last executing test programs: 6.338852007s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@space_cache_v2}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@nobarrier}, {@clear_cache}, {@rescan_uuid_tree}, {@nobarrier}, {@nodiscard}, {@ref_verify}, {@enospc_debug}]}, 0x3, 0x55a3, &(0x7f0000005640)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000059e000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000200)=[@flags={0x3, 0x41292}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.270369012s ago: executing program 3: connect$x25(0xffffffffffffffff, &(0x7f0000000280), 0x8d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000200)=0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="9500000000000000185a000009000000000000000000000018140000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2004000000002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4e) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc, 0x22, "000080f100df000000a7d9de16c708db7200"}) socket(0x28, 0x5, 0x0) 4.552930563s ago: executing program 0: socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[], 0x0) 3.899829375s ago: executing program 1: socket(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setreuid(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003c80)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x4}]}}}]}, 0x3c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2808000, &(0x7f00000005c0)={[{@numtail}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@shortname_mixed}, {@fat=@check_normal}, {@uni_xlate}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_mixed}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_winnt}]}, 0xfd, 0x295, &(0x7f0000000680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x351582, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.583539924s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e23}}]}, 0x24}}, 0x0) 3.522622793s ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905820227"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.450301274s ago: executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.020865841s ago: executing program 2: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000500)='./file1\x00', 0x20108c0, &(0x7f0000001240)=ANY=[], 0xf6, 0x618a, &(0x7f000000c840)="$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") chdir(&(0x7f0000000100)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) stat(&(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x121000, 0x11c) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000240), &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00'}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 2.913010358s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x40, r3, 0x1, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, 0x0, @default, @val, @void}}]}, 0x40}}, 0x0) 2.851001307s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = epoll_create(0x689) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000000}) r2 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x9450) epoll_wait(r1, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 2.64249369s ago: executing program 4: socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 2.600654436s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000640)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r7 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000980)=ANY=[@ANYRES16, @ANYRES8, @ANYRESOCT=r7, @ANYBLOB="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", @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYRES64, @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2.57553412s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 2.518808259s ago: executing program 4: accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x9, 0x1, 0x4c}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) socket(0x29, 0x800000003, 0x80000002) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x1f, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}]}, &(0x7f0000000540)='syzkaller\x00', 0x1f, 0x63, &(0x7f0000000580)=""/99, 0x41100, 0x8, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = socket(0x11, 0x2, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f00000003c0)={0x0, 'wg1\x00'}, 0x18) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'batadv_slave_1\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0x2, './file0\x00'}}) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x7ffd}, {0x6}]}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000380)={&(0x7f00000002c0)=""/146, 0x92}) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x406f408, 0x0) 2.442160061s ago: executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x14}], {0x14, 0x10}}, 0x58}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) getsockname(0xffffffffffffffff, &(0x7f0000000480)=@caif, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 2.365217673s ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.343336466s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x6c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0xffff, 0x401f, 0x3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="d8f5bee3e1ffc30525505dd621791f627e806c4ce6d7af9db9077f1f1b0a544e940a0b0e1ffb09a9b94b09c8a83b6509e4d0dbaac38115f9f04b14d40b97dfa63de0e8d5784422927c9e72bdf70f851d1a29c71790cae9fabd90b8739a9273e9fb60e974593cc53279b0dcfb81b9f61c01e7cf2040d7980f959f87fe809298037c7bfa26c574f7a42a", @ANYRES16=r7, @ANYBLOB="000426bd7000fddbdf253b0000000c00990006000000500000000800cd00050007000400870008005700d50100000800a10001000000080026006c090000050019010400000008005700e90f000008009f0003000000050019010d000000050018012200000008002700030000000800a0000100000005001901090000000800a000020000000400870004006c00080057008a020000"], 0x9c}, 0x1, 0x0, 0x0, 0x840}, 0xc0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) creat(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs/file0\x00', 0x88) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000a00000800040001000000", 0x24) connect$unix(r9, &(0x7f0000000000)=@file={0x0, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) setpriority(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000003c0)={0x75, 0x4, 0x81}) close_range(r2, 0xffffffffffffffff, 0x0) 2.068697429s ago: executing program 2: r0 = io_uring_setup(0x4c6, &(0x7f0000000040)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1fa7, 0x7, 0x0, 0x0) 1.694124537s ago: executing program 3: syz_mount_image$xfs(&(0x7f0000009580), &(0x7f00000095c0)='./file2\x00', 0x8080, &(0x7f00000000c0)={[{@ikeep}, {@bsdgroups}, {@uquota}]}, 0x1, 0x957a, &(0x7f0000009640)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file1\x00', 0x40000000) setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), &(0x7f0000001900)=@v2, 0x9, 0x0) 1.623777508s ago: executing program 4: open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xa, "cdfa82f4"}, @global=@item_4={0x3, 0x1, 0x0, "8ca890f6"}]}}, 0x0}, 0x0) 1.4797339s ago: executing program 1: syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@link_local={0x3}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xc11f, {0x0, 0x6, "094218", 0x0, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x40}, [@fragment]}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.428294598s ago: executing program 1: socket(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setreuid(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003c80)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x4}]}}}]}, 0x3c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2808000, &(0x7f00000005c0)={[{@numtail}, {@shortname_winnt}, {@utf8no}, {@utf8}, {@shortname_mixed}, {@fat=@check_normal}, {@uni_xlate}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_mixed}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_winnt}]}, 0xfd, 0x295, &(0x7f0000000680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x351582, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.216191331s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) inotify_init1(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000ac0)={0x20, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x4}}]}, 0x20}}, 0x0) 425.315864ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 311.841201ms ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 246.444072ms ago: executing program 2: syz_mount_image$bfs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00f0ea3e7305b16f28aa4d590119da50c0b3bfa2f3d59c8f93ec3622a63a5160966d7498cff9cb4b2dc5c94d8cdaeb826f708fa6b28ce41a7fcf2e6526727c88631c3689733d9244c15a64ce61e7ed53b4b856afea94096c1d651b3e51b74aa3aa007bbfad8414c5fc1a223cc3e9dce0226ea5fc03fe6a5b07000000874c595090"], 0x1, 0xa7, &(0x7f0000000c00)="$eJzszsGJwkAYBeCXsLALC9kC9rAdpIctRTyJ3jwpgo3Ygq1Ygh148OolEqIg5KQBRfg+mBneDI/5d6ftb6qkWSdN63K05ovldDTr9vQU/SveTplJPpN8Jfmr2pwc/ru3Il3eH1fj60ry8eqZAQCAx5Spk2xuc31P+3vQ783PoDoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE5wDAAD//yRDI3k=") r0 = creat(&(0x7f0000000440)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x1020e) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) write$FUSE_LSEEK(r1, &(0x7f0000000080)={0x18}, 0x18) 225.995545ms ago: executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x14}], {0x14, 0x10}}, 0x58}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) getsockname(0xffffffffffffffff, &(0x7f0000000480)=@caif, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 161.929195ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x6, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) 129.268219ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@ipv6_deladdrlabel={0x38, 0x49, 0xd03, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x38}}, 0x0) 0s ago: executing program 0: io_setup(0x3, &(0x7f0000000180)=0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz-executor.1'. [ 71.108571][ T4157] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 71.171055][ T4165] loop1: detected capacity change from 0 to 256 [ 71.278157][ T1373] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.284868][ T1373] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.299685][ T4165] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00006005) [ 71.341283][ T4165] FAT-fs (loop1): Filesystem has been set read-only [ 71.363179][ T4165] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006005) [ 71.420843][ T4171] loop0: detected capacity change from 0 to 2048 [ 71.514346][ T4176] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.555466][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 71.623016][ T4180] loop4: detected capacity change from 0 to 764 [ 71.635045][ T4182] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.891057][ T4187] device pim6reg1 entered promiscuous mode [ 71.928324][ T3609] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 71.954137][ T3609] asix: probe of 3-1:0.0 failed with error -71 [ 71.973119][ T3609] usb 3-1: USB disconnect, device number 5 [ 71.974109][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.174307][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.193619][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.203734][ T21] usb 4-1: Product: syz [ 72.210620][ T4191] loop4: detected capacity change from 0 to 2048 [ 72.217869][ T21] usb 4-1: Manufacturer: syz [ 72.222477][ T21] usb 4-1: SerialNumber: syz [ 72.307743][ T4191] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 72.485048][ T4193] loop2: detected capacity change from 0 to 16 [ 72.585471][ T4193] erofs: (device loop2): mounted with root inode @ nid 36. [ 72.640742][ T4189] loop1: detected capacity change from 0 to 32768 [ 72.695004][ T4189] gfs2: Bad value for 'statfs_percent' [ 72.844174][ T3582] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.996862][ T4206] delete_channel: no stack [ 73.025577][ T4199] loop2: detected capacity change from 0 to 32768 [ 73.119267][ T4199] jfs_lookup: iget failed on inum 32 [ 73.203066][ T4206] loop0: detected capacity change from 0 to 64 [ 73.212752][ T4208] loop1: detected capacity change from 0 to 4096 [ 73.274081][ T3582] usb 5-1: config 0 has no interfaces? [ 73.279608][ T3582] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.302002][ T3582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.308350][ T4208] __ntfs_error: 50 callbacks suppressed [ 73.308365][ T4208] ntfs: (device loop1): parse_ntfs_boot_sector(): Mft record size (16384) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 73.334538][ T3582] usb 5-1: config 0 descriptor?? [ 73.388303][ T4213] loop2: detected capacity change from 0 to 1024 [ 73.432387][ T4213] JBD2: no valid journal superblock found [ 73.452313][ T4213] EXT4-fs (loop2): error loading journal [ 73.458324][ T21] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 73.471263][ T21] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 73.493550][ T21] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 73.616873][ T3571] usb 5-1: USB disconnect, device number 5 [ 73.665818][ T21] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 73.691377][ T21] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 73.704690][ T4215] loop1: detected capacity change from 0 to 4096 [ 73.727611][ T21] usb 4-1: USB disconnect, device number 6 [ 73.740864][ T21] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 73.772218][ T4215] NILFS (loop1): invalid segment: Checksum error in segment payload [ 73.807003][ T4215] NILFS (loop1): trying rollback from an earlier position [ 73.871908][ T4204] delete_channel: no stack [ 73.930077][ T4215] NILFS (loop1): recovery complete [ 73.961369][ T4223] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.031875][ T4229] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 74.074978][ T4229] pim6reg0: linktype set to 65534 [ 74.229833][ T4240] loop0: detected capacity change from 0 to 16 [ 74.271839][ T4244] loop2: detected capacity change from 0 to 256 [ 74.291478][ T4243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.311364][ T4240] erofs: (device loop0): mounted with root inode @ nid 36. [ 74.329950][ T4244] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00006005) [ 74.351404][ T4244] FAT-fs (loop2): Filesystem has been set read-only [ 74.384216][ T4244] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006005) [ 74.398235][ T4243] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.503973][ T3582] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 74.539085][ T4255] loop3: detected capacity change from 0 to 512 [ 74.571423][ T4258] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.609420][ T4259] loop2: detected capacity change from 0 to 512 [ 74.672703][ T4259] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 74.716398][ T4255] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 74.808952][ T4255] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 74.845819][ T4255] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.859171][ T4247] loop4: detected capacity change from 0 to 32768 [ 74.908673][ T3582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.972382][ T3582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.982190][ T4276] loop2: detected capacity change from 0 to 2048 [ 75.009624][ T3582] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 75.019258][ T3582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.023104][ T4276] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 75.042004][ T3582] usb 2-1: config 0 descriptor?? [ 75.054306][ T4247] XFS (loop4): Mounting V5 Filesystem [ 75.227779][ T4247] XFS (loop4): Ending clean mount [ 75.334061][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 75.344091][ T3571] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 75.394177][ T3526] XFS (loop4): Unmounting Filesystem [ 75.526902][ T3582] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 75.539671][ T3690] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 75.547524][ T3582] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 75.561731][ T3582] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 75.569498][ T3582] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 75.582609][ T3582] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 75.590559][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 75.616429][ T3582] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 75.724153][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 75.733983][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.737246][ T3609] usb 2-1: USB disconnect, device number 5 [ 75.756610][ T3571] usb 4-1: config 0 has no interfaces? [ 75.763032][ T3571] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.783055][ T3571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.793514][ T3571] usb 4-1: config 0 descriptor?? [ 75.944264][ T21] usb 1-1: New USB device found, idVendor=2040, idProduct=4903, bcdDevice=a7.f0 [ 75.953351][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.961492][ T21] usb 1-1: Product: syz [ 75.965844][ T3690] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.976743][ T21] usb 1-1: Manufacturer: syz [ 75.981426][ T21] usb 1-1: SerialNumber: syz [ 75.987835][ T21] usb 1-1: config 0 descriptor?? [ 76.026217][ T21] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 76.032630][ T21] hdpvr: probe of 1-1:0.0 failed with error -12 [ 76.056126][ T3609] usb 4-1: USB disconnect, device number 7 [ 76.144059][ T3690] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.153249][ T3690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.161384][ T3690] usb 3-1: Product: syz [ 76.177495][ T3690] usb 3-1: Manufacturer: syz [ 76.182275][ T3690] usb 3-1: SerialNumber: syz [ 76.267672][ T3981] usb 1-1: USB disconnect, device number 4 [ 76.292598][ T4297] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.306038][ T4299] loop1: detected capacity change from 0 to 256 [ 76.310192][ T4297] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.342899][ T4299] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00006005) [ 76.359214][ T4299] FAT-fs (loop1): Filesystem has been set read-only [ 76.367427][ T4299] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006005) [ 76.370693][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.398390][ T7] cfg80211: failed to load regulatory.db [ 76.407971][ T4301] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.481966][ T4305] device syzkaller1 entered promiscuous mode [ 76.901431][ T4311] loop4: detected capacity change from 0 to 512 [ 77.110970][ T4311] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 77.164605][ T4311] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 77.219778][ T4311] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.294722][ T3690] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 77.321927][ T3690] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 77.403450][ T3690] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 77.525126][ T3690] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 77.564856][ T3690] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 77.618083][ T3690] usb 3-1: USB disconnect, device number 6 [ 77.641048][ T3690] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 77.680873][ T4328] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.742392][ T4328] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.878856][ T4101] udevd[4101]: failed to send result of seq 10269 to main daemon: Connection refused [ 77.921627][ T4341] loop4: detected capacity change from 0 to 256 [ 77.925068][ T4342] loop0: detected capacity change from 0 to 256 [ 78.016615][ T4342] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.050911][ T4341] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00006005) [ 78.063383][ T4347] loop3: detected capacity change from 0 to 1024 [ 78.086447][ T4341] FAT-fs (loop4): Filesystem has been set read-only [ 78.105732][ T4341] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006005) [ 78.209801][ T4319] loop1: detected capacity change from 0 to 32768 [ 78.240401][ T3606] hfsplus: b-tree write err: -5, ino 4 [ 78.277064][ T4361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 78.277075][ T4319] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4319) [ 78.359033][ T4319] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 78.368588][ T4319] BTRFS info (device loop1): using free space tree [ 78.376516][ T4319] BTRFS info (device loop1): has skinny extents [ 78.564766][ T26] audit: type=1800 audit(1718103322.088:71): pid=4371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1966 res=0 errno=0 [ 79.344475][ T4390] loop3: detected capacity change from 0 to 32768 [ 79.400648][ T4319] BTRFS info (device loop1): enabling ssd optimizations [ 79.416045][ T4390] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4390) [ 79.468528][ T4390] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 79.477293][ T4390] BTRFS info (device loop3): using free space tree [ 79.479861][ T26] audit: type=1800 audit(1718103323.128:72): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 79.484441][ T4390] BTRFS info (device loop3): has skinny extents [ 79.584619][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.608960][ T4412] device vxcan3 entered promiscuous mode [ 79.707276][ T4423] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.728250][ T4391] loop0: detected capacity change from 0 to 40427 [ 79.736137][ T4423] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.783994][ T4390] BTRFS info (device loop3): enabling ssd optimizations [ 79.832496][ T4391] F2FS-fs (loop0): invalid crc value [ 79.913574][ T4391] F2FS-fs (loop0): Found nat_bits in checkpoint [ 79.945720][ T4393] loop4: detected capacity change from 0 to 32768 [ 79.969062][ T4391] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.109505][ T4393] XFS (loop4): Mounting V5 Filesystem [ 80.124463][ T3539] attempt to access beyond end of device [ 80.124463][ T3539] loop0: rw=2049, want=45104, limit=40427 [ 80.142616][ T4439] loop2: detected capacity change from 0 to 4096 [ 80.215260][ T4439] NILFS (loop2): invalid segment: Checksum error in segment payload [ 80.303522][ T4393] XFS (loop4): Ending clean mount [ 80.312613][ T4439] NILFS (loop2): trying rollback from an earlier position [ 80.364739][ T4439] NILFS (loop2): recovery complete [ 80.390372][ T4453] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.468476][ T4439] overlayfs: upper fs does not support tmpfile. [ 80.486890][ T4439] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.500705][ T4439] overlayfs: failed to set xattr on upper [ 80.518659][ T4439] overlayfs: ...falling back to index=off,metacopy=off. [ 80.598917][ T3526] XFS (loop4): Unmounting Filesystem [ 80.774844][ T4462] loop1: detected capacity change from 0 to 4096 [ 80.831600][ T4462] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 80.920447][ T4468] delete_channel: no stack [ 81.209114][ T4479] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 81.247706][ T4479] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 81.277652][ T4481] loop0: detected capacity change from 0 to 16 [ 81.281224][ T4475] loop4: detected capacity change from 0 to 4096 [ 81.302182][ T4468] loop3: detected capacity change from 0 to 64 [ 81.341307][ T4475] ntfs3: Unknown parameter 'ÿÿÿ1844674407370955161518446744073709551615ÿvЩ`' [ 81.386612][ T4481] erofs: (device loop0): mounted with root inode @ nid 36. [ 81.428820][ T4479] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 81.491388][ T4479] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 81.511561][ T4491] loop1: detected capacity change from 0 to 512 [ 81.573873][ T4479] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 81.595896][ T4481] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 81.597956][ T4475] overlayfs: failed to resolve './file0': -2 [ 81.615569][ T4481] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 81.616461][ T4491] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 81.642396][ T4481] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 81.710286][ T4491] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 81.742434][ T4491] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.812905][ T4465] delete_channel: no stack [ 81.840697][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.973278][ T4501] loop2: detected capacity change from 0 to 4096 [ 82.076307][ T4501] NILFS (loop2): invalid segment: Checksum error in segment payload [ 82.098120][ T4501] NILFS (loop2): trying rollback from an earlier position [ 82.166105][ T4522] loop4: detected capacity change from 0 to 47 [ 82.166380][ T4501] NILFS (loop2): recovery complete [ 82.190584][ T4523] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.260444][ T4525] loop0: detected capacity change from 0 to 512 [ 82.278880][ T4501] overlayfs: upper fs does not support tmpfile. [ 82.293298][ T4501] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 82.295034][ T4527] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 82.300381][ T4501] overlayfs: failed to set xattr on upper [ 82.321732][ T4501] overlayfs: ...falling back to index=off,metacopy=off. [ 82.348692][ T4525] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 82.359607][ T4527] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 82.399732][ T4529] loop3: detected capacity change from 0 to 16 [ 82.432450][ T4532] loop4: detected capacity change from 0 to 8 [ 82.474104][ T4529] erofs: (device loop3): mounted with root inode @ nid 36. [ 82.536057][ T4532] unable to read fragment index table [ 82.573606][ T4527] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 82.625995][ T4527] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 82.669556][ T4527] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 82.690762][ T4529] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 82.702608][ T4529] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 82.736159][ T4534] loop0: detected capacity change from 0 to 2048 [ 82.748322][ T4529] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 82.778042][ T4534] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 82.826336][ T4538] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.021666][ T4518] loop1: detected capacity change from 0 to 40427 [ 83.141193][ T4518] F2FS-fs (loop1): invalid crc value [ 83.147290][ T4518] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 83.156738][ T4562] loop0: detected capacity change from 0 to 47 [ 83.207840][ T4518] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.411987][ T4518] F2FS-fs (loop1): recover fsync data on readonly fs [ 83.448714][ T4518] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 83.481322][ T4574] loop0: detected capacity change from 0 to 8 [ 83.482379][ T4570] loop4: detected capacity change from 0 to 32768 [ 83.488698][ T4518] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 83.536819][ T4570] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4570) [ 83.604329][ T4518] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.612769][ T4570] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 83.615003][ T4574] unable to read fragment index table [ 83.621536][ T4570] BTRFS info (device loop4): using free space tree [ 83.633399][ T4570] BTRFS info (device loop4): has skinny extents [ 83.814990][ T4570] BTRFS info (device loop4): enabling ssd optimizations [ 84.013572][ T4601] loop0: detected capacity change from 0 to 2048 [ 84.044850][ T4564] loop3: detected capacity change from 0 to 32768 [ 84.173014][ T4564] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4564) [ 84.173371][ T4601] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.233018][ T4564] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 84.243920][ T4607] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.263060][ T4564] BTRFS info (device loop3): using free space tree [ 84.272413][ T4609] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.294064][ T4564] BTRFS info (device loop3): has skinny extents [ 84.297109][ T4611] loop2: detected capacity change from 0 to 256 [ 84.316128][ T4609] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 84.338857][ T4609] loop1: detected capacity change from 0 to 16 [ 84.405979][ T4611] FAT-fs (loop2): Directory bread(block 64) failed [ 84.412526][ T4611] FAT-fs (loop2): Directory bread(block 65) failed [ 84.423356][ T4609] erofs: (device loop1): mounted with root inode @ nid 36. [ 84.439464][ T4609] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 84.452174][ T4611] FAT-fs (loop2): Directory bread(block 66) failed [ 84.461593][ T4609] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 84.489813][ T4611] FAT-fs (loop2): Directory bread(block 67) failed [ 84.499491][ T4611] FAT-fs (loop2): Directory bread(block 68) failed [ 84.507977][ T4609] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 84.511325][ T4611] FAT-fs (loop2): Directory bread(block 69) failed [ 84.523169][ T4611] FAT-fs (loop2): Directory bread(block 70) failed [ 84.523515][ T4634] loop0: detected capacity change from 0 to 1024 [ 84.530483][ T4611] FAT-fs (loop2): Directory bread(block 71) failed [ 84.543619][ T4611] FAT-fs (loop2): Directory bread(block 72) failed [ 84.552637][ T4613] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 84.575215][ T4611] FAT-fs (loop2): Directory bread(block 73) failed [ 84.584108][ T4613] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 84.615047][ T4613] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 84.651951][ T4564] BTRFS info (device loop3): enabling ssd optimizations [ 84.717166][ T4646] loop2: detected capacity change from 0 to 8 [ 84.736146][ T144] hfsplus: b-tree write err: -5, ino 4 [ 84.759978][ T4646] unable to read fragment index table [ 85.047087][ T4652] loop0: detected capacity change from 0 to 32768 [ 85.096852][ T4652] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4652) [ 85.142470][ T4644] loop4: detected capacity change from 0 to 40427 [ 85.155704][ T4652] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 85.164541][ T4652] BTRFS info (device loop0): using free space tree [ 85.171035][ T4652] BTRFS info (device loop0): has skinny extents [ 85.200156][ T4644] F2FS-fs (loop4): invalid crc value [ 85.205561][ T3981] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.221786][ T4644] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 85.236801][ T4644] F2FS-fs (loop4): Found nat_bits in checkpoint [ 85.341150][ T4644] F2FS-fs (loop4): recover fsync data on readonly fs [ 85.353619][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.376996][ T4644] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 85.402904][ T4644] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 85.416995][ T4644] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 85.435076][ T4652] BTRFS info (device loop0): enabling ssd optimizations [ 85.453981][ T3981] usb 2-1: Using ep0 maxpacket: 8 [ 85.576135][ T3981] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.601954][ T3981] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 85.640412][ T3981] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 85.654184][ T4687] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 85.660966][ T3981] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 85.673999][ T3981] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 85.683189][ T3981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.767797][ T3981] hub 2-1:1.0: bad descriptor, ignoring hub [ 85.773726][ T3981] hub: probe of 2-1:1.0 failed with error -5 [ 85.799960][ T3981] cdc_wdm 2-1:1.0: skipping garbage [ 85.805565][ T3981] cdc_wdm 2-1:1.0: skipping garbage [ 85.878926][ T3981] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 85.891650][ T4692] loop2: detected capacity change from 0 to 256 [ 85.903945][ T3981] cdc_wdm 2-1:1.0: Unknown control protocol [ 85.970362][ T4692] FAT-fs (loop2): Directory bread(block 64) failed [ 86.017956][ T4692] FAT-fs (loop2): Directory bread(block 65) failed [ 86.043974][ T4692] FAT-fs (loop2): Directory bread(block 66) failed [ 86.051120][ T4692] FAT-fs (loop2): Directory bread(block 67) failed [ 86.062782][ T4692] FAT-fs (loop2): Directory bread(block 68) failed [ 86.071127][ T4692] FAT-fs (loop2): Directory bread(block 69) failed [ 86.079613][ T4692] FAT-fs (loop2): Directory bread(block 70) failed [ 86.087771][ T4692] FAT-fs (loop2): Directory bread(block 71) failed [ 86.094700][ T3981] usb 2-1: USB disconnect, device number 6 [ 86.103392][ T4692] FAT-fs (loop2): Directory bread(block 72) failed [ 86.110743][ T4696] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 86.114934][ T4692] FAT-fs (loop2): Directory bread(block 73) failed [ 86.120043][ T4696] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 86.200843][ T4696] loop0: detected capacity change from 0 to 16 [ 86.244704][ T4696] erofs: (device loop0): mounted with root inode @ nid 36. [ 86.261143][ T4696] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 86.279035][ T4696] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 86.294022][ T4696] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 86.331017][ T4701] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 86.345021][ T4701] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 86.358814][ T4701] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 86.387222][ T4703] loop4: detected capacity change from 0 to 8 [ 86.451367][ T4703] unable to read fragment index table [ 86.611809][ T4709] loop0: detected capacity change from 0 to 2048 [ 86.668735][ T4709] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.685104][ T4715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.696638][ T4716] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.765992][ T4717] Zero length message leads to an empty skb [ 86.813975][ T4715] syz-executor.2 (4715) used greatest stack depth: 19424 bytes left [ 86.824170][ T3568] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 86.873410][ T4723] loop2: detected capacity change from 0 to 2048 [ 87.018828][ T4733] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.020402][ T4731] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 87.041948][ T4731] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 87.092848][ T4735] loop0: detected capacity change from 0 to 16 [ 87.197333][ T3571] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 87.204078][ T3568] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.220852][ T3568] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.233641][ T4735] erofs: (device loop0): mounted with root inode @ nid 36. [ 87.252541][ T4735] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 87.266370][ T4735] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 87.287564][ T4735] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 87.308630][ T4735] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 87.320663][ T4735] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -18 in[46, 4050] out[1851] [ 87.339325][ T3568] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 87.348702][ T4735] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 87.362876][ T3568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.383199][ T3568] usb 2-1: SerialNumber: syz [ 87.613920][ T3571] usb 5-1: Using ep0 maxpacket: 8 [ 87.650729][ T4745] loop0: detected capacity change from 0 to 8 [ 87.691293][ T3568] usb 2-1: 0:2 : does not exist [ 87.716687][ T4745] unable to read fragment index table [ 87.732870][ T3568] usb 2-1: USB disconnect, device number 7 [ 87.764488][ T3571] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 87.783852][ T3571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.793489][ T3571] usb 5-1: config 0 descriptor?? [ 87.857013][ T4739] loop3: detected capacity change from 0 to 32768 [ 87.880403][ T4749] loop2: detected capacity change from 0 to 4096 [ 87.891482][ T4739] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4739) [ 87.893736][ T4751] loop0: detected capacity change from 0 to 2048 [ 87.969074][ T4751] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 87.985147][ T4739] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 87.993026][ T4752] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.998011][ T4739] BTRFS info (device loop3): force clearing of disk cache [ 88.019625][ T4749] ntfs: volume version 3.1. [ 88.021796][ T4739] BTRFS info (device loop3): turning on flush-on-commit [ 88.031354][ T4739] BTRFS info (device loop3): using free space tree [ 88.035877][ T4749] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp866. You might want to try to use the mount option nls=utf8. [ 88.039258][ T4739] BTRFS info (device loop3): has skinny extents [ 88.066043][ T4749] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 88.097029][ T4739] BTRFS info (device loop3): enabling ssd optimizations [ 88.122120][ T4739] BTRFS info (device loop3): clearing free space tree [ 88.147898][ T4739] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 88.161803][ T4739] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 88.175886][ T4774] loop0: detected capacity change from 0 to 256 [ 88.279352][ T4739] BTRFS info (device loop3): creating free space tree [ 88.322029][ T4739] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 88.343224][ T4739] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 88.427504][ T4785] device bridge_slave_1 left promiscuous mode [ 88.433664][ T26] audit: type=1800 audit(1718103332.068:73): pid=4739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 88.483601][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.503910][ T26] audit: type=1804 audit(1718103332.068:74): pid=4739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4269851924/syzkaller.qLdYlV/53/file2/file1" dev="loop3" ino=260 res=1 errno=0 [ 88.522937][ T1197] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 88.563384][ T4785] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 88.568980][ T26] audit: type=1804 audit(1718103332.148:75): pid=4739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir4269851924/syzkaller.qLdYlV/53/file2/file1" dev="loop3" ino=260 res=1 errno=0 [ 88.584727][ T4779] loop2: detected capacity change from 0 to 32768 [ 88.603083][ T4785] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 88.647247][ T4779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (4779) [ 88.694400][ T4779] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 88.725138][ T4779] BTRFS info (device loop2): using free space tree [ 88.766144][ T4779] BTRFS info (device loop2): has skinny extents [ 88.773271][ T4795] loop0: detected capacity change from 0 to 4096 [ 88.908077][ T4795] NILFS (loop0): invalid segment: Checksum error in segment payload [ 88.916267][ T4795] NILFS (loop0): trying rollback from an earlier position [ 88.938173][ T4779] BTRFS info (device loop2): enabling ssd optimizations [ 88.942746][ T4795] NILFS (loop0): recovery complete [ 88.967823][ T4825] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.007498][ T4795] overlayfs: upper fs does not support tmpfile. [ 89.027149][ T4795] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 89.035887][ T4795] overlayfs: failed to set xattr on upper [ 89.042670][ T4829] loop3: detected capacity change from 0 to 47 [ 89.050154][ T4795] overlayfs: ...falling back to index=off,metacopy=off. [ 89.189775][ T3571] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 89.249231][ T3571] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 89.266290][ T4840] loop3: detected capacity change from 0 to 256 [ 89.278311][ T3571] asix: probe of 5-1:0.0 failed with error -71 [ 89.292183][ T3571] usb 5-1: USB disconnect, device number 6 [ 89.352710][ T4840] FAT-fs (loop3): Directory bread(block 64) failed [ 89.360150][ T4842] loop0: detected capacity change from 0 to 256 [ 89.364859][ T4840] FAT-fs (loop3): Directory bread(block 65) failed [ 89.382182][ T4840] FAT-fs (loop3): Directory bread(block 66) failed [ 89.389339][ T4840] FAT-fs (loop3): Directory bread(block 67) failed [ 89.395730][ T4834] syz-executor.2 (4834) used greatest stack depth: 19376 bytes left [ 89.410593][ T4840] FAT-fs (loop3): Directory bread(block 68) failed [ 89.421270][ T4840] FAT-fs (loop3): Directory bread(block 69) failed [ 89.436721][ T4840] FAT-fs (loop3): Directory bread(block 70) failed [ 89.443358][ T4840] FAT-fs (loop3): Directory bread(block 71) failed [ 89.453896][ T4840] FAT-fs (loop3): Directory bread(block 72) failed [ 89.460897][ T4840] FAT-fs (loop3): Directory bread(block 73) failed [ 90.056853][ T4854] loop4: detected capacity change from 0 to 4096 [ 90.106644][ T4836] loop1: detected capacity change from 0 to 40427 [ 90.166737][ T4858] loop3: detected capacity change from 0 to 4096 [ 90.182309][ T4836] F2FS-fs (loop1): invalid crc value [ 90.208716][ T4836] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.343586][ T4836] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 90.386561][ T4836] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 90.537592][ T4835] attempt to access beyond end of device [ 90.537592][ T4835] loop1: rw=10241, want=45104, limit=40427 [ 90.614640][ T3530] attempt to access beyond end of device [ 90.614640][ T3530] loop1: rw=2049, want=45120, limit=40427 [ 90.779266][ T4850] loop0: detected capacity change from 0 to 32768 [ 90.873711][ T4850] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 90.923994][ T4850] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 91.029968][ T4850] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 91.054441][ T1931] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.141598][ T4878] loop2: detected capacity change from 0 to 256 [ 91.152151][ T4850] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 91.218106][ T4878] FAT-fs (loop2): Directory bread(block 64) failed [ 91.227142][ T4878] FAT-fs (loop2): Directory bread(block 65) failed [ 91.237352][ T4878] FAT-fs (loop2): Directory bread(block 66) failed [ 91.246239][ T4878] FAT-fs (loop2): Directory bread(block 67) failed [ 91.253010][ T4878] FAT-fs (loop2): Directory bread(block 68) failed [ 91.279767][ T4878] FAT-fs (loop2): Directory bread(block 69) failed [ 91.324042][ T4878] FAT-fs (loop2): Directory bread(block 70) failed [ 91.348326][ T4878] FAT-fs (loop2): Directory bread(block 71) failed [ 91.355968][ T4878] FAT-fs (loop2): Directory bread(block 72) failed [ 91.366612][ T4878] FAT-fs (loop2): Directory bread(block 73) failed [ 91.414142][ T1931] usb 5-1: Using ep0 maxpacket: 8 [ 91.599118][ T1931] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 91.624177][ T1931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.655240][ T1931] usb 5-1: config 0 descriptor?? [ 91.761854][ T4891] loop2: detected capacity change from 0 to 4096 [ 92.740988][ T4906] loop0: detected capacity change from 0 to 256 [ 92.753147][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 92.791114][ T4906] exfat: Deprecated parameter 'namecase' [ 92.811586][ T4906] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 92.980526][ T4914] loop2: detected capacity change from 0 to 256 [ 92.992225][ T4900] loop1: detected capacity change from 0 to 32768 [ 93.045900][ T4900] XFS: ikeep mount option is deprecated. [ 93.054619][ T4900] XFS: ikeep mount option is deprecated. [ 93.084387][ T1931] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 93.102631][ T1931] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 93.112990][ T1931] asix: probe of 5-1:0.0 failed with error -71 [ 93.121562][ T1931] usb 5-1: USB disconnect, device number 7 [ 93.142596][ T4900] XFS (loop1): Mounting V5 Filesystem [ 93.222318][ T4900] XFS (loop1): Ending clean mount [ 93.241845][ T4900] XFS (loop1): Quotacheck needed: Please wait. [ 93.273992][ T13] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 93.287984][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.289986][ T4933] device bridge_slave_1 left promiscuous mode [ 93.303293][ T4933] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.311892][ T13] usb 4-1: Product: syz [ 93.316260][ T13] usb 4-1: Manufacturer: syz [ 93.321172][ T13] usb 4-1: SerialNumber: syz [ 93.327988][ T4933] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 93.336322][ T4933] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 93.365166][ T13] usb 4-1: config 0 descriptor?? [ 93.376389][ T4900] XFS (loop1): Quotacheck: Done. [ 93.415049][ T13] ch341 4-1:0.0: ch341-uart converter detected [ 93.475402][ T3530] XFS (loop1): Unmounting Filesystem [ 94.176843][ T4940] netlink: 'syz-executor.4': attribute type 40 has an invalid length. [ 94.185191][ T4916] loop0: detected capacity change from 0 to 32768 [ 94.193780][ T4940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.234119][ T4942] loop4: detected capacity change from 0 to 64 [ 94.294917][ T4916] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 94.304638][ T13] usb 4-1: failed to send control message: -71 [ 94.310846][ T13] ch341-uart: probe of ttyUSB0 failed with error -71 [ 94.326399][ T4916] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 94.329032][ T4944] vivid-008: ================= START STATUS ================= [ 94.340737][ T13] usb 4-1: USB disconnect, device number 8 [ 94.350644][ T13] ch341 4-1:0.0: device disconnected [ 94.363082][ T4916] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 94.372752][ T4944] vivid-008: Generate PTS: true [ 94.387381][ T4944] vivid-008: Generate SCR: true [ 94.401441][ T4944] tpg source WxH: 640x360 (Y'CbCr) [ 94.417869][ T4944] tpg field: 1 [ 94.422493][ T4944] tpg crop: 640x360@0x0 [ 94.434804][ T4944] tpg compose: 640x360@0x0 [ 94.441823][ T4946] loop1: detected capacity change from 0 to 2048 [ 94.448303][ T4944] tpg colorspace: 8 [ 94.452184][ T4944] tpg transfer function: 0/0 [ 94.457105][ T4944] tpg Y'CbCr encoding: 0/0 [ 94.467307][ T4944] tpg quantization: 0/0 [ 94.471572][ T4944] tpg RGB range: 0/2 [ 94.478831][ T4944] vivid-008: ================== END STATUS ================== [ 94.495939][ T4946] UDF-fs: bad mount option "longa" or missing value [ 94.510607][ T4916] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 94.571665][ T4951] loop2: detected capacity change from 0 to 256 [ 94.599308][ T4946] loop1: detected capacity change from 0 to 256 [ 94.623048][ T4951] exfat: Deprecated parameter 'namecase' [ 94.642595][ T4951] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 94.689478][ T4946] FAT-fs (loop1): Directory bread(block 64) failed [ 94.700769][ T4946] FAT-fs (loop1): Directory bread(block 65) failed [ 94.717975][ T4946] FAT-fs (loop1): Directory bread(block 66) failed [ 94.734040][ T4946] FAT-fs (loop1): Directory bread(block 67) failed [ 94.764592][ T4946] FAT-fs (loop1): Directory bread(block 68) failed [ 94.779273][ T4946] FAT-fs (loop1): Directory bread(block 69) failed [ 94.787372][ T4958] loop4: detected capacity change from 0 to 128 [ 94.797163][ T4946] FAT-fs (loop1): Directory bread(block 70) failed [ 94.811332][ T4946] FAT-fs (loop1): Directory bread(block 71) failed [ 94.818384][ T4946] FAT-fs (loop1): Directory bread(block 72) failed [ 94.829992][ T4946] FAT-fs (loop1): Directory bread(block 73) failed [ 94.864897][ T4963] device bridge_slave_1 left promiscuous mode [ 94.872989][ T4958] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 94.882272][ T4963] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.889870][ T4958] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 94.900746][ T4963] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 94.909724][ T4958] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 94.929169][ T4963] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 94.955670][ T4958] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 94.974762][ T4958] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 94.995949][ T4958] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 95.017817][ T4967] loop2: detected capacity change from 0 to 64 [ 95.027808][ T4958] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 95.037934][ T4958] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 95.048709][ T4958] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 95.058009][ T4958] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 95.067359][ T4958] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 95.213661][ T4958] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 95.385721][ T4958] syz-executor.4 (4958) used greatest stack depth: 18800 bytes left [ 95.394191][ T26] audit: type=1800 audit(1718103338.978:76): pid=4958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=1048625 res=0 errno=0 [ 95.680569][ T4982] vivid-008: ================= START STATUS ================= [ 95.700023][ T4982] vivid-008: Generate PTS: true [ 95.710147][ T4982] vivid-008: Generate SCR: true [ 95.713960][ T3582] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 95.716870][ T4982] tpg source WxH: 640x360 (Y'CbCr) [ 95.728136][ T4982] tpg field: 1 [ 95.731647][ T4982] tpg crop: 640x360@0x0 [ 95.736013][ T4982] tpg compose: 640x360@0x0 [ 95.751945][ T4982] tpg colorspace: 8 [ 95.756266][ T4982] tpg transfer function: 0/0 [ 95.760933][ T4982] tpg Y'CbCr encoding: 0/0 [ 95.766982][ T4982] tpg quantization: 0/0 [ 95.773538][ T4982] tpg RGB range: 0/2 [ 95.782446][ T4982] vivid-008: ================== END STATUS ================== [ 95.793892][ T3976] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.828782][ T4987] loop2: detected capacity change from 0 to 256 [ 95.881112][ T4987] exfat: Deprecated parameter 'namecase' [ 95.904062][ T4987] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 95.985994][ T3582] usb 4-1: Using ep0 maxpacket: 8 [ 96.044113][ T3976] usb 5-1: Using ep0 maxpacket: 8 [ 96.049779][ T4989] loop0: detected capacity change from 0 to 32768 [ 96.149325][ T4989] XFS (loop0): Mounting V5 Filesystem [ 96.164116][ T3976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.175192][ T3976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.184356][ T3976] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 96.195909][ T3976] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 96.207456][ T3976] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 96.216686][ T3976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.284622][ T4997] loop2: detected capacity change from 0 to 32768 [ 96.291208][ T3582] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 96.301051][ T3582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.311346][ T3582] usb 4-1: config 0 descriptor?? [ 96.314771][ T3976] hub 5-1:1.0: bad descriptor, ignoring hub [ 96.324842][ T4997] XFS: noattr2 mount option is deprecated. [ 96.326295][ T4989] XFS (loop0): Ending clean mount [ 96.331104][ T4997] XFS (loop2): sunit and swidth must be specified together [ 96.336249][ T3976] hub: probe of 5-1:1.0 failed with error -5 [ 96.349714][ T3976] cdc_wdm 5-1:1.0: skipping garbage [ 96.354995][ T3976] cdc_wdm 5-1:1.0: skipping garbage [ 96.361634][ T3976] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 96.367623][ T3976] cdc_wdm 5-1:1.0: Unknown control protocol [ 96.513045][ T5006] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 96.549825][ T5008] loop1: detected capacity change from 0 to 64 [ 96.615855][ T5006] team0: Port device wlan1 added [ 96.664161][ T1931] usb 5-1: USB disconnect, device number 8 [ 96.682787][ T4989] syz-executor.0 (4989) used greatest stack depth: 18464 bytes left [ 96.706593][ T3539] XFS (loop0): Unmounting Filesystem [ 96.727769][ T5011] netlink: 'syz-executor.1': attribute type 40 has an invalid length. [ 96.740551][ T5011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.214043][ T1931] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 97.218217][ T5023] loop4: detected capacity change from 0 to 32768 [ 97.265096][ T5023] XFS: ikeep mount option is deprecated. [ 97.270776][ T5023] XFS: ikeep mount option is deprecated. [ 97.282187][ T5023] XFS (loop4): Mounting V5 Filesystem [ 97.329515][ T5023] XFS (loop4): Ending clean mount [ 97.336342][ T5023] XFS (loop4): Quotacheck needed: Please wait. [ 97.370974][ T5023] XFS (loop4): Quotacheck: Done. [ 97.419087][ T3526] XFS (loop4): Unmounting Filesystem [ 97.431850][ T5033] loop2: detected capacity change from 0 to 256 [ 97.464747][ T1931] usb 2-1: Using ep0 maxpacket: 8 [ 97.475565][ T5033] exfat: Deprecated parameter 'namecase' [ 97.514548][ T5033] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 97.624024][ T1931] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.638389][ T1931] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.648669][ T3582] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 97.658855][ T3582] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 97.669907][ T1931] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.680537][ T3582] asix: probe of 4-1:0.0 failed with error -71 [ 97.686813][ T1931] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.702038][ T3582] usb 4-1: USB disconnect, device number 9 [ 97.710924][ T1931] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.720859][ T1931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.961302][ T5040] loop0: detected capacity change from 0 to 32768 [ 97.984082][ T1931] usb 2-1: GET_CAPABILITIES returned 0 [ 97.989558][ T1931] usbtmc 2-1:16.0: can't read capabilities [ 98.004562][ T5040] XFS: noattr2 mount option is deprecated. [ 98.010690][ T5040] XFS (loop0): sunit and swidth must be specified together [ 98.043959][ T3569] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 98.198504][ T1931] usb 2-1: USB disconnect, device number 8 [ 98.259278][ T5048] netlink: 'syz-executor.0': attribute type 40 has an invalid length. [ 98.267997][ T5048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.064712][ T5058] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 99.106262][ T3569] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.133721][ T5058] team0: Port device wlan1 added [ 99.198100][ T5067] loop2: detected capacity change from 0 to 4096 [ 99.210442][ T3569] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.219754][ T3569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.233473][ T3569] usb 5-1: SerialNumber: syz [ 99.281073][ T3569] usb 5-1: bad CDC descriptors [ 99.375865][ T5062] loop3: detected capacity change from 0 to 32768 [ 99.415141][ T5062] XFS: ikeep mount option is deprecated. [ 99.420826][ T5062] XFS: ikeep mount option is deprecated. [ 99.433061][ T5062] XFS (loop3): Mounting V5 Filesystem [ 99.481473][ T21] usb 5-1: USB disconnect, device number 9 [ 99.503775][ T5062] XFS (loop3): Ending clean mount [ 99.511405][ T5062] XFS (loop3): Quotacheck needed: Please wait. [ 99.540128][ T5062] XFS (loop3): Quotacheck: Done. [ 99.582976][ T3535] XFS (loop3): Unmounting Filesystem [ 99.734009][ T3886] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 99.897358][ T5080] loop3: detected capacity change from 0 to 32768 [ 99.944838][ T5080] XFS: noattr2 mount option is deprecated. [ 99.951018][ T5080] XFS (loop3): sunit and swidth must be specified together [ 100.069553][ T5088] loop0: detected capacity change from 0 to 2048 [ 100.124026][ T3886] usb 3-1: Using ep0 maxpacket: 8 [ 100.150032][ T5088] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 100.196338][ T5088] Process accounting resumed [ 100.232639][ T5097] loop3: detected capacity change from 0 to 256 [ 100.253952][ T3976] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 100.264193][ T3886] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 100.274994][ T3886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.299143][ T3886] usb 3-1: config 0 descriptor?? [ 100.302308][ T5097] FAT-fs (loop3): Directory bread(block 64) failed [ 100.312422][ T5097] FAT-fs (loop3): Directory bread(block 65) failed [ 100.332340][ T5097] FAT-fs (loop3): Directory bread(block 66) failed [ 100.346784][ T5097] FAT-fs (loop3): Directory bread(block 67) failed [ 100.353552][ T5097] FAT-fs (loop3): Directory bread(block 68) failed [ 100.370403][ T5097] FAT-fs (loop3): Directory bread(block 69) failed [ 100.378198][ T5097] FAT-fs (loop3): Directory bread(block 70) failed [ 100.385392][ T5097] FAT-fs (loop3): Directory bread(block 71) failed [ 100.392006][ T5097] FAT-fs (loop3): Directory bread(block 72) failed [ 100.398857][ T5097] FAT-fs (loop3): Directory bread(block 73) failed [ 100.419001][ T5103] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.436125][ T5099] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.484679][ T5106] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 100.517846][ T5106] team0: Port device wlan1 added [ 100.614025][ T3976] usb 2-1: config 0 has an invalid interface number: 234 but max is 1 [ 100.622375][ T3976] usb 2-1: config 0 has no interface number 1 [ 100.628516][ T3976] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 100.639177][ T3976] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 100.804043][ T3976] usb 2-1: New USB device found, idVendor=18ef, idProduct=e030, bcdDevice=86.1b [ 100.813452][ T3976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.821556][ T3976] usb 2-1: Product: syz [ 100.825998][ T3976] usb 2-1: Manufacturer: syz [ 100.830578][ T3976] usb 2-1: SerialNumber: syz [ 100.837076][ T3976] usb 2-1: config 0 descriptor?? [ 100.842081][ T3976] usb 2-1: Interface #234 referenced by multiple IADs [ 100.885633][ T3976] cp210x 2-1:0.0: cp210x converter detected [ 101.103984][ T3976] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 101.111624][ T3976] cp210x 2-1:0.0: querying part number failed [ 101.119569][ T3976] usb 2-1: cp210x converter now attached to ttyUSB0 [ 101.129200][ T3976] cp210x 2-1:0.234: cp210x converter detected [ 101.153985][ T3976] cp210x 2-1:0.234: failed to get vendor val 0x370b size 1: -71 [ 101.161958][ T3976] cp210x 2-1:0.234: querying part number failed [ 101.169201][ T3976] usb 2-1: cp210x converter now attached to ttyUSB1 [ 101.177181][ T3976] usb 2-1: USB disconnect, device number 9 [ 101.190425][ T3976] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 101.199003][ T3976] cp210x 2-1:0.0: device disconnected [ 101.206839][ T3976] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 101.214931][ T3976] cp210x 2-1:0.234: device disconnected [ 101.224393][ T3582] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.520856][ T5120] loop4: detected capacity change from 0 to 256 [ 101.586342][ T5120] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 101.627299][ T3582] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.657589][ T3886] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 101.680344][ T3886] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 101.709323][ T3886] asix: probe of 3-1:0.0 failed with error -71 [ 101.721768][ T3886] usb 3-1: USB disconnect, device number 7 [ 101.744181][ T3582] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.761090][ T3582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.771329][ T3582] usb 1-1: SerialNumber: syz [ 101.825845][ T3582] usb 1-1: bad CDC descriptors [ 101.878717][ T5133] loop1: detected capacity change from 0 to 2048 [ 101.927693][ T5133] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 101.957739][ T5133] Process accounting resumed [ 102.034409][ T1931] usb 1-1: USB disconnect, device number 5 [ 102.201955][ T5141] loop2: detected capacity change from 0 to 2048 [ 102.215715][ T3582] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 102.275653][ T5141] UDF-fs: bad mount option "longa" or missing value [ 102.298033][ T5143] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 102.344598][ T3886] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 102.389084][ T5141] loop2: detected capacity change from 0 to 256 [ 102.453271][ T5141] FAT-fs (loop2): Directory bread(block 64) failed [ 102.460436][ T5141] FAT-fs (loop2): Directory bread(block 65) failed [ 102.473758][ T5141] FAT-fs (loop2): Directory bread(block 66) failed [ 102.480863][ T5141] FAT-fs (loop2): Directory bread(block 67) failed [ 102.491212][ T5141] FAT-fs (loop2): Directory bread(block 68) failed [ 102.497856][ T5141] FAT-fs (loop2): Directory bread(block 69) failed [ 102.507695][ T5141] FAT-fs (loop2): Directory bread(block 70) failed [ 102.514250][ T5141] FAT-fs (loop2): Directory bread(block 71) failed [ 102.520801][ T5141] FAT-fs (loop2): Directory bread(block 72) failed [ 102.528107][ T5141] FAT-fs (loop2): Directory bread(block 73) failed [ 102.734213][ T3582] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 777 [ 102.744535][ T3582] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 102.757768][ T3582] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 102.768518][ T3582] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 102.777770][ T3582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.019895][ T5137] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.419662][ T3582] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 103.426130][ T3976] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 103.444247][ T3886] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 103.457746][ T3886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.469156][ T3886] usb 2-1: Product: syz [ 103.477611][ T3886] usb 2-1: Manufacturer: syz [ 103.482229][ T3886] usb 2-1: SerialNumber: syz [ 103.488477][ T3886] usb 2-1: config 0 descriptor?? [ 103.537159][ T3582] usb 4-1: USB disconnect, device number 10 [ 103.559815][ T3886] ch341 2-1:0.0: ch341-uart converter detected [ 103.612505][ T5166] loop0: detected capacity change from 0 to 256 [ 103.675892][ T5166] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 103.699101][ T5171] input: syz0 as /devices/virtual/input/input6 [ 103.794144][ T3976] usb 5-1: config 0 has an invalid interface number: 234 but max is 1 [ 103.805699][ T3976] usb 5-1: config 0 has no interface number 1 [ 103.814560][ T3976] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 103.826424][ T3976] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 103.961590][ T5175] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 103.994175][ T3976] usb 5-1: New USB device found, idVendor=18ef, idProduct=e030, bcdDevice=86.1b [ 104.003922][ T3976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.012437][ T3976] usb 5-1: Product: syz [ 104.017870][ T3976] usb 5-1: Manufacturer: syz [ 104.022713][ T3976] usb 5-1: SerialNumber: syz [ 104.038411][ T3976] usb 5-1: config 0 descriptor?? [ 104.045131][ T3976] usb 5-1: Interface #234 referenced by multiple IADs [ 104.095052][ T3976] cp210x 5-1:0.0: cp210x converter detected [ 104.334029][ T3976] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 104.342804][ T3976] cp210x 5-1:0.0: querying part number failed [ 104.352988][ T3976] usb 5-1: cp210x converter now attached to ttyUSB1 [ 104.365128][ T3976] cp210x 5-1:0.234: cp210x converter detected [ 104.586721][ T3886] usb 2-1: failed to send control message: -71 [ 104.593902][ T3886] ch341-uart: probe of ttyUSB0 failed with error -71 [ 104.615579][ T3886] usb 2-1: USB disconnect, device number 10 [ 104.636446][ T3886] ch341 2-1:0.0: device disconnected [ 105.015373][ T3976] cp210x 5-1:0.234: failed to get vendor val 0x370b size 1: -71 [ 105.024837][ T3976] cp210x 5-1:0.234: querying part number failed [ 105.047134][ T3976] usb 5-1: cp210x converter now attached to ttyUSB0 [ 105.145604][ T3976] usb 5-1: USB disconnect, device number 10 [ 105.163426][ T3976] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 105.178572][ T5194] loop3: detected capacity change from 0 to 2048 [ 105.185850][ T3976] cp210x 5-1:0.0: device disconnected [ 105.195194][ T3976] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 105.224194][ T3976] cp210x 5-1:0.234: device disconnected [ 105.239722][ T5194] UDF-fs: bad mount option "longa" or missing value [ 105.293603][ T5200] input: syz1 as /devices/virtual/input/input7 [ 105.355318][ T5194] loop3: detected capacity change from 0 to 256 [ 105.375574][ T5202] loop4: detected capacity change from 0 to 16 [ 105.387467][ T5204] loop1: detected capacity change from 0 to 256 [ 105.417092][ T5202] erofs: (device loop4): mounted with root inode @ nid 36. [ 105.420739][ T5194] FAT-fs (loop3): Directory bread(block 64) failed [ 105.448542][ T5194] FAT-fs (loop3): Directory bread(block 65) failed [ 105.474099][ T5194] FAT-fs (loop3): Directory bread(block 66) failed [ 105.480790][ T5194] FAT-fs (loop3): Directory bread(block 67) failed [ 105.481594][ T5202] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.491334][ T5194] FAT-fs (loop3): Directory bread(block 68) failed [ 105.505762][ T5194] FAT-fs (loop3): Directory bread(block 69) failed [ 105.513110][ T5194] FAT-fs (loop3): Directory bread(block 70) failed [ 105.521920][ T5192] loop2: detected capacity change from 0 to 32768 [ 105.529322][ T5194] FAT-fs (loop3): Directory bread(block 71) failed [ 105.544121][ T5194] FAT-fs (loop3): Directory bread(block 72) failed [ 105.573398][ T5194] FAT-fs (loop3): Directory bread(block 73) failed [ 105.582672][ T5192] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5192) [ 105.734112][ T5192] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 105.742966][ T5192] BTRFS info (device loop2): enabling disk space caching [ 105.750111][ T5192] BTRFS info (device loop2): enabling free space tree [ 105.757105][ T5192] BTRFS info (device loop2): disabling tree log [ 105.776942][ T5192] BTRFS info (device loop2): setting nodatasum [ 106.014823][ T5192] BTRFS info (device loop2): turning on sync discard [ 106.055116][ T5192] BTRFS info (device loop2): using free space tree [ 106.358767][ T5192] BTRFS info (device loop2): has skinny extents [ 106.375684][ T5218] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 106.405660][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.607687][ T5192] BTRFS info (device loop2): enabling ssd optimizations [ 107.004558][ T3582] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 107.106064][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 107.179848][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 107.191408][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.205143][ T21] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.214524][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.224389][ T21] usb 1-1: config 0 descriptor?? [ 107.245066][ T5210] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.333883][ T3582] usb 4-1: Using ep0 maxpacket: 16 [ 107.383993][ T3976] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 107.454811][ T3582] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.479903][ T3582] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.493196][ T3582] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 107.505717][ T3582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.519782][ T3582] usb 4-1: config 0 descriptor?? [ 107.541495][ T5253] input: syz1 as /devices/virtual/input/input8 [ 107.582773][ T5258] loop2: detected capacity change from 0 to 16 [ 107.648441][ T5258] erofs: (device loop2): mounted with root inode @ nid 36. [ 107.664224][ T5258] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.738020][ T21] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 107.744163][ T3976] usb 5-1: config 0 has an invalid interface number: 234 but max is 1 [ 107.761272][ T3976] usb 5-1: config 0 has no interface number 1 [ 107.766663][ T21] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 107.767445][ T3976] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 107.790575][ T3976] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 107.954062][ T3976] usb 5-1: New USB device found, idVendor=18ef, idProduct=e030, bcdDevice=86.1b [ 107.963492][ T3976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.975503][ T3976] usb 5-1: Product: syz [ 107.979690][ T3976] usb 5-1: Manufacturer: syz [ 107.985581][ T3976] usb 5-1: SerialNumber: syz [ 107.992556][ T3976] usb 5-1: config 0 descriptor?? [ 107.998108][ T3976] usb 5-1: Interface #234 referenced by multiple IADs [ 108.007305][ T3582] holtek 0003:1241:5015.0008: item fetching failed at offset 0/3 [ 108.019831][ T3569] usb 1-1: USB disconnect, device number 6 [ 108.028382][ T3582] holtek 0003:1241:5015.0008: parse failed [ 108.039706][ T3582] holtek: probe of 0003:1241:5015.0008 failed with error -22 [ 108.044782][ T3976] cp210x 5-1:0.0: cp210x converter detected [ 108.209232][ T3582] usb 4-1: USB disconnect, device number 11 [ 108.249060][ T5263] loop2: detected capacity change from 0 to 40427 [ 108.256009][ T3976] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 108.267952][ T3976] cp210x 5-1:0.0: querying part number failed [ 108.277870][ T3976] usb 5-1: cp210x converter now attached to ttyUSB0 [ 108.289513][ T3976] cp210x 5-1:0.234: cp210x converter detected [ 108.312750][ T5263] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 108.320868][ T3976] cp210x 5-1:0.234: failed to get vendor val 0x370b size 1: -71 [ 108.334209][ T3976] cp210x 5-1:0.234: querying part number failed [ 108.334838][ T5263] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 108.341598][ T3976] usb 5-1: cp210x converter now attached to ttyUSB1 [ 108.363919][ T3976] usb 5-1: USB disconnect, device number 11 [ 108.372707][ T5263] F2FS-fs (loop2): invalid crc value [ 108.373043][ T3976] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 108.391315][ T5272] loop1: detected capacity change from 0 to 32768 [ 108.391644][ T3976] cp210x 5-1:0.0: device disconnected [ 108.404888][ T5263] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.415165][ T3976] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 108.423579][ T3976] cp210x 5-1:0.234: device disconnected [ 108.447758][ T5272] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5272) [ 108.451206][ T5263] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 108.472490][ T5263] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 108.507143][ T5272] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 108.516161][ T5272] BTRFS info (device loop1): enabling disk space caching [ 108.523208][ T5272] BTRFS info (device loop1): enabling free space tree [ 108.530452][ T5272] BTRFS info (device loop1): disabling tree log [ 108.536999][ T5272] BTRFS info (device loop1): setting nodatasum [ 108.559249][ T3845] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 108.563880][ T5272] BTRFS info (device loop1): turning on sync discard [ 108.578171][ T5272] BTRFS info (device loop1): using free space tree [ 108.578722][ T3845] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 108.588104][ T5272] BTRFS info (device loop1): has skinny extents [ 108.691077][ T5288] loop0: detected capacity change from 0 to 512 [ 108.741550][ T5272] BTRFS info (device loop1): enabling ssd optimizations [ 108.785140][ T5301] loop3: detected capacity change from 0 to 2048 [ 108.799518][ T5288] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 108.813034][ T5288] ext4 filesystem being mounted at /root/syzkaller-testdir140260734/syzkaller.zBLiqY/117/file1 supports timestamps until 2038 (0x7fffffff) [ 108.859621][ T5307] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.897602][ T26] audit: type=1800 audit(1718103352.538:77): pid=5301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 108.920636][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.931829][ T5309] loop2: detected capacity change from 0 to 128 [ 108.945355][ T5310] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 108.957361][ T5310] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 108.986770][ T5310] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.996113][ T5310] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.996891][ T5288] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor.0: path /root/syzkaller-testdir140260734/syzkaller.zBLiqY/117/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 109.004850][ T5310] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.004918][ T5310] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.015273][ T5310] device vxlan0 entered promiscuous mode [ 109.038576][ T26] audit: type=1800 audit(1718103352.658:78): pid=5311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 109.069326][ T5309] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 109.085752][ T5288] EXT4-fs (loop0): Remounting filesystem read-only [ 109.119396][ T5288] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz-executor.0: path /root/syzkaller-testdir140260734/syzkaller.zBLiqY/117/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 109.151407][ T5288] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir140260734/syzkaller.zBLiqY/117/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 109.180268][ T5288] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz-executor.0: path /root/syzkaller-testdir140260734/syzkaller.zBLiqY/117/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 109.210024][ T5288] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz-executor.0: path /root/syzkaller-testdir140260734/syzkaller.zBLiqY/117/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 109.242225][ T5288] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor.0: path /root/syzkaller-testdir140260734/syzkaller.zBLiqY/117/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 109.274621][ T5288] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz-executor.0: path /root/syzkaller-testdir140260734/syzkaller.zBLiqY/117/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 109.305761][ T5288] EXT4-fs error (device loop0): ext4_map_blocks:601: inode #2: block 18: comm syz-executor.0: lblock 23 mapped to illegal pblock 18 (length 1) [ 109.321125][ T5288] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 19: comm syz-executor.0: path /root/syzkaller-testdir140260734/syzkaller.zBLiqY/117/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 109.357939][ T5288] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 20: comm syz-executor.0: path /root/syzkaller-testdir140260734/syzkaller.zBLiqY/117/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 109.842002][ T5333] loop0: detected capacity change from 0 to 256 [ 109.962451][ T5333] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1f48c929, utbl_chksum : 0xe619d30d) [ 110.010724][ T5333] attempt to access beyond end of device [ 110.010724][ T5333] loop0: rw=524288, want=134217944, limit=256 [ 110.061468][ T5333] attempt to access beyond end of device [ 110.061468][ T5333] loop0: rw=0, want=134217920, limit=256 [ 110.065948][ T5344] loop4: detected capacity change from 0 to 2048 [ 110.115751][ T26] audit: type=1800 audit(1718103353.758:79): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=1048710 res=0 errno=0 [ 110.177854][ T5344] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.341831][ T5344] overlayfs: upper fs needs to support d_type. [ 110.351198][ T5344] overlayfs: cleanup of 'work/#13' failed (-2) [ 110.358959][ T5344] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 110.374332][ T5344] overlayfs: failed to set xattr on upper [ 110.380064][ T5344] overlayfs: ...falling back to index=off,metacopy=off. [ 110.387450][ T5344] overlayfs: conflicting lowerdir path [ 110.408928][ T5351] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 111.472034][ T5337] loop2: detected capacity change from 0 to 40427 [ 111.482422][ T4732] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 111.535566][ T5347] loop3: detected capacity change from 0 to 32768 [ 111.550178][ T5337] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 111.558794][ T5337] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 111.576054][ T5337] F2FS-fs (loop2): invalid crc value [ 111.612529][ T5347] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5347) [ 111.628899][ T5337] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.643662][ T5369] loop4: detected capacity change from 0 to 128 [ 111.712884][ T5347] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 111.712956][ T5369] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 111.724259][ T5347] BTRFS info (device loop3): enabling disk space caching [ 111.745437][ T5337] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 111.758401][ T5337] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.772032][ T5347] BTRFS info (device loop3): enabling free space tree [ 111.788896][ T5347] BTRFS info (device loop3): disabling tree log [ 111.795453][ T5347] BTRFS info (device loop3): setting nodatasum [ 111.801633][ T5347] BTRFS info (device loop3): turning on sync discard [ 111.808435][ T5347] BTRFS info (device loop3): using free space tree [ 111.820388][ T5347] BTRFS info (device loop3): has skinny extents [ 111.847725][ T3760] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 111.857160][ T3760] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 111.857824][ T5347] BTRFS info (device loop3): enabling ssd optimizations [ 112.014538][ T4732] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 112.028129][ T4732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.064116][ T4732] usb 1-1: Product: syz [ 112.068496][ T4732] usb 1-1: Manufacturer: syz [ 112.073230][ T4732] usb 1-1: SerialNumber: syz [ 112.090399][ T4732] usb 1-1: config 0 descriptor?? [ 112.140270][ T4732] ch341 1-1:0.0: ch341-uart converter detected [ 112.192677][ T5398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.208527][ T5398] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 112.218376][ T5398] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 112.245837][ T5398] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.254842][ T5398] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.263512][ T5398] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.272334][ T5398] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.281159][ T3976] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 112.289430][ T5398] device vxlan0 entered promiscuous mode [ 112.513968][ T21] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.523924][ T3976] usb 2-1: Using ep0 maxpacket: 32 [ 112.643988][ T3976] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 112.652396][ T3976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 112.814032][ T3976] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 112.823192][ T3976] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 112.831846][ T3976] usb 2-1: Product: syz [ 112.836155][ T3976] usb 2-1: Manufacturer: syz [ 112.840741][ T3976] usb 2-1: SerialNumber: syz [ 112.846584][ T3976] usb 2-1: config 0 descriptor?? [ 112.888748][ T3976] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 112.898841][ T3976] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 112.964018][ T21] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 777 [ 112.985165][ T21] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 112.997473][ T21] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 113.004055][ T4732] usb 1-1: failed to send control message: -71 [ 113.011015][ T21] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 113.022575][ T4732] ch341-uart: probe of ttyUSB0 failed with error -71 [ 113.025527][ T4732] usb 1-1: USB disconnect, device number 7 [ 113.034719][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.037340][ T4732] ch341 1-1:0.0: device disconnected [ 113.074230][ T5400] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 113.136920][ T21] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 113.310954][ T3581] usb 4-1: USB disconnect, device number 12 [ 113.407086][ T26] audit: type=1800 audit(1718103357.018:80): pid=5413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 114.102225][ T5423] input: syz0 as /devices/virtual/input/input9 [ 114.370723][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.388325][ T5441] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 114.396638][ T5441] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 114.403872][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 114.416858][ T5441] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.425739][ T5441] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.434580][ T5441] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.443277][ T5441] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.455508][ T5441] device vxlan0 entered promiscuous mode [ 114.784016][ T3581] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 114.935347][ T1931] usb 2-1: USB disconnect, device number 11 [ 114.949985][ T1931] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 114.974902][ T21] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=3a.4a [ 114.984138][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.992106][ T21] usb 3-1: Product: syz [ 114.996345][ T21] usb 3-1: Manufacturer: syz [ 115.000932][ T21] usb 3-1: SerialNumber: syz [ 115.006773][ T21] usb 3-1: config 0 descriptor?? [ 115.055707][ T21] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 115.063341][ T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 115.071826][ T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 115.079657][ T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 115.087461][ T21] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 115.096047][ T21] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 115.204095][ T3581] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 777 [ 115.215986][ T3581] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 115.226660][ T3581] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 115.331378][ T26] audit: type=1800 audit(1718103358.938:81): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 115.923148][ T4732] usb 3-1: USB disconnect, device number 8 [ 115.945754][ T4732] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 115.972676][ T4732] keyspan 3-1:0.0: device disconnected [ 115.994827][ T3581] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 116.006997][ T3581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.030530][ T5466] devtmpfs: Unknown parameter 'devtmpfs' [ 116.054357][ T5446] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 116.119101][ T3581] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 116.174055][ T21] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.296815][ T4732] usb 4-1: USB disconnect, device number 13 [ 116.466793][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 116.503573][ T5487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.514056][ T5487] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 116.523472][ T5487] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 116.544128][ T3581] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 116.614060][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.623970][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.633721][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.643695][ T1931] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 116.651297][ T21] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.665140][ T21] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.674219][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.804051][ T3581] usb 5-1: Using ep0 maxpacket: 32 [ 116.934217][ T21] usb 1-1: GET_CAPABILITIES returned 0 [ 116.939738][ T21] usbtmc 1-1:16.0: can't read capabilities [ 116.945674][ T3581] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 116.954197][ T3581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 117.034354][ T1931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.045371][ T1931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.055343][ T1931] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 117.064906][ T1931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.074621][ T1931] usb 2-1: config 0 descriptor?? [ 117.103962][ T4732] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 117.144085][ T3581] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 117.146867][ T3976] usb 1-1: USB disconnect, device number 8 [ 117.158299][ T3581] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 117.169476][ T3581] usb 5-1: Product: syz [ 117.173662][ T3581] usb 5-1: Manufacturer: syz [ 117.178379][ T3581] usb 5-1: SerialNumber: syz [ 117.184504][ T3581] usb 5-1: config 0 descriptor?? [ 117.234845][ T3581] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 117.247773][ T3581] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 117.551260][ T26] audit: type=1800 audit(1718103361.168:82): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 117.719766][ T1931] hid-rmi 0003:06CB:81A7.0009: unknown main item tag 0x0 [ 117.993358][ T1931] hid-rmi 0003:06CB:81A7.0009: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 118.090177][ T4732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.101172][ T4732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.110978][ T4732] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 118.111875][ T1931] usb 2-1: USB disconnect, device number 12 [ 118.120064][ T4732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.133981][ T4732] usb 4-1: config 0 descriptor?? [ 118.195168][ T5500] devtmpfs: Unknown parameter 'devtmpfs' [ 118.406424][ T5514] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.421589][ T5514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.433710][ T5514] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.443957][ T5514] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 118.452418][ T5514] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 118.494092][ T5514] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.519795][ T5510] loop0: detected capacity change from 0 to 32768 [ 118.610962][ T5522] devtmpfs: Unknown parameter 'devtmpfs' [ 118.681157][ T4732] hid-multitouch 0003:0EEF:72D0.000A: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 119.862493][ T26] audit: type=1800 audit(1718103363.098:83): pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 119.893283][ T3694] usb 4-1: USB disconnect, device number 14 [ 119.967781][ T3976] usb 5-1: USB disconnect, device number 12 [ 119.988014][ T3976] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 120.128985][ T5545] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.138780][ T5545] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.148207][ T5545] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.158869][ T5545] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 120.167106][ T5545] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 120.175261][ T5545] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.218063][ T5549] devtmpfs: Unknown parameter 'devtmpfs' [ 120.293971][ T13] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 120.304794][ T4732] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 120.423312][ T5555] loop4: detected capacity change from 0 to 32768 [ 120.657240][ T13] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 120.668565][ T4732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.685016][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.699486][ T4732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.711815][ T4732] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 120.726948][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.739331][ T4732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.751266][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 120.771251][ T13] usb 3-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 120.781251][ T4732] usb 2-1: config 0 descriptor?? [ 120.792025][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.810747][ T13] usb 3-1: config 0 descriptor?? [ 120.943913][ T3976] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 120.977573][ T5563] loop0: detected capacity change from 0 to 32768 [ 121.069838][ T5563] XFS (loop0): Mounting V5 Filesystem [ 121.124252][ T5563] XFS (loop0): Ending clean mount [ 121.141127][ T5563] XFS (loop0): Quotacheck needed: Please wait. [ 121.186554][ T5563] XFS (loop0): Quotacheck: Done. [ 121.193968][ T3976] usb 4-1: Using ep0 maxpacket: 32 [ 121.252938][ T3539] XFS (loop0): Unmounting Filesystem [ 121.289296][ T4732] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 121.304001][ T13] a4tech 0003:09DA:0006.000C: hidraw0: USB HID v0.00 Device [HID 09da:0006] on usb-dummy_hcd.2-1/input0 [ 121.315616][ T3976] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 121.328933][ T3976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 121.353373][ T4732] hid-rmi 0003:06CB:81A7.000B: hidraw1: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 121.505853][ T4732] usb 2-1: USB disconnect, device number 13 [ 121.519759][ T13] usb 3-1: USB disconnect, device number 9 [ 121.525806][ T3976] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 121.539874][ T3976] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 121.556715][ T3976] usb 4-1: Product: syz [ 121.560895][ T3976] usb 4-1: Manufacturer: syz [ 121.570059][ T3976] usb 4-1: SerialNumber: syz [ 121.578458][ T3976] usb 4-1: config 0 descriptor?? [ 121.598158][ T5576] loop0: detected capacity change from 0 to 2048 [ 121.614780][ T3976] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 121.625549][ T3976] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 121.661632][ T5576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.757168][ T5578] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.766687][ T5578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.776860][ T5578] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.786622][ T5578] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 121.794852][ T5578] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 121.802971][ T5578] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.878437][ T5584] devtmpfs: Unknown parameter 'devtmpfs' [ 122.066058][ T5595] loop1: detected capacity change from 0 to 512 [ 122.104042][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 122.119937][ T5595] EXT4-fs (loop1): #blocks per group too big: 16384 [ 122.193953][ T3976] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 122.333881][ T3967] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 122.464155][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 122.475881][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 122.487027][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.500414][ T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.509498][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.513966][ T3694] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 122.528352][ T13] usb 1-1: config 0 descriptor?? [ 122.544288][ T5580] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 122.554018][ T3976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.567398][ T3976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.577341][ T3976] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 122.586428][ T3976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.596687][ T3976] usb 5-1: config 0 descriptor?? [ 122.694032][ T3967] usb 3-1: config 0 has an invalid interface number: 234 but max is 1 [ 122.705777][ T3967] usb 3-1: config 0 has no interface number 1 [ 122.711897][ T3967] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 122.723108][ T3967] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 122.793924][ T3694] usb 2-1: Using ep0 maxpacket: 32 [ 122.893991][ T3967] usb 3-1: New USB device found, idVendor=18ef, idProduct=e030, bcdDevice=86.1b [ 122.903496][ T3967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.911712][ T3967] usb 3-1: Product: syz [ 122.916245][ T3967] usb 3-1: Manufacturer: syz [ 122.920838][ T3967] usb 3-1: SerialNumber: syz [ 122.926725][ T3967] usb 3-1: config 0 descriptor?? [ 122.931730][ T3967] usb 3-1: Interface #234 referenced by multiple IADs [ 122.934028][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.949984][ T3694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.960246][ T3694] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.969303][ T3694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.974895][ T3967] cp210x 3-1:0.0: cp210x converter detected [ 122.979020][ T3694] usb 2-1: config 0 descriptor?? [ 123.006486][ T13] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 123.018043][ T13] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 123.035134][ T3694] hub 2-1:0.0: USB hub found [ 123.184005][ T3967] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 123.191617][ T3967] cp210x 3-1:0.0: querying part number failed [ 123.199169][ T3967] usb 3-1: cp210x converter now attached to ttyUSB0 [ 123.207098][ T3967] cp210x 3-1:0.234: cp210x converter detected [ 123.226113][ T13] usb 1-1: USB disconnect, device number 9 [ 123.234285][ T3967] cp210x 3-1:0.234: failed to get vendor val 0x370b size 1: -71 [ 123.241946][ T3967] cp210x 3-1:0.234: querying part number failed [ 123.243995][ T3694] hub 2-1:0.0: 1 port detected [ 123.255397][ T3967] usb 3-1: cp210x converter now attached to ttyUSB1 [ 123.263865][ T3967] usb 3-1: USB disconnect, device number 10 [ 123.271301][ T3967] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 123.279473][ T3967] cp210x 3-1:0.0: device disconnected [ 123.297044][ T3967] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 123.306384][ T3967] cp210x 3-1:0.234: device disconnected [ 123.564542][ T3967] usb 4-1: USB disconnect, device number 15 [ 123.580596][ T3967] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 123.757532][ T5612] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.954047][ T1931] hub 2-1:0.0: activate --> -90 [ 123.994005][ T3967] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 124.001744][ T3976] uclogic 0003:256C:006D.000E: v1 buttonpad probing failed: -71 [ 124.009783][ T3976] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 124.017331][ T3976] uclogic: probe of 0003:256C:006D.000E failed with error -71 [ 124.026285][ T3976] usb 5-1: USB disconnect, device number 13 [ 124.083981][ T3694] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 124.364119][ T3967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.375223][ T3967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.385083][ T3967] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 124.394418][ T3967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.406145][ T3967] usb 4-1: config 0 descriptor?? [ 124.494087][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.508429][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.518569][ T3694] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 124.527751][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.536816][ T3694] usb 3-1: config 0 descriptor?? [ 124.595241][ T13] usb 2-1: USB disconnect, device number 14 [ 124.774173][ T3581] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 124.885333][ T3967] hid-multitouch 0003:0EEF:72D0.000F: unbalanced delimiter at end of report description [ 124.895478][ T3967] hid-multitouch: probe of 0003:0EEF:72D0.000F failed with error -22 [ 124.953947][ T21] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 125.015956][ T3694] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 125.025224][ T3694] hid-rmi 0003:06CB:81A7.0010: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 125.096084][ T3967] usb 4-1: USB disconnect, device number 16 [ 125.174099][ T3581] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 125.186725][ T3581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.198773][ T3581] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.208674][ T3581] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 125.221688][ T3581] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 125.230763][ T3581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.238893][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 125.247940][ T13] usb 3-1: USB disconnect, device number 11 [ 125.248348][ T3581] usb 5-1: config 0 descriptor?? [ 125.384057][ T21] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 125.392394][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 125.524174][ T1931] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 125.584407][ T21] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 125.593494][ T21] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 125.602154][ T21] usb 1-1: Product: syz [ 125.606396][ T21] usb 1-1: Manufacturer: syz [ 125.611000][ T21] usb 1-1: SerialNumber: syz [ 125.617800][ T21] usb 1-1: config 0 descriptor?? [ 125.665627][ T21] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 125.677599][ T21] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 125.690250][ T5639] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.735696][ T3581] a4tech 0003:09DA:0006.0011: hidraw0: USB HID v0.00 Device [HID 09da:0006] on usb-dummy_hcd.4-1/input0 [ 125.934007][ T1931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 125.950577][ T1931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 125.961547][ T3967] usb 5-1: USB disconnect, device number 14 [ 125.965760][ T1931] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.981051][ T1931] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.990335][ T1931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.000968][ T1931] usb 2-1: config 0 descriptor?? [ 126.024272][ T5633] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.196085][ T5658] loop3: detected capacity change from 0 to 512 [ 126.243780][ T5658] EXT4-fs (loop3): #blocks per group too big: 16384 [ 126.486999][ T1931] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 126.503755][ T1931] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 126.673955][ T5669] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.678112][ T1931] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 126.707940][ T5665] loop4: detected capacity change from 0 to 32768 [ 126.716685][ T3976] usb 2-1: USB disconnect, device number 15 [ 126.778561][ T5665] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5665) [ 126.835790][ T5665] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 126.845444][ T5665] BTRFS info (device loop4): force zlib compression, level 3 [ 126.852899][ T5665] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 126.862783][ T5665] BTRFS info (device loop4): use zstd compression, level 3 [ 126.870056][ T5665] BTRFS info (device loop4): enabling ssd optimizations [ 126.877346][ T5665] BTRFS info (device loop4): using free space tree [ 126.883920][ T5665] BTRFS info (device loop4): has skinny extents [ 126.944093][ T1931] usb 4-1: Using ep0 maxpacket: 8 [ 126.966395][ T3845] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 127.055525][ T13] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 127.089223][ T1931] usb 4-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 127.194214][ T1931] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 127.213891][ T1931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 127.222178][ T1931] usb 4-1: SerialNumber: syz [ 127.229962][ T1931] usb 4-1: config 0 descriptor?? [ 127.306609][ T1931] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 127.313516][ T1931] usb 4-1: No valid video chain found. [ 127.344803][ T5697] loop1: detected capacity change from 0 to 1024 [ 127.444101][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.491083][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.503318][ T13] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 127.521413][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.530583][ T13] usb 3-1: config 0 descriptor?? [ 127.538592][ T3967] usb 4-1: USB disconnect, device number 17 [ 127.701763][ T3568] usb 1-1: USB disconnect, device number 10 [ 127.710082][ T3568] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 127.793908][ T1931] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 128.016604][ T13] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 128.025056][ T13] hid-rmi 0003:06CB:81A7.0013: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 128.079661][ T5713] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.113901][ T3568] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 128.170954][ T5721] device syzkaller0 entered promiscuous mode [ 128.199055][ T1931] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 128.210252][ T1931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.227393][ T1931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.240495][ T4732] usb 3-1: USB disconnect, device number 12 [ 128.244274][ T1931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 128.268149][ T1931] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 128.277511][ T1931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.290566][ T1931] usb 5-1: config 0 descriptor?? [ 128.356223][ T5727] loop3: detected capacity change from 0 to 1024 [ 128.363960][ T3568] usb 1-1: Using ep0 maxpacket: 8 [ 128.484129][ T3568] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 128.653981][ T3568] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=dd.3e [ 128.663152][ T3568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.671202][ T3568] usb 1-1: Product: syz [ 128.675474][ T3568] usb 1-1: Manufacturer: syz [ 128.680072][ T3568] usb 1-1: SerialNumber: syz [ 128.686570][ T3568] usb 1-1: config 0 descriptor?? [ 128.768071][ T5739] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.788187][ T1931] a4tech 0003:09DA:0006.0014: hidraw0: USB HID v0.00 Device [HID 09da:0006] on usb-dummy_hcd.4-1/input0 [ 128.943970][ T3568] snd-usb-audio: probe of 1-1:0.0 failed with error -71 [ 128.952174][ T3568] usb 1-1: USB disconnect, device number 11 [ 128.998181][ T13] usb 5-1: USB disconnect, device number 15 [ 129.385083][ T5754] loop3: detected capacity change from 0 to 1024 [ 129.594154][ T5760] device macvlan2 entered promiscuous mode [ 129.617544][ T5760] batman_adv: batadv0: Adding interface: macvlan2 [ 129.631257][ T5760] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.730538][ T5760] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 129.972680][ T5764] loop4: detected capacity change from 0 to 32768 [ 130.004082][ T5764] XFS (loop4): Mounting V5 Filesystem [ 130.057842][ T5764] XFS (loop4): Ending clean mount [ 130.064556][ T1931] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 130.077345][ T5764] XFS (loop4): Quotacheck needed: Please wait. [ 130.111377][ T5764] XFS (loop4): Quotacheck: Done. [ 130.151905][ T3526] XFS (loop4): Unmounting Filesystem [ 130.229590][ T13] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 130.314040][ T1931] usb 3-1: Using ep0 maxpacket: 32 [ 130.452130][ T5807] loop4: detected capacity change from 0 to 512 [ 130.473885][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 130.504888][ T5807] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 130.521074][ T5807] EXT4-fs (loop4): 1 truncate cleaned up [ 130.526975][ T5807] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,nouid32,noblock_validity,,errors=continue. Quota mode: writeback. [ 130.594207][ T13] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 130.613995][ T1931] usb 3-1: New USB device found, idVendor=13d3, idProduct=3341, bcdDevice=f1.c5 [ 130.623177][ T1931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.632288][ T1931] usb 3-1: Product: syz [ 130.636727][ T1931] usb 3-1: Manufacturer: syz [ 130.641334][ T1931] usb 3-1: SerialNumber: syz [ 130.665846][ T1931] usb 3-1: config 0 descriptor?? [ 130.726092][ T1931] r8712u: register rtl8712_netdev_ops to netdev_ops [ 130.732950][ T1931] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 130.774018][ T13] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=dd.3e [ 130.783311][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.799652][ T13] usb 1-1: Product: syz [ 130.805552][ T13] usb 1-1: Manufacturer: syz [ 130.810375][ T13] usb 1-1: SerialNumber: syz [ 130.821402][ T13] usb 1-1: config 0 descriptor?? [ 130.905878][ T5819] loop4: detected capacity change from 0 to 32768 [ 130.947370][ T5819] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5819) [ 130.974127][ T1931] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 130.980754][ T1931] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 130.988406][ T1931] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 131.000136][ T1931] usb 3-1: USB disconnect, device number 13 [ 131.012034][ T5819] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 131.021134][ T5819] BTRFS info (device loop4): turning off barriers [ 131.027782][ T5819] BTRFS info (device loop4): force clearing of disk cache [ 131.035103][ T5819] BTRFS info (device loop4): doing ref verification [ 131.051241][ T5819] BTRFS info (device loop4): using free space tree [ 131.057952][ T5819] BTRFS info (device loop4): has skinny extents [ 131.084010][ T13] snd-usb-audio: probe of 1-1:0.0 failed with error -71 [ 131.093380][ T13] usb 1-1: USB disconnect, device number 12 [ 131.105472][ T5819] BTRFS info (device loop4): enabling ssd optimizations [ 131.114496][ T5819] BTRFS info (device loop4): clearing free space tree [ 131.121286][ T5819] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.138146][ T5819] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.158961][ T5819] BTRFS info (device loop4): creating free space tree [ 131.168675][ T5819] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.178480][ T5819] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.191998][ T5819] BTRFS info (device loop4): checking UUID tree [ 131.664904][ T5856] loop4: detected capacity change from 0 to 256 [ 131.700571][ T5859] device syzkaller0 entered promiscuous mode [ 131.768857][ T5856] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 132.717927][ T1373] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.724410][ T1373] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.057240][ T5867] device vlan0 entered promiscuous mode [ 136.102843][ T5867] team0: Port device vlan0 added [ 136.246492][ T5884] loop1: detected capacity change from 0 to 64 [ 136.531948][ T5872] loop2: detected capacity change from 0 to 32768 [ 136.719279][ T5872] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5872) [ 137.483095][ T5872] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 137.503258][ T5872] BTRFS info (device loop2): turning off barriers [ 137.512475][ T5872] BTRFS info (device loop2): force clearing of disk cache [ 137.525307][ T5872] BTRFS info (device loop2): doing ref verification [ 137.533321][ T5872] BTRFS info (device loop2): using free space tree [ 137.544618][ T5872] BTRFS info (device loop2): has skinny extents [ 137.629804][ T5942] loop4: detected capacity change from 0 to 512 [ 137.647149][ T5872] BTRFS info (device loop2): enabling ssd optimizations [ 137.656375][ T5872] BTRFS info (device loop2): clearing free space tree [ 137.663222][ T5872] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.673370][ T5872] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.689636][ T5872] BTRFS info (device loop2): creating free space tree [ 137.700247][ T5872] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.711960][ T5872] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.729325][ T5872] BTRFS info (device loop2): checking UUID tree [ 137.737638][ T5942] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 137.776459][ T5942] EXT4-fs (loop4): 1 truncate cleaned up [ 137.792516][ T5942] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,nouid32,noblock_validity,,errors=continue. Quota mode: writeback. [ 137.858897][ T5953] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.923070][ T5957] loop0: detected capacity change from 0 to 64 [ 138.931211][ T5973] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 138.939972][ T5973] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 138.953722][ T5973] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 138.965137][ T5973] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.010814][ T5980] loop0: detected capacity change from 0 to 512 [ 139.029026][ T5979] loop1: detected capacity change from 0 to 2048 [ 139.082466][ T5979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.099485][ T5980] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 139.112485][ T5980] EXT4-fs (loop0): 1 truncate cleaned up [ 139.125296][ T5980] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,nouid32,noblock_validity,,errors=continue. Quota mode: writeback. [ 140.180386][ T6009] loop3: detected capacity change from 0 to 128 [ 140.277453][ T6020] loop2: detected capacity change from 0 to 512 [ 140.352231][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.359511][ T6020] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 140.363170][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.402121][ T6020] EXT4-fs (loop2): 1 truncate cleaned up [ 140.419055][ T6020] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,nouid32,noblock_validity,,errors=continue. Quota mode: writeback. [ 140.450228][ T3568] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 140.715179][ T3568] usb 5-1: Using ep0 maxpacket: 32 [ 141.394183][ T3568] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 141.414232][ T3568] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 141.416142][ T6056] loop2: detected capacity change from 0 to 128 [ 141.598623][ T6053] loop3: detected capacity change from 0 to 32768 [ 141.606554][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.617210][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.634233][ T3568] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 141.646553][ T3568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.659903][ T3568] usb 5-1: Product: syz [ 141.664713][ T3568] usb 5-1: Manufacturer: syz [ 141.680110][ T3568] usb 5-1: SerialNumber: syz [ 141.684088][ T6053] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6053) [ 141.686611][ T3568] usb 5-1: config 0 descriptor?? [ 141.747685][ T3568] hub 5-1:0.0: bad descriptor, ignoring hub [ 141.760772][ T3568] hub: probe of 5-1:0.0 failed with error -5 [ 141.780788][ T3568] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 141.797921][ T3568] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 141.816523][ T6053] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 141.834308][ T6053] BTRFS info (device loop3): turning off barriers [ 141.842017][ T3568] usbtouchscreen: probe of 5-1:0.0 failed with error -90 [ 141.858746][ T6053] BTRFS info (device loop3): force clearing of disk cache [ 141.865546][ T6072] loop0: detected capacity change from 0 to 8 [ 141.872014][ T6053] BTRFS info (device loop3): doing ref verification [ 141.879489][ T6053] BTRFS info (device loop3): using free space tree [ 141.886361][ T6053] BTRFS info (device loop3): has skinny extents [ 141.923356][ T6053] BTRFS info (device loop3): enabling ssd optimizations [ 141.939796][ T6053] BTRFS info (device loop3): clearing free space tree [ 141.949959][ T6053] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.963540][ T6053] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.988386][ T6053] BTRFS info (device loop3): creating free space tree [ 141.996237][ T6053] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 142.006019][ T6053] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 142.048021][ T6053] BTRFS info (device loop3): checking UUID tree [ 142.064197][ T3568] usb 5-1: USB disconnect, device number 16 [ 142.864787][ T6106] loop0: detected capacity change from 0 to 8192 [ 142.908948][ T6106] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 142.921138][ T6106] REISERFS (device loop0): using ordered data mode [ 142.927881][ T6106] reiserfs: using flush barriers [ 142.945055][ T6106] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.962548][ T6106] REISERFS (device loop0): checking transaction log (loop0) [ 142.973231][ T6106] REISERFS (device loop0): Using tea hash to sort names [ 142.984147][ T6106] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 143.043924][ T3567] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 143.064047][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 143.303973][ T3567] usb 5-1: Using ep0 maxpacket: 8 [ 143.313870][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 143.442598][ T23] usb 3-1: config 0 has an invalid interface number: 5 but max is 1 [ 143.454083][ T3567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.457576][ T23] usb 3-1: config 0 has no interface number 1 [ 143.490281][ T3567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.537353][ T3567] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 143.557363][ T3567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.588337][ T3567] usb 5-1: config 0 descriptor?? [ 143.624144][ T23] usb 3-1: New USB device found, idVendor=05d1, idProduct=9008, bcdDevice=1b.c2 [ 143.644926][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.674334][ T23] usb 3-1: Product: syz [ 143.678622][ T23] usb 3-1: Manufacturer: syz [ 143.683266][ T23] usb 3-1: SerialNumber: syz [ 143.711220][ T23] usb 3-1: config 0 descriptor?? [ 143.775094][ T23] ftdi_sio 3-1:0.5: FTDI USB Serial Device converter detected [ 143.792674][ T23] usb 3-1: Detected FT2232C [ 143.972218][ T6123] loop1: detected capacity change from 0 to 256 [ 143.983975][ T23] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 144.006639][ T23] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 144.031761][ T23] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 144.063035][ T23] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 144.074894][ T3567] cypress 0003:04B4:DE61.0015: item fetching failed at offset 5/7 [ 144.081681][ T23] usb 3-1: Detected FT2232C [ 144.119592][ T3567] cypress 0003:04B4:DE61.0015: parse failed [ 144.121802][ T23] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 144.129511][ T3567] cypress: probe of 0003:04B4:DE61.0015 failed with error -22 [ 144.174062][ T23] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 144.185842][ T23] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 144.220751][ T23] usb 3-1: USB disconnect, device number 14 [ 144.253604][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 144.265287][ T23] ftdi_sio 3-1:0.5: device disconnected [ 144.277360][ T3967] usb 5-1: USB disconnect, device number 17 [ 144.289745][ T23] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 144.301190][ T23] ftdi_sio 3-1:0.0: device disconnected [ 144.485099][ T3567] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 144.515694][ T6133] loop2: detected capacity change from 0 to 64 [ 144.593887][ T21] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 144.688595][ T3527] hfs: node 4:3 still has 1 user(s)! [ 144.833887][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 144.887099][ T3567] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 144.902473][ T3567] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 144.928140][ T3567] usb 4-1: config 0 has no interface number 0 [ 144.946280][ T3567] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 144.954084][ T21] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 144.967166][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.973870][ T3567] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 144.992147][ T3567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.994618][ T21] usb 1-1: config 0 descriptor?? [ 145.001795][ T3567] usb 4-1: config 0 descriptor?? [ 145.044079][ T6129] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.075769][ T21] gspca_main: sunplus-2.14.0 probing 041e:400b [ 145.187004][ T6147] loop1: detected capacity change from 0 to 128 [ 145.271638][ T6135] loop2: detected capacity change from 0 to 32768 [ 145.485336][ T6158] device syzkaller1 entered promiscuous mode [ 145.502276][ T3567] usb 4-1: USB disconnect, device number 18 [ 146.367729][ T3567] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 146.395502][ T6163] loop3: detected capacity change from 0 to 32768 [ 146.399327][ T6171] loop1: detected capacity change from 0 to 256 [ 146.444580][ T6163] XFS: ikeep mount option is deprecated. [ 146.480283][ T6163] XFS (loop3): Mounting V5 Filesystem [ 146.541948][ T6163] XFS (loop3): Ending clean mount [ 146.557951][ T6163] XFS (loop3): Quotacheck needed: Please wait. [ 146.604064][ T21] gspca_sunplus: reg_w_riv err -71 [ 146.609920][ T21] sunplus: probe of 1-1:0.0 failed with error -71 [ 147.284050][ T3567] usb 5-1: Using ep0 maxpacket: 8 [ 147.298404][ T21] usb 1-1: USB disconnect, device number 13 [ 147.330674][ T6163] XFS (loop3): Quotacheck: Done. [ 147.395907][ T6187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.403582][ T6187] IPv6: NLM_F_CREATE should be set when creating new route [ 147.410802][ T6187] IPv6: NLM_F_CREATE should be set when creating new route [ 147.434262][ T3567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.448011][ T3567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.486575][ T3567] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 147.508001][ T3567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.539384][ T3567] usb 5-1: config 0 descriptor?? [ 147.569327][ T3535] XFS (loop3): Unmounting Filesystem [ 147.573508][ T6192] loop2: detected capacity change from 0 to 64 [ 147.752885][ T6192] ------------[ cut here ]------------ [ 147.764299][ T6192] WARNING: CPU: 0 PID: 6192 at fs/buffer.c:1084 mark_buffer_dirty+0x325/0x4b0 [ 147.773742][ T6192] Modules linked in: [ 147.777807][ T6192] CPU: 0 PID: 6192 Comm: syz-executor.2 Not tainted 5.15.160-syzkaller #0 2024/06/11 10:56:31 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 148.348303][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 148.374186][ T6192] RIP: 0010:mark_buffer_dirty+0x325/0x4b0 [ 148.380075][ T6192] Code: 89 df e8 ce 93 e4 ff 48 8b 3b be 04 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 07 80 fc ff e8 a2 c5 9a ff eb 80 e8 9b c5 9a ff <0f> 0b e9 27 fd ff ff e8 8f c5 9a ff 0f 0b e9 46 fd ff ff e8 83 c5 [ 148.433972][ T6192] RSP: 0018:ffffc90002cd77a0 EFLAGS: 00010287 [ 148.440061][ T6192] RAX: ffffffff81e59725 RBX: ffff888059cac200 RCX: 0000000000040000 [ 148.491290][ T6192] RDX: ffffc90003fd0000 RSI: 00000000000213b6 RDI: 00000000000213b7 [ 148.583895][ T6192] RBP: 0000000000000000 R08: ffffffff81e59444 R09: ffffed100cbfbf00 [ 148.591914][ T6192] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880591562b8 [ 148.669463][ T6192] R13: dffffc0000000000 R14: 1ffff1100b22ac57 R15: dffffc0000000000 [ 148.695811][ T6192] FS: 00007f127b2eb6c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 148.721147][ T6192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.732305][ T6196] batman_adv: batadv0: Removing interface: macvlan2 [ 148.740876][ T6192] CR2: 00007f7f78fd1d58 CR3: 000000001aad6000 CR4: 00000000003506f0 [ 148.768210][ T6192] Call Trace: [ 148.771524][ T6192] [ 148.774896][ T6192] ? __warn+0x15b/0x300 [ 148.796458][ T6192] ? mark_buffer_dirty+0x325/0x4b0 [ 148.823852][ T6192] ? report_bug+0x1b7/0x2e0 [ 148.829843][ T6192] ? handle_bug+0x3d/0x70 [ 148.838594][ T6192] ? exc_invalid_op+0x16/0x40 [ 148.864597][ T6192] ? asm_exc_invalid_op+0x16/0x20 [ 148.891063][ T6192] ? mark_buffer_dirty+0x44/0x4b0 [ 148.920981][ T6192] ? mark_buffer_dirty+0x325/0x4b0 [ 148.926477][ T3567] usbhid 5-1:0.0: can't add hid device: -71 [ 148.932411][ T3567] usbhid: probe of 5-1:0.0 failed with error -71 [ 148.946348][ T6192] ? mark_buffer_dirty+0x325/0x4b0 [ 148.968043][ T6192] bfs_get_block+0x852/0xac0 [ 148.982670][ T3567] usb 5-1: USB disconnect, device number 18 [ 148.988711][ T6192] __block_write_begin_int+0x60b/0x1650 [ 149.006016][ T6192] ? bfs_bmap+0x30/0x30 [