] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 283.448488][ T5370] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 283.463724][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 283.484624][ T5370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.500245][ T4302] usb 3-1: Product: syz [ 283.504440][ T4302] usb 3-1: SerialNumber: syz [ 283.548260][ T4302] usb 3-1: config 0 descriptor?? [ 283.548295][ T5370] usb 2-1: config 0 descriptor?? [ 283.805815][ T4302] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 283.824704][ T5370] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 283.827560][ T4302] usb 3-1: USB disconnect, device number 63 [ 284.019883][ T5370] usb 1-1: Using ep0 maxpacket: 16 [ 284.037285][ T5370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.052594][ T5370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.065614][ T5370] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 284.078639][ T5370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.107466][ T5370] usb 1-1: config 0 descriptor?? [ 284.317972][ T8618] loop5: detected capacity change from 0 to 64 [ 284.393932][ T8618] netlink: 'syz.5.1425': attribute type 10 has an invalid length. [ 284.412158][ T8618] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1425'. [ 284.490539][ T8618] team0: Port device geneve0 added [ 284.535310][ T5370] corsair 0003:1B1C:1B02.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 284.736239][ T5370] corsair 0003:1B1C:1B02.000E: Failed to get K90 initial state (error -71). [ 284.778993][ T5370] usb 1-1: USB disconnect, device number 58 [ 284.915980][ T8637] fido_id[8637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 285.014076][ T4302] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 285.204637][ T7] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 285.242540][ T4302] usb 6-1: Using ep0 maxpacket: 32 [ 285.249798][ T4302] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 285.257987][ T4302] usb 6-1: config 0 has no interface number 0 [ 285.266496][ T4302] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 285.282030][ T4302] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 285.295292][ T4302] usb 6-1: config 0 interface 126 has no altsetting 0 [ 285.314850][ T4302] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 285.324282][ T4302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.338522][ T4302] usb 6-1: Product: syz [ 285.345369][ T4302] usb 6-1: Manufacturer: syz [ 285.353478][ T4302] usb 6-1: SerialNumber: syz [ 285.383924][ T4302] usb 6-1: config 0 descriptor?? [ 285.389527][ T8626] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 285.396933][ T8626] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 285.404217][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 285.411600][ T7] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 285.420062][ T7] usb 3-1: config 179 has no interface number 0 [ 285.426362][ T7] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 285.437527][ T7] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 285.449444][ T7] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 285.462225][ T7] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 285.481379][ T7] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 285.504136][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.535839][ T8634] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 285.774484][ T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input62 [ 285.999515][ T5372] usb 3-1: USB disconnect, device number 64 [ 285.999602][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 286.014047][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 286.022440][ T5372] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 286.029537][ T4302] ir_usb 6-1:0.126: IR Dongle converter detected [ 286.045678][ T4302] usb 6-1: IRDA class descriptor not found, device not bound [ 286.056616][ T4302] usb 6-1: USB disconnect, device number 2 [ 286.067945][ T4246] udevd[4246]: failed to send result of seq 16467 to main daemon: Connection refused [ 286.092037][ T5370] usb 2-1: USB disconnect, device number 69 [ 286.176431][ T8676] netlink: 'syz.1.1437': attribute type 10 has an invalid length. [ 286.196813][ T8676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1437'. [ 286.470425][ T4297] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 286.615439][ T8682] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 286.659479][ T26] kauditd_printk_skb: 149 callbacks suppressed [ 286.666909][ T26] audit: type=1400 audit(1750985128.618:161): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8679 comm="syz.1.1439" [ 287.092478][ T4297] usb 5-1: config 0 has no interfaces? [ 287.106374][ T4297] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 287.124567][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.132851][ T4297] usb 5-1: Product: syz [ 287.137089][ T4297] usb 5-1: Manufacturer: syz [ 287.142126][ T4297] usb 5-1: SerialNumber: syz [ 287.148502][ T4297] usb 5-1: config 0 descriptor?? [ 287.776201][ T8702] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 287.851693][ T8704] netlink: 'syz.0.1448': attribute type 10 has an invalid length. [ 287.859664][ T8704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1448'. [ 287.881939][ T8704] team0: Port device geneve0 added [ 288.133416][ T8689] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.142007][ T8689] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.155597][ T8689] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 288.165554][ T8689] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 288.182509][ T8689] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.195465][ T8689] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 288.205807][ T8689] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 288.236846][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.263882][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.362051][ T8710] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 288.401477][ T8710] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 288.489988][ T7] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 288.497600][ T4302] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 288.689846][ T4302] usb 3-1: Using ep0 maxpacket: 32 [ 288.697189][ T4302] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 288.715659][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.732481][ T7] usb 1-1: config 0 has no interfaces? [ 288.738035][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.748164][ T7] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 288.750991][ T4297] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 288.758821][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.773483][ T4302] usb 3-1: config 0 descriptor?? [ 288.780630][ T4302] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 288.800398][ T7] usb 1-1: config 0 descriptor?? [ 289.169233][ T8725] loop5: detected capacity change from 0 to 32768 [ 289.176826][ T4297] usb 2-1: Using ep0 maxpacket: 16 [ 289.183498][ T8725] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 289.186751][ T4302] gspca_nw80x: reg_r err -71 [ 289.197781][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.211098][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.224376][ T4297] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 289.235902][ T4302] nw80x: probe of 3-1:0.0 failed with error -71 [ 289.254808][ T4302] usb 3-1: USB disconnect, device number 65 [ 289.262482][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.322135][ T4297] usb 2-1: config 0 descriptor?? [ 289.504379][ T8730] loop5: detected capacity change from 0 to 64 [ 289.539467][ T26] audit: type=1800 audit(1750985131.508:162): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1459" name="bus" dev="loop5" ino=21 res=0 errno=0 [ 289.614494][ T8732] xt_hashlimit: size too large, truncated to 1048576 [ 289.667348][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1460'. [ 289.736902][ T4297] hid-multitouch 0003:1FD2:6007.000F: item fetching failed at offset 1/5 [ 289.772710][ T4297] hid-multitouch: probe of 0003:1FD2:6007.000F failed with error -22 [ 290.179854][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.259919][ T4257] Bluetooth: hci4: command 0x0c1a tx timeout [ 290.847428][ T4302] usb 2-1: USB disconnect, device number 70 [ 290.997870][ T8675] [U]  [ 291.010350][ T8748] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 291.027767][ T8748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.046864][ T8748] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 291.066841][ T8748] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 291.089660][ T8748] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 291.091008][ T5372] usb 1-1: USB disconnect, device number 59 [ 291.108661][ T8748] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 291.126514][ T8748] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 291.187263][ T4297] usb 5-1: USB disconnect, device number 66 [ 291.700629][ T5372] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 292.200691][ T5372] usb 1-1: Using ep0 maxpacket: 16 [ 292.210622][ T5372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.260119][ T5372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.282071][ T5372] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 292.331974][ T5372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.360133][ T5372] usb 1-1: config 0 descriptor?? [ 292.780432][ T5372] usbhid 1-1:0.0: can't add hid device: -71 [ 292.786528][ T5372] usbhid: probe of 1-1:0.0 failed with error -71 [ 292.825007][ T5372] usb 1-1: USB disconnect, device number 60 [ 293.114567][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 293.125980][ T8772] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 293.139883][ T4270] Bluetooth: hci4: command 0x0c1a tx timeout [ 293.249241][ T8784] netlink: 'syz.1.1472': attribute type 4 has an invalid length. [ 294.065563][ T8791] lo speed is unknown, defaulting to 1000 [ 294.430078][ T5372] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 294.600092][ T4297] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 294.639966][ T5372] usb 2-1: Using ep0 maxpacket: 16 [ 294.653701][ T5372] usb 2-1: config 0 has no interfaces? [ 294.706290][ T5372] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 294.716099][ T5372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.724185][ T5372] usb 2-1: Product: syz [ 294.729524][ T5372] usb 2-1: Manufacturer: syz [ 294.735240][ T5372] usb 2-1: SerialNumber: syz [ 294.828348][ T5372] usb 2-1: config 0 descriptor?? [ 295.023621][ T4297] usb 5-1: config 0 has no interfaces? [ 295.056597][ T5372] usb 2-1: USB disconnect, device number 71 [ 295.065764][ T4297] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 295.150065][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 295.175518][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.221040][ T4257] Bluetooth: hci4: command 0x0406 tx timeout [ 295.270690][ T4297] usb 5-1: Product: syz [ 295.275440][ T4297] usb 5-1: Manufacturer: syz [ 295.285534][ T4297] usb 5-1: SerialNumber: syz [ 295.384013][ T4297] usb 5-1: config 0 descriptor?? [ 295.829664][ T8805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.839611][ T8805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.922149][ T8817] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 297.004988][ T128] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 297.211994][ T128] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 297.248174][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.268998][ T128] usb 2-1: config 0 descriptor?? [ 297.279674][ T8849] loop5: detected capacity change from 0 to 128 [ 297.292492][ T128] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 297.309385][ T8849] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 297.405616][ T8849] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 298.144045][ T4297] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 298.170199][ T128] gspca_sunplus: reg_w_riv err -110 [ 298.175457][ T128] sunplus: probe of 2-1:0.0 failed with error -110 [ 298.286525][ T8251] EXT4-fs (loop5): unmounting filesystem. [ 298.379862][ T4297] usb 3-1: Using ep0 maxpacket: 16 [ 298.393895][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.483139][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.529817][ T4297] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 298.539192][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.548974][ T4297] usb 3-1: config 0 descriptor?? [ 298.657136][ T8802] [U]  [ 298.672682][ T5372] usb 5-1: USB disconnect, device number 67 [ 298.967984][ T4297] hid-multitouch 0003:1FD2:6007.0010: item fetching failed at offset 2/5 [ 298.980221][ T4297] hid-multitouch: probe of 0003:1FD2:6007.0010 failed with error -22 [ 299.174547][ T128] usb 3-1: USB disconnect, device number 66 [ 299.229780][ T5372] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 299.409033][ T8873] lo speed is unknown, defaulting to 1000 [ 299.431196][ T5372] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.450857][ T5372] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.465134][ T5372] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.474777][ T5372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.559063][ T128] usb 2-1: USB disconnect, device number 72 [ 299.629377][ T8871] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 299.635659][ T8871] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.641952][ T8871] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 299.647952][ T8871] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 299.655326][ T8871] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 299.661543][ T8871] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 299.667507][ T8871] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 299.696150][ T5372] usb 5-1: usb_control_msg returned -32 [ 299.702220][ T5372] usbtmc 5-1:16.0: can't read capabilities [ 299.806857][ T8882] loop5: detected capacity change from 0 to 256 [ 299.840658][ T8882] exfat: Deprecated parameter 'utf8' [ 299.858702][ T8882] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 299.912422][ T26] audit: type=1800 audit(1750985141.888:163): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1501" name="file2" dev="loop5" ino=1048627 res=0 errno=0 [ 299.939923][ T7] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 300.221446][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 300.232031][ T7] usb 1-1: config 0 has no interfaces? [ 300.248691][ T7] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 300.393785][ T8890] loop5: detected capacity change from 0 to 512 [ 300.966525][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.975096][ T7] usb 1-1: Product: syz [ 300.979501][ T7] usb 1-1: Manufacturer: syz [ 300.984324][ T7] usb 1-1: SerialNumber: syz [ 300.992378][ T7] usb 1-1: config 0 descriptor?? [ 301.014291][ T8890] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 301.023243][ T8890] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.206119][ T4297] usb 1-1: USB disconnect, device number 61 [ 301.212628][ T8251] EXT4-fs (loop5): unmounting filesystem. [ 301.279896][ T5372] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 301.471540][ T5372] usb 3-1: config index 0 descriptor too short (expected 30322, got 441) [ 301.488069][ T5372] usb 3-1: config 99 has too many interfaces: 105, using maximum allowed: 32 [ 301.517784][ T5372] usb 3-1: config 99 has an invalid descriptor of length 0, skipping remainder of the config [ 301.536564][ T5372] usb 3-1: config 99 has 0 interfaces, different from the descriptor's value: 105 [ 301.548532][ T5372] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 301.558152][ T5372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.678912][ T8899] loop5: detected capacity change from 0 to 32768 [ 301.687359][ T8899] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 301.709874][ T4257] Bluetooth: hci4: command 0x0c1a tx timeout [ 301.709914][ T4270] Bluetooth: hci3: command 0x0c1a tx timeout [ 301.857260][ T5370] usb 5-1: USB disconnect, device number 68 [ 301.971862][ T7] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 301.981585][ T5372] usb 3-1: USB disconnect, device number 67 [ 302.502660][ T8911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.631303][ T7] usb 2-1: config 0 has no interfaces? [ 302.685339][ T7] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 302.728964][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.747427][ T7] usb 2-1: Product: syz [ 302.763252][ T7] usb 2-1: Manufacturer: syz [ 302.769826][ T7] usb 2-1: SerialNumber: syz [ 302.775782][ T7] usb 2-1: config 0 descriptor?? [ 302.908097][ T8907] loop4: detected capacity change from 0 to 40427 [ 302.923196][ T8907] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 302.930814][ T8907] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 302.942642][ T8907] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff [ 302.951434][ T8907] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 302.964281][ T8907] F2FS-fs (loop4): invalid crc value [ 302.979359][ T8907] F2FS-fs (loop4): Found nat_bits in checkpoint [ 303.033379][ T8907] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 303.040692][ T8907] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 303.045221][ T8903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.068509][ T4299] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 303.076519][ T8903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.241162][ T46] kworker/u4:3: attempt to access beyond end of device [ 303.241162][ T46] loop4: rw=1, sector=53248, nr_sectors = 8 limit=40427 [ 303.255308][ T5370] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 303.269875][ T4299] usb 3-1: Using ep0 maxpacket: 16 [ 303.276675][ T4299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.303442][ T46] kworker/u4:3: attempt to access beyond end of device [ 303.303442][ T46] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 303.329002][ T4299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.363067][ T4299] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 303.378120][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.460164][ T5370] usb 6-1: Using ep0 maxpacket: 16 [ 303.779820][ T4257] Bluetooth: hci4: command 0x0406 tx timeout [ 303.779839][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 304.759927][ T5370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.991891][ T5370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.001827][ T5370] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 305.011424][ T5370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.021855][ T5370] usb 6-1: config 0 descriptor?? [ 305.040451][ T8903] [U]  [ 305.044624][ T4299] usb 3-1: config 0 descriptor?? [ 305.445194][ T5370] usbhid 6-1:0.0: can't add hid device: -71 [ 305.457080][ T4299] hid-multitouch 0003:1FD2:6007.0011: item fetching failed at offset 2/5 [ 305.475037][ T5370] usbhid: probe of 6-1:0.0 failed with error -71 [ 305.476258][ T4299] hid-multitouch: probe of 0003:1FD2:6007.0011 failed with error -22 [ 305.491358][ T5370] usb 6-1: USB disconnect, device number 3 [ 305.712677][ T4299] usb 3-1: USB disconnect, device number 68 [ 305.761820][ T5370] usb 2-1: USB disconnect, device number 73 [ 306.821274][ T128] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 306.873713][ T8950] loop5: detected capacity change from 0 to 8 [ 306.880981][ T8950] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 306.918221][ T8950] cramfs: Error -3 while decompressing! [ 306.929945][ T8950] cramfs: ffffffff96b4c568(26)->ffff88804a97e000(4096) [ 306.949418][ T8950] cramfs: Error -3 while decompressing! [ 306.967264][ T8950] cramfs: ffffffff96b4c582(282)->ffff88806802c000(4096) [ 306.984929][ T8950] cramfs: bad data blocksize 4294966884 [ 307.004291][ T8950] cramfs: Error -3 while decompressing! [ 307.019823][ T8950] cramfs: ffffffff96b4c568(26)->ffff88804a97e000(4096) [ 307.029865][ T128] usb 1-1: Using ep0 maxpacket: 16 [ 307.035677][ T26] audit: type=1800 audit(1750985149.008:164): pid=8950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1520" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 307.056728][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.077887][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.097906][ T128] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.135052][ T128] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 307.151492][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.168664][ T128] usb 1-1: config 0 descriptor?? [ 307.614112][ T128] ryos 0003:1E7D:31CE.0012: unbalanced delimiter at end of report description [ 307.669070][ T128] ryos 0003:1E7D:31CE.0012: parse failed [ 307.718591][ T128] ryos: probe of 0003:1E7D:31CE.0012 failed with error -22 [ 307.871675][ T128] usb 1-1: USB disconnect, device number 62 [ 309.610023][ T128] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 309.619886][ T4297] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 309.889805][ T128] usb 1-1: Using ep0 maxpacket: 16 [ 309.975811][ T4297] usb 3-1: Using ep0 maxpacket: 16 [ 309.975882][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.994938][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.004799][ T128] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 310.014645][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.016669][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.043071][ T128] usb 1-1: config 0 descriptor?? [ 310.073688][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.105436][ T4297] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 310.136899][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.156018][ T4297] usb 3-1: config 0 descriptor?? [ 310.558293][ T128] usbhid 1-1:0.0: can't add hid device: -71 [ 310.601234][ T4297] hid-multitouch 0003:1FD2:6007.0013: item fetching failed at offset 2/5 [ 310.643044][ T4297] hid-multitouch: probe of 0003:1FD2:6007.0013 failed with error -22 [ 311.109860][ T128] usbhid: probe of 1-1:0.0 failed with error -71 [ 311.126586][ T128] usb 1-1: USB disconnect, device number 63 [ 311.166705][ T4299] usb 3-1: USB disconnect, device number 69 [ 312.190284][ T9001] loop5: detected capacity change from 0 to 32768 [ 312.343290][ T9001] XFS (loop5): Mounting V5 Filesystem [ 312.370788][ T9024] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 312.538004][ T9001] XFS (loop5): Ending clean mount [ 312.635066][ T8251] XFS (loop5): Unmounting Filesystem [ 313.578477][ T9051] loop5: detected capacity change from 0 to 8 [ 313.590417][ T9051] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 313.779858][ T7] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 313.820429][ T9057] fuse: Bad value for 'fd' [ 314.050410][ T4297] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 314.609933][ T4297] usb 6-1: Using ep0 maxpacket: 16 [ 314.619069][ T4297] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 314.638104][ T4297] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.660560][ T4297] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.682168][ T4297] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.703100][ T4297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.719826][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 314.724800][ T4297] usb 6-1: Product: syz [ 314.726668][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.735130][ T4297] usb 6-1: Manufacturer: syz [ 314.754727][ T4297] usb 6-1: SerialNumber: syz [ 314.775372][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.810747][ T7] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 314.834060][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.853151][ T7] usb 1-1: config 0 descriptor?? [ 315.185538][ T4297] usb 6-1: 0:2 : does not exist [ 315.205107][ T4297] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 315.245271][ T4297] usb 6-1: USB disconnect, device number 4 [ 315.264817][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 315.275781][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 315.313157][ T7] usb 1-1: USB disconnect, device number 64 [ 316.117830][ T9085] loop4: detected capacity change from 0 to 8 [ 316.188704][ T9085] SQUASHFS error: Failed to read block 0x71e: -5 [ 316.195497][ T9085] SQUASHFS error: Unable to read metadata cache entry [71c] [ 316.202890][ T9085] SQUASHFS error: Unable to read inode 0x11f [ 316.903288][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.909619][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.710203][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 318.751736][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.768400][ T7] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 318.778077][ T7] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 318.787403][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.900609][ T7] usb 6-1: config 0 descriptor?? [ 320.389384][ T26] audit: type=1400 audit(1750985162.178:165): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9173 comm="syz.1.1588" [ 320.808480][ T7] usb 6-1: USB disconnect, device number 5 [ 322.590988][ T9210] Invalid ELF header type: 3 != 1 [ 322.939972][ T4297] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 323.159853][ T4297] usb 3-1: Using ep0 maxpacket: 16 [ 323.169326][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.381275][ T4297] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.616132][ T4297] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 323.790406][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.007353][ T4297] usb 3-1: config 0 descriptor?? [ 324.218214][ T4297] usbhid 3-1:0.0: can't add hid device: -71 [ 324.229815][ T4297] usbhid: probe of 3-1:0.0 failed with error -71 [ 324.257949][ T4297] usb 3-1: USB disconnect, device number 70 [ 325.330289][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 325.999868][ T128] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 326.156407][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.173939][ T7] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.181857][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 326.186508][ T7] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 326.191056][ T9248] device team0 left promiscuous mode [ 326.205724][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.218596][ T7] usb 6-1: config 0 descriptor?? [ 326.243837][ T9248] device team_slave_0 left promiscuous mode [ 326.262110][ T9248] device team_slave_1 left promiscuous mode [ 326.268829][ T9248] device geneve0 left promiscuous mode [ 326.276043][ T9248] bridge0: port 3(team0) entered disabled state [ 326.351409][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.437754][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.541359][ T9248] device bridge_slave_0 left promiscuous mode [ 326.579443][ T9248] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.668023][ T9248] device bridge_slave_1 left promiscuous mode [ 326.703099][ T9248] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.763237][ T128] usb 1-1: Using ep0 maxpacket: 16 [ 326.769979][ T128] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 326.780686][ T128] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.790819][ T128] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.791455][ T9248] bond0: (slave bond_slave_0): Releasing backup interface [ 326.801787][ T128] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.816649][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.824784][ T128] usb 1-1: Product: syz [ 326.828962][ T128] usb 1-1: Manufacturer: syz [ 326.833605][ T128] usb 1-1: SerialNumber: syz [ 326.852514][ T9248] bond0: (slave bond_slave_1): Releasing backup interface [ 326.927795][ T9248] team0: Port device team_slave_0 removed [ 326.992994][ T9248] team0: Port device team_slave_1 removed [ 326.999303][ T9248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.035615][ T9248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.083375][ T9256] Invalid ELF header type: 3 != 1 [ 327.180116][ T9248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.243925][ T9248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.266769][ T128] usb 1-1: 0:2 : does not exist [ 327.302363][ T128] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 327.519560][ T128] usb 1-1: USB disconnect, device number 65 [ 327.834244][ T9248] team0: Port device geneve0 removed [ 327.843134][ T9248] bond1: (slave geneve2): Releasing active interface [ 327.919574][ T5370] usb 6-1: USB disconnect, device number 6 [ 328.229946][ T5372] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 328.230026][ T128] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 328.441013][ T5372] usb 5-1: config index 0 descriptor too short (expected 30322, got 441) [ 328.450252][ T5372] usb 5-1: config 99 has too many interfaces: 105, using maximum allowed: 32 [ 328.459764][ T5372] usb 5-1: config 99 has an invalid descriptor of length 0, skipping remainder of the config [ 328.470817][ T5372] usb 5-1: config 99 has 0 interfaces, different from the descriptor's value: 105 [ 328.480363][ T5372] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 328.510265][ T5372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.582096][ T128] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 328.600033][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.645775][ T128] usb 2-1: config 0 descriptor?? [ 328.887181][ T128] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 328.906107][ T128] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 328.928656][ T128] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 328.938123][ T128] [drm] Initialized udl on minor 2 [ 328.959639][ T5372] usb 5-1: USB disconnect, device number 69 [ 329.045137][ T9291] Invalid ELF header type: 3 != 1 [ 329.120668][ T128] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 329.850815][ T128] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 329.872591][ T9293] loop5: detected capacity change from 0 to 64 [ 329.909062][ T128] usb 2-1: USB disconnect, device number 74 [ 329.916708][ T9293] netlink: 'syz.5.1626': attribute type 10 has an invalid length. [ 329.924688][ T9293] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1626'. [ 330.909825][ T22] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 331.129962][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 331.142945][ T22] usb 6-1: config 0 has no interfaces? [ 331.172276][ T22] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 331.183450][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.199912][ T22] usb 6-1: Product: syz [ 331.204659][ T22] usb 6-1: Manufacturer: syz [ 331.213741][ T22] usb 6-1: SerialNumber: syz [ 331.239826][ T22] usb 6-1: config 0 descriptor?? [ 331.451327][ T22] usb 6-1: USB disconnect, device number 7 [ 331.641844][ T9319] Invalid ELF header type: 3 != 1 [ 332.622479][ T9323] lo speed is unknown, defaulting to 1000 [ 333.471961][ T9328] netlink: 'syz.1.1638': attribute type 10 has an invalid length. [ 333.516634][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 333.523970][ T9330] loop4: detected capacity change from 0 to 1024 [ 333.539941][ T9328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1638'. [ 333.580262][ T9330] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 333.649981][ T5370] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 333.748738][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 333.841417][ T5370] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 333.869774][ T5370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.879501][ T5370] usb 6-1: config 0 descriptor?? [ 334.008125][ T9349] lo speed is unknown, defaulting to 1000 [ 334.106143][ T5370] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 334.117352][ T5370] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 334.146801][ T5370] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 334.159741][ T5370] [drm] Initialized udl on minor 2 [ 334.269860][ T22] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 334.446220][ T5369] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 334.455247][ T5370] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 334.463806][ T5370] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 334.487117][ T5370] usb 6-1: USB disconnect, device number 8 [ 335.087710][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 335.095564][ T22] usb 5-1: config 0 has no interfaces? [ 335.159832][ T5372] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 335.168139][ T22] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 335.262794][ T5369] usb 3-1: config 0 has no interfaces? [ 335.278714][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.298496][ T22] usb 5-1: Product: syz [ 335.302937][ T22] usb 5-1: Manufacturer: syz [ 335.307575][ T22] usb 5-1: SerialNumber: syz [ 335.403428][ T22] usb 5-1: config 0 descriptor?? [ 335.419885][ T5372] usb 2-1: Using ep0 maxpacket: 16 [ 335.500879][ T9370] Invalid ELF header type: 3 != 1 [ 336.168975][ T5372] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 336.193602][ T5372] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.203932][ T5372] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.218093][ T5372] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.278401][ T5372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.300152][ T5372] usb 2-1: Product: syz [ 336.304387][ T5372] usb 2-1: Manufacturer: syz [ 336.314931][ T5372] usb 2-1: SerialNumber: syz [ 336.340347][ T5369] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 336.358612][ T5369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.372564][ T5369] usb 3-1: Product: syz [ 336.380400][ T5369] usb 3-1: Manufacturer: syz [ 336.385044][ T5369] usb 3-1: SerialNumber: syz [ 336.398229][ T5369] usb 3-1: config 0 descriptor?? [ 336.433358][ T9349] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.483370][ T9374] netlink: 'syz.0.1651': attribute type 10 has an invalid length. [ 336.487391][ T22] usb 5-1: USB disconnect, device number 70 [ 336.497967][ T9374] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1651'. [ 336.698080][ T9380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.758519][ T5372] usb 2-1: 0:2 : does not exist [ 336.784676][ T5372] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 336.935546][ T5372] usb 2-1: USB disconnect, device number 75 [ 337.223245][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1654'. [ 339.233412][ T9386] loop5: detected capacity change from 0 to 32768 [ 339.375851][ T9386] ERROR: (device loop5): duplicateIXtree: [ 339.375851][ T9386] [ 339.403859][ T9386] ERROR: (device loop5): remounting filesystem as read-only [ 339.444585][ T22] usb 3-1: USB disconnect, device number 71 [ 339.470409][ T9411] sctp: [Deprecated]: syz.1.1664 (pid 9411) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.470409][ T9411] Use struct sctp_sack_info instead [ 339.502868][ T9386] BUG: Bad page state in process syz.5.1656 pfn:62ea3 [ 339.519794][ T9386] page:ffffea00018ba8c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x33 pfn:0x62ea3 [ 339.538040][ T9386] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 339.569132][ T9386] raw: 00fff00000002006 ffffea0000a0ee48 ffffc90003b37980 0000000000000000 [ 339.588302][ T9386] raw: 0000000000000033 ffff888053feb4d8 00000000ffffffff 0000000000000000 [ 339.604300][ T9386] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 339.613540][ T9413] lo speed is unknown, defaulting to 1000 [ 339.613884][ T9386] page_owner tracks the page as allocated [ 339.630531][ T9386] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9386, tgid 9385 (syz.5.1656), ts 339433471719, free_ts 317459818219 [ 339.649173][ T9386] post_alloc_hook+0x173/0x1a0 [ 339.654150][ T9386] get_page_from_freelist+0x1a26/0x1ac0 [ 339.660508][ T9386] __alloc_pages+0x1df/0x4e0 [ 339.665193][ T9386] folio_alloc+0x1c/0x60 [ 339.675925][ T9386] filemap_alloc_folio+0xdb/0x460 [ 339.681144][ T9386] __filemap_get_folio+0x697/0xdd0 [ 339.686467][ T9386] pagecache_get_page+0x26/0x250 [ 339.691549][ T9386] __get_metapage+0x2a4/0xfa0 [ 339.696275][ T9386] diNewExt+0x9eb/0x2cb0 [ 339.700782][ T9386] diAllocAG+0xde9/0x1c20 [ 339.705239][ T9386] diAlloc+0x1c9/0x1910 [ 339.709432][ T9386] ialloc+0x88/0x950 [ 339.714550][ T9386] jfs_mkdir+0x190/0xa70 [ 339.719587][ T9386] vfs_mkdir+0x387/0x570 [ 339.729503][ T9386] do_mkdirat+0x1d0/0x430 [ 339.733913][ T9386] __x64_sys_mkdirat+0x85/0x90 [ 339.738699][ T9386] page last free stack trace: [ 339.748560][ T9386] free_unref_page_prepare+0x8b4/0x9a0 [ 339.758673][ T9386] free_unref_page+0x2e/0x3f0 [ 339.763485][ T9386] kasan_depopulate_vmalloc_pte+0x67/0x80 [ 339.779552][ T9386] __apply_to_page_range+0x962/0xc80 [ 339.785068][ T9386] kasan_release_vmalloc+0x93/0xb0 [ 339.790387][ T9386] __purge_vmap_area_lazy+0xdb0/0x1900 [ 339.795871][ T9386] drain_vmap_area_work+0x3c/0xd0 [ 339.807772][ T9386] process_one_work+0x898/0x1160 [ 339.812946][ T9386] worker_thread+0xaa2/0x1250 [ 339.817649][ T9386] kthread+0x29d/0x330 [ 339.828453][ T9386] ret_from_fork+0x1f/0x30 [ 339.836479][ T9386] Modules linked in: [ 339.840609][ T9386] CPU: 1 PID: 9386 Comm: syz.5.1656 Not tainted 6.1.141-syzkaller #0 [ 339.848687][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.858766][ T9386] Call Trace: [ 339.862065][ T9386] [ 339.865009][ T9386] dump_stack_lvl+0x168/0x22e [ 339.869711][ T9386] ? show_regs_print_info+0x12/0x12 [ 339.874927][ T9386] ? swiotlb_print_info+0x60/0x60 [ 339.879953][ T9386] bad_page+0x14b/0x170 [ 339.884102][ T9386] free_unref_page_prepare+0x42a/0x9a0 [ 339.889554][ T9386] ? percpu_ref_put+0x19/0x180 [ 339.894315][ T9386] free_unref_page_list+0xbb/0x8e0 [ 339.899426][ T9386] release_pages+0x1f92/0x2200 [ 339.904198][ T9386] ? lru_cache_disable+0x30/0x30 [ 339.909130][ T9386] ? mlock_page_drain_local+0x75/0x490 [ 339.914587][ T9386] ? mlock_page_drain_local+0x75/0x490 [ 339.920037][ T9386] ? mlock_page_drain_local+0x289/0x490 [ 339.925579][ T9386] __pagevec_release+0x6d/0xe0 [ 339.930352][ T9386] truncate_inode_pages_range+0x2f6/0xff0 [ 339.936088][ T9386] ? mapping_evict_folio+0x520/0x520 [ 339.941374][ T9386] ? parse_options+0xc03/0xdb0 [ 339.946145][ T9386] ? jfs_fill_super+0xac0/0xac0 [ 339.951008][ T9386] ? sync_filesystem+0x103/0x220 [ 339.955940][ T9386] jfs_remount+0x337/0x5a0 [ 339.960357][ T9386] ? jfs_statfs+0x550/0x550 [ 339.964853][ T9386] ? __might_sleep+0xd0/0xd0 [ 339.969437][ T9386] ? preempt_count_add+0x8d/0x190 [ 339.974452][ T9386] ? hook_sb_remount+0x19/0xc0 [ 339.979209][ T9386] ? bpf_lsm_sb_remount+0x5/0x10 [ 339.984140][ T9386] reconfigure_super+0x219/0x880 [ 339.989073][ T9386] vfs_fsconfig_locked+0x18d/0x3f0 [ 339.994196][ T9386] __se_sys_fsconfig+0x61b/0x750 [ 339.999129][ T9386] ? __x64_sys_fsconfig+0xc0/0xc0 [ 340.004149][ T9386] ? lockdep_hardirqs_on+0x94/0x140 [ 340.009336][ T9386] ? __x64_sys_fsconfig+0x1c/0xc0 [ 340.014354][ T9386] do_syscall_64+0x4c/0xa0 [ 340.018759][ T9386] ? clear_bhb_loop+0x60/0xb0 [ 340.023425][ T9386] ? clear_bhb_loop+0x60/0xb0 [ 340.028099][ T9386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.034005][ T9386] RIP: 0033:0x7f1018d8e929 [ 340.038418][ T9386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.058014][ T9386] RSP: 002b:00007f1019cea038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 340.066429][ T9386] RAX: ffffffffffffffda RBX: 00007f1018fb5fa0 RCX: 00007f1018d8e929 [ 340.074391][ T9386] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 340.082349][ T9386] RBP: 00007f1018e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 340.090315][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.098292][ T9386] R13: 0000000000000000 R14: 00007f1018fb5fa0 R15: 00007fff5c8fc568 [ 340.106281][ T9386] [ 340.120584][ T9386] Disabling lock debugging due to kernel taint [ 340.127284][ T9386] BUG: Bad page state in process syz.5.1656 pfn:283b9 [ 340.146326][ T9386] page:ffffea0000a0ee40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x32 pfn:0x283b9 [ 340.158057][ T9386] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 340.167838][ T9386] raw: 00fff00000002006 ffffea00007cc908 ffffc90003b37980 0000000000000000 [ 340.178028][ T9386] raw: 0000000000000032 ffff888053feb3e0 00000000ffffffff 0000000000000000 [ 340.186664][ T9386] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 340.198146][ T9386] page_owner tracks the page as allocated [ 340.204092][ T9386] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9386, tgid 9385 (syz.5.1656), ts 339433449566, free_ts 317459837481 [ 340.226135][ T9386] post_alloc_hook+0x173/0x1a0 [ 340.231705][ T9386] get_page_from_freelist+0x1a26/0x1ac0 [ 340.237320][ T9386] __alloc_pages+0x1df/0x4e0 [ 340.243354][ T9386] folio_alloc+0x1c/0x60 [ 340.247686][ T9386] filemap_alloc_folio+0xdb/0x460 [ 340.252921][ T9386] __filemap_get_folio+0x697/0xdd0 [ 340.258182][ T9386] pagecache_get_page+0x26/0x250 [ 340.264525][ T9386] __get_metapage+0x2a4/0xfa0 [ 340.269260][ T9386] diNewExt+0x9eb/0x2cb0 [ 340.273556][ T9386] diAllocAG+0xde9/0x1c20 [ 340.277903][ T9386] diAlloc+0x1c9/0x1910 [ 340.283491][ T9386] ialloc+0x88/0x950 [ 340.287402][ T9386] jfs_mkdir+0x190/0xa70 [ 340.291709][ T9386] vfs_mkdir+0x387/0x570 [ 340.296000][ T9386] do_mkdirat+0x1d0/0x430 [ 340.301713][ T9386] __x64_sys_mkdirat+0x85/0x90 [ 340.306555][ T9386] page last free stack trace: [ 340.311264][ T9386] free_unref_page_prepare+0x8b4/0x9a0 [ 340.316796][ T9386] free_unref_page+0x2e/0x3f0 [ 340.323041][ T9386] kasan_depopulate_vmalloc_pte+0x67/0x80 [ 340.328828][ T9386] __apply_to_page_range+0x962/0xc80 [ 340.337413][ T9386] kasan_release_vmalloc+0x93/0xb0 [ 340.344195][ T9386] __purge_vmap_area_lazy+0xdb0/0x1900 [ 340.349675][ T9386] drain_vmap_area_work+0x3c/0xd0 [ 340.355083][ T9386] process_one_work+0x898/0x1160 [ 340.361563][ T9386] worker_thread+0xaa2/0x1250 [ 340.366375][ T9386] kthread+0x29d/0x330 [ 340.370481][ T9386] ret_from_fork+0x1f/0x30 [ 340.374903][ T9386] Modules linked in: [ 340.378821][ T9386] CPU: 0 PID: 9386 Comm: syz.5.1656 Tainted: G B 6.1.141-syzkaller #0 [ 340.388378][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.398428][ T9386] Call Trace: [ 340.401692][ T9386] [ 340.404607][ T9386] dump_stack_lvl+0x168/0x22e [ 340.409278][ T9386] ? show_regs_print_info+0x12/0x12 [ 340.414464][ T9386] ? swiotlb_print_info+0x60/0x60 [ 340.419472][ T9386] bad_page+0x14b/0x170 [ 340.423619][ T9386] free_unref_page_prepare+0x42a/0x9a0 [ 340.429105][ T9386] ? percpu_ref_put+0x19/0x180 [ 340.433869][ T9386] free_unref_page_list+0xbb/0x8e0 [ 340.438989][ T9386] release_pages+0x1f92/0x2200 [ 340.443758][ T9386] ? lru_cache_disable+0x30/0x30 [ 340.448678][ T9386] ? mlock_page_drain_local+0x75/0x490 [ 340.454117][ T9386] ? mlock_page_drain_local+0x75/0x490 [ 340.459579][ T9386] ? mlock_page_drain_local+0x289/0x490 [ 340.465112][ T9386] __pagevec_release+0x6d/0xe0 [ 340.469865][ T9386] truncate_inode_pages_range+0x2f6/0xff0 [ 340.475571][ T9386] ? mapping_evict_folio+0x520/0x520 [ 340.480866][ T9386] ? parse_options+0xc03/0xdb0 [ 340.485616][ T9386] ? jfs_fill_super+0xac0/0xac0 [ 340.490457][ T9386] ? sync_filesystem+0x103/0x220 [ 340.495374][ T9386] jfs_remount+0x337/0x5a0 [ 340.499812][ T9386] ? jfs_statfs+0x550/0x550 [ 340.504302][ T9386] ? __might_sleep+0xd0/0xd0 [ 340.508875][ T9386] ? preempt_count_add+0x8d/0x190 [ 340.513878][ T9386] ? hook_sb_remount+0x19/0xc0 [ 340.518626][ T9386] ? bpf_lsm_sb_remount+0x5/0x10 [ 340.523549][ T9386] reconfigure_super+0x219/0x880 [ 340.528467][ T9386] vfs_fsconfig_locked+0x18d/0x3f0 [ 340.533566][ T9386] __se_sys_fsconfig+0x61b/0x750 [ 340.538499][ T9386] ? __x64_sys_fsconfig+0xc0/0xc0 [ 340.543533][ T9386] ? lockdep_hardirqs_on+0x94/0x140 [ 340.548711][ T9386] ? __x64_sys_fsconfig+0x1c/0xc0 [ 340.553716][ T9386] do_syscall_64+0x4c/0xa0 [ 340.558117][ T9386] ? clear_bhb_loop+0x60/0xb0 [ 340.562792][ T9386] ? clear_bhb_loop+0x60/0xb0 [ 340.567453][ T9386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.573334][ T9386] RIP: 0033:0x7f1018d8e929 [ 340.577733][ T9386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.597322][ T9386] RSP: 002b:00007f1019cea038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 340.605718][ T9386] RAX: ffffffffffffffda RBX: 00007f1018fb5fa0 RCX: 00007f1018d8e929 [ 340.613668][ T9386] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 340.621620][ T9386] RBP: 00007f1018e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 340.629574][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.637526][ T9386] R13: 0000000000000000 R14: 00007f1018fb5fa0 R15: 00007fff5c8fc568 [ 340.645487][ T9386] [ 340.648527][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.661733][ T9386] BUG: Bad page state in process syz.5.1656 pfn:1f324 [ 340.668677][ T9386] page:ffffea00007cc900 refcount:0 mapcount:0 mapping:0000000000000000 index:0x31 pfn:0x1f324 [ 340.681903][ T9386] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 340.691630][ T9386] raw: 00fff00000002006 ffffea0001ddd2c8 ffffc90003b37980 0000000000000000 [ 340.700290][ T9386] raw: 0000000000000031 ffff888053feb2e8 00000000ffffffff 0000000000000000 [ 340.708924][ T9386] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 340.716235][ T9386] page_owner tracks the page as allocated [ 340.722028][ T9386] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9386, tgid 9385 (syz.5.1656), ts 339433426641, free_ts 317459847269 [ 340.740354][ T9386] post_alloc_hook+0x173/0x1a0 [ 340.745606][ T9386] get_page_from_freelist+0x1a26/0x1ac0 [ 340.751179][ T9386] __alloc_pages+0x1df/0x4e0 [ 340.755749][ T9386] folio_alloc+0x1c/0x60 [ 340.760222][ T9386] filemap_alloc_folio+0xdb/0x460 [ 340.765256][ T9386] __filemap_get_folio+0x697/0xdd0 [ 340.770397][ T9386] pagecache_get_page+0x26/0x250 [ 340.775342][ T9386] __get_metapage+0x2a4/0xfa0 [ 340.780040][ T9386] diNewExt+0x9eb/0x2cb0 [ 340.784328][ T9386] diAllocAG+0xde9/0x1c20 [ 340.788653][ T9386] diAlloc+0x1c9/0x1910 [ 340.792804][ T9386] ialloc+0x88/0x950 [ 340.796682][ T9386] jfs_mkdir+0x190/0xa70 [ 340.800934][ T9386] vfs_mkdir+0x387/0x570 [ 340.805158][ T9386] do_mkdirat+0x1d0/0x430 [ 340.809466][ T9386] __x64_sys_mkdirat+0x85/0x90 [ 340.814224][ T9386] page last free stack trace: [ 340.818886][ T9386] free_unref_page_prepare+0x8b4/0x9a0 [ 340.824401][ T9386] free_unref_page+0x2e/0x3f0 [ 340.829084][ T9386] kasan_depopulate_vmalloc_pte+0x67/0x80 [ 340.834806][ T9386] __apply_to_page_range+0x962/0xc80 [ 340.840102][ T9386] kasan_release_vmalloc+0x93/0xb0 [ 340.845672][ T9386] __purge_vmap_area_lazy+0xdb0/0x1900 [ 340.851220][ T9386] drain_vmap_area_work+0x3c/0xd0 [ 340.856230][ T9386] process_one_work+0x898/0x1160 [ 340.861177][ T9386] worker_thread+0xaa2/0x1250 [ 340.865839][ T9386] kthread+0x29d/0x330 [ 340.869928][ T9386] ret_from_fork+0x1f/0x30 [ 340.874358][ T9386] Modules linked in: [ 340.878248][ T9386] CPU: 1 PID: 9386 Comm: syz.5.1656 Tainted: G B 6.1.141-syzkaller #0 [ 340.887770][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.897817][ T9386] Call Trace: [ 340.901079][ T9386] [ 340.903997][ T9386] dump_stack_lvl+0x168/0x22e [ 340.908658][ T9386] ? show_regs_print_info+0x12/0x12 [ 340.913840][ T9386] ? swiotlb_print_info+0x60/0x60 [ 340.918857][ T9386] bad_page+0x14b/0x170 [ 340.922995][ T9386] free_unref_page_prepare+0x42a/0x9a0 [ 340.928439][ T9386] ? percpu_ref_put+0x19/0x180 [ 340.933203][ T9386] free_unref_page_list+0xbb/0x8e0 [ 340.938328][ T9386] release_pages+0x1f92/0x2200 [ 340.943090][ T9386] ? lru_cache_disable+0x30/0x30 [ 340.948024][ T9386] ? mlock_page_drain_local+0x75/0x490 [ 340.953475][ T9386] ? mlock_page_drain_local+0x75/0x490 [ 340.958927][ T9386] ? mlock_page_drain_local+0x289/0x490 [ 340.964460][ T9386] __pagevec_release+0x6d/0xe0 [ 340.969234][ T9386] truncate_inode_pages_range+0x2f6/0xff0 [ 340.974962][ T9386] ? mapping_evict_folio+0x520/0x520 [ 340.980240][ T9386] ? parse_options+0xc03/0xdb0 [ 340.984995][ T9386] ? jfs_fill_super+0xac0/0xac0 [ 340.989843][ T9386] ? sync_filesystem+0x103/0x220 [ 340.994770][ T9386] jfs_remount+0x337/0x5a0 [ 340.999180][ T9386] ? jfs_statfs+0x550/0x550 [ 341.003675][ T9386] ? __might_sleep+0xd0/0xd0 [ 341.008258][ T9386] ? preempt_count_add+0x8d/0x190 [ 341.013271][ T9386] ? hook_sb_remount+0x19/0xc0 [ 341.018025][ T9386] ? bpf_lsm_sb_remount+0x5/0x10 [ 341.022953][ T9386] reconfigure_super+0x219/0x880 [ 341.027887][ T9386] vfs_fsconfig_locked+0x18d/0x3f0 [ 341.032991][ T9386] __se_sys_fsconfig+0x61b/0x750 [ 341.037926][ T9386] ? __x64_sys_fsconfig+0xc0/0xc0 [ 341.042942][ T9386] ? lockdep_hardirqs_on+0x94/0x140 [ 341.048134][ T9386] ? __x64_sys_fsconfig+0x1c/0xc0 [ 341.053145][ T9386] do_syscall_64+0x4c/0xa0 [ 341.057550][ T9386] ? clear_bhb_loop+0x60/0xb0 [ 341.062212][ T9386] ? clear_bhb_loop+0x60/0xb0 [ 341.066870][ T9386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.072775][ T9386] RIP: 0033:0x7f1018d8e929 [ 341.077175][ T9386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.096766][ T9386] RSP: 002b:00007f1019cea038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 341.105166][ T9386] RAX: ffffffffffffffda RBX: 00007f1018fb5fa0 RCX: 00007f1018d8e929 [ 341.113126][ T9386] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 341.121080][ T9386] RBP: 00007f1018e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 341.129033][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.137022][ T9386] R13: 0000000000000000 R14: 00007f1018fb5fa0 R15: 00007fff5c8fc568 [ 341.144984][ T9386] [ 341.149869][ T9386] BUG: Bad page state in process syz.5.1656 pfn:7bdc1 [ 341.157493][ T9386] page:ffffea0001ef7040 refcount:0 mapcount:0 mapping:0000000000000000 index:0xd pfn:0x7bdc1 [ 341.167719][ T9386] flags: 0xfff08000002046(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 341.178344][ T9386] raw: 00fff08000002046 ffffea0000b1c908 ffffea00009ec4c8 0000000000000000 [ 341.186947][ T9386] raw: 000000000000000d ffff888023948e88 00000000ffffffff 0000000000000000 [ 341.195551][ T9386] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 341.202858][ T9386] page_owner tracks the page as allocated [ 341.208574][ T9386] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9386, tgid 9385 (syz.5.1656), ts 339297092545, free_ts 339229928566 [ 341.227018][ T9386] post_alloc_hook+0x173/0x1a0 [ 341.231826][ T9386] get_page_from_freelist+0x1a26/0x1ac0 [ 341.237370][ T9386] __alloc_pages+0x1df/0x4e0 [ 341.241955][ T9386] folio_alloc+0x1c/0x60 [ 341.246180][ T9386] filemap_alloc_folio+0xdb/0x460 [ 341.251383][ T9386] do_read_cache_folio+0x1bb/0x760 [ 341.256932][ T9386] do_read_cache_page+0x32/0x220 [ 341.261945][ T9386] __get_metapage+0x316/0xfa0 [ 341.266624][ T9386] diReadSpecial+0x257/0x6f0 [ 341.271211][ T9386] jfs_mount+0x3cd/0x860 [ 341.275438][ T9386] jfs_fill_super+0x4de/0xac0 [ 341.280120][ T9386] mount_bdev+0x287/0x3c0 [ 341.284438][ T9386] legacy_get_tree+0xe6/0x180 [ 341.289129][ T9386] vfs_get_tree+0x88/0x270 [ 341.293576][ T9386] do_new_mount+0x24a/0xa40 [ 341.298065][ T9386] __se_sys_mount+0x2d6/0x3c0 [ 341.302755][ T9386] page last free stack trace: [ 341.307406][ T9386] free_unref_page_prepare+0x8b4/0x9a0 [ 341.312868][ T9386] free_unref_page_list+0xbb/0x8e0 [ 341.318052][ T9386] release_pages+0x1f92/0x2200 [ 341.322845][ T9386] tlb_flush_mmu+0xff/0x210 [ 341.327335][ T9386] tlb_finish_mmu+0xbd/0x1c0 [ 341.332361][ T9386] unmap_region+0x272/0x2c0 [ 341.336887][ T9386] do_mas_align_munmap+0xc57/0x1220 [ 341.342091][ T9386] do_mas_munmap+0x240/0x2b0 [ 341.346673][ T9386] __vm_munmap+0x18d/0x290 [ 341.351148][ T9386] __x64_sys_munmap+0x5c/0x70 [ 341.356353][ T9386] do_syscall_64+0x4c/0xa0 [ 341.360852][ T9386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.366745][ T9386] Modules linked in: [ 341.370721][ T9386] CPU: 1 PID: 9386 Comm: syz.5.1656 Tainted: G B 6.1.141-syzkaller #0 [ 341.380264][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.390317][ T9386] Call Trace: [ 341.393591][ T9386] [ 341.396507][ T9386] dump_stack_lvl+0x168/0x22e [ 341.401172][ T9386] ? show_regs_print_info+0x12/0x12 [ 341.406354][ T9386] ? swiotlb_print_info+0x60/0x60 [ 341.411364][ T9386] bad_page+0x14b/0x170 [ 341.415511][ T9386] free_unref_page_prepare+0x42a/0x9a0 [ 341.421008][ T9386] free_unref_page_list+0xbb/0x8e0 [ 341.426130][ T9386] release_pages+0x1f92/0x2200 [ 341.430888][ T9386] ? lru_cache_disable+0x30/0x30 [ 341.435830][ T9386] ? mlock_page_drain_local+0x75/0x490 [ 341.441279][ T9386] ? mlock_page_drain_local+0x75/0x490 [ 341.446725][ T9386] ? mlock_page_drain_local+0x289/0x490 [ 341.452259][ T9386] __pagevec_release+0x6d/0xe0 [ 341.457024][ T9386] truncate_inode_pages_range+0x2f6/0xff0 [ 341.462756][ T9386] ? mapping_evict_folio+0x520/0x520 [ 341.468042][ T9386] ? parse_options+0xc03/0xdb0 [ 341.472811][ T9386] ? jfs_fill_super+0xac0/0xac0 [ 341.477668][ T9386] ? sync_filesystem+0x103/0x220 [ 341.482598][ T9386] jfs_remount+0x337/0x5a0 [ 341.487015][ T9386] ? jfs_statfs+0x550/0x550 [ 341.491515][ T9386] ? __might_sleep+0xd0/0xd0 [ 341.496111][ T9386] ? preempt_count_add+0x8d/0x190 [ 341.501136][ T9386] ? hook_sb_remount+0x19/0xc0 [ 341.505891][ T9386] ? bpf_lsm_sb_remount+0x5/0x10 [ 341.510822][ T9386] reconfigure_super+0x219/0x880 [ 341.515752][ T9386] vfs_fsconfig_locked+0x18d/0x3f0 [ 341.520887][ T9386] __se_sys_fsconfig+0x61b/0x750 [ 341.525834][ T9386] ? __x64_sys_fsconfig+0xc0/0xc0 [ 341.530862][ T9386] ? lockdep_hardirqs_on+0x94/0x140 [ 341.536048][ T9386] ? __x64_sys_fsconfig+0x1c/0xc0 [ 341.541067][ T9386] do_syscall_64+0x4c/0xa0 [ 341.545491][ T9386] ? clear_bhb_loop+0x60/0xb0 [ 341.550204][ T9386] ? clear_bhb_loop+0x60/0xb0 [ 341.554879][ T9386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.560772][ T9386] RIP: 0033:0x7f1018d8e929 [ 341.565177][ T9386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.584777][ T9386] RSP: 002b:00007f1019cea038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 341.593212][ T9386] RAX: ffffffffffffffda RBX: 00007f1018fb5fa0 RCX: 00007f1018d8e929 [ 341.601183][ T9386] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 341.609139][ T9386] RBP: 00007f1018e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 341.617094][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.625053][ T9386] R13: 0000000000000000 R14: 00007f1018fb5fa0 R15: 00007fff5c8fc568 [ 341.633015][ T9386] [ 341.649504][ T107] BUG: Bad page state in process jfsCommit pfn:19a97 [ 341.656365][ T107] page:ffffea000066a5c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x19a97 [ 341.666795][ T107] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 341.676980][ T107] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000 [ 341.685697][ T107] raw: 000000000000002d ffff888053feb5d0 00000000ffffffff 0000000000000000 [ 341.694333][ T107] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 341.701744][ T107] page_owner tracks the page as allocated [ 341.707477][ T107] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9386, tgid 9385 (syz.5.1656), ts 339434409471, free_ts 317459798312 [ 341.726276][ T107] post_alloc_hook+0x173/0x1a0 [ 341.731223][ T107] get_page_from_freelist+0x1a26/0x1ac0 [ 341.736766][ T107] __alloc_pages+0x1df/0x4e0 [ 341.742294][ T107] folio_alloc+0x1c/0x60 [ 341.746552][ T107] filemap_alloc_folio+0xdb/0x460 [ 341.751632][ T107] __filemap_get_folio+0x697/0xdd0 [ 341.756760][ T107] pagecache_get_page+0x26/0x250 [ 341.762442][ T107] __get_metapage+0x2a4/0xfa0 [ 341.767567][ T107] dtSplitRoot+0x1de/0x14e0 [ 341.772099][ T107] dtInsert+0xe2a/0x58a0 [ 341.776324][ T107] jfs_mkdir+0x6e5/0xa70 [ 341.780646][ T107] vfs_mkdir+0x387/0x570 [ 341.784887][ T107] do_mkdirat+0x1d0/0x430 [ 341.789195][ T107] __x64_sys_mkdirat+0x85/0x90 [ 341.793951][ T107] do_syscall_64+0x4c/0xa0 [ 341.798533][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.804440][ T107] page last free stack trace: [ 341.809098][ T107] free_unref_page_prepare+0x8b4/0x9a0 [ 341.814555][ T107] free_unref_page+0x2e/0x3f0 [ 341.819244][ T107] kasan_depopulate_vmalloc_pte+0x67/0x80 [ 341.824975][ T107] __apply_to_page_range+0x962/0xc80 [ 341.830268][ T107] kasan_release_vmalloc+0x93/0xb0 [ 341.835362][ T107] __purge_vmap_area_lazy+0xdb0/0x1900 [ 341.840833][ T107] drain_vmap_area_work+0x3c/0xd0 [ 341.845857][ T107] process_one_work+0x898/0x1160 [ 341.851505][ T107] worker_thread+0xaa2/0x1250 [ 341.856189][ T107] kthread+0x29d/0x330 [ 341.860367][ T107] ret_from_fork+0x1f/0x30 [ 341.864797][ T107] Modules linked in: [ 341.869012][ T107] CPU: 1 PID: 107 Comm: jfsCommit Tainted: G B 6.1.141-syzkaller #0 [ 341.878382][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.888424][ T107] Call Trace: [ 341.891697][ T107] [ 341.894618][ T107] dump_stack_lvl+0x168/0x22e [ 341.899298][ T107] ? show_regs_print_info+0x12/0x12 [ 341.904494][ T107] ? swiotlb_print_info+0x60/0x60 [ 341.909513][ T107] bad_page+0x14b/0x170 [ 341.913655][ T107] free_unref_page_prepare+0x42a/0x9a0 [ 341.919107][ T107] free_unref_page+0x2e/0x3f0 [ 341.923776][ T107] ? __folio_put+0xf1/0x210 [ 341.928272][ T107] txUnlock+0x27e/0xcb0 [ 341.932425][ T107] jfs_lazycommit+0x56c/0xa50 [ 341.937092][ T107] ? txFreelock+0x5a0/0x5a0 [ 341.941582][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 341.947462][ T107] ? do_task_dead+0xd0/0xd0 [ 341.951951][ T107] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 341.957834][ T107] ? __kthread_parkme+0x162/0x1c0 [ 341.962847][ T107] kthread+0x29d/0x330 [ 341.966900][ T107] ? txFreelock+0x5a0/0x5a0 [ 341.971389][ T107] ? kthread_blkcg+0xd0/0xd0 [ 341.975974][ T107] ret_from_fork+0x1f/0x30 [ 341.980385][ T107] [ 341.986557][ T107] page:ffffea000066a5c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x19a97 [ 341.996840][ T107] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 342.007073][ T107] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000 [ 342.015676][ T107] raw: 000000000000002d ffff888053feb5d0 00000000ffffffff 0000000000000000 [ 342.024713][ T107] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 342.035074][ T107] page_owner tracks the page as allocated [ 342.040816][ T107] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 9386, tgid 9385 (syz.5.1656), ts 339434409471, free_ts 317459798312 [ 342.059061][ T107] post_alloc_hook+0x173/0x1a0 [ 342.063824][ T107] get_page_from_freelist+0x1a26/0x1ac0 [ 342.069351][ T107] __alloc_pages+0x1df/0x4e0 [ 342.074300][ T107] folio_alloc+0x1c/0x60 [ 342.078550][ T107] filemap_alloc_folio+0xdb/0x460 [ 342.083584][ T107] __filemap_get_folio+0x697/0xdd0 [ 342.088678][ T107] pagecache_get_page+0x26/0x250 [ 342.093751][ T107] __get_metapage+0x2a4/0xfa0 [ 342.098427][ T107] dtSplitRoot+0x1de/0x14e0 [ 342.102987][ T107] dtInsert+0xe2a/0x58a0 [ 342.107211][ T107] jfs_mkdir+0x6e5/0xa70 [ 342.111468][ T107] vfs_mkdir+0x387/0x570 [ 342.115707][ T107] do_mkdirat+0x1d0/0x430 [ 342.120048][ T107] __x64_sys_mkdirat+0x85/0x90 [ 342.124814][ T107] do_syscall_64+0x4c/0xa0 [ 342.129209][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.135129][ T107] page last free stack trace: [ 342.139799][ T107] free_unref_page_prepare+0x8b4/0x9a0 [ 342.145254][ T107] free_unref_page+0x2e/0x3f0 [ 342.149928][ T107] kasan_depopulate_vmalloc_pte+0x67/0x80 [ 342.155632][ T107] __apply_to_page_range+0x962/0xc80 [ 342.160916][ T107] kasan_release_vmalloc+0x93/0xb0 [ 342.166022][ T107] __purge_vmap_area_lazy+0xdb0/0x1900 [ 342.171478][ T107] drain_vmap_area_work+0x3c/0xd0 [ 342.176891][ T107] process_one_work+0x898/0x1160 [ 342.181854][ T107] worker_thread+0xaa2/0x1250 [ 342.186518][ T107] kthread+0x29d/0x330 [ 342.190690][ T107] ret_from_fork+0x1f/0x30 [ 342.195323][ T107] ------------[ cut here ]------------ [ 342.200861][ T107] kernel BUG at include/linux/mm.h:1135! [ 342.206518][ T107] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 342.212565][ T107] CPU: 1 PID: 107 Comm: jfsCommit Tainted: G B 6.1.141-syzkaller #0 [ 342.221909][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.231953][ T107] RIP: 0010:put_metapage+0x24f/0x340 [ 342.237220][ T107] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 8b 95 e4 fe e9 25 ff ff ff e8 d1 1c 93 fe 48 8b 3c 24 48 c7 c6 c0 42 a6 8a e8 c1 05 cf fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 8a 20 93 [ 342.256803][ T107] RSP: 0018:ffffc90002cd7ce0 EFLAGS: 00010246 [ 342.262848][ T107] RAX: 032e974f245e5300 RBX: ffff888053feb5d0 RCX: 032e974f245e5300 [ 342.270795][ T107] RDX: 0000000000000000 RSI: ffffffff8abf1340 RDI: ffffffff8abf1300 [ 342.278753][ T107] RBP: 000000000000007f R08: dffffc0000000000 R09: fffffbfff1bfd0b6 [ 342.286716][ T107] R10: fffffbfff1bfd0b6 R11: 1ffffffff1bfd0b5 R12: ffff888053feb5f8 [ 342.294699][ T107] R13: ffffea000066a5f4 R14: 1ffff1100a7fd6bf R15: 1ffff1100a7fd6cc [ 342.302679][ T107] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 342.311597][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.318169][ T107] CR2: 00007f2c13780ab8 CR3: 0000000065415000 CR4: 00000000003506e0 [ 342.326143][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 342.334104][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 342.342063][ T107] Call Trace: [ 342.345332][ T107] [ 342.348252][ T107] txUnlock+0x427/0xcb0 [ 342.352404][ T107] jfs_lazycommit+0x56c/0xa50 [ 342.357078][ T107] ? txFreelock+0x5a0/0x5a0 [ 342.361570][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 342.367455][ T107] ? do_task_dead+0xd0/0xd0 [ 342.371947][ T107] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 342.377827][ T107] ? __kthread_parkme+0x162/0x1c0 [ 342.382845][ T107] kthread+0x29d/0x330 [ 342.386907][ T107] ? txFreelock+0x5a0/0x5a0 [ 342.391395][ T107] ? kthread_blkcg+0xd0/0xd0 [ 342.395973][ T107] ret_from_fork+0x1f/0x30 [ 342.400379][ T107] [ 342.403379][ T107] Modules linked in: [ 342.410188][ T107] ---[ end trace 0000000000000000 ]--- [ 342.415689][ T107] RIP: 0010:put_metapage+0x24f/0x340 [ 342.421088][ T107] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 8b 95 e4 fe e9 25 ff ff ff e8 d1 1c 93 fe 48 8b 3c 24 48 c7 c6 c0 42 a6 8a e8 c1 05 cf fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 8a 20 93 [ 342.440803][ T107] RSP: 0018:ffffc90002cd7ce0 EFLAGS: 00010246 [ 342.446871][ T107] RAX: 032e974f245e5300 RBX: ffff888053feb5d0 RCX: 032e974f245e5300 [ 342.454837][ T107] RDX: 0000000000000000 RSI: ffffffff8abf1340 RDI: ffffffff8abf1300 [ 342.462803][ T107] RBP: 000000000000007f R08: dffffc0000000000 R09: fffffbfff1bfd0b6 [ 342.470776][ T107] R10: fffffbfff1bfd0b6 R11: 1ffffffff1bfd0b5 R12: ffff888053feb5f8 [ 342.478727][ T107] R13: ffffea000066a5f4 R14: 1ffff1100a7fd6bf R15: 1ffff1100a7fd6cc [ 342.487089][ T107] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 342.496070][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.504566][ T107] CR2: 00007f2c13780ab8 CR3: 000000000c68e000 CR4: 00000000003506e0 [ 342.514624][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 342.522632][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 342.530627][ T107] Kernel panic - not syncing: Fatal exception [ 342.536883][ T107] Kernel Offset: disabled [ 342.541221][ T107] Rebooting in 86400 seconds..