last executing test programs: 3m58.59813965s ago: executing program 2 (id=160): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x58f5, 0x4ffff, 0xfffffffffffffffb, 0x101, 0x1, 0x2, 0x2401}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="c2000000018d"}) 3m58.357349446s ago: executing program 2 (id=161): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003200)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000225c17d030002000000010000000200", 0x3a}], 0x1}}], 0x2, 0x0) 3m57.407635939s ago: executing program 2 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="1400238008001400ef"], 0x30}, 0x1, 0x0, 0x0, 0xc880}, 0x48040) 3m57.274201632s ago: executing program 2 (id=167): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000013c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3c9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezMQGl32y3dsqX7+SS7fW/mte99Z+Z13ryZbgPoWAPZWxLxQET8GRF9efbOAgP5lxvXLoz9e+3CWBLV6jv/JLVy169dGCuLlt+3Nc9Uq0V+U516L74fMTo1NXG2yA/Nnv5oaObc+ZcmT4+enDg5cWbk6NFDB/f0HBk53JI4s7iu7/p0evfOY+9demvs+KUPfknSyOOOBXG0ykC+det6ttWVtdm2eemkO3vvLXJ7fyuX993zVrGcrojIdlel1v/7ois231rXF2980dbGAWuqWq1W652fC3NVYANLot0tANqjPNFn17/l6x4NPdaFq6/mF0BZ3DeKV76mO9I8sbey4Pq2lQYi4vjczcvZK9ZoHgIAYL4fsvHPi/XGf2k8mid6srcHi/n7/oh4KCK2R8TDEbEjIh6JqJV9LCIeX2H9C++QLB7/pFfuOrgmZOO/V4p7W3eO/9KySH9XkdtWi7+SnJicmjhQbJP9Udl0YjKZGF6ijh9f/+OrRutq479yMD5383JWfzkWLNpxpXvBBN346OzoamKe7+rnEbu668Wf1O4LRHFfb2dE7LrLOiaf7264bv7493jd+JfQ+Mc2rfpNxHP5/p+LBfGXkob3J4dfPjJyeKg3piYODJVHxWK//n7x7Ub1ryr+Fsj2/5a6x/+t+PuT3oiZc+dP1e7Xzqy8jot/fdnwmmb5+O84/o9tK47/nuTd2oKeYsUno7OzZ4cjepI3Fy8fuf3TynxZPot//776/X973N4ST0TE7ojYExFPZheFRdufioinI2LfEvH//NozH648/vqz8pUl6rkbWfzjy+3/mL//V57oOvXT98vH3xsRjfb/oVpqf7Gkmd9/zTZwNdsOAAAA7hf5M/BJOng7nQwO5s/w74gt6dT0zOwLJ6Y/PjOePyvfH5W0nOnqmzcfOlzMDZf5kQX5g8W88dddm2v5wbHpqfF2Bw8dbuui/p+mWf/P/N3V7tYBa64F99GA+5T+D51L/4fOlCzb/1v9yBGwnjj/Q+eq1/8/a1h68Ls1bQxwTzn/Q+dqov/P5V8ajwqA+5PzP3Qu/R86UsO/jU9X9Sf/LU3s+TZv61Jl/is+QmW9tHnjJyJdF83Y+Inupj/MolGisrgvV4t/xpAt2VT3u9r6awkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBl/g8AAP//RrLleA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)='./file0\x00') 3m56.765444315s ago: executing program 2 (id=173): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xcb}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000180001092cbd7000ffdbdf2502180000000000080009000008000100ac1414"], 0x24}}, 0x0) 3m55.233768132s ago: executing program 2 (id=184): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x24020400) r0 = memfd_create(&(0x7f0000000e80)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x10\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\x15\x04t\xc5\xcb\xe3\xbb<\xfcr\xea\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfe\xe9\xd1\x97', 0x3) fcntl$addseals(r0, 0x409, 0x0) 3m54.634940857s ago: executing program 32 (id=184): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x24020400) r0 = memfd_create(&(0x7f0000000e80)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x10\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\x15\x04t\xc5\xcb\xe3\xbb<\xfcr\xea\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfe\xe9\xd1\x97', 0x3) fcntl$addseals(r0, 0x409, 0x0) 15.665707207s ago: executing program 4 (id=2103): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = io_uring_setup(0x46eb, &(0x7f0000000080)={0x0, 0x18cc, 0x10000, 0x1, 0xa}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 15.353585074s ago: executing program 4 (id=2107): r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000fa8000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) shmdt(r1) 15.281692586s ago: executing program 4 (id=2110): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r2, 0x0, 0x1c, 0x0, @void}, 0x10) 15.12103886s ago: executing program 4 (id=2114): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235222bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856a24cedd963c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75474939c664ff1849f8fbc403959f9c2de4b235261aba126be33a1762054cf2fad7dfc679c611c046f5764cfd3b84268cf21e9b8cd374866e2d55c4bfdd180a43e4fae7f5ddab3469cda8da12808566a285524ac700c24595dcd5c7784b30a4baafe80e10cecfe2393ecc927520408071c6901003dd15417429bfa90a54f501dd193865ebbb27e85c50605c45115595b04c410c2b2d6ef11e53872cba8091c88311d00c175bcf0a780265fe60228a640a746847d0138dc9f673fac8658d57ebaab4212bdcb1625a73bbda3c4a6e4282480077305b6afa3ebbcd525e588bf55760e556f1211a02cfe2e533ce915d86d62374332773744fcc8fdaf51812edd747c93b23bbe70d"], 0x1, 0x553a, &(0x7f0000006040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 13.682708115s ago: executing program 4 (id=2125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8) 10.694671288s ago: executing program 4 (id=2137): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') exit(0xffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$FUSE_LK(r0, 0x0, 0x0) 10.063022314s ago: executing program 33 (id=2137): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') exit(0xffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$FUSE_LK(r0, 0x0, 0x0) 6.484084081s ago: executing program 1 (id=2152): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='n', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) 6.181907789s ago: executing program 1 (id=2155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r1, 0x121, 0x70bd28, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="a1"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 5.924519465s ago: executing program 3 (id=2156): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) 3.604330042s ago: executing program 1 (id=2161): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodatacow}, {@flushoncommit}]}, 0x11, 0x5109, &(0x7f000000f400)="$eJzs3U+IVVUcB/Dz5o8zKcw8QcighS3chhQtVIYeYZCL9KUQtDAnF0EIMtguwWxEEIwaCaSsQAuG3MgDIUGYEBe1CTRJEFqY4KaVQrtaFO/de968d67vvueojennEzP3nvu759zzHncx35fnvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhDVv194vq09tvHJh4eyWg7MHGsdvzh89EkKldbyS13e/8tqOd3fufn08dph+I9tWq72GzLr+njVWdB1s9uv+eSeEMJoMMJxvXx0ujNq5u784YKlrx/adnj25fdPCmvVTl3bNnyu+dJrGl3sCyyW/r24t3ku11u+h5Ix2u+PWq3Tdoln/9Ib7T14EAHBPNtRbm/afo/mfuO32obSetGtJey5px78Q5jobS5GNu6LXPNel9WWaZy2LCmM955nU8/e/3a6n/ZN2EjXuYZ7dp+aRZrzXPGeS+nLNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRcqb2wday+tTGKxcWzm45OHugcfzm/NEjIVRbxytZufL07RMjY9e3/fDRja9PvrT66t/Deb+4Hek4OVyPOxsnQ9jTUbkVh/1jIoR6d6HVDF8UC++1drbGAgAAAI+TZ1q/h9rtLA6OdrUrrTRZaf0XZWHx2rF9p2dPbt+0sGb91KVd8+eWPl69x3i1u47XblcXfyodwTjG33S8xXo8dX9hnHLpiGmeP//Ltq/K+hfyf7U8/8d3Tv4HAADgfsj/6Tjl+uX/PZufnSnrX8j/67ouWcj/ccYx/w+FpeV/AAAAeJQ97PxfK4xTrl/+f/Hwm9+X9S/k/w2D5f+RzmnHgz/HCe+dDGFDv6kDAAAAPcT/77740ULM69knB2lev/rNU7+WjVfI/7XB8v/oA31VAAAAwP3YXr3xfFm9kP/rg+X/sYc6awAAAOBefF75ZLasXsj/04Pl/5X5Nl/5kHX6Mf4rhM8mQxhv7sxkhZ/C3MvtAgAAAPCAxJz+6cffXi47r5D/Z8qf/x+fdBDX/3c9/6+w/r+jkD31b7MHAwAAAPAkKq7nj4/Hz765oNf37w+6/n/i5u3vyq5fyP+HBsv/w53bB/n9fwAAALAE/7fv/3urME65fs///2von4tl/Qv5f26w/B+3qzpf3sX4/hyeDGFtcyd/muCZeLm9SaEx2lFoqSc9dsYeeaEx1lFomUl6vDAZwnPNnUNJYXUszCWFOxN54VRSuBwL+f3QLpxNChfjnXZiIp9uWjgfC/kCi0ZcQbGqvSQi6fFnrx7Nwl17/Na+OAAAwBMlhuc8y452N0MaZRuVfies7HfCUL8ThvudMJKckJ7Y63iY7i7E4x/uOP1lKFHI/6cGy//xrViRbXqt/w9x/X/+vYbt9f/TsVBNCo1YqKdPDKjHa2Rh91i8RrWe97iztl0AAACAx1r8XGB4mecBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7J3rzFyXfUBwM8+Z3e93l0TpASKYAElIZW8Xm+wpZAgbKAEgQSbynyoUISNvUk33iTGDwmHh9YOQaAUNSkpCShQuxUUf0lWVIhHgVioGFVN1SiVkNOURwgUIUFNSJSKOpGrmXvP7J1zdx6Odx1v+vtJ3jkz//O8c2c85947ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP8fjt3xhotaxd981SPf/u4Db//44Y8s3P3EVz51RwjTtce7snDXxac+11s5+Z7vHfrpF7+wad2jp/vzcnk8rKn+6c7vfCLW+ou1IXyjK4TeNLB+OAv05feHY32vGg5hXVgM1EvMDGUl0obDDwZDOBIWA/WqvjUYwnAhsO3R7z/0mWrinsEQLg0hVNI2flzJ2hhMA5f1Z4GhNHBrbxb4nzOZeuCb3VkAzll8MdR3+oXpxgxjS5drsv/1LVvHXlzp8HpiYqx5vt9uXeFOFfSnD0yf09NWqo4VUXp5HPdqWwWvttJ2vsvTVvwglX9CObMYqoTuXTM37Dgwtz8+0h0mJnqa1bRCz/NjT31059mkV81+GDswtiz74b2f//nHvvTktfff98l3XP/gM78fP9dunixs0mJ6pVVCvs+tmucx2uL9ZBW8/EqfksbbPm21Ii/xD12f/tnf/kmreGn+P9Z6/h9353jb3ZA71np6JJubx0eGY+LUSDY3BwAAgFVjNRw1nf/K1VOt6ivN/8c7O/8fT/nnk/lstMdD2FJL3D4awiW1x7PAsdjcB0dDeG0tNd0Y2JoEjofwilriinpVSYmBWGI8CfxqJA9sSQInYmA6CXw5Bu5KAp+IgYUksDMGjieBt8ZAmG0cxx+P5OPoODAYA9uzjbgQr0J4eiS2lmyrx+tVAQAALJN8dtjXeLdwrcO5ZojTy4XBdhniFdhNM1SSGtIZbH1a1bSG3nY1dLeroT7u+dbDL9Xc1a7m0mUYXY0Z9n70d38WWijN/ydbz/8rS3Skq3T+P4Tran9j7u48MlePb59uyAAAAACcgzVbb9nWKl6a/2/p7Pr/eEykp5A5PBwPQ+weDWGyMZBVe3U5kJ31XpMHAAAAYDWon4+vnwufzW+zS7TT+XQ5//RZ5o8n/rcsmf/X73zTTa36W5r/T3d2/f9Q423WiROxF58dDWGgEPhh7GU1UDMeAz97S2MgH/+JuAHujFXlFybUq7ozltgeA5NJ4EizEo/US1zSGMifrHrjt9fHMZuXKAQAAADgvIuHA+J5+Xj9/2MHTr6tVbnS/H/72V3/X5sHly7vn1sTwobeEHrSLwY8PJQtDBgDw1154rtDWV09aVWHhkK4pjqwtKon8vX/e9M1Bh8dzKqKgUte99WnLqsm/m4whA3FwI/ef3RTNbE/CdQbf99gCK+pjjZt/OsDWeN9aeP3DoTw6kKgXtUHB0KoNtafVvX9Sv47BmlVD1ZCuKgQqFe1uRLCwQDAKhX/K91VfHDfwdt275ibm9m7gol4DH8w3DA7NzOx89a5XZUmfdqV9LlhGaND5TE1XQ4p8Xi+RNGx564a6SRd/57gZLEv+XH80oWD+f34WaivNs6pvoa7V6ZDfsPry02EwiepF2vIQ8VKFp/EUv0xf39YEwYO7JvZO/HhHfv3792Y/e00+1T2Nw4q21Yb0201tFTfLoDd4/JiJRv237xnw76Dt62fvXnHjTM3ztwyNfnGTZs3TU1u3ryhOqrJ7G+boV6+VNXJUM8cPf9DfWVvoZLz8a4hISGx2hLztx9d0+rtpzT/39N6/h/fdeI7f74+Q7Pz/2PxNH/2+OJp/u0xcKTT8/9jzc7m1y8MGE8C8zEw7zQ/AAAALw3xcGQ87BiPWvcfvfI3rcqV5v/znX3/f5nW/68vXf+uZsv8XxFLTDZb/z9d5r++/v98s/X/02X+6+v/H3kR1v8/UA8km+Rp6/8DAAAvBedv/f+2y/unPxBQytB2ef/0BwJKGdou49/pDwSc9fr/Uzf99BehhdL8/67O5v8W7gcAAIALx93/9NRrWsVL8/8jnc3/z//6f6HZ9f/jzQLTzRYGtP4fAAAAq1Sz9f/OjP7F+1qVK83/Fzqb/8fLLrobcsdaT49ka9qFdE27UyP1rwwAAADA6tAdJib6OszbsDLq1hfe5mP5UqCt0kU/vPq/bmxVX2n+f7yz+X/D9zLu/fzPP/alJ6+9//R9n3zH9Q8+8/vxxfP/AAAAwMrp9LgEAAAAAAAAAAAAAADw4jvwgX891Spe+v5/uK72eLPv/8ff/YvfL3h5Q+5Ya/v1//L72979wMHakoUPj4Tw+mJg9+Hd60L+2/yXFwMPXX/FxdXE4bTEd37y1l9WEx9IA+9c/7Jnq4lrksD2uEjiK9JA/FXFZ9cmgbi84r+ngbg9FtJAfx749NpsHF3ptvr1cLatutJt9R/DIYwWAvVt9Y3hrI2udID3JIH6AD+UBuIA35MHutNePbAm61UMDMeif7Mm6xUAABes+CmwL9wwOzczGT/Cx9tX9jbeRg1Llh0qV9vTYfOP50uTHXvuqpFO0j3pZ9HF3xrvC5XqEDaWPq4Ws3TVRrk8tbTZdC9vMuR2q72t1Kbrbz6iwWxEEztvndvV13bgV7bPMtXbNsvG0mSnmKW7tkk7qKWDvnQwog63TQddjve7w8RET5LrTTE4Fhq02yM6/b5+cZ2/ZntBMc+hub7nW9VXmv+PdTb/rxTH9Wz+YwDz8Zf1/nLUMv8AAACwsj699Q/3xX/fGX3vf7bKW5r/j3c2/48HxvJTwdnRjuPx9/9vHw2h9tP6Y1ngWGzug6MhvLaWmo4lsh/Uf1csMZkFjsUDJlfEEtunG6saiIGFJPCrkTxwPAmciIH8KMVXQ34o5+6REDbVUtc1ltgTS4wlgffGwHgSmIiBySSwNga2JIHfrM0D00ngX2IgzDZuq39Ym28rAACAs5HPs/oa74Z0nrfQ2y5DV7sMQ+0ydLfLUGmXodko4v2vxQx9xfPxeYb4UF9a62BSSylD/DH8s+5XKUN4pDFnWrDUdP1KkrHGnDHDtoXDa0MLpfn/ZGfz/6HG26z1E3H+v/j7f1ngh7F7n42Xjo/HwM/e0hjIDwyciJPdO+tVTecl8kn7nbHElhgYTwJ7YmBLEth+XR44cnFjIJ9p1xu/vd74bF6iEAAAAIDzLh4giIdp4vz/vwee/+tW5Urz/y2dzf9je2uKjX0i1vqLtSF8o2uxN/XA+uEsEI9jDMevx79qOIR1hQMc9RIzQ1mJ/qTh8IPB7Bvq/WlV3xrMvnwQ72979PsPfaaauGcwhEsLR1/qbfy4krUxmAYu688CQ2ng1t4sEI/81APf7M4CcM7qRwXjDpVf6lI3tnS5JvvfS+U3QdPhlY6BLpFvqe9crZRK+kB+TLXu7J62UnWsjHT7H/dqWw2vtufz/4Pr/fJqK36QOpNsnuoQu3fN3LDjwNz++Ejxm6wlK/Q8F7+l2kl6GfbD+Rfe26i7aaSSdmAyefuYXLrc0vthV6zu3s///GNfevLa++/75Duuf/CZ34+362C7/Td+UfiWm/535GRh8660Ssj3uQv+/SR9YNr7yWr4byB9YNzTFkK4Y+GSp1vFS/P/6c7m/73Jbc0f4sbcNxrCGwob9+G4+d82mr0PFgLZu+RF5UB2yv3JkabvnAAAALDc6oc76scLZvPb7ILwdJ5czj99lvnj8YotS+bvtN8fufTSf2wVL83/t7ee/w8k3XT+3/l/Vojz/0u60A9FD6QPzJ/ToehSdayI0svD+f+wCl5tpTM1zv8H5/+X7N8ynP9vzvn/lpz/X90u9Ket9Clpjw9dIYTBr1/9SKt4af6/p7P5v/X/ll60r77+3/Zm6//tabb+37z1/wAAgBXVZKG5dJ5XWr2vlCFdva+Uoe0CgW2XGLT+31mv/zf0V+//XWihNP+f72z+H3eHNcXWV8v6f+PXNanqrhjYY2FAAAAALkTNDhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw4vrVyaG3t4q/+apHvv3dB97+8cMfWbj7ia986o4QZmuPd2XhrotPfa63cvI93zv00y9+YdO6R09X8nJ9+e0fNeSOtZ4eCeFI4ZHhmDg1Ur2zGNj27gcO9lYTD4+E8PpiYPfh3euqiS+PhHB5MfDQ9VdcXE0cTkt85ydv/WU18YE08M71L3u2mrgmD3Sl3b1/bdbdrrS7n1kbwmghUO/uTWsbq6q3cW0e6E7b+PvhrI0YGI5F7xvO2oiBuVhidiCEDb0h9KRV/XMlq6onrerblayqnrSqj1dCuCaE0JtW9ZP+rKredOT/1p9VFQOXvO6rT11WTRzpD2FDMfCj9x/dVE18KAnUG//T/hBeU91l0sa/1pc13pc2fk9fCK8OIfSnJZ7pzUr0pyWe6A3hokKg3vif94ZwMPCSEN98dhUf3Hfwtt075uZm9q5goj9vazDcMDs3M7Hz1rldlaRPzXQV0mcOlePdHY798ac+urN6e+y5q0Y6Sffm5fpqXZ7qa7h75XL1vmuFeh/7NVSsZPH5KNUf8/eHNWHgwL6ZvRMf3rF//96N2d9Os09lf3vyaLatNi7XturUC91Wlxcr2bD/5j0b9h28bf3szTtunLlx5papyTdu2rxpanLz5g3VUU1mf5djqEfL8Z4VHuorewuVnI83AAkJidWW6G54d5u80P/LLn3QX+xoX6jU3qBL04pilq7aKJdj0Ftbx89y0NUeNf+c0nZEG0sTh1KWqfZZrixNJhazDGZZap/rSpPDYk3dtU0a73eHiYmm/9ONNd4tbr7fLrF5O/VYvuk6TQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA///jqU04") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xe042, 0x0) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.553709613s ago: executing program 3 (id=2163): syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) 2.409489791s ago: executing program 3 (id=2165): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x1480e, &(0x7f0000000080)=ANY=[], 0xfd, 0x735, &(0x7f0000000b80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x1c3080, 0x80) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.075536049s ago: executing program 0 (id=2166): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@session={'session', 0x3d, 0x61}}, {@map_normal}, {@mode={'mode', 0x3d, 0x13}}, {@session={'session', 0x3d, 0x6}}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'none'}}, {}, {@utf8}, {@check_strict}]}, 0x0, 0x42d, &(0x7f0000000400)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1.827604826s ago: executing program 3 (id=2167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20008010) 1.512561123s ago: executing program 0 (id=2168): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000040)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 1.489520244s ago: executing program 1 (id=2169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.295884768s ago: executing program 3 (id=2170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='pim6reg\x00') 992.370595ms ago: executing program 0 (id=2171): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) 758.823762ms ago: executing program 1 (id=2172): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 633.100645ms ago: executing program 0 (id=2173): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0xffeffff8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x880, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) 363.857791ms ago: executing program 0 (id=2174): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffff2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x78, &(0x7f0000000200)="0baeba5801183957102060f0416c4db001473465d9fdede4d4e12bb8d7540ff9e1137540d74ffb8871ffaf1ba3f184e14c5c3daa7bd4049e4446a2564aaf02ca52164fe6bfddc89f53b383f9fd8b12a57be9600a399ff608220e8220b8768e3037f156204cb27d8c820bccc932f87481c56b0cb9f260dcb1"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 228.673815ms ago: executing program 3 (id=2175): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd700000100000010000000c00020003000000000000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c000180070001"], 0x3c}}, 0x400400c) 66.025818ms ago: executing program 1 (id=2176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x40f0bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x2c}}, 0x40018) 0s ago: executing program 0 (id=2177): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x1000649, &(0x7f0000000600)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x19}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@user_xattr}, {@grpjquota}, {@data_writeback}, {@minixdf}, {@minixdf}, {@barrier}]}, 0x0, 0x60d, &(0x7f0000000800)="$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") syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x84406d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): l=202 compat=0 ip=0x7f7ac659e199 code=0x7ffc0000 [ 225.128565][ T28] audit: type=1326 audit(1791207122.612:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ac659e199 code=0x7ffc0000 [ 225.185038][ T28] audit: type=1326 audit(1791207122.612:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac659e199 code=0x7ffc0000 [ 225.238970][ T28] audit: type=1326 audit(1791207122.612:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac659e199 code=0x7ffc0000 [ 225.288096][ T2133] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 225.295925][ T28] audit: type=1326 audit(1791207122.612:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f7ac659e199 code=0x7ffc0000 [ 225.349165][ T28] audit: type=1326 audit(1791207122.612:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac659e199 code=0x7ffc0000 [ 225.413569][ T28] audit: type=1326 audit(1791207122.612:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f7ac659e199 code=0x7ffc0000 [ 225.463851][ T28] audit: type=1326 audit(1791207122.612:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.4.1084" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac659e199 code=0x7ffc0000 [ 225.532100][ T2133] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.556599][ T2133] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.582659][ T2133] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 225.598121][ T2133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 225.615447][ T2133] usb 2-1: SerialNumber: syz [ 225.718254][ T8948] loop3: detected capacity change from 0 to 32768 [ 225.742350][ T8948] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.1082 (8948) [ 225.781967][ T8948] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 225.797440][ T8948] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 225.807011][ T8948] BTRFS info (device loop3): enabling ssd optimizations [ 225.825134][ T8948] BTRFS info (device loop3): not using ssd optimizations [ 225.832912][ T8948] BTRFS info (device loop3): turning off barriers [ 225.840082][ T8948] BTRFS info (device loop3): use no compression [ 225.846490][ T8948] BTRFS info (device loop3): using free space tree [ 225.871392][ T2133] usb 2-1: 0:2 : does not exist [ 225.911338][ T2133] usb 2-1: USB disconnect, device number 4 [ 226.015177][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.187035][ T5773] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 226.266192][ T8980] loop4: detected capacity change from 0 to 4096 [ 226.364974][ T8981] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.553226][ T5790] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop3 scanned by udevd (5790) [ 226.655644][ T6345] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 227.879614][ T9021] loop4: detected capacity change from 0 to 256 [ 228.186231][ T9031] loop4: detected capacity change from 0 to 1024 [ 228.430581][ T9035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 228.649847][ T9043] loop4: detected capacity change from 0 to 256 [ 228.832504][ T9053] loop0: detected capacity change from 0 to 128 [ 228.890292][ T9053] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 228.954225][ T9057] loop1: detected capacity change from 0 to 128 [ 229.006123][ T9057] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.066299][ T9057] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.298233][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.721738][ T9081] netlink: 'syz.1.1133': attribute type 39 has an invalid length. [ 230.288105][ T2133] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 230.477248][ T9101] loop1: detected capacity change from 0 to 32768 [ 230.491709][ T9101] (syz.1.1143,9101,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 230.511476][ T2133] usb 4-1: unable to get BOS descriptor or descriptor too short [ 230.525639][ T9101] (syz.1.1143,9101,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 230.542113][ T2133] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.569771][ T2133] usb 4-1: string descriptor 0 read error: -22 [ 230.576402][ T2133] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 230.596500][ T2133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.748331][ T9099] loop0: detected capacity change from 0 to 32768 [ 230.844035][ T9099] read_mapping_page failed! [ 230.877836][ T9099] ERROR: (device loop0): txCommit: [ 230.877836][ T9099] [ 231.454659][ T9117] loop4: detected capacity change from 0 to 64 [ 231.479782][ T5763] usb 4-1: USB disconnect, device number 8 [ 231.824493][ T5836] infiniband s`z1: ib_query_port failed (-19) [ 231.853757][ T9123] loop4: detected capacity change from 0 to 1024 [ 231.899104][ T9123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.011734][ T6345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.313587][ T9132] loop1: detected capacity change from 0 to 256 [ 232.368113][ T9132] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 232.518689][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 232.608230][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 232.868277][ T9145] input: syz0 as /devices/virtual/input/input12 [ 232.881818][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.898536][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.934137][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.947067][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.962403][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.978463][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.232287][ T9159] loop1: detected capacity change from 0 to 256 [ 233.354955][ T9162] loop3: detected capacity change from 0 to 512 [ 233.462835][ T9146] chnl_net:caif_netlink_parms(): no params data found [ 233.477167][ T9162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 233.520588][ T9162] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.594845][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 233.652169][ T9173] loop1: detected capacity change from 0 to 512 [ 233.730236][ T9146] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.737684][ T9146] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.764880][ T9173] EXT4-fs (loop1): Test dummy encryption mode enabled [ 233.772666][ T5781] Bluetooth: hci1: unexpected event for opcode 0x040d [ 233.784390][ T9146] bridge_slave_0: entered allmulticast mode [ 233.793431][ T9146] bridge_slave_0: entered promiscuous mode [ 233.803831][ T9146] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.815842][ T9173] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 233.826043][ T9146] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.836517][ T9146] bridge_slave_1: entered allmulticast mode [ 233.844593][ T9146] bridge_slave_1: entered promiscuous mode [ 233.867566][ T9173] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 233.885228][ T9173] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.1172: bad orphan inode 131083 [ 233.927888][ T9173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.950571][ T9146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.989087][ T9146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.036868][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.101162][ T9146] team0: Port device team_slave_0 added [ 234.136832][ T9146] team0: Port device team_slave_1 added [ 234.179855][ T9146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.187615][ T9146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.215944][ T27] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 234.225143][ T9146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.239965][ T9146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.247158][ T9146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.273960][ T9146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.336587][ T9146] hsr_slave_0: entered promiscuous mode [ 234.351366][ T9146] hsr_slave_1: entered promiscuous mode [ 234.362196][ T9146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.374218][ T9146] Cannot create hsr debugfs directory [ 234.409454][ T9185] overlayfs: upper fs does not support tmpfile. [ 234.411607][ T27] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 234.438203][ T2133] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 234.459370][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.483307][ T27] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.508092][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.516271][ T27] usb 5-1: Product: syz [ 234.528057][ T27] usb 5-1: Manufacturer: syz [ 234.534000][ T27] usb 5-1: SerialNumber: syz [ 234.659786][ T2133] usb 2-1: Using ep0 maxpacket: 8 [ 234.672210][ T2133] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 234.698439][ T2133] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 234.716299][ T2133] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.727047][ T2133] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.748552][ T2133] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.757801][ T2133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.784409][ T27] usb 5-1: 0:2 : does not exist [ 234.799572][ T27] usb 5-1: unit 9 not found! [ 234.826331][ T27] usb 5-1: 4:0: cannot get min/max values for control 2 (id 4) [ 234.887058][ T9146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.899626][ T27] usb 5-1: USB disconnect, device number 8 [ 234.912943][ T9146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.989238][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.065247][ T2133] usb 2-1: GET_CAPABILITIES returned 0 [ 235.078173][ T2133] usbtmc 2-1:16.0: can't read capabilities [ 235.088471][ T5781] Bluetooth: hci0: command tx timeout [ 235.117418][ T9146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.128407][ T9146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.245279][ T9146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.259564][ T9146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.290413][ T27] usb 2-1: USB disconnect, device number 5 [ 235.353155][ T9146] bridge0: port 3(netdevsim0) entered disabled state [ 235.434088][ T9146] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 235.442915][ T9146] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 235.454204][ T9146] bridge0: port 3(netdevsim0) entered disabled state [ 235.464519][ T789] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 235.479310][ T9146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.489864][ T9146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.597603][ T9198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1182'. [ 235.670633][ T789] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 235.690089][ T789] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 235.707621][ T9200] loop4: detected capacity change from 0 to 256 [ 235.713188][ T789] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 235.743226][ T789] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 235.766753][ T789] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 235.792691][ T789] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.816449][ T789] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.847980][ T789] usb 4-1: Product: syz [ 235.852408][ T789] usb 4-1: Manufacturer: syz [ 235.900778][ T789] cdc_wdm 4-1:1.0: skipping garbage [ 235.906072][ T789] cdc_wdm 4-1:1.0: skipping garbage [ 235.919074][ T9146] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.940395][ T789] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 235.946418][ T789] cdc_wdm 4-1:1.0: Unknown control protocol [ 235.981413][ T9146] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.022212][ T9146] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.066637][ T9146] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.276672][ T9146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.315020][ T9146] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.329670][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.336952][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.347111][ T9206] loop4: detected capacity change from 0 to 512 [ 236.370896][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.379361][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.395690][ T2133] usb 4-1: USB disconnect, device number 9 [ 236.413094][ T9206] EXT4-fs (loop4): Test dummy encryption mode enabled [ 236.471930][ T9206] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e02ce01d, mo2=0002] [ 236.515401][ T9206] System zones: 1-12 [ 236.555331][ T9206] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.614418][ T9202] loop1: detected capacity change from 0 to 32768 [ 236.631011][ T9206] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #2: comm syz.4.1186: Directory hole found for htree leaf block 0 [ 236.705535][ T6345] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 236.736924][ T9202] JBD2: Ignoring recovery information on journal [ 236.863515][ T9202] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 237.130474][ T9146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.168519][ T5781] Bluetooth: hci0: command tx timeout [ 237.246922][ T9146] veth0_vlan: entered promiscuous mode [ 237.257108][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 237.270086][ T9146] veth1_vlan: entered promiscuous mode [ 237.337005][ T9146] veth0_macvtap: entered promiscuous mode [ 237.387814][ T9146] veth1_macvtap: entered promiscuous mode [ 237.448510][ T9146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.487993][ T9146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.509060][ T9146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.530924][ T9146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.551792][ T9146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.565988][ T9146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.576268][ T9146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.587140][ T9146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.599359][ T9146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.652318][ T9146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.687969][ T9146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.708287][ T9146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.728094][ T9146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.742711][ T9146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.756841][ T9146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.770632][ T9146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.781381][ T9146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.793460][ T9146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.831795][ T9229] loop1: detected capacity change from 0 to 512 [ 237.885545][ T9146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.925696][ T9146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.968490][ T9146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.999168][ T9146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.263698][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.277996][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.362100][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.372852][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.511815][ T9240] loop3: detected capacity change from 0 to 8 [ 238.582582][ T9240] Major/Minor mismatch, trying to mount newer 4.1792 filesystem [ 238.598760][ T9240] Please update your kernel [ 238.854773][ T9250] loop0: detected capacity change from 0 to 64 [ 238.983679][ T9253] loop4: detected capacity change from 0 to 128 [ 239.030433][ T9253] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.052094][ T9253] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.247429][ T6345] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.251154][ T5781] Bluetooth: hci0: command tx timeout [ 239.278721][ T2133] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 239.483087][ T9270] loop1: detected capacity change from 0 to 512 [ 239.523956][ T9270] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.1211: iget: bad i_size value: 38620345925642 [ 239.550345][ T2133] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.581559][ T2133] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.622712][ T9270] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1211: couldn't read orphan inode 15 (err -117) [ 239.655266][ T2133] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.03 [ 239.685775][ T9270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.704835][ T9277] team0: No ports can be present during mode change [ 239.713149][ T2133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.713181][ T2133] usb 4-1: Product: syz [ 239.713198][ T2133] usb 4-1: Manufacturer: syz [ 239.713216][ T2133] usb 4-1: SerialNumber: syz [ 239.849799][ T59] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 239.898578][ T59] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 239.930421][ T59] EXT4-fs (loop1): This should not happen!! Data will be lost [ 239.930421][ T59] [ 239.961401][ T59] EXT4-fs (loop1): Total free blocks count 0 [ 239.967638][ T59] EXT4-fs (loop1): Free/Dirty block details [ 239.983618][ T2133] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 239.996988][ T59] EXT4-fs (loop1): free_blocks=0 [ 240.011116][ T59] EXT4-fs (loop1): dirty_blocks=1 [ 240.016385][ T59] EXT4-fs (loop1): Block reservation details [ 240.042574][ T59] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 240.061632][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.193667][ T9286] loop0: detected capacity change from 0 to 128 [ 240.239047][ T2133] usb 4-1: USB disconnect, device number 10 [ 240.247336][ T9286] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.259832][ T5781] Bluetooth: hci2: unexpected cc 0x0c47 length: 2 > 1 [ 240.266676][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 240.291745][ T9286] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.307280][ T2133] usblp0: removed [ 240.442852][ T9146] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.644676][ T9298] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 241.168195][ T2133] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 241.217411][ T9301] loop0: detected capacity change from 0 to 40427 [ 241.282706][ T9301] F2FS-fs (loop0): invalid crc value [ 241.314638][ T9301] F2FS-fs (loop0): Found nat_bits in checkpoint [ 241.328201][ T5781] Bluetooth: hci0: command tx timeout [ 241.365507][ T2133] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 241.399273][ T2133] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.452484][ T2133] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.506008][ T2133] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.517671][ T2133] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.546447][ T2133] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.571439][ T9301] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 241.585748][ T2133] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.629408][ T2133] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.642281][ T2133] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.663706][ T9301] syz.0.1225: attempt to access beyond end of device [ 241.663706][ T9301] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 241.703712][ T2133] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.743196][ T9301] syz.0.1225: attempt to access beyond end of device [ 241.743196][ T9301] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 241.760864][ T2133] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.782728][ T2133] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.838422][ T2133] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.854786][ T2133] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.878439][ T2133] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.898088][ T2133] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.904820][ T9146] syz-executor: attempt to access beyond end of device [ 241.904820][ T9146] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 241.939703][ T2133] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.959242][ T9146] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 241.971384][ T2133] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 241.985234][ T2133] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.998764][ T2133] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.008258][ T2133] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.020423][ T2133] usb 4-1: config 0 interface 0 has no altsetting 0 [ 242.039200][ T2133] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.049177][ T2133] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 242.078203][ T2133] usb 4-1: config 0 interface 0 has no altsetting 0 [ 242.089808][ T2133] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 242.117986][ T2133] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 242.126675][ T2133] usb 4-1: Product: syz [ 242.137353][ T2133] usb 4-1: Manufacturer: syz [ 242.151336][ T2133] usb 4-1: SerialNumber: syz [ 242.165858][ T2133] usb 4-1: config 0 descriptor?? [ 242.217043][ T2133] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 243.017761][ T9351] program syz.0.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.338085][ T789] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 243.481599][ T9367] netlink: 'syz.4.1253': attribute type 8 has an invalid length. [ 243.540252][ T789] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 243.555239][ T789] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 243.566543][ T789] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.576571][ T789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 243.603358][ T789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 243.627551][ T789] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.648389][ T789] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.669750][ T789] usb 2-1: Product: syz [ 243.678076][ T789] usb 2-1: Manufacturer: syz [ 243.694213][ T789] cdc_wdm 2-1:1.0: skipping garbage [ 243.713860][ T789] cdc_wdm 2-1:1.0: skipping garbage [ 243.721866][ T789] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 243.735428][ T789] cdc_wdm 2-1:1.0: Unknown control protocol [ 243.958608][ T789] usb 4-1: USB disconnect, device number 11 [ 243.971899][ T789] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 244.465702][ T9378] loop3: detected capacity change from 0 to 32768 [ 244.504148][ T9378] JBD2: Ignoring recovery information on journal [ 244.673614][ T9378] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 244.857196][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 246.095872][ T5763] usb 2-1: USB disconnect, device number 6 [ 246.801030][ T5763] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 247.001494][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.028682][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.047178][ T5763] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.072580][ T5763] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.086603][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.111793][ T5763] usb 2-1: config 0 descriptor?? [ 247.121771][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 247.121786][ T28] audit: type=1804 audit(2000000018.970:98): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1303" name="/newroot/318/tracing/trace_clock" dev="tracefs" ino=68 res=1 errno=0 [ 247.599026][ T5763] plantronics 0003:047F:FFFF.0004: unbalanced delimiter at end of report description [ 247.616355][ T5763] plantronics 0003:047F:FFFF.0004: parse failed [ 247.623196][ T5763] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 247.662320][ T5781] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 247.673538][ T9493] netlink: 'syz.4.1310': attribute type 1 has an invalid length. [ 247.682103][ T9493] netlink: 4912 bytes leftover after parsing attributes in process `syz.4.1310'. [ 247.835566][ T2133] usb 2-1: USB disconnect, device number 7 [ 248.480923][ T9502] netlink: 'syz.4.1314': attribute type 11 has an invalid length. [ 248.509287][ T9504] loop1: detected capacity change from 0 to 512 [ 248.561637][ T9504] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.1315: iget: bad extended attribute block 134217728 [ 248.619379][ T9504] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1315: couldn't read orphan inode 15 (err -117) [ 248.669892][ T9504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.725330][ T9504] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1315: invalid indirect mapped block 234881024 (level 0) [ 248.741615][ T28] audit: type=1800 audit(2000000020.570:99): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1315" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 248.776823][ T9504] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1315: invalid indirect mapped block 768 (level 1) [ 248.881838][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.340406][ T9526] loop4: detected capacity change from 0 to 22 [ 249.362513][ T9526] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 249.439855][ T9526] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 249.621700][ T9516] loop0: detected capacity change from 0 to 32768 [ 249.743492][ T9530] loop1: detected capacity change from 0 to 4096 [ 249.757414][ T9516] ialloc: diAlloc returned -28! [ 249.865890][ T9534] loop4: detected capacity change from 0 to 1024 [ 249.915700][ T9534] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 249.964228][ T9534] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 250.018006][ T9534] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 250.908735][ T27] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 251.101753][ T27] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.121097][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.137042][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.149504][ T27] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.158512][ T27] usb 2-1: Product: syz [ 251.162929][ T27] usb 2-1: Manufacturer: syz [ 251.167684][ T27] usb 2-1: SerialNumber: syz [ 251.176937][ T27] usb 2-1: config 0 descriptor?? [ 251.191622][ T27] usb 2-1: selecting invalid altsetting 0 [ 251.298256][ T5818] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 251.410829][ T5763] usb 2-1: USB disconnect, device number 8 [ 251.521035][ T5818] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.560955][ T5818] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.619062][ T5818] usb 1-1: config 0 interface 0 has no altsetting 0 [ 251.625842][ T5818] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 251.666661][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.693512][ T5818] usb 1-1: config 0 descriptor?? [ 251.732296][ T5781] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 251.743127][ T5781] Bluetooth: hci3: Injecting HCI hardware error event [ 251.754011][ T51] Bluetooth: hci3: hardware error 0x00 [ 252.232347][ T5818] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf3 found [ 252.258058][ T5818] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf4 found [ 252.327509][ T9584] loop3: detected capacity change from 0 to 32768 [ 252.361299][ T9584] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1349 (9584) [ 252.452583][ T9584] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 252.479046][ T9584] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 252.512659][ T9584] BTRFS info (device loop3): using free space tree [ 252.566107][ T5763] usb 1-1: USB disconnect, device number 8 [ 252.634319][ T9584] BTRFS info (device loop3): enabling ssd optimizations [ 252.687970][ T9584] BTRFS info (device loop3): auto enabling async discard [ 252.887605][ T9620] loop1: detected capacity change from 0 to 1024 [ 252.940241][ T5773] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 253.794119][ T9642] netlink: 'syz.0.1365': attribute type 1 has an invalid length. [ 253.808177][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 253.815110][ T9642] netlink: 'syz.0.1365': attribute type 2 has an invalid length. [ 255.674645][ T9691] loop1: detected capacity change from 0 to 8192 [ 255.718432][ T9691] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.144390][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.438251][ T789] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 256.470286][ T9684] loop4: detected capacity change from 0 to 32768 [ 256.571850][ T9684] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 256.628372][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 256.664633][ T789] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 256.718000][ T789] usb 4-1: config 179 has no interface number 0 [ 256.734819][ T789] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 256.793469][ T789] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 256.817150][ T789] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.830346][ T789] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 256.868486][ T789] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 256.909188][ T789] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 256.949398][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.981759][ T9699] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.167438][ T6345] ocfs2: Unmounting device (7,4) on (node local) [ 257.585276][ T5763] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input13 [ 257.834585][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 257.834594][ T2133] usb 4-1: USB disconnect, device number 12 [ 257.850191][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 257.856388][ T2133] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 258.798132][ T2133] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 258.841329][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1402'. [ 258.857782][ T9734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1402'. [ 258.999363][ T2133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.025729][ T2133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.046155][ T2133] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 259.068108][ T2133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.091719][ T2133] usb 2-1: config 0 descriptor?? [ 259.108818][ T9742] trusted_key: encrypted_key: keyword 'uew' not recognized [ 259.146836][ T9744] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1407'. [ 259.534306][ T2133] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 259.545323][ T2133] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 259.560779][ T2133] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 259.668053][ T789] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 259.746386][ T2133] arvo 0003:1E7D:30D4.0006: couldn't init struct arvo_device [ 259.760459][ T2133] arvo 0003:1E7D:30D4.0006: couldn't install keyboard [ 259.782471][ T2133] arvo: probe of 0003:1E7D:30D4.0006 failed with error -71 [ 259.795848][ T2133] usb 2-1: USB disconnect, device number 9 [ 259.864860][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.883439][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.896082][ T789] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.914807][ T789] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.925082][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.940817][ T789] usb 4-1: config 0 descriptor?? [ 260.371385][ T789] plantronics 0003:047F:FFFF.0007: unbalanced delimiter at end of report description [ 260.394849][ T789] plantronics 0003:047F:FFFF.0007: parse failed [ 260.402490][ T789] plantronics: probe of 0003:047F:FFFF.0007 failed with error -22 [ 260.560206][ T9770] bond0: option arp_validate: invalid value () [ 260.588501][ T9771] netlink: 'syz.0.1418': attribute type 6 has an invalid length. [ 260.606693][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1418'. [ 260.619563][ T2133] usb 4-1: USB disconnect, device number 13 [ 260.653833][ T9771] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.664420][ T9771] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.820999][ T9777] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1421'. [ 260.888475][ T9779] Bluetooth: MGMT ver 1.22 [ 261.655483][ T9787] loop1: detected capacity change from 0 to 32768 [ 261.732271][ T28] audit: type=1800 audit(2000000033.570:100): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1426" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 261.809026][ T28] audit: type=1800 audit(2000000033.580:101): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1426" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 262.164303][ T9791] loop3: detected capacity change from 0 to 40427 [ 262.172732][ T9791] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 262.185315][ T9791] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 262.208155][ T9791] F2FS-fs (loop3): Image doesn't support compression [ 262.214968][ T9791] F2FS-fs (loop3): Image doesn't support compression [ 262.306653][ T9791] F2FS-fs (loop3): invalid crc value [ 262.588531][ T9791] F2FS-fs (loop3): Start checkpoint disabled! [ 262.709311][ T9791] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 262.731510][ T9791] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 263.206643][ T9803] loop1: detected capacity change from 0 to 40427 [ 263.222123][ T9803] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 263.232637][ T9803] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 263.291146][ T9803] F2FS-fs (loop1): Found nat_bits in checkpoint [ 263.496061][ T9803] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 263.508827][ T9803] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 263.765355][ T9821] loop4: detected capacity change from 0 to 256 [ 263.806378][ T9821] exfat: Deprecated parameter 'utf8' [ 263.840970][ T9821] exfat: Deprecated parameter 'utf8' [ 263.866453][ T9821] exfat: Deprecated parameter 'namecase' [ 263.972246][ T9821] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 264.696122][ T789] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 264.738135][ T789] cp2112 0003:10C4:EA90.0008: error requesting version [ 264.770718][ T789] cp2112: probe of 0003:10C4:EA90.0008 failed with error -5 [ 264.884333][ T9841] fido_id[9841]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 265.088733][ T2133] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 265.222610][ T9843] loop1: detected capacity change from 0 to 32768 [ 265.273608][ T9843] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 265.290395][ T2133] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 265.300709][ T2133] usb 4-1: config 0 interface 0 has no altsetting 0 [ 265.320753][ T2133] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 265.330629][ T2133] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 265.339670][ T2133] usb 4-1: Product: syz [ 265.344100][ T2133] usb 4-1: Manufacturer: syz [ 265.349324][ T2133] usb 4-1: SerialNumber: syz [ 265.357749][ T2133] usb 4-1: config 0 descriptor?? [ 265.379257][ T2133] usb 4-1: selecting invalid altsetting 0 [ 265.748711][ T5843] usb 4-1: USB disconnect, device number 14 [ 265.869903][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 266.650289][ T9858] loop4: detected capacity change from 0 to 32768 [ 266.680587][ T9858] JBD2: Ignoring recovery information on journal [ 266.689780][ T9858] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 266.700292][ T9858] JBD2: bad block at offset 32 [ 266.760683][ T9858] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 267.111441][ T6345] ocfs2: Unmounting device (7,4) on (node local) [ 267.278226][ T5843] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 267.481019][ T5843] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 267.500568][ T5843] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.527446][ T5843] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 267.562962][ T5843] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.589198][ T5843] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 267.598799][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 267.606957][ T5843] usb 2-1: Product: syz [ 267.615054][ T5843] usb 2-1: Manufacturer: syz [ 267.644287][ T5843] cdc_wdm 2-1:1.0: skipping garbage [ 267.660313][ T5843] cdc_wdm 2-1:1.0: skipping garbage [ 267.677338][ T5843] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 267.697105][ T5843] cdc_wdm 2-1:1.0: Unknown control protocol [ 268.138904][ T9902] loop3: detected capacity change from 0 to 2048 [ 268.179147][ T5843] usb 2-1: USB disconnect, device number 10 [ 268.264133][ T9902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.371151][ T9891] loop0: detected capacity change from 0 to 32768 [ 268.488831][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.671206][ T9912] loop4: detected capacity change from 0 to 64 [ 268.939145][ T9920] loop1: detected capacity change from 0 to 1024 [ 269.045394][ T9920] hfsplus: invalid btree flag [ 269.061648][ T9920] hfsplus: failed to load catalog file [ 269.375288][ T9932] loop0: detected capacity change from 0 to 2048 [ 269.399297][ T9932] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 269.418079][ T5836] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 269.464989][ T9936] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.482512][ T5790] udevd[5790]: incorrect nilfs2 checksum on /dev/loop0 [ 269.613375][ T5836] usb 4-1: not running at top speed; connect to a high speed hub [ 269.627404][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.660459][ T5836] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 269.684519][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.684623][ T2133] kernel write not supported for file /amidi2 (pid: 2133 comm: kworker/1:2) [ 269.735169][ T5836] usb 4-1: Found UVC 1.00 device (046d:0825) [ 270.381633][ T9944] loop0: detected capacity change from 0 to 32768 [ 270.401497][ T9944] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1492 (9944) [ 270.435725][ T9944] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 270.463511][ T9944] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 270.486881][ T9959] loop4: detected capacity change from 0 to 256 [ 270.496402][ T9944] BTRFS info (device loop0): use zlib compression, level 3 [ 270.534998][ T9944] BTRFS info (device loop0): using free space tree [ 270.559512][ T5836] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 270.574170][ T5836] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 270.668622][ T5836] usb 4-1: USB disconnect, device number 15 [ 270.835058][ T9944] BTRFS info (device loop0): enabling ssd optimizations [ 270.864387][ T9944] BTRFS info (device loop0): auto enabling async discard [ 271.008978][ T9955] loop1: detected capacity change from 0 to 32768 [ 271.060967][ T9146] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 271.389935][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'. [ 271.408064][ T9981] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1504'. [ 271.866408][ T9991] loop3: detected capacity change from 0 to 256 [ 271.876802][ T9993] loop4: detected capacity change from 0 to 64 [ 271.913484][ T9991] exfat: Deprecated parameter 'utf8' [ 271.929849][ T9991] exfat: Deprecated parameter 'utf8' [ 271.935321][ T9991] exfat: Deprecated parameter 'utf8' [ 272.150715][ T9991] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 272.609919][T10009] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.658208][T10009] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 272.780620][T10009] fscrypt (loop0, inode 12): Unsupported encryption flags (0x7b) [ 272.798205][ T5843] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 272.850925][ T9146] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.026644][ T5843] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.068077][ T5843] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 273.087687][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.109279][ T5843] metro_usb 4-1:1.0: Metrologic USB to Serial converter detected [ 273.126192][ T5843] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 273.370248][ T5843] usb 4-1: USB disconnect, device number 16 [ 273.403578][ T5843] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 273.434118][ T5843] metro_usb 4-1:1.0: device disconnected [ 274.058033][ T5843] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 274.093072][T10052] set_capacity_and_notify: 3 callbacks suppressed [ 274.093091][T10052] loop3: detected capacity change from 0 to 512 [ 274.120570][T10052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.173683][T10052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.225475][T10052] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.248044][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 274.255703][ T5843] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 274.265223][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.276217][ T5843] usb 5-1: config 0 descriptor?? [ 274.290720][ T5843] gspca_main: sunplus-2.14.0 probing 041e:400b [ 274.324834][T10052] EXT4-fs error (device loop3): ext4_empty_dir:3147: inode #12: block 32: comm syz.3.1534: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 274.371213][T10052] EXT4-fs (loop3): Remounting filesystem read-only [ 274.386918][T10052] EXT4-fs warning (device loop3): ext4_empty_dir:3149: inode #12: comm syz.3.1534: directory missing '.' [ 274.471154][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.104734][T10067] db_root: cannot open: û [ 275.332201][ T3542] rpcbind: server 127.0.0.1 not responding, timed out [ 275.672492][T10059] loop0: detected capacity change from 0 to 131072 [ 275.685921][T10059] F2FS-fs (loop0): invalid crc value [ 275.716906][T10059] F2FS-fs (loop0): Found nat_bits in checkpoint [ 275.728259][ T5781] Bluetooth: hci4: command 0x1003 tx timeout [ 275.736916][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 275.801703][T10059] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 275.898525][ T5843] gspca_sunplus: reg_w_riv err -71 [ 275.904025][ T5843] sunplus: probe of 5-1:0.0 failed with error -71 [ 275.954036][T10082] loop1: detected capacity change from 0 to 512 [ 275.980288][ T5843] usb 5-1: USB disconnect, device number 9 [ 276.000362][T10082] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.1545: casefold flag without casefold feature [ 276.042952][T10082] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1545: couldn't read orphan inode 15 (err -117) [ 276.070064][T10082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.398389][ T5763] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 276.625533][T10095] vxcan2: entered allmulticast mode [ 276.631766][ T5763] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 276.653015][T10098] loop3: detected capacity change from 0 to 512 [ 276.659724][ T5763] usb 2-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 276.672865][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.721796][T10098] EXT4-fs error (device loop3): __ext4_iget:5091: inode #11: block 1: comm syz.3.1552: invalid block [ 276.775134][T10098] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1552: couldn't read orphan inode 11 (err -117) [ 276.837774][T10098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.929667][T10098] EXT4-fs error (device loop3): ext4_add_entry:2488: inode #2: comm syz.3.1552: Directory hole found for htree leaf block 0 [ 277.107850][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.148401][ T5763] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 277.154584][ T5763] input input14: Device does not respond to id packet M [ 277.192018][ T5763] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 277.218197][ T5763] input input14: Device does not respond to id packet P [ 277.234764][ T5763] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 277.258233][ T5763] input input14: Device does not respond to id packet B [ 277.293941][T10104] bonding: no command found in bonding_masters - use +ifname or -ifname [ 277.297640][ T5763] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 277.328233][ T5763] input input14: Device does not respond to id packet N [ 277.361639][ T5763] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 277.378436][ T5763] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 277.388435][ T5763] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 277.402199][ T5763] iforce 2-1:1.0: usb_submit_urb failed: -71 [ 277.442780][ T5763] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input14 [ 277.522116][ T5763] usb 2-1: USB disconnect, device number 11 [ 277.522287][ C1] iforce 2-1:1.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 277.929530][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.094235][T10120] netlink: 79 bytes leftover after parsing attributes in process `syz.0.1563'. [ 278.318555][T10130] sd 0:0:1:0: PR command failed: 1026 [ 278.324075][T10130] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 278.362731][T10130] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 278.740273][T10124] loop1: detected capacity change from 0 to 32768 [ 278.770063][T10124] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1562 (10124) [ 278.841533][T10124] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 278.869486][T10124] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 278.908038][T10124] BTRFS info (device loop1): using free space tree [ 279.118648][T10124] BTRFS info (device loop1): enabling ssd optimizations [ 279.148437][T10124] BTRFS info (device loop1): auto enabling async discard [ 279.246409][ T28] audit: type=1800 audit(2000000051.080:102): pid=10124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1562" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 279.480063][ T5776] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 279.704663][T10167] loop4: detected capacity change from 0 to 256 [ 279.860485][T10167] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf9f813e7, utbl_chksum : 0xe619d30d) [ 280.543421][T10188] loop3: detected capacity change from 0 to 2048 [ 280.586441][T10188] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.783441][T10194] loop0: detected capacity change from 0 to 2048 [ 280.883235][T10194] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.118111][ T5836] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 281.201266][T10208] loop3: detected capacity change from 0 to 2048 [ 281.250683][T10208] NILFS (loop3): invalid segment: Magic number mismatch [ 281.257811][T10208] NILFS (loop3): trying rollback from an earlier position [ 281.318057][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 281.327078][T10208] NILFS (loop3): recovery complete [ 281.331152][ T5836] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 281.348841][T10210] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.364744][ T5836] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.391058][ T5836] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.410027][ T5836] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.427246][ T5836] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.441070][ T28] audit: type=1800 audit(2000000053.300:103): pid=10208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1594" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 281.451335][ T5836] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 281.508047][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.750584][ T5836] usb 2-1: GET_CAPABILITIES returned 0 [ 281.756220][ T5836] usbtmc 2-1:16.0: can't read capabilities [ 281.883206][T10221] Invalid option length (1048314) for dns_resolver key [ 281.970095][ T789] usb 2-1: USB disconnect, device number 12 [ 282.351325][T10237] netlink: 'syz.3.1607': attribute type 3 has an invalid length. [ 282.425220][T10239] loop0: detected capacity change from 0 to 512 [ 282.448792][T10239] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.509627][T10239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.544500][T10246] loop3: detected capacity change from 0 to 64 [ 282.548569][T10239] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.682844][T10239] EXT4-fs error (device loop0): ext4_empty_dir:3147: inode #12: block 32: comm syz.0.1608: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 282.746165][T10239] EXT4-fs (loop0): Remounting filesystem read-only [ 282.773857][T10248] loop1: detected capacity change from 0 to 512 [ 282.774948][T10239] EXT4-fs warning (device loop0): ext4_empty_dir:3149: inode #12: comm syz.0.1608: directory missing '.' [ 282.818630][T10248] EXT4-fs: Ignoring removed nobh option [ 282.872718][T10248] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 282.890007][T10248] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 282.928578][T10248] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #13: comm syz.1.1611: inode has both inline data and extents flags [ 282.948826][T10248] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1611: couldn't read orphan inode 13 (err -117) [ 282.965354][T10248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.025800][T10248] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.062556][ T9146] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.418174][ T5818] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 283.600162][ T5818] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.623206][ T5818] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.657962][ T5818] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.687531][ T5818] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.720393][ T5818] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.737947][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.767328][ T5818] usb 5-1: Product: syz [ 283.771903][ T5818] usb 5-1: Manufacturer: syz [ 283.802394][ T5818] cdc_wdm 5-1:1.0: skipping garbage [ 283.818075][ T5818] cdc_wdm 5-1:1.0: skipping garbage [ 283.834516][ T5818] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 283.851345][ T5818] cdc_wdm 5-1:1.0: Unknown control protocol [ 283.983168][T10263] loop0: detected capacity change from 0 to 32768 [ 284.018204][T10263] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1618 (10263) [ 284.091017][T10263] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 284.128390][T10263] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 284.144640][T10263] BTRFS info (device loop0): use zlib compression, level 3 [ 284.157707][T10263] BTRFS info (device loop0): using free space tree [ 284.285393][T10263] BTRFS info (device loop0): enabling ssd optimizations [ 284.308469][T10263] BTRFS info (device loop0): auto enabling async discard [ 284.639697][T10263] BTRFS error (device loop0): target device is invalid! [ 284.820218][ T9146] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 285.466654][T10286] loop1: detected capacity change from 0 to 40427 [ 285.499826][T10286] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 285.535767][T10286] F2FS-fs (loop1): invalid crc value [ 285.565387][T10286] F2FS-fs (loop1): Found nat_bits in checkpoint [ 285.762614][T10286] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 285.856378][T10286] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 285.914937][T10309] f2fs_ckpt-7:1: attempt to access beyond end of device [ 285.914937][T10309] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 285.960386][T10310] F2FS-fs (loop1): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 286.020619][T10309] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 286.208337][ T27] usb 5-1: USB disconnect, device number 10 [ 286.349159][T10320] loop4: detected capacity change from 0 to 256 [ 286.357441][T10320] exfat: Deprecated parameter 'utf8' [ 286.363136][T10320] exfat: Deprecated parameter 'utf8' [ 286.404221][T10318] block2mtd: illegal erase size [ 286.418370][T10320] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 286.942263][T10330] loop3: detected capacity change from 0 to 512 [ 286.990138][T10330] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.1641: corrupted in-inode xattr: invalid ea_ino [ 287.019985][T10330] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1641: couldn't read orphan inode 15 (err -117) [ 287.087098][T10330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.185633][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.621618][T10357] erspan0: entered promiscuous mode [ 288.233137][ T27] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 288.470685][ T27] usb 1-1: too many configurations: 181, using maximum allowed: 8 [ 288.548045][ T27] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 288.557015][ T27] usb 1-1: can't read configurations, error -71 [ 288.592041][T10378] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.773313][ T28] audit: type=1400 audit(2000000061.620:104): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10407 comm="syz.4.1672" name="unknown" offset=28 [ 290.159829][ T27] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 290.363847][ T27] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 290.374505][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.401829][ T27] usb 1-1: config 0 descriptor?? [ 290.410615][ T27] cp210x 1-1:0.0: cp210x converter detected [ 290.877663][T10442] loop3: detected capacity change from 0 to 128 [ 290.909990][T10442] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 290.949645][T10442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.043568][ T27] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 291.088693][ T27] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 291.131785][ T27] usb 1-1: cp210x converter now attached to ttyUSB0 [ 291.186618][ T27] usb 1-1: USB disconnect, device number 11 [ 291.221208][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 291.266317][ T27] cp210x 1-1:0.0: device disconnected [ 291.527327][T10453] loop4: detected capacity change from 0 to 2048 [ 291.529295][T10454] nvme_fcloop: unknown parameter or missing value 'ww' [ 291.566793][T10453] NILFS (loop4): invalid segment: Magic number mismatch [ 291.587130][T10453] NILFS (loop4): trying rollback from an earlier position [ 291.632510][T10453] NILFS (loop4): recovery complete [ 291.668019][T10457] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.769038][ T28] audit: type=1800 audit(2000000063.620:105): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1694" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 292.120676][T10470] loop0: detected capacity change from 0 to 1024 [ 292.224333][ T28] audit: type=1800 audit(2000000064.070:106): pid=10470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1700" name="file1" dev="loop0" ino=3 res=0 errno=0 [ 292.288584][ T27] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 292.302860][T10456] loop3: detected capacity change from 0 to 32768 [ 292.373357][ T11] hfsplus: bad catalog file entry [ 292.401935][ T11] hfsplus: b-tree write err: -5, ino 3 [ 292.430319][T10456] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 292.468257][T10456] (syz.3.1692,10456,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 292.498801][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 292.506367][ T27] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.518548][ T27] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.529831][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 292.536596][ T27] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 292.583108][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.610503][ T27] usb 5-1: config 0 descriptor?? [ 292.798972][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 293.324992][ T5836] usb 5-1: USB disconnect, device number 11 [ 293.468540][T10502] loop3: detected capacity change from 0 to 16 [ 293.492471][T10502] erofs: (device loop3): mounted with root inode @ nid 36. [ 293.825378][T10510] input: syz0 as /devices/virtual/input/input15 [ 293.918365][ T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 294.145935][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 294.156666][T10523] loop3: detected capacity change from 0 to 16 [ 294.163062][ T27] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 294.177173][ T27] usb 1-1: config 0 has no interface number 0 [ 294.187542][ T27] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 294.211513][T10523] erofs: (device loop3): mounted with root inode @ nid 36. [ 294.234084][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.251122][ T27] usb 1-1: Product: syz [ 294.278123][ T27] usb 1-1: Manufacturer: syz [ 294.282891][ T27] usb 1-1: SerialNumber: syz [ 294.304382][ T27] usb 1-1: config 0 descriptor?? [ 294.326365][ T27] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 294.533418][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1727'. [ 294.553726][ T27] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 294.586591][ T27] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 294.761848][T10538] loop3: detected capacity change from 0 to 1024 [ 294.870800][T10538] hfsplus: walked past end of dir [ 294.955456][ T12] hfsplus: bad catalog file entry [ 295.040077][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 295.048584][ T5836] usb 1-1: USB disconnect, device number 12 [ 295.082736][ T5836] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 295.139993][ T5836] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 295.167313][ T5836] quatech2 1-1:0.51: device disconnected [ 295.737241][T10553] loop0: detected capacity change from 0 to 512 [ 295.756494][T10553] EXT4-fs: Ignoring removed bh option [ 295.791467][T10553] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.853890][T10553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.880742][T10553] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.966051][T10561] loop3: detected capacity change from 0 to 512 [ 296.040381][T10561] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 296.076031][ T9146] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.121094][T10561] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.1737: casefold flag without casefold feature [ 296.139117][T10561] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1737: couldn't read orphan inode 15 (err -117) [ 296.174375][T10561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.246482][T10561] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.1737: bg 0: block 5: invalid block bitmap [ 296.306227][T10561] CacheFiles: mkdir cache failed with error -28 [ 296.323612][T10561] CacheFiles: Failed to register: -28 [ 296.398869][T10569] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 296.423510][T10569] overlayfs: overlapping lowerdir path [ 296.451729][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.737163][T10581] loop0: detected capacity change from 0 to 512 [ 296.766057][T10581] EXT4-fs: inline encryption not supported [ 296.781990][T10581] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.1747: corrupted in-inode xattr: invalid ea_ino [ 296.811476][T10581] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1747: couldn't read orphan inode 15 (err -117) [ 296.885424][T10581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.109102][T10581] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1747: invalid indirect mapped block 234881024 (level 0) [ 297.202278][ T9146] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.309224][T10594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1752'. [ 297.329895][T10594] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.337753][T10594] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.353907][T10594] bridge0: entered allmulticast mode [ 297.685549][T10606] loop3: detected capacity change from 0 to 256 [ 297.700663][T10606] exfat: Deprecated parameter 'namecase' [ 297.743485][T10606] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 297.778345][ T5836] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 297.981612][ T5836] usb 5-1: config 0 has an invalid interface number: 4 but max is 3 [ 298.000693][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 298.025754][ T5836] usb 5-1: config 0 has no interface number 0 [ 298.035710][ T5836] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 298.063392][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.084692][ T5836] usb 5-1: config 0 descriptor?? [ 298.114584][ T5836] ums-realtek 5-1:0.4: USB Mass Storage device detected [ 298.336208][ T27] usb 5-1: USB disconnect, device number 12 [ 299.164273][T10650] loop1: detected capacity change from 0 to 16 [ 299.180101][T10650] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 299.250532][T10651] loop3: detected capacity change from 0 to 256 [ 299.269231][T10651] exfat: Bad value for 'uid' [ 299.342332][ T5792] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 299.687533][T10659] nr0: tun_chr_ioctl cmd 1074025677 [ 299.704944][T10659] nr0: linktype set to 805 [ 299.775364][T10663] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma? [ 300.093984][T10671] loop0: detected capacity change from 0 to 4096 [ 300.110416][T10671] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 300.170493][T10671] ntfs3: loop0: ino=19, mi_enum_attr [ 300.175949][T10671] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 300.185275][T10671] ntfs3: loop0: ino=1a, mi_enum_attr [ 300.191295][T10671] ntfs3: loop0: ino=1a, mi_enum_attr [ 300.198826][T10671] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 300.633715][T10669] loop3: detected capacity change from 0 to 32768 [ 300.710507][T10669] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 300.711425][T10687] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 300.725596][T10687] syzkaller0: linktype set to 0 [ 300.857824][T10669] XFS (loop3): Ending clean mount [ 301.089826][T10680] loop1: detected capacity change from 0 to 32768 [ 301.111856][T10680] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1790 (10680) [ 301.167538][T10680] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 301.195084][ T5773] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 301.218840][T10680] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 301.273661][T10680] BTRFS info (device loop1): use zlib compression, level 3 [ 301.299530][T10680] BTRFS info (device loop1): using free space tree [ 301.379867][ T5853] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 301.558772][T10680] BTRFS info (device loop1): enabling ssd optimizations [ 301.584240][T10680] BTRFS info (device loop1): auto enabling async discard [ 301.594334][ T5853] usb 5-1: Using ep0 maxpacket: 32 [ 301.657249][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.694386][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.735095][ T5853] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 301.765831][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.801622][ T5853] usb 5-1: config 0 descriptor?? [ 301.887529][T10680] BTRFS error (device loop1): target device is invalid! [ 302.019135][ T5776] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 302.673366][T10736] loop3: detected capacity change from 0 to 64 [ 302.765506][ T5853] usbhid 5-1:0.0: can't add hid device: -71 [ 302.790897][ T5853] usbhid: probe of 5-1:0.0 failed with error -71 [ 302.821110][ T5853] usb 5-1: USB disconnect, device number 13 [ 303.207847][T10749] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 303.294157][T10751] loop3: detected capacity change from 0 to 512 [ 303.377486][T10751] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.1811: iget: bad i_size value: 38620345925642 [ 303.419291][T10751] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1811: couldn't read orphan inode 15 (err -117) [ 303.483035][T10751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.557271][T10751] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.1811: bg 0: block 5: invalid block bitmap [ 303.613698][T10751] EXT4-fs error (device loop3) in ext4_setattr:5695: error 28 [ 303.670989][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.866600][T10765] loop1: detected capacity change from 0 to 8192 [ 303.974164][T10771] loop3: detected capacity change from 0 to 1024 [ 303.988095][ T2133] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 304.009596][T10771] EXT4-fs: Ignoring removed bh option [ 304.051655][T10771] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 304.073003][T10771] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 304.155128][T10771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.197652][T10777] loop1: detected capacity change from 0 to 2048 [ 304.204312][ T2133] usb 1-1: Using ep0 maxpacket: 16 [ 304.211915][ T2133] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 304.229415][ T2133] usb 1-1: config 0 has no interface number 0 [ 304.243787][ T2133] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 304.254467][ T2133] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 304.267714][ T2133] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 304.278273][ T2133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.286419][ T2133] usb 1-1: Product: syz [ 304.292119][ T2133] usb 1-1: Manufacturer: syz [ 304.296829][ T2133] usb 1-1: SerialNumber: syz [ 304.305017][ T2133] usb 1-1: config 0 descriptor?? [ 304.316972][T10777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.332661][T10764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.363565][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.374903][T10764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.505478][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.665606][T10764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.718361][T10764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 304.940786][ T2133] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 305.023655][T10800] loop4: detected capacity change from 0 to 256 [ 305.041482][T10800] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 305.102705][T10799] vlan2: entered promiscuous mode [ 305.115866][T10799] team0: entered promiscuous mode [ 305.121309][T10799] team_slave_0: entered promiscuous mode [ 305.127387][T10799] team_slave_1: entered promiscuous mode [ 305.142404][ T2133] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 84 [ 305.164994][ T28] audit: type=1326 audit(2000000333.015:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1832" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2199e199 code=0x7ffc0000 [ 305.212969][ T28] audit: type=1326 audit(2000000333.045:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1832" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2199e199 code=0x7ffc0000 [ 305.288428][ T28] audit: type=1326 audit(2000000333.045:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1832" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2199e199 code=0x7ffc0000 [ 305.337323][ T28] audit: type=1326 audit(2000000333.045:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1832" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2199e199 code=0x7ffc0000 [ 305.396283][T10804] loop4: detected capacity change from 0 to 512 [ 305.409745][ T2133] usb 1-1: USB disconnect, device number 13 [ 305.427132][ T28] audit: type=1326 audit(2000000333.055:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1832" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ffb2199e199 code=0x7ffc0000 [ 305.456693][T10804] EXT4-fs: Ignoring removed bh option [ 305.486946][T10804] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.518196][ T28] audit: type=1326 audit(2000000333.055:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1832" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2199e199 code=0x7ffc0000 [ 305.574208][T10804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.591169][ T28] audit: type=1326 audit(2000000333.055:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1832" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2199e199 code=0x7ffc0000 [ 305.664362][T10804] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.675200][ T28] audit: type=1326 audit(2000000333.055:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1832" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2199e199 code=0x7ffc0000 [ 305.699948][ T28] audit: type=1326 audit(2000000333.055:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1832" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7ffb2199e199 code=0x7ffc0000 [ 305.724989][T10813] ip_tables: iptables: counters copy to user failed while replacing table [ 305.725144][ T28] audit: type=1326 audit(2000000333.065:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10801 comm="syz.3.1832" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2199e199 code=0x7ffc0000 [ 305.906500][ T6345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.019141][T10820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1839'. [ 306.239675][T10827] bridge_slave_0: left allmulticast mode [ 306.245428][T10827] bridge_slave_0: left promiscuous mode [ 306.283914][T10827] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.314772][T10827] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 306.377483][T10831] TCP: TCP_TX_DELAY enabled [ 306.672143][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1850'. [ 306.987592][T10853] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 307.003566][T10851] loop1: detected capacity change from 0 to 164 [ 307.075731][T10851] Unable to read rock-ridge attributes [ 307.121381][T10851] Unable to read rock-ridge attributes [ 307.234409][T10861] loop4: detected capacity change from 0 to 8 [ 307.246500][T10860] trusted_key: syz.0.1858 sent an empty control message without MSG_MORE. [ 307.453552][T10863] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 307.518348][T10863] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 307.526584][T10863] page_type: 0xffffffff() [ 307.561218][T10863] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 307.573897][T10863] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 307.620058][T10863] page dumped because: unmovable page [ 307.625616][T10863] page_owner info is not present (never set?) [ 307.878496][T10883] loop3: detected capacity change from 0 to 2048 [ 307.916821][T10883] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.986369][T10883] CacheFiles: Failed to register: -95 [ 308.499571][T10900] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 308.675772][T10906] loop3: detected capacity change from 0 to 512 [ 308.698052][T10906] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 308.767641][T10906] EXT4-fs (loop3): 1 truncate cleaned up [ 308.775337][T10906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.155443][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.526463][T10932] loop0: detected capacity change from 0 to 64 [ 309.628019][ T5843] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 309.842847][ T5843] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 309.857927][ T5843] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 309.885336][ T5843] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 309.906695][ T5843] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 309.927577][ T5843] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 309.948006][ T5843] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 309.983531][ T5843] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 309.997224][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 310.005643][ T5843] usb 4-1: Product: syz [ 310.009961][ T5843] usb 4-1: Manufacturer: syz [ 310.022395][T10927] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 310.035833][T10927] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 310.043992][T10927] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 310.083216][T10927] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 310.139432][T10927] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 310.146912][T10927] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 310.215500][ T5843] usb 4-1: USB2VGA dongle found at address 17 [ 310.257571][ T5843] usb 4-1: Allocated 8 output buffers [ 310.285258][ T5843] usb 4-1: Failed to early initialize device [ 310.321021][T10939] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 310.638444][T10927] usb 4-1: Failed to initialize device [ 310.694608][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'. [ 310.712320][T10948] ipvlan2: entered allmulticast mode [ 310.719947][T10948] syz_tun: entered allmulticast mode [ 310.774610][ T5843] usb 4-1: USB disconnect, device number 17 [ 310.824005][T10951] loop1: detected capacity change from 0 to 1024 [ 311.115746][T10957] MTRR 1 not used [ 311.238133][ T27] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 311.427832][T10966] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 311.445416][T10966] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 311.460636][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.476496][ T27] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.486536][T10966] page_type: 0xffffffff() [ 311.491627][T10966] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 311.517976][ T27] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 311.531253][T10966] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 311.551085][ T27] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 311.560882][T10966] page dumped because: unmovable page [ 311.577600][T10966] page_owner info is not present (never set?) [ 311.584547][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.770021][T10974] loop3: detected capacity change from 0 to 128 [ 311.833092][T10974] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.856140][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 311.869083][T10974] ext4 filesystem being mounted at /485/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 311.894363][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 311.908097][ T2133] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 312.085618][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.130398][ T2133] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 312.161407][ T2133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.188553][ T2133] usb 2-1: Product: syz [ 312.193031][ T2133] usb 2-1: Manufacturer: syz [ 312.203627][ T27] DVB: Unable to find symbol stv0299_attach() [ 312.213237][ T2133] usb 2-1: SerialNumber: syz [ 312.381295][ T27] DVB: Unable to find symbol tda8083_attach() [ 312.394388][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 312.433074][ T27] usb 5-1: USB disconnect, device number 14 [ 312.580354][ T2133] rtl8150 2-1:1.0: couldn't reset the device [ 312.590195][T10995] vlan2: entered promiscuous mode [ 312.602900][ T2133] rtl8150: probe of 2-1:1.0 failed with error -5 [ 312.605822][T10995] team0: entered promiscuous mode [ 312.633030][T10995] team_slave_0: entered promiscuous mode [ 312.648242][T10995] team_slave_1: entered promiscuous mode [ 312.662143][ T2133] usb 2-1: USB disconnect, device number 13 [ 313.493232][T10997] loop3: detected capacity change from 0 to 32768 [ 313.592125][T10997] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 313.831611][T10997] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 313.978313][T10997] XFS (loop3): Starting recovery (logdev: internal) [ 314.135733][T11030] loop1: detected capacity change from 0 to 256 [ 314.161990][T11030] exfat: Deprecated parameter 'utf8' [ 314.167438][T11030] exfat: Deprecated parameter 'namecase' [ 314.188060][T11030] exfat: Deprecated parameter 'utf8' [ 314.207749][T11030] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 314.246285][T10997] XFS (loop3): Ending recovery (logdev: internal) [ 314.370825][T10997] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x43f/0x660, xfs_bnobt block 0x8 [ 314.412338][T10997] XFS (loop3): Unmount and run xfs_repair [ 314.579698][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 314.901824][T11042] scsi_dev_info_list_add_str: bad dev info string 'Q^' '(null)' '(null)' [ 315.308029][ T789] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 315.344215][T11059] loop3: detected capacity change from 0 to 1024 [ 315.513547][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 315.535859][ T789] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.552388][ T789] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 315.563166][ T789] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 315.596468][ T789] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 315.618480][ T789] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 315.641364][ T789] usb 2-1: config 1 interface 1 has no altsetting 0 [ 315.662078][ T789] usb 2-1: string descriptor 0 read error: -22 [ 315.669203][ T789] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 315.694546][T11064] loop3: detected capacity change from 0 to 64 [ 315.701411][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.075779][T11055] loop0: detected capacity change from 0 to 32768 [ 316.138861][T11055] (syz.0.1930,11055,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 316.179296][T11055] (syz.0.1930,11055,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 316.330519][T11055] JBD2: Ignoring recovery information on journal [ 316.418257][T11078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1939'. [ 316.476029][T11055] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 316.559527][T11078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1939'. [ 316.578183][ T789] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 316.636693][ T789] usb 2-1: USB disconnect, device number 14 [ 316.689811][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.814005][T11088] loop3: detected capacity change from 0 to 16 [ 316.831971][T11088] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 316.883889][ T9146] ocfs2: Unmounting device (7,0) on (node local) [ 317.207786][T11092] loop3: detected capacity change from 0 to 128 [ 317.276035][T11092] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 317.446436][T11086] loop4: detected capacity change from 0 to 32768 [ 317.489293][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 317.532760][T11086] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 317.585647][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.629248][T11086] JBD2: Ignoring recovery information on journal [ 317.829500][T11086] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 318.366049][ T6345] ocfs2: Unmounting device (7,4) on (node local) [ 319.136929][T11142] loop3: detected capacity change from 0 to 32768 [ 319.158280][ T5853] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 319.186251][T11142] (syz.3.1967,11142,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 319.206613][T11142] (syz.3.1967,11142,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 319.250882][T11142] JBD2: Ignoring recovery information on journal [ 319.342179][T11142] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 319.358076][ T5853] usb 1-1: Using ep0 maxpacket: 8 [ 319.366116][ T5853] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 319.376895][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.408045][ T5853] pvrusb2: Hardware description: Terratec Grabster AV400 [ 319.420939][ T5853] pvrusb2: ********** [ 319.430193][ T5853] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 319.453687][ T5853] pvrusb2: Important functionality might not be entirely working. [ 319.475551][ T5853] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 319.524113][ T5853] pvrusb2: ********** [ 319.607297][ T2323] pvrusb2: Invalid write control endpoint [ 319.747220][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 319.769288][ T2323] pvrusb2: Invalid write control endpoint [ 319.824943][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 319.866647][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 319.891011][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 319.921959][ T2323] pvrusb2: Device being rendered inoperable [ 319.940154][T11147] pvrusb2: Attempted to execute control transfer when device not ok [ 319.980032][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 320.009734][ T27] usb 1-1: USB disconnect, device number 14 [ 320.020384][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 320.046466][ T2323] pvrusb2: Attached sub-driver cx25840 [ 320.052654][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 320.072228][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 320.282141][T11166] bonding: no command found in bonding_masters - use +ifname or -ifname [ 320.763316][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'. [ 320.798246][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'. [ 320.917369][T11191] loop1: detected capacity change from 0 to 2048 [ 320.934760][ T27] hid-generic 0005:4C4A:4155.000A: item fetching failed at offset 0/1 [ 320.955007][ T27] hid-generic: probe of 0005:4C4A:4155.000A failed with error -22 [ 321.009156][T11191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.392841][T11214] ip6gre1: entered promiscuous mode [ 321.398701][T11214] ip6gre1: entered allmulticast mode [ 321.505478][T11218] loop0: detected capacity change from 0 to 64 [ 321.900107][T11224] loop0: detected capacity change from 0 to 512 [ 322.001171][T11224] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 322.040311][T11224] FAT-fs (loop0): Filesystem has been set read-only [ 322.375600][T11238] loop1: detected capacity change from 0 to 4096 [ 322.390403][T11238] EXT4-fs: Ignoring removed orlov option [ 322.449627][T11238] EXT4-fs (loop1): Test dummy encryption mode enabled [ 322.491183][T11238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.699992][ T789] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 322.741574][T11238] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 322.768450][T11238] CacheFiles: File cache on CacheFiles registered [ 322.793543][T11233] CacheFiles: File cache on CacheFiles unregistering [ 322.818059][T11233] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 322.884662][T11256] loop0: detected capacity change from 0 to 1024 [ 322.916822][ T789] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 322.932410][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.952876][ T789] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 322.998033][ T789] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 323.027556][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.071724][T11242] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 323.120886][ T789] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 323.398369][ T789] usb 5-1: USB disconnect, device number 15 [ 323.566637][T11270] loop0: detected capacity change from 0 to 256 [ 323.585716][T11270] exfat: Deprecated parameter 'namecase' [ 323.640521][T11270] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 324.914935][T11306] syz.0.2034[11306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.915296][T11306] syz.0.2034[11306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.138465][T11310] program syz.1.2035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.221258][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 325.221275][ T28] audit: type=1326 audit(2000000609.078:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.0.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9fd9e199 code=0x7ffc0000 [ 325.278363][ T28] audit: type=1326 audit(2000000609.078:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.0.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9fd9e199 code=0x7ffc0000 [ 325.340969][ T28] audit: type=1326 audit(2000000609.078:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.0.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9fd9e199 code=0x7ffc0000 [ 325.402830][ T28] audit: type=1326 audit(2000000609.078:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.0.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9fd9e199 code=0x7ffc0000 [ 325.459220][ T28] audit: type=1326 audit(2000000609.078:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.0.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9fd9e199 code=0x7ffc0000 [ 325.561748][ T28] audit: type=1326 audit(2000000609.078:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.0.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd9fd5e9ce code=0x7ffc0000 [ 325.617471][ T28] audit: type=1326 audit(2000000609.078:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.0.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcd9fd9f497 code=0x7ffc0000 [ 325.704950][ T28] audit: type=1326 audit(2000000609.078:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.0.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd9fd9e199 code=0x7ffc0000 [ 325.797528][ T28] audit: type=1326 audit(2000000609.078:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.0.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcd9fd9f497 code=0x7ffc0000 [ 325.857358][ T28] audit: type=1326 audit(2000000609.078:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11311 comm="syz.0.2037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcd9fd5e9ce code=0x7ffc0000 [ 326.044129][T11328] loop3: detected capacity change from 0 to 128 [ 326.079149][T11328] EXT4-fs (loop3): Test dummy encryption mode enabled [ 326.093707][T11330] loop4: detected capacity change from 0 to 512 [ 326.115688][T11332] binder: 11331:11332 ioctl 4018620d 0 returned -22 [ 326.141208][T11330] EXT4-fs (loop4): orphan cleanup on readonly fs [ 326.150187][T11328] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.169546][T11328] ext4 filesystem being mounted at /524/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 326.188454][T11330] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #15: comm syz.4.2046: corrupted inode contents [ 326.234460][T11328] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 326.261899][T11328] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 326.277528][T11330] EXT4-fs (loop4): Remounting filesystem read-only [ 326.298589][T11330] EXT4-fs (loop4): 1 orphan inode deleted [ 326.319116][T11330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 326.325808][T11328] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 326.424870][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.453999][T11316] loop0: detected capacity change from 0 to 32768 [ 326.477514][T11316] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2040 (11316) [ 326.512089][ T6345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.617997][T11316] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 326.638084][T11316] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 326.663002][T11316] BTRFS info (device loop0): using free space tree [ 326.825432][T11316] BTRFS info (device loop0): enabling ssd optimizations [ 326.833957][T11316] BTRFS info (device loop0): auto enabling async discard [ 326.894271][T11364] tap0: tun_chr_ioctl cmd 1074025673 [ 327.137376][ T9146] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 327.182961][T11368] loop4: detected capacity change from 0 to 512 [ 327.199183][T11361] mt6360: probe of 0-0034 failed with error -5 [ 327.208651][T11361] i2c i2c-0: new_device: Instantiated device mt6360 at 0x34 [ 327.254033][T11368] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.2055: bg 0: block 5: invalid block bitmap [ 327.377694][T11368] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 327.393177][T11368] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2055: invalid indirect mapped block 3 (level 2) [ 327.437381][T11368] EXT4-fs (loop4): 1 orphan inode deleted [ 327.445713][T11368] EXT4-fs (loop4): 1 truncate cleaned up [ 327.457202][T11368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.682309][ T6345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.706988][ T5790] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop0 scanned by udevd (5790) [ 327.924340][T11380] ip6gretap1: entered allmulticast mode [ 328.335640][T11392] loop1: detected capacity change from 0 to 512 [ 328.365825][T11392] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 328.420081][T11392] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2065: invalid indirect mapped block 9 (level 0) [ 328.533312][T11392] EXT4-fs (loop1): 1 truncate cleaned up [ 328.581157][T11392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.715569][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.094743][T11415] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.156328][T11419] loop3: detected capacity change from 0 to 512 [ 329.210449][T11419] EXT4-fs (loop3): orphan cleanup on readonly fs [ 329.222389][T11422] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2078'. [ 329.269464][T11419] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.2077: corrupted inode contents [ 329.338870][T11424] program syz.0.2081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.348900][T11419] EXT4-fs (loop3): Remounting filesystem read-only [ 329.355608][T11419] EXT4-fs (loop3): 1 orphan inode deleted [ 329.373672][T11419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 329.560899][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.702816][T11438] ima: rule for LSM 'unconfined_t' is undefined [ 329.727551][T11437] ima: policy update failed [ 329.915596][ T2133] kernel write not supported for file /uinput (pid: 2133 comm: kworker/1:2) [ 330.008360][ T2133] IPVS: starting estimator thread 0... [ 330.066993][ T2133] kernel write not supported for file /input/mice (pid: 2133 comm: kworker/1:2) [ 330.098130][T11450] IPVS: using max 16 ests per chain, 38400 per kthread [ 331.633062][T11519] loop3: detected capacity change from 0 to 4096 [ 331.654531][T11519] EXT4-fs: Ignoring removed orlov option [ 331.669639][T11519] EXT4-fs (loop3): Test dummy encryption mode enabled [ 331.716082][T11519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.791892][T11503] loop4: detected capacity change from 0 to 40427 [ 331.807348][T11519] FS-Cache: Cache "CacheFiles" added (type cachefiles) [ 331.846880][T11519] CacheFiles: File cache on CacheFiles registered [ 331.856921][T11503] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 331.863548][T11503] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 331.875318][T11503] F2FS-fs (loop4): invalid crc value [ 331.916221][T11518] CacheFiles: File cache on CacheFiles unregistering [ 331.943193][T11518] FS-Cache: Withdrawing cache "CacheFiles" (0 objs) [ 331.952657][T11526] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2121'. [ 331.963707][T11526] netlink: zone id is out of range [ 331.994562][T11526] netlink: zone id is out of range [ 332.014239][T11526] netlink: zone id is out of range [ 332.028007][T11526] netlink: zone id is out of range [ 332.048029][T11526] netlink: zone id is out of range [ 332.067664][T11526] netlink: zone id is out of range [ 332.079136][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.088993][T11526] netlink: zone id is out of range [ 332.106739][T11526] netlink: zone id is out of range [ 332.119912][T11526] netlink: zone id is out of range [ 332.125949][T11526] netlink: zone id is out of range [ 332.208035][T11503] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 332.215216][T11503] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 332.473313][ T6345] syz-executor: attempt to access beyond end of device [ 332.473313][ T6345] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 332.512323][ T6345] syz-executor: attempt to access beyond end of device [ 332.512323][ T6345] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 332.622747][T11517] loop1: detected capacity change from 0 to 40427 [ 332.662996][T11517] F2FS-fs (loop1): invalid crc value [ 332.694115][T11517] F2FS-fs (loop1): Found nat_bits in checkpoint [ 332.702887][ T7577] syz.4.543: attempt to access beyond end of device [ 332.702887][ T7577] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 332.767819][ T7577] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 332.912451][T11517] F2FS-fs (loop1): Start checkpoint disabled! [ 332.996385][T11517] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 333.360569][T11530] loop3: detected capacity change from 0 to 40427 [ 333.383811][T11530] F2FS-fs (loop3): invalid crc value [ 333.414663][T11530] F2FS-fs (loop3): Found nat_bits in checkpoint [ 333.539157][ T74] kworker/u4:5: attempt to access beyond end of device [ 333.539157][ T74] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 333.587201][ T74] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 333.621097][ T74] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 333.685092][T11530] F2FS-fs (loop3): Start checkpoint disabled! [ 333.787277][T11530] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 334.229290][ T74] kworker/u4:5: attempt to access beyond end of device [ 334.229290][ T74] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 334.283727][ T74] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 334.318260][ T74] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 334.892875][T11547] sctp: [Deprecated]: syz.0.2130 (pid 11547) Use of int in maxseg socket option. [ 334.892875][T11547] Use struct sctp_assoc_value instead [ 335.190941][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2133'. [ 335.279056][ T3542] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.468102][ T3542] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.492184][T11561] loop1: detected capacity change from 0 to 1764 [ 335.724301][ T3542] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.877543][ T3542] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.004324][T11558] loop3: detected capacity change from 0 to 40427 [ 336.053582][T11558] F2FS-fs (loop3): invalid crc value [ 336.111374][T11558] F2FS-fs (loop3): Found nat_bits in checkpoint [ 336.150326][T11559] loop0: detected capacity change from 0 to 32768 [ 336.243292][T11559] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.409686][T11558] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 336.609772][T11559] XFS (loop0): Ending clean mount [ 336.660823][T11559] XFS (loop0): Quotacheck needed: Please wait. [ 336.766604][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.781482][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.791901][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.801707][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.833619][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.862035][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.907495][ T5773] syz-executor: attempt to access beyond end of device [ 336.907495][ T5773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 336.984942][ T5773] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 336.989243][T11559] XFS (loop0): Quotacheck: Done. [ 337.190406][ T9146] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 337.231030][T11589] loop1: detected capacity change from 0 to 2048 [ 337.295539][T11589] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 337.443262][T11589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.139288][T11603] loop1: detected capacity change from 0 to 256 [ 338.677401][T11614] loop3: detected capacity change from 0 to 16 [ 338.720712][T11614] erofs: (device loop3): mounted with root inode @ nid 36. [ 338.779351][ T3542] IPVS: stopping backup sync thread 10939 ... [ 338.793253][ T51] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 338.847681][T11614] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 338.874895][T11610] loop0: detected capacity change from 0 to 32768 [ 338.896006][T11610] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.2146 (11610) [ 338.918365][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 338.918457][ T28] audit: type=1800 audit(2000000622.778:151): pid=11614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2147" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 338.953168][ T51] Bluetooth: hci3: command tx timeout [ 339.018027][T11610] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 339.035195][T11610] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 339.046108][T11610] BTRFS info (device loop0): setting nodatacow, compression disabled [ 339.064360][T11610] BTRFS info (device loop0): turning on flush-on-commit [ 339.078066][T11610] BTRFS info (device loop0): using free space tree [ 339.135824][T11623] loop1: detected capacity change from 0 to 128 [ 339.203536][T11580] chnl_net:caif_netlink_parms(): no params data found [ 339.211573][T11623] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 339.253151][T11623] hpfs: filesystem error: improperly stopped [ 339.273940][T11623] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 339.281787][T11610] BTRFS info (device loop0): enabling ssd optimizations [ 339.281814][T11610] BTRFS info (device loop0): auto enabling async discard [ 339.397845][T11623] hpfs: You really don't want any checks? You are crazy... [ 339.406138][T11623] hpfs: Code page index out of array [ 339.421014][T11623] hpfs: code page support is disabled [ 339.427049][T11623] hpfs: hpfs_map_4sectors(): unaligned read [ 339.478452][T11623] hpfs: hpfs_map_4sectors(): unaligned read [ 339.484515][T11623] hpfs: filesystem error: unable to find root dir [ 339.512328][ T28] audit: type=1800 audit(2000000623.368:152): pid=11610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2146" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 339.781890][ T9146] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 339.961589][T11656] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 340.013442][ T3542] hsr_slave_0: left promiscuous mode [ 340.096274][ T3542] hsr_slave_1: left promiscuous mode [ 340.175707][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.189949][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.239118][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.246698][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.284395][ T3542] batman_adv: batadv0: Interface deactivated: macvlan2 [ 340.298108][ T3542] batman_adv: batadv0: Removing interface: macvlan2 [ 340.339159][ T3542] bridge_slave_1: left allmulticast mode [ 340.344910][ T3542] bridge_slave_1: left promiscuous mode [ 340.359691][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.419718][ T3542] bridge_slave_0: left allmulticast mode [ 340.425460][ T3542] bridge_slave_0: left promiscuous mode [ 340.458315][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.593824][ T3542] batadv_slave_1: left allmulticast mode [ 340.607236][ T3542] batadv_slave_1: left promiscuous mode [ 340.632974][ T3542] veth1_vlan: left promiscuous mode [ 340.653935][ T3542] veth0_vlan: left promiscuous mode [ 341.012074][ T51] Bluetooth: hci3: command tx timeout [ 341.617708][ T3542] team0 (unregistering): Port device team_slave_1 removed [ 341.688403][ T3542] team0 (unregistering): Port device team_slave_0 removed [ 341.756769][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.833099][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.334773][ T3542] bond0 (unregistering): Released all slaves [ 342.467578][T11580] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.477670][T11580] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.486585][T11580] bridge_slave_0: entered allmulticast mode [ 342.497341][T11580] bridge_slave_0: entered promiscuous mode [ 342.526586][T11580] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.557187][T11580] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.565114][T11580] bridge_slave_1: entered allmulticast mode [ 342.574024][T11580] bridge_slave_1: entered promiscuous mode [ 342.674662][T11580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.710049][T11580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.759461][T11683] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 342.767726][T11683] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 342.787953][T11681] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 342.794558][T11681] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 342.861992][T11683] vhci_hcd vhci_hcd.0: Device attached [ 342.902129][T11580] team0: Port device team_slave_0 added [ 342.917465][T11681] vhci_hcd vhci_hcd.0: Device attached [ 342.933472][T11580] team0: Port device team_slave_1 added [ 342.984866][T11681] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(5) [ 342.991482][T11681] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.009499][T11683] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 343.016110][T11683] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.042852][T11681] vhci_hcd vhci_hcd.0: Device attached [ 343.089259][ T51] Bluetooth: hci3: command tx timeout [ 343.095009][T11683] vhci_hcd vhci_hcd.0: Device attached [ 343.124499][T11580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.129699][T11688] vhci_hcd: connection closed [ 343.134153][T11682] vhci_hcd: connection closed [ 343.138354][T11684] vhci_hcd: connection closed [ 343.149322][T11690] vhci_hcd: connection closed [ 343.166404][ T59] vhci_hcd: stop threads [ 343.183447][ T27] usb 39-2: new high-speed USB device number 2 using vhci_hcd [ 343.222442][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.238795][ T59] vhci_hcd: release socket [ 343.257335][T11686] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 343.282995][ T59] vhci_hcd: disconnect device [ 343.298609][ T59] vhci_hcd: stop threads [ 343.302953][ T59] vhci_hcd: release socket [ 343.334496][T11580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.339325][ T59] vhci_hcd: disconnect device [ 343.377039][T11580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.381627][ T59] vhci_hcd: stop threads [ 343.413732][ T59] vhci_hcd: release socket [ 343.430419][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.438246][ T59] vhci_hcd: disconnect device [ 343.471379][T11580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.502957][ T59] vhci_hcd: stop threads [ 343.507396][ T59] vhci_hcd: release socket [ 343.520424][T11680] loop1: detected capacity change from 0 to 32768 [ 343.527102][ T59] vhci_hcd: disconnect device [ 343.535476][T11680] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.2161 (11680) [ 343.704502][T11680] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 343.769168][T11680] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 343.808273][T11680] BTRFS info (device loop1): setting nodatacow, compression disabled [ 343.816625][T11680] BTRFS info (device loop1): turning on flush-on-commit [ 343.825140][T11580] hsr_slave_0: entered promiscuous mode [ 343.862825][T11580] hsr_slave_1: entered promiscuous mode [ 343.875550][T11680] BTRFS info (device loop1): using free space tree [ 343.902178][T11702] loop3: detected capacity change from 0 to 164 [ 343.978750][T11702] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 344.094690][T11702] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 344.115844][T11680] BTRFS info (device loop1): enabling ssd optimizations [ 344.178708][T11680] BTRFS info (device loop1): auto enabling async discard [ 344.279733][T11725] loop0: detected capacity change from 0 to 136 [ 344.440152][ T28] audit: type=1800 audit(2000000628.298:153): pid=11680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2161" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 344.481808][T11725] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 344.770435][ T5776] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 345.105104][ T5790] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop1 scanned by udevd (5790) [ 345.116113][T11580] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 345.180254][ T51] Bluetooth: hci3: command tx timeout [ 345.193003][T11580] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 345.210937][T11580] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 345.286698][T11580] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 345.768314][T11580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.899386][T11580] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.971668][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.978981][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.052159][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.059445][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.248170][T11759] netlink: 'syz.3.2175': attribute type 1 has an invalid length. [ 346.259672][T11759] nbd: error processing sock list [ 346.288466][ T3479] wlan1: Trigger new scan to find an IBSS to join [ 346.298374][T11759] block nbd1: shutting down sockets [ 346.304668][T11765] loop0: detected capacity change from 0 to 128 [ 346.346064][T11765] EXT4-fs (loop0): Test dummy encryption mode enabled [ 346.355566][ T59] ------------[ cut here ]------------ [ 346.362282][ T59] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 346.374064][ T59] WARNING: CPU: 1 PID: 59 at net/mac80211/rate.c:385 __rate_control_send_low+0x632/0x880 [ 346.384637][ T59] Modules linked in: [ 346.388704][ T59] CPU: 1 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 346.396552][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.406794][ T59] Workqueue: events_unbound cfg80211_wiphy_work [ 346.413206][ T59] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 346.419654][ T59] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 80 49 e0 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 0e 4c 49 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 346.439702][ T59] RSP: 0018:ffffc900015a7400 EFLAGS: 00010246 [ 346.445978][ T59] RAX: 888aa34510ef8c00 RBX: 000000000000000c RCX: ffff88801aae3c00 [ 346.454205][ T59] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 346.462501][ T59] RBP: 0000000000000084 R08: ffffc900015a7007 R09: 1ffff920002b4e00 [ 346.470644][ T59] R10: dffffc0000000000 R11: fffff520002b4e01 R12: 0000000000000020 [ 346.478953][ T59] R13: dffffc0000000000 R14: ffff88807ba533b8 R15: ffff8880794c93e8 [ 346.487054][ T59] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 346.496142][ T59] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.502876][ T59] CR2: 00007f1fae2013c6 CR3: 000000002ea4c000 CR4: 00000000003506e0 [ 346.511068][ T59] Call Trace: [ 346.514504][ T59] [ 346.517592][ T59] rate_control_send_low+0x194/0x790 [ 346.523051][ T59] rate_control_get_rate+0x20b/0x5c0 [ 346.528485][ T59] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 346.534245][ T59] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 346.540431][ T59] ? __lock_acquire+0x135d/0x7eb0 [ 346.545573][ T59] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 346.551799][ T59] invoke_tx_handlers_late+0xb1/0x17c0 [ 346.557404][ T59] ? invoke_tx_handlers_early+0xa30/0x1c80 [ 346.563362][ T59] ieee80211_tx+0x2d8/0x460 [ 346.568007][ T59] ? ieee80211_skb_resize+0x610/0x610 [ 346.573521][ T59] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 346.579229][ T59] ? ieee80211_xmit+0x2e0/0x3c0 [ 346.584183][ T59] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 346.590309][ T59] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 346.596328][ T59] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 346.602818][ T59] ieee80211_scan_state_send_probe+0x57f/0x930 [ 346.609186][ T59] ieee80211_scan_work+0x42e/0x1b30 [ 346.614528][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.619899][ T59] cfg80211_wiphy_work+0x228/0x260 [ 346.625171][ T59] ? process_scheduled_works+0x975/0x1600 [ 346.631112][ T59] process_scheduled_works+0xa60/0x1600 [ 346.636865][ T59] ? worker_attach_to_pool+0x370/0x370 [ 346.642500][ T59] ? assign_work+0x3cc/0x5d0 [ 346.647204][ T59] worker_thread+0xa5e/0xfe0 [ 346.652207][ T59] ? _raw_spin_unlock+0x40/0x40 [ 346.657170][ T59] ? __kthread_parkme+0x71/0x1c0 [ 346.662337][ T59] kthread+0x2fa/0x390 [ 346.666504][ T59] ? pr_cont_work+0x550/0x550 [ 346.671312][ T59] ? kthread_blkcg+0xd0/0xd0 [ 346.676017][ T59] ret_from_fork+0x48/0x80 [ 346.680568][ T59] ? kthread_blkcg+0xd0/0xd0 [ 346.685701][ T59] ret_from_fork_asm+0x11/0x20 [ 346.690629][ T59] [ 346.693731][ T59] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 346.701187][ T59] CPU: 1 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 346.708600][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.718768][ T59] Workqueue: events_unbound cfg80211_wiphy_work [ 346.725055][ T59] Call Trace: [ 346.728354][ T59] [ 346.731476][ T59] dump_stack_lvl+0x18c/0x250 [ 346.736187][ T59] ? show_regs_print_info+0x20/0x20 [ 346.741438][ T59] ? load_image+0x420/0x420 [ 346.746065][ T59] panic+0x2ca/0x720 [ 346.749990][ T59] ? bpf_jit_dump+0xd0/0xd0 [ 346.754624][ T59] ? ret_from_fork_asm+0x11/0x20 [ 346.759593][ T59] __warn+0x2e0/0x470 [ 346.763598][ T59] ? __rate_control_send_low+0x632/0x880 [ 346.769267][ T59] ? __rate_control_send_low+0x632/0x880 [ 346.774942][ T59] report_bug+0x2be/0x4f0 [ 346.779307][ T59] ? __rate_control_send_low+0x632/0x880 [ 346.785055][ T59] ? __rate_control_send_low+0x632/0x880 [ 346.790751][ T59] ? __rate_control_send_low+0x634/0x880 [ 346.796513][ T59] handle_bug+0xcf/0x120 [ 346.800779][ T59] exc_invalid_op+0x1a/0x50 [ 346.805301][ T59] asm_exc_invalid_op+0x1a/0x20 [ 346.810181][ T59] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 346.816482][ T59] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 80 49 e0 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 0e 4c 49 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 346.836219][ T59] RSP: 0018:ffffc900015a7400 EFLAGS: 00010246 [ 346.842499][ T59] RAX: 888aa34510ef8c00 RBX: 000000000000000c RCX: ffff88801aae3c00 [ 346.850496][ T59] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 346.858492][ T59] RBP: 0000000000000084 R08: ffffc900015a7007 R09: 1ffff920002b4e00 [ 346.866700][ T59] R10: dffffc0000000000 R11: fffff520002b4e01 R12: 0000000000000020 [ 346.874781][ T59] R13: dffffc0000000000 R14: ffff88807ba533b8 R15: ffff8880794c93e8 [ 346.882978][ T59] rate_control_send_low+0x194/0x790 [ 346.888304][ T59] rate_control_get_rate+0x20b/0x5c0 [ 346.893621][ T59] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 346.899292][ T59] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 346.905296][ T59] ? __lock_acquire+0x135d/0x7eb0 [ 346.910353][ T59] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 346.916556][ T59] invoke_tx_handlers_late+0xb1/0x17c0 [ 346.922062][ T59] ? invoke_tx_handlers_early+0xa30/0x1c80 [ 346.928020][ T59] ieee80211_tx+0x2d8/0x460 [ 346.932589][ T59] ? ieee80211_skb_resize+0x610/0x610 [ 346.938002][ T59] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 346.943490][ T59] ? ieee80211_xmit+0x2e0/0x3c0 [ 346.948377][ T59] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 346.954386][ T59] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 346.960222][ T59] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 346.966579][ T59] ieee80211_scan_state_send_probe+0x57f/0x930 [ 346.972803][ T59] ieee80211_scan_work+0x42e/0x1b30 [ 346.978140][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.984372][ T59] cfg80211_wiphy_work+0x228/0x260 [ 346.990144][ T59] ? process_scheduled_works+0x975/0x1600 [ 346.995901][ T59] process_scheduled_works+0xa60/0x1600 [ 347.001498][ T59] ? worker_attach_to_pool+0x370/0x370 [ 347.006991][ T59] ? assign_work+0x3cc/0x5d0 [ 347.011619][ T59] worker_thread+0xa5e/0xfe0 [ 347.016245][ T59] ? _raw_spin_unlock+0x40/0x40 [ 347.021218][ T59] ? __kthread_parkme+0x71/0x1c0 [ 347.026288][ T59] kthread+0x2fa/0x390 [ 347.030386][ T59] ? pr_cont_work+0x550/0x550 [ 347.035088][ T59] ? kthread_blkcg+0xd0/0xd0 [ 347.039706][ T59] ret_from_fork+0x48/0x80 [ 347.044151][ T59] ? kthread_blkcg+0xd0/0xd0 [ 347.048765][ T59] ret_from_fork_asm+0x11/0x20 [ 347.053574][ T59] [ 347.056762][ T59] Kernel Offset: disabled [ 347.061235][ T59] Rebooting in 86400 seconds..