last executing test programs: 4.101770591s ago: executing program 2 (id=3752): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x141400) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x3c, 0x31, 0x4, 0x2100001d, 0x5, 0xaa26, 0x3, 0x104, 0xffffffffffffffff}) 3.973816054s ago: executing program 2 (id=3756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 3.844127026s ago: executing program 2 (id=3759): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000380)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0xdc}}, {@nodatasum}, {@noacl}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x4}}, {@ssd}, {}, {@acl}, {@datacow}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=") truncate(&(0x7f0000000080)='./file1\x00', 0x0) 1.488240304s ago: executing program 2 (id=3796): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 1.23026999s ago: executing program 1 (id=3803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000805}, 0x800) 1.069467044s ago: executing program 3 (id=3805): capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x40, 0x0, 0xfffffffd}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 1.057111275s ago: executing program 1 (id=3806): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) 1.006309806s ago: executing program 0 (id=3808): syz_clone3(&(0x7f0000000080)={0x20901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x20, &(0x7f0000000140)={0x25, 0xe, 0x1ff}, 0x0) 945.725097ms ago: executing program 1 (id=3809): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmmsg$inet(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="ee92b698f1c1c8daaddd3ef2934fa526c151e987e2751ccdde273e30ca160e8393e0f5ad73a664bb85a1a567fdb1538ed3411d88a8d40610b18e4ee08d78191c92cec69f65d98daac6b6ea42132eb2fa89c23ff86450b21310a2e1eb342f50c5226b53804b01bf4d96ddfd91e589", 0x6e}, {&(0x7f0000000380)="a368bcf5c73dfba79788c8a921966628d45290", 0x13}], 0x2}}], 0x1, 0x4048850) 907.583638ms ago: executing program 3 (id=3810): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000a80)=@raw={0xfe, 0xc, "ddd181e6227f"}) 852.79071ms ago: executing program 0 (id=3811): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x1, 0x1}, 0x20) 847.896039ms ago: executing program 4 (id=3812): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="da303ed6149f8c58a0168823b405e4b109114c7eac4e3e88b9205d4e7dd7ce09a8599ac673e5d2d662586f2055878909ae4e30f05ad670bce1d51bc130357d89beca5af768da04f2c0510e489bf6324cfa692e4af5580cefe605334222bc8f5242717b0a", 0x64}, {&(0x7f0000000500)="6b5fd3ab2f9029a04484891eb4df665dc271fa04f7946464d68a6afe2445f2d187bc0989ba17c6e241519a1c323a8b2e2b087cee8b272b18ed33ca9726d6bd0f86119077f9c2fe7107f718bbcc44e5331594f4f805ce700441b1d50523ee1789e268ac15da7106bf6a5b4b9e58761d1f3eb291c0b75e247343ee8a3c1105fce9bbb4432caf829d45e1c4e23ec8274ad2825f6fa46f360579d1e4dcf997dd420950d1f9f902e26efa7766fe6f086c69cc6e6db7ea087475b64904d345ae90361a141e6c70d1aa752a62b2b96b880a", 0xce}, {&(0x7f0000000600)="cff05cda7da0df83b8e9329ff63e3d5d3c58f228815bc09a1cfaacb90391dc58c87bc79d2d926894c1369816312d599bdaacb7d09af673b10215a1c779eaf3b28413992599918ff255e5ef4eff61c10a4e53b8087d8b64cf9f2899e706de1ef1ee6969ae3e02fa799a8e33f2c7c8ccb91ec01cee30ec7fcc619ffc0a7d45849d50311493888b4d98ce54a924c3633accc139ed8ac228ec9fba64eaa436ce97707be70a43", 0xa4}], 0x3) 796.531571ms ago: executing program 3 (id=3813): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x6c2) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) 791.638561ms ago: executing program 1 (id=3814): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x98, &(0x7f0000000000)=ANY=[], 0xfb, 0x6b2, &(0x7f0000000140)="$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") listxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000340)=""/22, 0x16) 671.954994ms ago: executing program 4 (id=3815): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000300)=@multiplanar_fd={0x581, 0x6, 0x4, 0x2000, 0x8, {0x0, 0xea60}, {0x2, 0x2, 0x62, 0x80, 0xfd, 0x2, "c75cfb61"}, 0x9, 0x4, {0x0}, 0x1}) 618.730535ms ago: executing program 3 (id=3816): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x75, 0x0, &(0x7f0000000480)=0x300) 618.601785ms ago: executing program 0 (id=3817): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484ad, 0x18}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x0) 487.973088ms ago: executing program 4 (id=3818): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8919, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4c23, @rand_addr=0x64010102}}) 473.897459ms ago: executing program 1 (id=3819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x140, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x8a, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x1}, @TCA_GRED_STAB={0x104}]}}]}, 0x140}}, 0x0) 432.396229ms ago: executing program 2 (id=3820): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC=0x0, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='127.0.0.1:/\x00', 0x1df) 432.3131ms ago: executing program 3 (id=3821): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, 0x0, 0x0) 401.05563ms ago: executing program 0 (id=3822): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0x40284504, &(0x7f0000000580)=""/137) 304.589173ms ago: executing program 4 (id=3823): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x40, &(0x7f0000000600)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}]}) 299.603753ms ago: executing program 3 (id=3824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a11, 0x20a3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 262.054174ms ago: executing program 0 (id=3825): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, 0x0, 0x4}, 0x90) 150.954176ms ago: executing program 2 (id=3826): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@nfc_llcp={0xa, 0x0, 0x0, 0x0, 0x7, 0x0, "be467b1f4cfd8c642c13334c2a9f91732d13e85b10bdb7e8d20dd064e66a4278b3c76f275da083e92b3fdaae3b991ffc48ca221108c4d3aa623010eab68d95"}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 149.429316ms ago: executing program 4 (id=3827): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@allocspi={0x108, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in6=@remote, @in6=@loopback, 0x4e24, 0x5, 0x4e20, 0x1, 0x2, 0x80, 0xb0, 0xff}, {@in=@broadcast, 0x4d6, 0x6c}, @in=@loopback, {0x9cc6, 0x0, 0x8, 0x5, 0x4000000, 0x15a93d20, 0xffffffff, 0x2}, {0x8, 0x4, 0xe, 0x100000001}, {0x726, 0x0, 0x9}, 0x70bd25, 0x3501, 0xa, 0x2, 0x5}, 0x2, 0x87}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x42}, @etimer_thresh={0x8, 0xc, 0x9}]}, 0x108}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 79.980128ms ago: executing program 0 (id=3828): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffec, 0x2) 22.31619ms ago: executing program 4 (id=3829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000020000100ffffffffffdbdf250200000000000002efff010008000400fbffffff0c001400", @ANYRES32, @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x20004840}, 0x40000) 0s ago: executing program 1 (id=3830): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x16, 0x4, 0x40005002, 0xffff32eb, 0x0, 0x5, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) kernel console output (not intermixed with test programs): [ T5157] pn533_usb: probe of 5-1:1.0 failed with error -90 [ 143.518380][ T4180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4180) [ 143.706248][ T5164] usb 5-1: USB disconnect, device number 5 [ 143.792234][ T21] usb-storage 2-1:64.138: USB Mass Storage device detected [ 143.841673][ T6020] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 143.850904][ T6020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.885947][ T21] usb 2-1: USB disconnect, device number 10 [ 143.905535][ T6020] usb 1-1: Product: syz [ 143.909820][ T6020] usb 1-1: Manufacturer: syz [ 143.937964][ T6020] usb 1-1: SerialNumber: syz [ 144.000697][ T8727] loop3: detected capacity change from 0 to 64 [ 144.089489][ T8727] MINIX-fs: mounting file system with errors, running fsck is recommended [ 144.100287][ T8735] device ip6gretap1 entered promiscuous mode [ 144.361354][ T8752] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 144.639125][ T8777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 144.658028][ T8779] loop4: detected capacity change from 0 to 2048 [ 144.683491][ T8777] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 144.711693][ T6020] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 144.787758][ T8788] netlink: 'syz.2.1630': attribute type 7 has an invalid length. [ 144.922691][ T8790] loop3: detected capacity change from 0 to 2048 [ 144.956603][ T8799] netlink: 'syz.4.1633': attribute type 21 has an invalid length. [ 144.967979][ T8799] __nla_validate_parse: 2 callbacks suppressed [ 144.967997][ T8799] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1633'. [ 144.999037][ T8799] netlink: 'syz.4.1633': attribute type 4 has an invalid length. [ 145.007852][ T8799] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1633'. [ 145.031661][ T8790] loop3: p1 < > p3 p4 [ 145.031661][ T8790] p4: [ 145.054719][ T8790] loop3: p3 start 458752 is beyond EOD, truncated [ 145.070056][ T8790] loop3: p4 size 722688 extends beyond EOD, truncated [ 145.078986][ T8790] loop3: p5 start 262464109 is beyond EOD, truncated [ 145.096384][ T8790] loop3: p6 size 2304 extends beyond EOD, truncated [ 145.134267][ T2302] usb 1-1: USB disconnect, device number 10 [ 145.384586][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 145.399957][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 145.418136][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 145.566620][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1649'. [ 145.593268][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 145.792351][ T8863] program syz.4.1656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.870790][ T8868] netlink: 'syz.1.1661': attribute type 10 has an invalid length. [ 145.906871][ T8868] team0: Device hsr_slave_0 failed to register rx_handler [ 145.964380][ T8872] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1663'. [ 145.971957][ T6020] usb 1-1: Service connection timeout for: 256 [ 145.979793][ T6020] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 145.987892][ T8872] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1663'. [ 146.012009][ T6020] ath9k_htc: Failed to initialize the device [ 146.034972][ T2302] usb 1-1: ath9k_htc: USB layer deinitialized [ 146.087484][ T8883] netlink: 'syz.1.1679': attribute type 11 has an invalid length. [ 146.118804][ T8885] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 146.249705][ T8895] tmpfs: Bad value for 'mpol' [ 146.671619][ T6014] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 146.784024][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'. [ 146.804106][ T8949] netlink: 'syz.4.1697': attribute type 75 has an invalid length. [ 146.874718][ T8954] tmpfs: Bad value for 'mpol' [ 146.935930][ T6014] usb 4-1: Using ep0 maxpacket: 8 [ 147.003176][ T8964] loop1: detected capacity change from 0 to 128 [ 147.032798][ T8964] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.093452][ T6014] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 147.111557][ T6014] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.124009][ T8964] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.141530][ T6014] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.158898][ T8975] loop4: detected capacity change from 0 to 256 [ 147.172816][ T6014] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.221202][ T6014] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 147.254766][ T6014] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.273081][ T6014] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.282511][ T6014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.329066][ T8985] netlink: 'syz.2.1716': attribute type 13 has an invalid length. [ 147.348937][ T6014] usbtmc 4-1:16.0: bulk endpoints not found [ 147.570984][ T6020] usb 4-1: USB disconnect, device number 10 [ 147.682647][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 147.762847][ T9024] netlink: 'syz.4.1727': attribute type 3 has an invalid length. [ 147.929439][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1736'. [ 147.938790][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1736'. [ 147.994701][ T9044] loop1: detected capacity change from 0 to 1024 [ 148.371508][ T9063] netlink: 'syz.4.1749': attribute type 1 has an invalid length. [ 148.456503][ T9070] IPv6: sit1: Disabled Multicast RS [ 148.598872][ T9083] netlink: 'syz.1.1754': attribute type 2 has an invalid length. [ 148.712406][ T9091] netlink: 'syz.3.1757': attribute type 6 has an invalid length. [ 148.913093][ T9107] loop3: detected capacity change from 0 to 256 [ 149.006090][ T9115] loop4: detected capacity change from 0 to 8 [ 149.014465][ T9107] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 149.526992][ T9152] loop2: detected capacity change from 0 to 128 [ 149.650293][ T9152] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.661863][ T8698] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 149.706211][ T9152] ext4 filesystem being mounted at /394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.738328][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.819312][ T9152] EXT4-fs warning (device loop2): ext4_group_extend:1847: will only finish group (8193 blocks, 8129 new) [ 149.840176][ T9152] EXT4-fs warning (device loop2): ext4_group_extend:1852: can't read last block, resize aborted [ 149.901514][ T8698] usb 4-1: Using ep0 maxpacket: 32 [ 150.021508][ T8698] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 150.030484][ T8698] usb 4-1: config 0 has no interface number 0 [ 150.041829][ T5164] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.191582][ T8698] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 150.200899][ T8698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.209545][ T8698] usb 4-1: Product: syz [ 150.214080][ T8698] usb 4-1: Manufacturer: syz [ 150.218708][ T8698] usb 4-1: SerialNumber: syz [ 150.226555][ T8698] usb 4-1: config 0 descriptor?? [ 150.272470][ T8698] smsc95xx v2.0.0 [ 150.288962][ T5164] usb 5-1: Using ep0 maxpacket: 8 [ 150.452980][ T5164] usb 5-1: unable to get BOS descriptor or descriptor too short [ 150.491687][ T8698] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 150.502514][ T8698] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 150.519717][ T8698] usb 4-1: USB disconnect, device number 11 [ 150.541561][ T5164] usb 5-1: config 7 has an invalid interface number: 150 but max is 0 [ 150.549869][ T5164] usb 5-1: config 7 has no interface number 0 [ 150.556307][ T5164] usb 5-1: config 7 interface 150 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 150.566736][ T5164] usb 5-1: config 7 interface 150 has no altsetting 0 [ 150.731968][ T5164] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=2c.a5 [ 150.741189][ T5164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.750195][ T5164] usb 5-1: Product: syz [ 150.754881][ T5164] usb 5-1: Manufacturer: syz [ 150.759532][ T5164] usb 5-1: SerialNumber: syz [ 150.781896][ T9172] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 151.034737][ T9190] netlink: 'syz.1.1798': attribute type 6 has an invalid length. [ 151.060530][ T5164] usb 5-1: USB disconnect, device number 6 [ 151.437348][ T9229] loop3: detected capacity change from 0 to 4096 [ 151.521557][ T2302] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 151.881884][ T2302] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.928908][ T2302] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 151.955052][ T9232] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.969856][ T2302] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 152.003310][ T2302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.089316][ T2302] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 152.311377][ T6020] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.577290][ T9254] loop1: detected capacity change from 0 to 32768 [ 152.583923][ T6020] usb 5-1: Using ep0 maxpacket: 16 [ 152.708409][ T9254] XFS (loop1): Mounting V5 Filesystem [ 152.721551][ T6020] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 152.730084][ T6024] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 152.738154][ T6020] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.748571][ T6020] usb 5-1: config 0 has no interface number 0 [ 152.755026][ T6020] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 152.765264][ T6020] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 152.775985][ T6020] usb 5-1: config 0 interface 98 has no altsetting 0 [ 152.803436][ T9254] XFS (loop1): Ending clean mount [ 152.860892][ T4187] XFS (loop1): Unmounting Filesystem [ 152.965454][ T6020] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 152.974969][ T6020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.983128][ T6020] usb 5-1: Product: syz [ 152.987576][ T6020] usb 5-1: Manufacturer: syz [ 152.992534][ T6020] usb 5-1: SerialNumber: syz [ 153.000686][ T6020] usb 5-1: config 0 descriptor?? [ 153.031823][ T9234] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 153.044168][ T9234] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 153.121837][ T6024] usb 4-1: config 12 has an invalid interface number: 248 but max is 1 [ 153.130177][ T6024] usb 4-1: config 12 has an invalid interface number: 39 but max is 1 [ 153.148691][ T6024] usb 4-1: config 12 has no interface number 0 [ 153.155336][ T6024] usb 4-1: config 12 has no interface number 1 [ 153.162140][ T6024] usb 4-1: config 12 interface 248 has no altsetting 0 [ 153.169216][ T6024] usb 4-1: config 12 interface 39 has no altsetting 0 [ 153.275886][ T9234] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 153.290301][ T9234] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 153.353854][ T6014] usb 1-1: USB disconnect, device number 11 [ 153.362549][ T6024] usb 4-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=16.aa [ 153.372519][ T6014] idmouse 1-1:1.0: disconnected [ 153.380239][ T6024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.404094][ T6024] usb 4-1: Product: syz [ 153.408809][ T6024] usb 4-1: Manufacturer: syz [ 153.415319][ T6024] usb 4-1: SerialNumber: syz [ 153.515035][ T6020] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 153.527885][ T6020] asix: probe of 5-1:0.98 failed with error -71 [ 153.546820][ T6020] usb 5-1: USB disconnect, device number 7 [ 153.835057][ T6024] usb 4-1: USB disconnect, device number 12 [ 154.190966][ T9318] loop2: detected capacity change from 0 to 2048 [ 154.207459][ T9314] loop4: detected capacity change from 0 to 4096 [ 154.329573][ T9318] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 154.364142][ T9333] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.515037][ T9344] __nla_validate_parse: 1 callbacks suppressed [ 154.515053][ T9344] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1846'. [ 154.537875][ T9348] program syz.3.1842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.551710][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1846'. [ 154.566942][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1846'. [ 154.583181][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1846'. [ 154.713167][ T9360] libceph: resolve '0' (ret=-3): failed [ 154.724263][ T9361] tmpfs: Bad value for 'mpol' [ 154.744159][ T9363] SET target dimension over the limit! [ 154.771674][ T5164] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 155.031961][ T5164] usb 2-1: Using ep0 maxpacket: 32 [ 155.068330][ T9390] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.1863'. [ 155.151619][ T5164] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 155.172018][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 155.204528][ T5164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 155.250212][ T9404] loop2: detected capacity change from 0 to 512 [ 155.340547][ T9404] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 155.371888][ T5164] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 155.394775][ T5164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.405837][ T5164] usb 2-1: Product: syz [ 155.410410][ T5164] usb 2-1: Manufacturer: syz [ 155.416118][ T5164] usb 2-1: SerialNumber: syz [ 155.436502][ T5164] usb 2-1: config 0 descriptor?? [ 155.505081][ T9424] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1879'. [ 155.626988][ T9468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1882'. [ 155.681493][ T9468] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1882'. [ 155.739191][ T9475] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1886'. [ 155.855059][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1889'. [ 156.013763][ T9498] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 156.171026][ T9512] loop4: detected capacity change from 0 to 256 [ 156.624042][ T9545] netlink: 'syz.2.1914': attribute type 1 has an invalid length. [ 156.635388][ T9545] netlink: 'syz.2.1914': attribute type 2 has an invalid length. [ 156.646070][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.665431][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.701886][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.723996][ T9550] netlink: 'syz.0.1930': attribute type 1 has an invalid length. [ 156.774800][ T9550] netlink: 'syz.0.1930': attribute type 2 has an invalid length. [ 156.825775][ T9557] loop2: detected capacity change from 0 to 512 [ 156.890019][ T9557] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.956943][ T9557] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1919: invalid indirect mapped block 256 (level 2) [ 157.003117][ T9557] EXT4-fs (loop2): 2 truncates cleaned up [ 157.008967][ T9557] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 157.076516][ T9557] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1919: bg 0: block 5: invalid block bitmap [ 157.516615][ T6014] usb 2-1: USB disconnect, device number 11 [ 157.568278][ T9583] MTD: Couldn't look up './bus': -15 [ 157.714517][ T9599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.754906][ T9599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 157.776399][ T9599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 157.793498][ T9599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.808394][ T9599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.825274][ T9605] loop0: detected capacity change from 0 to 512 [ 157.883563][ T9605] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.914407][ T9609] openvswitch: netlink: Missing valid actions attribute. [ 157.961875][ T9609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.995475][ T9605] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1940: invalid indirect mapped block 256 (level 2) [ 158.013448][ T9605] EXT4-fs (loop0): 2 truncates cleaned up [ 158.020266][ T9605] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 158.052164][ T9618] MTD: Couldn't look up './bus': -15 [ 158.070693][ T9605] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1940: bg 0: block 5: invalid block bitmap [ 158.382101][ T9646] openvswitch: netlink: Missing valid actions attribute. [ 158.389390][ T9646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.563669][ T9659] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.593943][ T9659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 158.621813][ T9659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 158.635709][ T9659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.647944][ T9659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.677122][ T9666] loop0: detected capacity change from 0 to 64 [ 158.752882][ T26] audit: type=1800 audit(1792071468.242:5): pid=9666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1978" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 158.956693][ T9687] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.972572][ T9687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 158.989761][ T9687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.004129][ T9687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.059876][ T9697] openvswitch: netlink: Missing valid actions attribute. [ 159.071006][ T9697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.170639][ T9703] loop2: detected capacity change from 0 to 256 [ 159.239348][ T9709] Cannot find del_set index 4 as target [ 159.322883][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.335703][ T9703] FAT-fs (loop2): Directory bread(block 64) failed [ 159.359227][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.371435][ T9703] FAT-fs (loop2): Directory bread(block 65) failed [ 159.378102][ T9703] FAT-fs (loop2): Directory bread(block 66) failed [ 159.394971][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.404277][ T9703] FAT-fs (loop2): Directory bread(block 67) failed [ 159.423481][ T9703] FAT-fs (loop2): Directory bread(block 68) failed [ 159.430082][ T9703] FAT-fs (loop2): Directory bread(block 69) failed [ 159.452457][ T9703] FAT-fs (loop2): Directory bread(block 70) failed [ 159.459257][ T9703] FAT-fs (loop2): Directory bread(block 71) failed [ 159.481588][ T9703] FAT-fs (loop2): Directory bread(block 72) failed [ 159.488459][ T9703] FAT-fs (loop2): Directory bread(block 73) failed [ 159.618599][ T9719] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 159.709755][ T9730] __nla_validate_parse: 381 callbacks suppressed [ 159.709780][ T9730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1995'. [ 159.897041][ T9746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2004'. [ 159.928652][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2003'. [ 159.938814][ T9746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2004'. [ 159.964298][ T9746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2004'. [ 159.973630][ T9749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2003'. [ 159.995011][ T9746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2004'. [ 160.004672][ T9749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2003'. [ 160.032158][ T9746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2004'. [ 160.058434][ T9746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2004'. [ 160.092928][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.114565][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.140858][ T9746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.153017][ T9761] netlink: 'syz.3.2008': attribute type 3 has an invalid length. [ 160.169049][ T9756] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 160.398621][ T9771] loop0: detected capacity change from 0 to 64 [ 160.717309][ T9802] loop4: detected capacity change from 0 to 2048 [ 160.832225][ T9802] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 160.891578][ T9802] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 160.911199][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.935013][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 160.952223][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.978647][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.041842][ T6014] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 161.103748][ T9828] netlink: 'syz.4.2030': attribute type 3 has an invalid length. [ 161.139566][ T9831] loop3: detected capacity change from 0 to 64 [ 161.255094][ T9834] loop1: detected capacity change from 0 to 512 [ 161.292959][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.304247][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.313924][ T9837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.351727][ T9834] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 161.396920][ T9834] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 161.431611][ T9834] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.503383][ T9834] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.2036: Allocating blocks 41-42 which overlap fs metadata [ 161.559712][ T9834] Quota error (device loop1): write_blk: dquota write failed [ 161.582886][ T9834] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 161.625111][ T6014] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 161.634895][ T9834] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.2036: Allocating blocks 41-42 which overlap fs metadata [ 161.642661][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.657320][ T6014] usb 1-1: Product: syz [ 161.671459][ T9834] Quota error (device loop1): write_blk: dquota write failed [ 161.679024][ T6014] usb 1-1: Manufacturer: syz [ 161.683768][ T6014] usb 1-1: SerialNumber: syz [ 161.689249][ T9834] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 161.717880][ T9834] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.2036: Failed to acquire dquot type 1 [ 161.730658][ T9834] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 161.749224][ T9834] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.2036: corrupted inode contents [ 161.761811][ T9834] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #12: comm syz.1.2036: mark_inode_dirty error [ 161.809719][ T9834] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.2036: corrupted inode contents [ 161.850212][ T9834] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.2036: mark_inode_dirty error [ 161.876285][ T9866] loop3: detected capacity change from 0 to 2048 [ 161.890502][ T9834] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.2036: corrupted inode contents [ 161.911755][ T9834] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 161.920968][ T9834] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.2036: corrupted inode contents [ 161.934363][ T9834] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.2036: mark_inode_dirty error [ 161.952346][ T9834] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 161.975481][ T9834] EXT4-fs (loop1): 1 truncate cleaned up [ 161.987847][ T9834] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noblock_validity,mblk_io_submit,noinit_itable,noinit_itable,grpjquota=,jqfmt=vfsv1,max_dir_size_kb=0x0000000000000006,barrier=0x00000000000007ff2,errors=continue. Quota mode: writeback. [ 162.018635][ T9866] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 162.040891][ T9866] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 162.266227][ T9882] loop1: detected capacity change from 0 to 64 [ 162.367049][ T9888] loop3: detected capacity change from 0 to 512 [ 162.445978][ T9888] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 162.467515][ T9888] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 162.477757][ T6020] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 162.482206][ T9888] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.499572][ T9896] netlink: 'syz.1.2050': attribute type 3 has an invalid length. [ 162.563892][ T9888] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.2063: Allocating blocks 41-42 which overlap fs metadata [ 162.587032][ T9888] Quota error (device loop3): write_blk: dquota write failed [ 162.597527][ T9888] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 162.612870][ T9888] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.2063: Allocating blocks 41-42 which overlap fs metadata [ 162.629527][ T9888] Quota error (device loop3): write_blk: dquota write failed [ 162.639302][ T9888] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 162.650863][ T9888] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.2063: Failed to acquire dquot type 1 [ 162.663883][ T9888] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 162.689820][ T9888] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.2063: corrupted inode contents [ 162.702673][ T9888] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #12: comm syz.3.2063: mark_inode_dirty error [ 162.719880][ T9888] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.2063: corrupted inode contents [ 162.739126][ T9888] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.2063: mark_inode_dirty error [ 162.761807][ T9901] netlink: 'syz.2.2067': attribute type 3 has an invalid length. [ 162.770377][ T9888] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.2063: corrupted inode contents [ 162.805457][ T9888] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 162.871882][ T9888] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.2063: corrupted inode contents [ 162.891922][ T9905] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 162.903011][ T9888] EXT4-fs error (device loop3): ext4_truncate:4286: inode #12: comm syz.3.2063: mark_inode_dirty error [ 162.920128][ T9905] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.2056: corrupted inode contents [ 162.932453][ T8698] usb 1-1: USB disconnect, device number 12 [ 162.951935][ T9905] EXT4-fs error (device loop4): ext4_dirty_inode:6087: inode #11: comm syz.4.2056: mark_inode_dirty error [ 162.973142][ T9888] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 162.976021][ T9905] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2056: invalid indirect mapped block 1 (level 1) [ 162.998684][ T9888] EXT4-fs (loop3): 1 truncate cleaned up [ 163.018094][ T9888] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,noblock_validity,mblk_io_submit,noinit_itable,noinit_itable,grpjquota=,jqfmt=vfsv1,max_dir_size_kb=0x0000000000000006,barrier=0x00000000000007ff2,errors=continue. Quota mode: writeback. [ 163.051918][ T9905] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.2056: corrupted inode contents [ 163.070632][ T9905] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 163.091105][ T9905] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.2056: corrupted inode contents [ 163.105445][ T9905] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.2056: mark_inode_dirty error [ 163.118870][ T9905] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 163.128863][ T9905] EXT4-fs (loop4): 1 truncate cleaned up [ 163.137813][ T9905] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.168636][ T9905] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.2056: path /449/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 163.564008][ T6020] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 163.573108][ T6020] ath9k_htc: Failed to initialize the device [ 163.581683][ T8698] usb 1-1: ath9k_htc: USB layer deinitialized [ 163.617487][ T9946] set_capacity_and_notify: 1 callbacks suppressed [ 163.617505][ T9946] loop4: detected capacity change from 0 to 256 [ 163.643568][ T9951] loop3: detected capacity change from 0 to 512 [ 163.688972][ T9951] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 163.751731][ T9951] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.2072: corrupted inode contents [ 163.770968][ T9972] loop0: detected capacity change from 0 to 512 [ 163.790209][ T9951] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #11: comm syz.3.2072: mark_inode_dirty error [ 163.803860][ T9972] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 163.833964][ T9972] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 163.852195][ T2302] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 163.861485][ T9972] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.902794][ T9951] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2072: invalid indirect mapped block 1 (level 1) [ 163.909399][ T9972] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.2075: Allocating blocks 41-42 which overlap fs metadata [ 163.927504][ T9951] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.2072: corrupted inode contents [ 163.949527][ T9951] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 163.978084][ T9951] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.2072: corrupted inode contents [ 163.978198][ T9972] Quota error (device loop0): write_blk: dquota write failed [ 163.999710][ T9972] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 164.005710][ T9951] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.2072: mark_inode_dirty error [ 164.021894][ T9972] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 164.034511][ T9972] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.2075: Failed to acquire dquot type 1 [ 164.045231][ T9951] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 164.048783][ T9972] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 164.080039][ T9951] EXT4-fs (loop3): 1 truncate cleaned up [ 164.082105][ T9972] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.2075: corrupted inode contents [ 164.086407][ T9951] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.118824][ T9972] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #12: comm syz.0.2075: mark_inode_dirty error [ 164.131861][ T9972] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.2075: corrupted inode contents [ 164.146332][ T9972] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.2075: mark_inode_dirty error [ 164.159404][ T9951] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.2072: path /401/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 164.181682][ T9972] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.2075: corrupted inode contents [ 164.194450][ T9972] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 164.212754][ T9972] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.2075: corrupted inode contents [ 164.225327][ T9972] EXT4-fs error (device loop0): ext4_truncate:4286: inode #12: comm syz.0.2075: mark_inode_dirty error [ 164.237535][ T9972] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 164.253867][ T9972] EXT4-fs (loop0): 1 truncate cleaned up [ 164.266357][ T9972] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noblock_validity,mblk_io_submit,noinit_itable,noinit_itable,grpjquota=,jqfmt=vfsv1,max_dir_size_kb=0x0000000000000006,barrier=0x00000000000007ff2,errors=continue. Quota mode: writeback. [ 164.401738][ T2302] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.410967][ T2302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.425273][ T2302] usb 3-1: Product: syz [ 164.429597][ T2302] usb 3-1: Manufacturer: syz [ 164.434701][ T2302] usb 3-1: SerialNumber: syz [ 164.703868][T10007] 9p: Unknown access argument [ 164.737977][T10012] loop0: detected capacity change from 0 to 256 [ 165.051697][ T2302] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 165.464896][ T6014] usb 3-1: USB disconnect, device number 7 [ 166.024000][T10023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.032881][T10024] 9p: Unknown access argument [ 166.080892][T10027] loop2: detected capacity change from 0 to 512 [ 166.120109][T10027] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 166.121941][ T2302] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 166.142041][ T2302] ath9k_htc: Failed to initialize the device [ 166.148516][ T6014] usb 3-1: ath9k_htc: USB layer deinitialized [ 166.170234][T10027] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.2089: corrupted inode contents [ 166.191929][T10027] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #11: comm syz.2.2089: mark_inode_dirty error [ 166.204973][T10027] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2089: invalid indirect mapped block 1 (level 1) [ 166.269149][T10027] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.2089: corrupted inode contents [ 166.281953][T10027] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 166.290940][T10027] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.2089: corrupted inode contents [ 166.304119][T10027] EXT4-fs error (device loop2): ext4_truncate:4286: inode #11: comm syz.2.2089: mark_inode_dirty error [ 166.318331][T10027] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 166.328401][T10027] EXT4-fs (loop2): 1 truncate cleaned up [ 166.348830][T10027] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.419320][T10027] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.2089: path /456/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 166.604986][T10064] loop1: detected capacity change from 0 to 2048 [ 166.677099][T10069] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.751748][T10074] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.879354][T10079] loop0: detected capacity change from 0 to 2048 [ 166.945074][T10084] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.999385][T10087] loop3: detected capacity change from 0 to 64 [ 167.142193][T10099] SET target dimension over the limit! [ 167.148968][T10100] loop4: detected capacity change from 0 to 512 [ 167.252418][T10100] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 167.305063][T10100] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.2119: corrupted inode contents [ 167.318161][T10100] EXT4-fs error (device loop4): ext4_dirty_inode:6087: inode #11: comm syz.4.2119: mark_inode_dirty error [ 167.348821][T10100] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2119: invalid indirect mapped block 1 (level 1) [ 167.364211][T10113] SET target dimension over the limit! [ 167.448933][T10100] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.2119: corrupted inode contents [ 167.472338][T10100] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 167.491865][T10100] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.2119: corrupted inode contents [ 167.504607][T10100] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.2119: mark_inode_dirty error [ 167.518842][T10100] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 167.528955][T10100] EXT4-fs (loop4): 1 truncate cleaned up [ 167.535099][T10100] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.559467][T10100] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.2119: path /463/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 167.633081][ T264] block nbd1: Attempted send on invalid socket [ 167.641117][ T264] blk_update_request: I/O error, dev nbd1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.643573][T10129] VFS: unable to read V7 FS superblock on device nbd1. [ 167.649869][T10129] VFS: could not find a valid V7 on nbd1. [ 167.802377][T10141] loop1: detected capacity change from 0 to 64 [ 168.403498][ T150] block nbd2: Attempted send on invalid socket [ 168.409979][ T150] blk_update_request: I/O error, dev nbd2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.426436][T10184] VFS: unable to read V7 FS superblock on device nbd2. [ 168.453726][T10184] VFS: could not find a valid V7 on nbd2. [ 168.625652][T10202] netlink: 'syz.1.2153': attribute type 1 has an invalid length. [ 168.636660][T10202] netlink: 'syz.1.2153': attribute type 3 has an invalid length. [ 168.673141][T10202] __nla_validate_parse: 227 callbacks suppressed [ 168.673160][T10202] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2153'. [ 168.760915][T10202] NCSI netlink: No device for ifindex 2986344450 [ 168.820178][T10213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2156'. [ 168.833787][T10213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2156'. [ 168.953389][T10233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'. [ 168.999807][T10233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2171'. [ 169.248313][T10256] netlink: 'syz.4.2170': attribute type 1 has an invalid length. [ 169.281417][T10256] netlink: 'syz.4.2170': attribute type 3 has an invalid length. [ 169.289201][T10256] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2170'. [ 169.321609][T10256] NCSI netlink: No device for ifindex 2986344450 [ 169.533797][T10288] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 169.580311][T10292] netlink: 'syz.0.2181': attribute type 5 has an invalid length. [ 169.855454][T10316] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 170.049598][T10321] netlink: 'syz.1.2198': attribute type 5 has an invalid length. [ 170.786009][T10402] set_capacity_and_notify: 4 callbacks suppressed [ 170.786027][T10402] loop3: detected capacity change from 0 to 4096 [ 170.828418][T10402] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 170.868791][T10402] NILFS (loop3): mounting unchecked fs [ 170.913144][ T4179] udevd[4179]: incorrect nilfs2 checksum on /dev/loop3 [ 170.950700][T10402] NILFS (loop3): recovery cancelled because norecovery option was specified for a read/write mount [ 171.510232][T10467] xt_TPROXY: Can be used only with -p tcp or -p udp [ 171.590133][T10465] loop0: detected capacity change from 0 to 4096 [ 171.669131][T10465] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 171.704736][T10465] NILFS (loop0): mounting unchecked fs [ 171.779168][T10465] NILFS (loop0): recovery cancelled because norecovery option was specified for a read/write mount [ 171.790765][ T4179] udevd[4179]: incorrect nilfs2 checksum on /dev/loop0 [ 172.223223][T10523] loop2: detected capacity change from 0 to 128 [ 172.320073][T10523] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 172.352940][T10523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.714247][T10565] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2313'. [ 172.803581][T10571] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 172.821428][T10571] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 172.859646][T10580] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 172.870080][T10580] netlink: 'syz.3.2308': attribute type 2 has an invalid length. [ 173.017710][T10591] loop2: detected capacity change from 0 to 2048 [ 173.098629][T10596] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.141450][T10602] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2317'. [ 173.323545][T10614] netlink: 'syz.2.2324': attribute type 1 has an invalid length. [ 173.341517][T10614] netlink: 'syz.2.2324': attribute type 2 has an invalid length. [ 173.526890][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2329'. [ 173.661177][T10639] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2331'. [ 173.664302][T10635] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 173.690061][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2342'. [ 173.703656][T10636] loop3: detected capacity change from 0 to 2048 [ 173.722081][T10635] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 173.782326][T10643] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.845832][T10646] loop1: detected capacity change from 0 to 1764 [ 174.234041][T10674] delete_channel: no stack [ 174.279954][T10678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2348'. [ 174.299464][T10678] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2348'. [ 174.436213][T10690] loop0: detected capacity change from 0 to 1764 [ 174.630012][T10707] delete_channel: no stack [ 174.763774][T10719] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2363'. [ 174.775031][T10717] netlink: 'syz.2.2364': attribute type 32 has an invalid length. [ 174.802802][T10719] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2363'. [ 175.084912][T10749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2376'. [ 175.105015][T10749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2376'. [ 175.120849][T10749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2376'. [ 175.164073][T10751] loop0: detected capacity change from 0 to 256 [ 175.219803][T10751] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 175.255019][ T26] audit: type=1800 audit(1792071484.752:6): pid=10751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2378" name="file1" dev="loop0" ino=1048656 res=0 errno=0 [ 175.281467][ T6014] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 175.399902][T10763] netlink: 'syz.0.2380': attribute type 32 has an invalid length. [ 175.411538][ T21] Bluetooth: hci0: command 0x0c20 tx timeout [ 175.571414][ T6014] usb 5-1: Using ep0 maxpacket: 32 [ 175.639980][T10780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2392'. [ 175.682315][T10780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2392'. [ 175.701604][ T6014] usb 5-1: config 87 has an invalid interface number: 229 but max is 1 [ 175.712658][ T6014] usb 5-1: config 87 has no interface number 1 [ 175.718907][ T6014] usb 5-1: config 87 interface 229 has no altsetting 0 [ 175.921641][ T6014] usb 5-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=1a.7c [ 175.939165][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.939435][T10774] loop1: detected capacity change from 0 to 32768 [ 175.956922][ T6014] usb 5-1: Product: syz [ 175.961781][ T6014] usb 5-1: Manufacturer: syz [ 175.966427][ T6014] usb 5-1: SerialNumber: syz [ 176.339423][ T6014] rndis_wlan: probe of 5-1:87.229 failed with error -22 [ 176.351934][ T6014] rndis_host: probe of 5-1:87.229 failed with error -22 [ 176.371841][ T6014] cdc_acm: probe of 5-1:87.229 failed with error -22 [ 176.445144][ T6014] usb 5-1: USB disconnect, device number 8 [ 177.077067][T10832] loop3: detected capacity change from 0 to 32768 [ 177.161602][ T6024] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 177.451555][ T6024] usb 1-1: Using ep0 maxpacket: 32 [ 177.481712][ T21] Bluetooth: hci0: command 0x0c20 tx timeout [ 177.591578][ T6024] usb 1-1: config 87 has an invalid interface number: 229 but max is 1 [ 177.600125][ T6024] usb 1-1: config 87 has no interface number 1 [ 177.638630][ T6024] usb 1-1: config 87 interface 229 has no altsetting 0 [ 177.821619][ T6024] usb 1-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=1a.7c [ 177.839428][ T6024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.855518][ T6024] usb 1-1: Product: syz [ 177.859750][ T6024] usb 1-1: Manufacturer: syz [ 177.876804][ T6024] usb 1-1: SerialNumber: syz [ 177.931893][ T6014] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 178.265679][ T6024] rndis_wlan: probe of 1-1:87.229 failed with error -22 [ 178.273636][ T6024] rndis_host: probe of 1-1:87.229 failed with error -22 [ 178.280968][ T6024] cdc_acm: probe of 1-1:87.229 failed with error -22 [ 178.299963][ T6024] usb 1-1: USB disconnect, device number 13 [ 178.321748][ T6014] usb 5-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 178.511760][ T6014] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 178.520951][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.529094][ T6014] usb 5-1: Product: syz [ 178.534001][ T6014] usb 5-1: Manufacturer: syz [ 178.538648][ T6014] usb 5-1: SerialNumber: syz [ 178.594118][ T6014] bfusb: probe of 5-1:252.0 failed with error -5 [ 178.722057][T10951] __nla_validate_parse: 2 callbacks suppressed [ 178.722076][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2459'. [ 178.823483][ T21] usb 5-1: USB disconnect, device number 9 [ 179.632221][T11033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2511'. [ 179.651368][T11033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2511'. [ 179.741465][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.916386][T11010] loop0: detected capacity change from 0 to 32768 [ 180.051382][ T8698] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 180.101749][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.121373][ T21] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 180.135558][ T6024] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 180.141593][ T21] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 180.161367][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.441661][ T21] usb 3-1: NFC: Can't submit reader poweron cmd response -90 [ 180.449943][ T21] pn533_usb 3-1:1.0: NFC: Couldn't poweron the reader (error -90) [ 180.465402][ T21] pn533_usb: probe of 3-1:1.0 failed with error -90 [ 180.531508][ T6024] usb 2-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 180.581643][ T8698] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 180.590918][ T8698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.607807][ T8698] usb 5-1: Product: syz [ 180.613747][ T8698] usb 5-1: Manufacturer: syz [ 180.618403][ T8698] usb 5-1: SerialNumber: syz [ 180.650916][ T6014] usb 3-1: USB disconnect, device number 8 [ 180.721950][ T6024] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 180.731702][ T6024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.739853][ T6024] usb 2-1: Product: syz [ 180.745121][ T6024] usb 2-1: Manufacturer: syz [ 180.750067][ T6024] usb 2-1: SerialNumber: syz [ 180.804775][ T6024] bfusb: probe of 2-1:252.0 failed with error -5 [ 181.009903][ T21] usb 2-1: USB disconnect, device number 12 [ 181.251646][ T8698] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 181.343942][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2514'. [ 181.359581][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2514'. [ 181.418142][T11093] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 181.481659][ T5164] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 181.559748][T11099] loop1: detected capacity change from 0 to 64 [ 181.576169][T11099] MINIX-fs: mounting file system with errors, running fsck is recommended [ 181.672153][ T6014] usb 5-1: USB disconnect, device number 10 [ 181.802354][T11109] device ip6gretap1 entered promiscuous mode [ 181.843724][ T5164] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.861321][ T5164] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 181.891419][ T5164] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 181.910935][ T5164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.933025][T11115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2527'. [ 181.945345][T11097] loop2: detected capacity change from 0 to 32768 [ 182.201574][ T5164] usb 1-1: NFC: Can't submit reader poweron cmd response -90 [ 182.223793][ T5164] pn533_usb 1-1:1.0: NFC: Couldn't poweron the reader (error -90) [ 182.254225][ T5164] pn533_usb: probe of 1-1:1.0 failed with error -90 [ 182.269757][T11134] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 182.400395][T11143] loop4: detected capacity change from 0 to 64 [ 182.426746][T11143] MINIX-fs: mounting file system with errors, running fsck is recommended [ 182.441021][ T6024] usb 1-1: USB disconnect, device number 14 [ 182.515019][T11155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2538'. [ 182.521821][ T8698] usb 5-1: Service connection timeout for: 256 [ 182.530501][ T8698] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 182.558052][ T8698] ath9k_htc: Failed to initialize the device [ 182.577225][ T6014] usb 5-1: ath9k_htc: USB layer deinitialized [ 182.594538][T11160] netlink: 'syz.1.2539': attribute type 21 has an invalid length. [ 182.628353][T11160] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2539'. [ 182.649549][T11160] netlink: 'syz.1.2539': attribute type 4 has an invalid length. [ 182.658057][T11160] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2539'. [ 182.672385][T11165] device ip6gretap1 entered promiscuous mode [ 182.723181][T11169] netlink: 'syz.2.2554': attribute type 21 has an invalid length. [ 182.736999][T11169] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2554'. [ 182.747043][T11169] netlink: 'syz.2.2554': attribute type 4 has an invalid length. [ 182.858020][T11178] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 183.041357][ T6024] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 183.193201][T11174] loop1: detected capacity change from 0 to 32768 [ 183.277904][T11198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 183.298166][T11198] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 183.394942][T11205] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 183.591591][ T6024] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 183.600694][ T6024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.627139][ T6024] usb 4-1: Product: syz [ 183.641006][ T6024] usb 4-1: Manufacturer: syz [ 183.661616][ T6024] usb 4-1: SerialNumber: syz [ 183.712620][T11221] loop2: detected capacity change from 0 to 2048 [ 183.764130][T11226] netlink: 'syz.0.2568': attribute type 7 has an invalid length. [ 183.776806][ T4179] loop2: p1 < > p3 p4 [ 183.776806][ T4179] p4: [ 183.822857][ T4179] loop2: p3 start 458752 is beyond EOD, truncated [ 183.829341][ T4179] loop2: p4 size 722688 extends beyond EOD, truncated [ 183.844074][ T4179] loop2: p5 start 262464109 is beyond EOD, truncated [ 183.850823][ T4179] loop2: p6 size 2304 extends beyond EOD, truncated [ 183.874106][T11221] loop2: p1 < > p3 p4 [ 183.874106][T11221] p4: [ 183.911895][T11221] loop2: p3 start 458752 is beyond EOD, truncated [ 183.921806][T11221] loop2: p4 size 722688 extends beyond EOD, truncated [ 183.936423][T11221] loop2: p5 start 262464109 is beyond EOD, truncated [ 183.945311][T11221] loop2: p6 size 2304 extends beyond EOD, truncated [ 184.217764][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 184.234719][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 184.248251][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 184.294944][T11236] loop0: detected capacity change from 0 to 32768 [ 184.401612][ T6024] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 184.462646][T11262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 184.493240][T11260] loop4: detected capacity change from 0 to 2048 [ 184.500075][T11262] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 184.564846][ T4180] loop4: p1 < > p3 p4 [ 184.564846][ T4180] p4: [ 184.579989][ T4180] loop4: p3 start 458752 is beyond EOD, truncated [ 184.590822][ T4180] loop4: p4 size 722688 extends beyond EOD, truncated [ 184.615683][ T4180] loop4: p5 start 262464109 is beyond EOD, truncated [ 184.631711][ T4180] loop4: p6 size 2304 extends beyond EOD, truncated [ 184.655183][T11260] loop4: p1 < > p3 p4 [ 184.655183][T11260] p4: [ 184.675969][T11260] loop4: p3 start 458752 is beyond EOD, truncated [ 184.684977][T11260] loop4: p4 size 722688 extends beyond EOD, truncated [ 184.697178][T11260] loop4: p5 start 262464109 is beyond EOD, truncated [ 184.705399][T11260] loop4: p6 size 2304 extends beyond EOD, truncated [ 184.818728][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 184.832316][ T8698] usb 4-1: USB disconnect, device number 13 [ 184.844979][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 184.859293][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 184.889167][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 184.903031][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 184.916912][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 185.443695][T11290] loop0: detected capacity change from 0 to 2048 [ 185.455061][T11296] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 185.526695][T11305] netlink: 'syz.4.2583': attribute type 7 has an invalid length. [ 185.536886][ T4179] loop0: p1 < > p3 p4 [ 185.536886][ T4179] p4: [ 185.585929][ T4179] loop0: p3 start 458752 is beyond EOD, truncated [ 185.602247][ T4179] loop0: p4 size 722688 extends beyond EOD, truncated [ 185.622935][ T4179] loop0: p5 start 262464109 is beyond EOD, truncated [ 185.641430][ T6024] usb 4-1: Service connection timeout for: 256 [ 185.647783][ T6024] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 185.659715][ T4179] loop0: p6 size 2304 extends beyond EOD, truncated [ 185.671721][ T6024] ath9k_htc: Failed to initialize the device [ 185.685638][ T8698] usb 4-1: ath9k_htc: USB layer deinitialized [ 185.700283][T11290] loop0: p1 < > p3 p4 [ 185.700283][T11290] p4: [ 185.741008][T11316] loop2: detected capacity change from 0 to 2048 [ 185.756839][T11290] loop0: p3 start 458752 is beyond EOD, truncated [ 185.769758][T11290] loop0: p4 size 722688 extends beyond EOD, truncated [ 185.792363][T11290] loop0: p5 start 262464109 is beyond EOD, truncated [ 185.799127][T11290] loop0: p6 size 2304 extends beyond EOD, truncated [ 185.984067][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 186.161660][ T5124] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 186.359305][T11312] loop4: detected capacity change from 0 to 32768 [ 186.532109][T11381] __nla_validate_parse: 3 callbacks suppressed [ 186.532127][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2611'. [ 186.621160][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2613'. [ 186.690384][ T5124] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 186.711464][ T5124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.719733][ T5124] usb 2-1: Product: syz [ 186.724707][ T5124] usb 2-1: Manufacturer: syz [ 186.729620][ T5124] usb 2-1: SerialNumber: syz [ 186.874215][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2628'. [ 186.977471][T11408] program syz.2.2623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.361653][ T8698] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 187.780593][ T6024] usb 2-1: USB disconnect, device number 13 [ 188.325868][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 188.338157][T11427] program syz.3.2639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.433676][T11431] set_capacity_and_notify: 1 callbacks suppressed [ 188.433693][T11431] loop1: detected capacity change from 0 to 2048 [ 188.457385][T11437] netlink: 'syz.4.2634': attribute type 10 has an invalid length. [ 188.486382][T11437] team0: Device hsr_slave_0 failed to register rx_handler [ 188.601558][ T8698] usb 2-1: Service connection timeout for: 256 [ 188.610440][ T8698] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 188.631766][ T8698] ath9k_htc: Failed to initialize the device [ 188.640540][ T6024] usb 2-1: ath9k_htc: USB layer deinitialized [ 188.677479][T11442] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2637'. [ 188.677510][T11442] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2637'. [ 188.844482][T11459] netlink: 'syz.0.2652': attribute type 10 has an invalid length. [ 188.948712][T11459] team0: Device hsr_slave_0 failed to register rx_handler [ 188.984222][T11469] netlink: 'syz.2.2646': attribute type 75 has an invalid length. [ 189.166127][T11477] loop2: detected capacity change from 0 to 2048 [ 189.174458][T11481] tmpfs: Bad value for 'mpol' [ 189.199296][T11485] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2651'. [ 189.258503][T11485] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2651'. [ 189.380505][T11498] tmpfs: Bad value for 'mpol' [ 189.561040][T11510] netlink: 'syz.3.2663': attribute type 75 has an invalid length. [ 189.682847][T11525] netlink: 'syz.4.2671': attribute type 11 has an invalid length. [ 189.804356][ T5124] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 190.061530][ T5124] usb 1-1: Using ep0 maxpacket: 8 [ 190.181557][ T5124] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 190.200387][ T5124] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.210661][T11567] netlink: 'syz.2.2688': attribute type 11 has an invalid length. [ 190.229959][ T5124] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.255557][ T5124] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.277414][ T5124] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 190.299235][ T5124] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.347255][ T5124] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.371421][ T5124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.442703][ T5124] usbtmc 1-1:16.0: bulk endpoints not found [ 190.594424][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'. [ 190.682016][ T6018] usb 1-1: USB disconnect, device number 15 [ 190.738172][T11605] loop2: detected capacity change from 0 to 256 [ 190.904007][T11619] loop1: detected capacity change from 0 to 256 [ 191.074688][T11636] tmpfs: Bad value for 'mpol' [ 191.133903][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2720'. [ 191.186203][T11646] loop4: detected capacity change from 0 to 128 [ 191.302016][T11646] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.330369][T11646] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.482032][T11665] tmpfs: Bad value for 'mpol' [ 191.632535][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2737'. [ 191.819007][T11700] loop0: detected capacity change from 0 to 128 [ 191.853232][T11700] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.918601][T11700] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.934640][T11708] netlink: 'syz.1.2748': attribute type 13 has an invalid length. [ 191.941954][ T6014] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 192.022997][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2754'. [ 192.201559][ T6014] usb 5-1: Using ep0 maxpacket: 8 [ 192.331568][ T6014] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 192.340230][ T6014] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.350467][ T6014] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.360515][ T6014] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.371776][ T6014] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 192.381945][ T6014] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.396461][ T6014] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 192.406020][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.462814][ T6014] usbtmc 5-1:16.0: bulk endpoints not found [ 192.673721][ T6014] usb 5-1: USB disconnect, device number 11 [ 193.238875][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'. [ 193.449315][T11754] loop3: detected capacity change from 0 to 128 [ 193.461908][T11756] netlink: 'syz.0.2767': attribute type 13 has an invalid length. [ 193.523196][T11760] netlink: 'syz.1.2772': attribute type 3 has an invalid length. [ 193.571885][T11754] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.597019][T11754] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.669024][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'. [ 193.695526][T11772] netlink: 'syz.2.2786': attribute type 3 has an invalid length. [ 194.000990][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2790'. [ 194.025434][T11800] loop3: detected capacity change from 0 to 1024 [ 194.032121][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2790'. [ 194.221613][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.227946][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.493159][T11824] netlink: 'syz.2.2799': attribute type 2 has an invalid length. [ 194.612714][T11829] loop2: detected capacity change from 0 to 1024 [ 194.893598][T11853] IPv6: sit1: Disabled Multicast RS [ 194.910514][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2806'. [ 194.925685][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2806'. [ 195.115354][T11874] netlink: 'syz.3.2814': attribute type 2 has an invalid length. [ 195.197797][T11884] netlink: 'syz.1.2819': attribute type 1 has an invalid length. [ 195.342005][T11892] IPv6: sit1: Disabled Multicast RS [ 195.348644][T11894] netlink: 'syz.0.2829': attribute type 6 has an invalid length. [ 195.420775][T11903] netlink: 'syz.2.2844': attribute type 6 has an invalid length. [ 195.651467][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2845'. [ 195.662739][T11922] netlink: 'syz.0.2842': attribute type 1 has an invalid length. [ 195.703452][T11927] loop2: detected capacity change from 0 to 256 [ 195.784913][T11927] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 195.924163][T11945] loop1: detected capacity change from 0 to 256 [ 196.021879][T11945] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 196.128746][T11960] loop2: detected capacity change from 0 to 8 [ 196.168442][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2859'. [ 196.291970][ T6020] Bluetooth: hci1: command 0x0406 tx timeout [ 196.298114][ T6020] Bluetooth: hci2: command 0x0406 tx timeout [ 196.306123][ T6020] Bluetooth: hci4: command 0x0406 tx timeout [ 196.313836][ T6020] Bluetooth: hci3: command 0x0406 tx timeout [ 196.320078][ T6020] Bluetooth: hci0: command 0x0406 tx timeout [ 196.383841][T11977] loop1: detected capacity change from 0 to 8 [ 196.763734][ T6020] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 197.075000][ T6020] usb 3-1: Using ep0 maxpacket: 32 [ 197.201578][ T6020] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 197.232405][ T6020] usb 3-1: config 0 has no interface number 0 [ 197.411975][ T6020] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 197.433972][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.463670][ T6020] usb 3-1: Product: syz [ 197.467987][ T6020] usb 3-1: Manufacturer: syz [ 197.482023][ T6020] usb 3-1: SerialNumber: syz [ 197.499531][ T6020] usb 3-1: config 0 descriptor?? [ 197.562736][ T6020] smsc95xx v2.0.0 [ 197.791424][ T6020] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 197.816559][ T6020] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 197.849609][ T6020] usb 3-1: USB disconnect, device number 9 [ 198.303811][T12155] loop1: detected capacity change from 0 to 2048 [ 198.350392][T12155] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 198.455004][ T6020] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 198.548259][T12141] loop3: detected capacity change from 0 to 32768 [ 198.678150][T12141] XFS (loop3): Mounting V5 Filesystem [ 198.746332][T12141] XFS (loop3): Ending clean mount [ 198.791178][ T4194] XFS (loop3): Unmounting Filesystem [ 198.891799][ T6020] usb 5-1: config 12 has an invalid interface number: 248 but max is 1 [ 198.900180][ T6020] usb 5-1: config 12 has an invalid interface number: 39 but max is 1 [ 198.908821][ T6020] usb 5-1: config 12 has no interface number 0 [ 198.916108][ T6020] usb 5-1: config 12 has no interface number 1 [ 198.922758][ T6020] usb 5-1: config 12 interface 248 has no altsetting 0 [ 198.938854][ T6020] usb 5-1: config 12 interface 39 has no altsetting 0 [ 199.131516][ T6020] usb 5-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=16.aa [ 199.140663][ T6020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.149177][ T6020] usb 5-1: Product: syz [ 199.153691][ T6020] usb 5-1: Manufacturer: syz [ 199.158313][ T6020] usb 5-1: SerialNumber: syz [ 199.552096][ T6020] usb 5-1: USB disconnect, device number 12 [ 200.139665][T12215] loop4: detected capacity change from 0 to 2048 [ 200.221686][T12215] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 200.251487][ T6020] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 200.321804][ T6014] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 200.382634][T12207] loop0: detected capacity change from 0 to 32768 [ 200.402765][T12207] XFS (loop0): Mounting V5 Filesystem [ 200.481420][T12207] XFS (loop0): Ending clean mount [ 200.552767][T12241] loop3: detected capacity change from 0 to 2048 [ 200.559890][ T4196] XFS (loop0): Unmounting Filesystem [ 200.601486][ T6014] usb 2-1: Using ep0 maxpacket: 32 [ 200.680057][ T6020] usb 3-1: config 12 has an invalid interface number: 248 but max is 1 [ 200.691329][ T6020] usb 3-1: config 12 has an invalid interface number: 39 but max is 1 [ 200.701782][T12241] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 200.710263][ T6020] usb 3-1: config 12 has no interface number 0 [ 200.721559][ T6014] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 200.729687][ T6014] usb 2-1: config 0 has no interface number 0 [ 200.736578][ T6020] usb 3-1: config 12 has no interface number 1 [ 200.750810][ T6020] usb 3-1: config 12 interface 248 has no altsetting 0 [ 200.787231][ T6020] usb 3-1: config 12 interface 39 has no altsetting 0 [ 200.931733][ T6014] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 200.941016][ T6014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.969791][ T6014] usb 2-1: Product: syz [ 200.974861][T12261] SET target dimension over the limit! [ 200.980530][ T6014] usb 2-1: Manufacturer: syz [ 200.985996][ T6020] usb 3-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=16.aa [ 200.995546][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.005560][ T6014] usb 2-1: SerialNumber: syz [ 201.023525][ T6014] usb 2-1: config 0 descriptor?? [ 201.028791][ T6020] usb 3-1: Product: syz [ 201.037754][ T6020] usb 3-1: Manufacturer: syz [ 201.048070][ T6020] usb 3-1: SerialNumber: syz [ 201.060696][T12259] loop4: detected capacity change from 0 to 2048 [ 201.068600][ T6014] smsc95xx v2.0.0 [ 201.112768][T12269] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2967'. [ 201.122318][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2967'. [ 201.133116][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 201.142434][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 201.155132][T12259] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 201.301906][ T6014] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 201.318080][ T6014] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 201.330078][ T6014] usb 2-1: USB disconnect, device number 14 [ 201.436494][ T6020] usb 3-1: USB disconnect, device number 10 [ 201.824868][T12292] libceph: resolve '0' (ret=-3): failed [ 201.841019][T12291] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2984'. [ 201.856368][T12290] SET target dimension over the limit! [ 201.871335][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2984'. [ 201.893805][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2984'. [ 201.913778][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2984'. [ 201.949429][T12298] tmpfs: Bad value for 'mpol' [ 202.273501][T12326] libceph: resolve '0' (ret=-3): failed [ 202.383485][T12337] tmpfs: Bad value for 'mpol' [ 202.531447][ T5124] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 202.686319][T12392] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3007'. [ 202.891641][ T5124] usb 1-1: config 12 has an invalid interface number: 248 but max is 1 [ 202.900280][ T5124] usb 1-1: config 12 has an invalid interface number: 39 but max is 1 [ 202.961452][T12447] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3012'. [ 202.985989][T12449] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 202.999142][ T5124] usb 1-1: config 12 has no interface number 0 [ 203.017425][ T5124] usb 1-1: config 12 has no interface number 1 [ 203.031984][ T5124] usb 1-1: config 12 interface 248 has no altsetting 0 [ 203.048964][ T5124] usb 1-1: config 12 interface 39 has no altsetting 0 [ 203.221570][ T5124] usb 1-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=16.aa [ 203.230908][ T5124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.239557][ T5124] usb 1-1: Product: syz [ 203.244242][ T5124] usb 1-1: Manufacturer: syz [ 203.248872][ T5124] usb 1-1: SerialNumber: syz [ 203.618145][ T5124] usb 1-1: USB disconnect, device number 16 [ 204.055360][T12471] loop1: detected capacity change from 0 to 256 [ 204.066996][T12470] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 204.233118][T12481] loop3: detected capacity change from 0 to 256 [ 204.665664][T12522] loop0: detected capacity change from 0 to 256 [ 204.771047][ T6020] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 204.814244][T12531] Cannot find del_set index 4 as target [ 204.900741][T12535] Cannot find del_set index 4 as target [ 204.920718][T12542] loop0: detected capacity change from 0 to 256 [ 205.122547][T12555] loop4: detected capacity change from 0 to 64 [ 205.139024][T12559] loop0: detected capacity change from 0 to 256 [ 205.211925][ T6020] usb 4-1: config 12 has an invalid interface number: 248 but max is 1 [ 205.223042][ T6020] usb 4-1: config 12 has an invalid interface number: 39 but max is 1 [ 205.242870][ T26] audit: type=1800 audit(1792071514.742:7): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3058" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 205.262306][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.278088][T12559] FAT-fs (loop0): Directory bread(block 64) failed [ 205.291379][ T6020] usb 4-1: config 12 has no interface number 0 [ 205.297798][T12559] FAT-fs (loop0): Directory bread(block 65) failed [ 205.307901][ T6020] usb 4-1: config 12 has no interface number 1 [ 205.317167][T12559] FAT-fs (loop0): Directory bread(block 66) failed [ 205.324460][ T6020] usb 4-1: config 12 interface 248 has no altsetting 0 [ 205.337996][T12559] FAT-fs (loop0): Directory bread(block 67) failed [ 205.345035][ T6020] usb 4-1: config 12 interface 39 has no altsetting 0 [ 205.361452][T12559] FAT-fs (loop0): Directory bread(block 68) failed [ 205.387489][T12559] FAT-fs (loop0): Directory bread(block 69) failed [ 205.411887][T12559] FAT-fs (loop0): Directory bread(block 70) failed [ 205.418746][T12569] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.436527][T12559] FAT-fs (loop0): Directory bread(block 71) failed [ 205.453864][T12559] FAT-fs (loop0): Directory bread(block 72) failed [ 205.460462][T12559] FAT-fs (loop0): Directory bread(block 73) failed [ 205.531936][ T6020] usb 4-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=16.aa [ 205.562196][ T6020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.570478][ T6020] usb 4-1: Product: syz [ 205.591387][ T6020] usb 4-1: Manufacturer: syz [ 205.596422][ T6020] usb 4-1: SerialNumber: syz [ 205.654861][T12584] loop1: detected capacity change from 0 to 256 [ 205.715585][T12584] FAT-fs (loop1): Directory bread(block 64) failed [ 205.745172][T12584] FAT-fs (loop1): Directory bread(block 65) failed [ 205.753012][T12584] FAT-fs (loop1): Directory bread(block 66) failed [ 205.759688][T12584] FAT-fs (loop1): Directory bread(block 67) failed [ 205.777184][T12584] FAT-fs (loop1): Directory bread(block 68) failed [ 205.799346][T12584] FAT-fs (loop1): Directory bread(block 69) failed [ 205.818647][T12591] Cannot find del_set index 4 as target [ 205.830078][T12584] FAT-fs (loop1): Directory bread(block 70) failed [ 205.846281][T12584] FAT-fs (loop1): Directory bread(block 71) failed [ 205.857786][T12584] FAT-fs (loop1): Directory bread(block 72) failed [ 205.871212][T12584] FAT-fs (loop1): Directory bread(block 73) failed [ 206.018740][ T6020] usb 4-1: USB disconnect, device number 14 [ 206.143491][T12622] loop1: detected capacity change from 0 to 64 [ 206.210048][ T26] audit: type=1800 audit(1792071515.702:8): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3074" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 206.229547][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.379713][T12633] xt_TPROXY: Can be used only with -p tcp or -p udp [ 206.464694][T12644] netlink: 'syz.4.3101': attribute type 10 has an invalid length. [ 206.488449][T12645] loop1: detected capacity change from 0 to 128 [ 206.505478][T12647] __nla_validate_parse: 4 callbacks suppressed [ 206.505498][T12647] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3100'. [ 206.526382][T12644] team0: Device ipvlan1 failed to register rx_handler [ 206.560588][T12645] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 206.620278][T12645] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.894313][T12676] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3104'. [ 206.990720][T12690] loop3: detected capacity change from 0 to 128 [ 207.101940][T12700] netlink: 'syz.2.3112': attribute type 10 has an invalid length. [ 207.122040][T12690] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 207.148864][T12700] team0: Device ipvlan1 failed to register rx_handler [ 207.163112][T12690] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.203701][T12707] netlink: 192444 bytes leftover after parsing attributes in process `syz.4.3116'. [ 207.251200][T12707] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 207.440750][T12721] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3121'. [ 207.618104][T12739] netlink: 192444 bytes leftover after parsing attributes in process `syz.3.3132'. [ 207.656555][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3133'. [ 207.660819][T12739] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 207.676363][T12743] netlink: 'syz.0.3134': attribute type 10 has an invalid length. [ 207.689109][T12743] team0: Device ipvlan1 failed to register rx_handler [ 207.782930][T12748] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3139'. [ 207.970815][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'. [ 208.084187][T12777] netlink: 192444 bytes leftover after parsing attributes in process `syz.1.3150'. [ 208.105368][T12781] netlink: 'syz.3.3151': attribute type 10 has an invalid length. [ 208.127952][T12781] team0: Device ipvlan1 failed to register rx_handler [ 208.129092][T12777] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 208.199478][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3163'. [ 208.516856][T12820] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 208.950192][T12862] process 'syz.2.3189' launched '/dev/fd/3' with NULL argv: empty string added [ 209.551515][T12911] netlink: 'syz.3.3210': attribute type 4 has an invalid length. [ 209.658292][T12911] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 210.272201][T12955] netlink: 'syz.2.3231': attribute type 4 has an invalid length. [ 210.324865][T12955] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 210.394881][ T6020] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 210.671473][ T6020] usb 4-1: Using ep0 maxpacket: 16 [ 210.805050][ T6020] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 211.031697][ T6020] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 211.061489][ T6020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.069627][ T6020] usb 4-1: Product: syz [ 211.114918][T12983] netlink: 'syz.4.3245': attribute type 4 has an invalid length. [ 211.135100][ T6020] usb 4-1: Manufacturer: syz [ 211.139843][ T6020] usb 4-1: SerialNumber: syz [ 211.183794][ T6020] r8152-cfgselector 4-1: config 0 descriptor?? [ 211.410896][T12983] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 211.482436][T12998] device veth1_to_team entered promiscuous mode [ 211.489421][T12997] device veth1_to_team left promiscuous mode [ 211.661685][ T6020] r8152-cfgselector 4-1: Unknown version 0x0000 [ 211.680198][ T6020] r8152-cfgselector 4-1: USB disconnect, device number 15 [ 211.893955][T13024] netlink: 'syz.0.3260': attribute type 1 has an invalid length. [ 212.038879][T13032] netlink: 'syz.0.3265': attribute type 3 has an invalid length. [ 212.091821][T13032] __nla_validate_parse: 5 callbacks suppressed [ 212.091840][T13032] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3265'. [ 212.455705][T13052] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3275'. [ 212.510757][T13054] loop3: detected capacity change from 0 to 1024 [ 212.512402][T13052] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3275'. [ 212.587279][T13057] loop0: detected capacity change from 0 to 1024 [ 212.739947][T13057] EXT4-fs (loop0): Ignoring removed nobh option [ 212.763238][T13057] EXT4-fs (loop0): Ignoring removed bh option [ 212.907697][T13057] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802c018, mo2=0002] [ 212.927187][T13057] System zones: 0-1, 3-12 [ 213.002689][T13057] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,inode_readahead_blks=0x0000000000002000,discard,bh,debug,,errors=continue. Quota mode: none. [ 213.322840][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3295'. [ 213.471449][T13109] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3294'. [ 213.733677][T13116] loop2: detected capacity change from 0 to 4096 [ 213.812381][T13116] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 213.856609][T13116] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 213.971530][T13116] ntfs: volume version 3.1. [ 214.006728][T13116] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 214.091346][T13116] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 214.111266][T13116] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 214.440076][T13154] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3322'. [ 214.972113][T13136] loop4: detected capacity change from 0 to 32768 [ 215.032119][T13187] netlink: 'syz.2.3335': attribute type 1 has an invalid length. [ 215.129027][ T6020] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 215.175987][T13136] XFS (loop4): Mounting V5 Filesystem [ 215.401481][ T6020] usb 2-1: Using ep0 maxpacket: 32 [ 215.497005][T13136] XFS (loop4): Ending clean mount [ 215.506972][T13209] Cannot find del_set index 4 as target [ 215.545026][T13136] XFS (loop4): Quotacheck needed: Please wait. [ 215.589775][ T6020] usb 2-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 215.704837][T13136] XFS (loop4): Quotacheck: Done. [ 215.874147][ T4201] XFS (loop4): Unmounting Filesystem [ 215.884792][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 215.927387][ T6020] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 215.931489][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 215.951263][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.971311][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 215.989871][ T6020] usb 2-1: Product: syz [ 215.994413][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.000109][ T6020] usb 2-1: Manufacturer: syz [ 216.006709][ T6020] usb 2-1: SerialNumber: syz [ 216.021293][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.048994][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.072133][ T6020] usb 2-1: config 0 descriptor?? [ 216.078116][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.103876][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.131375][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.152199][T13236] loop3: detected capacity change from 0 to 256 [ 216.160415][ T6020] usb 2-1: bad CDC descriptors [ 216.167111][ T6020] usb 2-1: unsupported MDLM descriptors [ 216.171443][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.191299][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.199212][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.229191][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.249327][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.271384][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.296308][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.319725][T13236] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 216.341295][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.348781][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.371316][ T6020] usb 2-1: USB disconnect, device number 15 [ 216.403543][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.411180][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.464770][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.491287][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.498789][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.547028][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.581296][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.588808][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.601299][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.631297][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.638770][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.671395][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.700941][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.721312][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.741283][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.749045][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.781291][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.788800][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811308][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811341][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811367][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811393][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811418][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811474][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811500][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811525][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811550][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811575][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811600][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811624][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811650][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811674][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811707][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811732][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811758][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811783][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811808][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811832][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811857][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811882][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811907][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811932][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811957][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.811982][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812007][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812032][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812057][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812082][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812107][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812132][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812157][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812182][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812206][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812230][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812255][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812280][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812303][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812327][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812351][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812377][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812402][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812428][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812454][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812480][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.812505][ T5124] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.847603][ T5124] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 217.191958][T13261] fido_id[13261]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.541522][ T6020] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 217.795683][T13300] loop3: detected capacity change from 0 to 512 [ 217.834658][ T6020] usb 3-1: Using ep0 maxpacket: 32 [ 217.912641][T13300] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 217.912754][T13300] ext4 filesystem being mounted at /673/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.001885][ T6020] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 218.001918][ T6020] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.001941][ T6020] usb 3-1: config 0 has no interface number 0 [ 218.001971][ T6020] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.130552][T13300] EXT4-fs error (device loop3): ext4_add_entry:2488: inode #12: comm syz.3.3372: Directory hole found for htree leaf block 0 [ 218.211475][ T6020] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 218.211512][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.211544][ T6020] usb 3-1: Product: syz [ 218.211560][ T6020] usb 3-1: Manufacturer: syz [ 218.211577][ T6020] usb 3-1: SerialNumber: syz [ 218.214067][ T6020] usb 3-1: config 0 descriptor?? [ 218.281890][T13317] netlink: 'syz.4.3378': attribute type 18 has an invalid length. [ 218.298750][ T6020] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 218.375419][ T6024] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 218.457070][T13324] netlink: 'syz.4.3379': attribute type 1 has an invalid length. [ 218.457133][T13324] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.3379'. [ 218.457167][T13324] netlink: 'syz.4.3379': attribute type 1 has an invalid length. [ 218.501670][ T6020] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 218.686488][T13326] loop3: detected capacity change from 0 to 512 [ 218.853574][T13331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3382'. [ 218.881579][T13331] openvswitch: netlink: Missing key (keys=40, expected=100) [ 218.916406][T13326] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.981833][ T6024] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.994741][T13326] EXT4-fs (loop3): 1 truncate cleaned up [ 219.006333][ T6024] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.025958][T13326] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 219.135055][ T6020] quatech2: probe of 3-1:0.51 failed with error -8 [ 219.169593][ T6020] usb 3-1: USB disconnect, device number 11 [ 219.198603][T13326] Invalid option length (771) for dns_resolver key [ 219.231592][ T6024] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 219.250969][ T6024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.281360][ T6024] usb 2-1: Product: syz [ 219.285670][ T6024] usb 2-1: Manufacturer: syz [ 219.290328][ T6024] usb 2-1: SerialNumber: syz [ 219.626675][ T6024] usb 2-1: unit 4 not found! [ 219.632737][ T6014] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 219.801331][ T6024] usb 2-1: USB disconnect, device number 16 [ 219.897441][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.915322][T13377] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222022 combination not found [ 219.939392][T13392] loop3: detected capacity change from 0 to 256 [ 220.049452][T13395] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 220.071583][ T6014] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 220.079943][ T6014] usb 5-1: config 8 has no interface number 0 [ 220.126521][ T6014] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 220.171412][ T6014] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 220.214366][ T6014] usb 5-1: config 8 interface 177 has no altsetting 0 [ 220.262119][ T6014] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 220.310366][T13404] netlink: 'syz.2.3406': attribute type 1 has an invalid length. [ 220.321286][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.359880][T13404] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3406'. [ 220.375814][T13347] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 220.393334][T13347] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 220.424150][T13404] netlink: 'syz.2.3406': attribute type 1 has an invalid length. [ 220.451360][ C0] ir_toy 5-1:8.177: out urb status: -71 [ 220.463579][T13412] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 220.547703][T13412] overlayfs: missing 'lowerdir' [ 220.742644][T13425] loop1: detected capacity change from 0 to 24 [ 220.791830][T13425] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 220.856791][T13433] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3416'. [ 220.871669][T13425] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 220.908450][T13425] romfs: read error for inode 0x70040 [ 220.976547][ T6014] ir_toy 5-1:8.177: could not write reset command: -110 [ 221.005413][ C0] ir_toy 5-1:8.177: failed to resubmit urb: -1 [ 221.013051][ T6014] ir_toy: probe of 5-1:8.177 failed with error -110 [ 221.054412][ T6014] usb 5-1: USB disconnect, device number 13 [ 221.423600][T13467] netlink: 'syz.4.3430': attribute type 1 has an invalid length. [ 221.468391][T13467] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3430'. [ 221.657166][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3437'. [ 221.718265][T13476] loop0: detected capacity change from 0 to 4096 [ 221.782234][T13483] ALSA: mixer_oss: invalid OSS volume ';ʸgԊ8\>Pxi9 h~' [ 221.851316][T13483] ALSA: mixer_oss: invalid OSS volume ' ȪUBFRнEV#d' [ 221.859744][T13483] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 221.888572][T13476] EXT4-fs (loop0): Test dummy encryption mode enabled [ 221.921287][T13476] EXT4-fs (loop0): inline encryption not supported [ 221.945610][T13483] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 221.955106][ T6014] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 221.989667][T13483] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 222.006249][T13476] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,test_dummy_encryption=v1,inlinecrypt,resgid=0x0000000000000000,noinit_itable,norecovery,nombcache,nodioread_nolock,errors=remount-ro,norecovery,usrquota,max_dir_size_kb=0x0000000000000000,. Quota mode: writeback. [ 222.028065][T13483] ALSA: mixer_oss: invalid OSS volume 'udFdsj@Jug0cd' [ 222.064785][T13483] ALSA: mixer_oss: invalid OSS volume 'NW֓YZS%fV' [ 222.091318][T13483] ALSA: mixer_oss: invalid OSS volume ''lȿDTBxN' [ 222.160421][T13483] ALSA: mixer_oss: invalid OSS volume 'y' [ 222.211067][T13483] ALSA: mixer_oss: invalid OSS volume '5y}9r~M+3' [ 222.241441][T13483] ALSA: mixer_oss: invalid OSS volume '϶*kC9d7띦2;"' [ 222.249258][T13483] ALSA: mixer_oss: invalid OSS volume '*ndV8mE5:4' [ 222.308575][T13483] ALSA: mixer_oss: invalid OSS volume 'PKڵ1} {N&Ia 8*ʇ' [ 222.359446][T13483] ALSA: mixer_oss: invalid OSS volume 'OC"['m/AO^G&-' [ 222.396094][T13483] ALSA: mixer_oss: invalid OSS volume '' [ 222.422895][T13483] ALSA: mixer_oss: invalid OSS volume '@HV-=f#o)U.N' [ 222.442867][T13456] loop3: detected capacity change from 0 to 32768 [ 222.501382][ T6014] usb 5-1: unable to get BOS descriptor or descriptor too short [ 222.592484][T13456] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 222.631628][T13456] BTRFS info (device loop3): using free space tree [ 222.640620][T13456] BTRFS info (device loop3): has skinny extents [ 222.644585][ T6014] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.683346][ T6014] usb 5-1: config 1 interface 0 has no altsetting 0 [ 222.961584][ T6014] usb 5-1: string descriptor 0 read error: -22 [ 222.971453][ T6014] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 222.990842][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.062816][T13456] BTRFS info (device loop3): enabling ssd optimizations [ 223.194702][T13550] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 223.503521][T13561] loop1: detected capacity change from 0 to 16 [ 223.532077][ T6014] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 223.549156][T13569] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 223.569798][T13561] erofs: (device loop1): mounted with root inode @ nid 36. [ 223.581486][T13573] ipt_REJECT: TCP_RESET invalid for non-tcp [ 223.595374][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.651405][T13569] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 223.729769][T13561] attempt to access beyond end of device [ 223.729769][T13561] loop1: rw=524288, want=32, limit=16 [ 223.793489][T13561] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 223.871602][ T26] audit: type=1800 audit(1792071533.372:9): pid=13561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3457" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 224.025818][ T6017] usb 5-1: USB disconnect, device number 14 [ 224.331994][T13606] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 224.353554][T13607] dlm: dev_write: no op 0 0 [ 224.596592][T13626] loop2: detected capacity change from 0 to 256 [ 224.604145][T13623] IPv6: sit2: Disabled Multicast RS [ 224.646305][T13626] exfat: Deprecated parameter 'namecase' [ 224.694238][T13626] exfat: Deprecated parameter 'namecase' [ 224.743508][T13626] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 224.832829][T13626] exFAT-fs (loop2): hint_cluster is invalid (4278190089) [ 224.895529][T13626] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880622da860 iblock : 8, err : -5) [ 224.931564][ T8698] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 224.946858][T13626] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 225.003958][T13626] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 225.144088][ T6007] attempt to access beyond end of device [ 225.144088][ T6007] loop2: rw=1, want=34225520826, limit=256 [ 225.201521][ T6007] Buffer I/O error on dev loop2, logical block 34225520825, lost async page write [ 225.251465][ T6007] attempt to access beyond end of device [ 225.251465][ T6007] loop2: rw=1, want=34225520827, limit=256 [ 225.288606][ T6007] Buffer I/O error on dev loop2, logical block 34225520826, lost async page write [ 225.329558][ T6007] attempt to access beyond end of device [ 225.329558][ T6007] loop2: rw=1, want=34225520828, limit=256 [ 225.381289][ T6007] Buffer I/O error on dev loop2, logical block 34225520827, lost async page write [ 225.420993][ T6007] attempt to access beyond end of device [ 225.420993][ T6007] loop2: rw=1, want=34225520829, limit=256 [ 225.461265][ T6007] Buffer I/O error on dev loop2, logical block 34225520828, lost async page write [ 225.501065][ T6007] attempt to access beyond end of device [ 225.501065][ T6007] loop2: rw=1, want=34225520830, limit=256 [ 225.550323][ T6007] Buffer I/O error on dev loop2, logical block 34225520829, lost async page write [ 225.560334][ T8698] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 225.579001][T13680] netlink: 'syz.3.3494': attribute type 2 has an invalid length. [ 225.587429][ T8698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.610134][ T6007] attempt to access beyond end of device [ 225.610134][ T6007] loop2: rw=1, want=34225520831, limit=256 [ 225.621682][ T8698] usb 5-1: Product: syz [ 225.621706][ T8698] usb 5-1: Manufacturer: syz [ 225.621723][ T8698] usb 5-1: SerialNumber: syz [ 225.670594][ T6007] Buffer I/O error on dev loop2, logical block 34225520830, lost async page write [ 225.704630][ T6007] attempt to access beyond end of device [ 225.704630][ T6007] loop2: rw=1, want=34225520832, limit=256 [ 225.761277][ T6007] Buffer I/O error on dev loop2, logical block 34225520831, lost async page write [ 225.808113][T13688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3499'. [ 225.839345][T13692] loop0: detected capacity change from 0 to 512 [ 225.931497][T13692] EXT4-fs (loop0): Ignoring removed oldalloc option [ 225.938343][T13695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3501'. [ 225.958468][ T8698] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 225.981307][T13692] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 226.033355][ T8698] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 226.055860][T13692] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 226.084026][T13692] EXT4-fs (loop0): orphan cleanup on readonly fs [ 226.091842][T13692] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.3500: bad orphan inode 267 [ 226.101853][ T8698] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 226.131434][ T8698] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 226.150963][T13701] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 226.160630][ T8698] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 226.205107][T13692] EXT4-fs (loop0): Remounting filesystem read-only [ 226.209525][ T8698] lan78xx: probe of 5-1:1.0 failed with error -71 [ 226.248866][ T8698] usb 5-1: USB disconnect, device number 15 [ 226.267750][T13692] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 226.375372][T13692] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.3500: dx entry: limit 0 != root limit 125 [ 226.427347][T13692] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3500: Corrupt directory, running e2fsck is recommended [ 226.481050][ T6017] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 226.509290][T13719] loop2: detected capacity change from 0 to 1024 [ 226.702033][T13719] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 226.774579][ T6017] usb 2-1: Using ep0 maxpacket: 32 [ 227.115119][ T6017] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 227.135476][ T6017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.173110][ T6017] usb 2-1: Product: syz [ 227.192866][ T6017] usb 2-1: Manufacturer: syz [ 227.215391][ T6017] usb 2-1: SerialNumber: syz [ 227.565412][T13750] netlink: 'syz.4.3517': attribute type 11 has an invalid length. [ 227.585830][T13750] netlink: 'syz.4.3517': attribute type 5 has an invalid length. [ 227.623960][T13752] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3518'. [ 227.685316][T13752] netlink: 'syz.3.3518': attribute type 1 has an invalid length. [ 227.712556][T13756] netlink: 'syz.2.3514': attribute type 1 has an invalid length. [ 227.734900][T13756] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3514'. [ 227.889744][ T6017] usb 2-1: USB disconnect, device number 17 [ 227.987128][T13785] loop2: detected capacity change from 0 to 256 [ 228.098313][T13785] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 228.550926][T13832] device bridge2 entered promiscuous mode [ 228.613543][T13840] netlink: 'syz.4.3539': attribute type 1 has an invalid length. [ 228.652038][T13840] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3539'. [ 228.681522][T13840] block nbd0: not configured, cannot reconfigure [ 229.001333][T13864] dlm: Unknown command passed to DLM device : 152 [ 229.001333][T13864] [ 229.123573][T13872] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3555'. [ 229.252579][T13876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3558'. [ 229.341342][T13876] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 229.502557][T13893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3566'. [ 229.526210][T13893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3566'. [ 229.603554][T13899] xt_hl: Unknown TTL match mode: 255 [ 229.689415][T13904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3572'. [ 229.718731][T13906] loop4: detected capacity change from 0 to 256 [ 230.003928][T13931] netlink: 'syz.3.3582': attribute type 11 has an invalid length. [ 230.041306][T13931] netlink: 'syz.3.3582': attribute type 5 has an invalid length. [ 230.211026][ T5164] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 230.246334][T13944] netlink: 'syz.0.3597': attribute type 11 has an invalid length. [ 230.271258][T13944] netlink: 'syz.0.3597': attribute type 5 has an invalid length. [ 230.471578][ T5164] usb 2-1: Using ep0 maxpacket: 16 [ 230.556665][T13953] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222022 combination not found [ 230.591637][ T5164] usb 2-1: config 0 has no interfaces? [ 230.636531][T13964] loop2: detected capacity change from 0 to 512 [ 230.766601][T13964] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.804873][ T5164] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 230.828489][ T5164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.849586][T13964] EXT4-fs (loop2): 1 truncate cleaned up [ 230.855811][T13976] dlm: Unknown command passed to DLM device : 152 [ 230.855811][T13976] [ 230.861382][ T5164] usb 2-1: Product: syz [ 230.874950][T13964] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 230.889680][ T5164] usb 2-1: Manufacturer: syz [ 230.926570][ T5164] usb 2-1: SerialNumber: syz [ 230.944794][ T5164] r8152-cfgselector 2-1: config 0 descriptor?? [ 231.103417][T13964] Invalid option length (771) for dns_resolver key [ 231.206674][ T5164] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 231.426519][ T5164] usb 2-1: USB disconnect, device number 18 [ 231.577814][T14000] __nla_validate_parse: 2 callbacks suppressed [ 231.577832][T14000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3610'. [ 231.640014][T14000] openvswitch: netlink: Missing key (keys=40, expected=100) [ 231.694374][T14009] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3613'. [ 231.731738][T14009] validate_nla: 3 callbacks suppressed [ 231.731757][T14009] netlink: 'syz.0.3613': attribute type 1 has an invalid length. [ 232.520512][T14043] device bridge3 entered promiscuous mode [ 232.690731][T14049] netlink: 'syz.2.3632': attribute type 1 has an invalid length. [ 232.731390][T14049] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3632'. [ 232.771783][T14049] block nbd0: not configured, cannot reconfigure [ 232.944035][T14055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3636'. [ 232.985533][T14055] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 233.187923][T14059] loop2: detected capacity change from 0 to 256 [ 233.495813][T14039] loop3: detected capacity change from 0 to 32768 [ 233.671418][T14039] XFS (loop3): Mounting V5 Filesystem [ 234.051865][T14039] XFS (loop3): Ending clean mount [ 234.096273][T14039] XFS (loop3): Quotacheck needed: Please wait. [ 234.231391][T14124] netlink: 'syz.1.3665': attribute type 1 has an invalid length. [ 234.281557][T14039] XFS (loop3): Quotacheck: Done. [ 234.470860][ T4194] XFS (loop3): Unmounting Filesystem [ 234.542808][T14137] loop0: detected capacity change from 0 to 256 [ 234.734783][T14137] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 236.237988][T14182] netlink: 'syz.3.3675': attribute type 1 has an invalid length. [ 236.276288][T14182] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3675'. [ 236.311542][T14182] block nbd0: not configured, cannot reconfigure [ 236.395472][T14184] loop0: detected capacity change from 0 to 4096 [ 236.434372][T14189] loop2: detected capacity change from 0 to 16 [ 236.490051][T14184] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 236.536166][T14184] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 236.565692][T14189] erofs: (device loop2): mounted with root inode @ nid 36. [ 236.615687][T14189] attempt to access beyond end of device [ 236.615687][T14189] loop2: rw=524288, want=32, limit=16 [ 236.668584][T14184] ntfs: volume version 3.1. [ 236.675590][T14189] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 236.738743][T14184] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 236.770065][ T26] audit: type=1800 audit(1792071546.262:10): pid=14189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3682" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 236.881310][T14184] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 236.931288][T14184] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 237.321433][T14211] netlink: 'syz.0.3686': attribute type 2 has an invalid length. [ 237.361719][T14211] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3686'. [ 237.376193][T14175] loop1: detected capacity change from 0 to 32768 [ 237.419835][T14215] loop3: detected capacity change from 0 to 1024 [ 237.503427][T14215] EXT4-fs (loop3): Ignoring removed nobh option [ 237.509967][T14215] EXT4-fs (loop3): Ignoring removed bh option [ 237.551775][T14187] loop4: detected capacity change from 0 to 32768 [ 237.601704][T14175] XFS (loop1): Mounting V5 Filesystem [ 237.661268][T14230] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 237.712782][T14215] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e802c018, mo2=0002] [ 237.721094][T14215] System zones: 0-1, 3-12 [ 237.799221][T14187] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3681 (14187) [ 237.842166][T14215] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,inode_readahead_blks=0x0000000000002000,discard,bh,debug,,errors=continue. Quota mode: none. [ 237.941362][T14187] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 237.950160][T14187] BTRFS info (device loop4): using free space tree [ 237.988445][T14175] XFS (loop1): Ending clean mount [ 238.033086][T14175] XFS (loop1): Quotacheck needed: Please wait. [ 238.039451][T14187] BTRFS info (device loop4): has skinny extents [ 238.209832][T14175] XFS (loop1): Quotacheck: Done. [ 238.484973][ T4187] XFS (loop1): Unmounting Filesystem [ 238.571340][T14187] BTRFS info (device loop4): enabling ssd optimizations [ 239.203837][T14309] netlink: 'syz.2.3717': attribute type 10 has an invalid length. [ 239.391179][T14313] loop0: detected capacity change from 0 to 256 [ 239.441618][T14309] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.449752][T14309] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.497241][T14309] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.505118][T14309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.515544][T14309] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.522736][T14309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.627194][T14309] team0: Port device bridge0 added [ 239.904303][T14340] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3736'. [ 239.954500][T14340] netlink: 'syz.2.3736': attribute type 3 has an invalid length. [ 240.134980][T14351] loop1: detected capacity change from 0 to 764 [ 240.513631][T14382] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 241.030743][T14406] loop1: detected capacity change from 0 to 1024 [ 241.102236][T14406] EXT4-fs (loop1): barriers disabled [ 241.132974][T14406] JBD2: no valid journal superblock found [ 241.163437][T14406] EXT4-fs (loop1): error loading journal [ 241.198556][ T26] audit: type=1800 audit(1792071550.692:11): pid=14397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.3753" name="/" dev="tmpfs" ino=139 res=0 errno=0 [ 241.522797][T14424] ALSA: mixer_oss: invalid OSS volume ';ʸgԊ8\>Pxi9 h~' [ 241.530750][T14424] ALSA: mixer_oss: invalid OSS volume ' ȪUBFRнEV#d' [ 241.575110][T14424] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 241.604602][T14424] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 241.650790][T14424] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 241.700103][T14424] ALSA: mixer_oss: invalid OSS volume 'udFdsj@Jug0cd' [ 241.740564][T14424] ALSA: mixer_oss: invalid OSS volume 'NW֓YZS%fV' [ 241.791036][T14424] ALSA: mixer_oss: invalid OSS volume ''lȿDTBxN' [ 241.811179][T14424] ALSA: mixer_oss: invalid OSS volume 'y' [ 241.845757][T14424] ALSA: mixer_oss: invalid OSS volume '5y}9r~M+3' [ 241.891323][T14424] ALSA: mixer_oss: invalid OSS volume '϶*kC9d7띦2;"' [ 241.906281][T14439] loop0: detected capacity change from 0 to 64 [ 241.920018][T14424] ALSA: mixer_oss: invalid OSS volume '*ndV8mE5:4' [ 241.961321][T14424] ALSA: mixer_oss: invalid OSS volume 'PKڵ1} {N&Ia 8*ʇ' [ 241.981343][T14424] ALSA: mixer_oss: invalid OSS volume 'OC"['m/AO^G&-' [ 241.989823][T14424] ALSA: mixer_oss: invalid OSS volume '' [ 242.040721][T14439] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 242.051554][T14424] ALSA: mixer_oss: invalid OSS volume '@HV-=f#o)U.N' [ 242.148802][T14411] loop2: detected capacity change from 0 to 32768 [ 242.218924][T14411] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3759 (14411) [ 242.302415][T14411] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 242.341316][T14411] BTRFS info (device loop2): metadata ratio 220 [ 242.386806][T14411] BTRFS info (device loop2): setting nodatasum [ 242.416917][T14460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.434307][T14411] BTRFS info (device loop2): metadata ratio 4 [ 242.440437][T14411] BTRFS info (device loop2): enabling ssd optimizations [ 242.518602][T14411] BTRFS info (device loop2): allowing degraded mounts [ 242.559086][T14411] BTRFS info (device loop2): using free space tree [ 242.591282][T14411] BTRFS info (device loop2): has skinny extents [ 242.611412][T14470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3784'. [ 242.670259][T14476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.678187][T14476] IPv6: NLM_F_CREATE should be set when creating new route [ 242.685590][T14476] IPv6: NLM_F_CREATE should be set when creating new route [ 244.063596][T14550] loop1: detected capacity change from 0 to 1024 [ 244.189757][T14561] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 244.395437][T14570] loop2: detected capacity change from 0 to 256 [ 244.510697][T14576] tmpfs: Bad value for 'mpol' [ 244.576587][T14580] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3819'. [ 244.626806][T14580] netlink: 126 bytes leftover after parsing attributes in process `syz.1.3819'. [ 244.767457][T14588] BUG: MAX_LOCK_DEPTH too low! [ 244.772284][T14588] turning off the locking correctness validator. [ 244.778658][T14588] depth: 48 max: 48! [ 244.782831][T14588] 48 locks held by syz.2.3826/14588: [ 244.788135][T14588] #0: ffff88807b3e8860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: ping_v6_sendmsg+0xb41/0xf50 [ 244.797930][T14588] #1: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 244.807412][T14588] #2: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.817338][T14588] #3: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.826702][T14588] #4: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.836069][T14588] #5: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.845431][T14588] #6: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.854879][T14588] #7: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.864339][T14588] #8: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.873703][T14588] #9: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.883237][T14588] #10: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.892768][T14588] #11: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.902230][T14588] #12: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.911778][T14588] #13: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.921641][T14588] #14: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.931273][T14588] #15: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.940716][T14588] #16: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.950168][T14588] #17: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.959614][T14588] #18: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.969073][T14588] #19: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.978907][T14588] #20: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.988532][T14588] #21: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 244.997990][T14588] #22: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.007538][T14588] #23: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.017094][T14588] #24: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.026685][T14588] #25: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.036136][T14588] #26: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.045635][T14588] #27: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.055221][T14588] #28: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.064696][T14588] #29: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.074317][T14588] #30: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.083767][T14588] #31: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.093219][T14588] #32: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.102668][T14588] #33: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.112124][T14588] #34: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.121559][T14588] #35: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.131007][T14588] #36: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.140473][T14588] #37: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.150008][T14588] #38: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.159467][T14588] #39: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.169021][T14588] #40: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.178480][T14588] #41: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.187932][T14588] #42: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.197379][T14588] #43: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.206832][T14588] #44: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.216280][T14588] #45: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.225988][T14588] #46: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 245.235626][T14588] #47: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 245.245261][T14588] INFO: lockdep is turned off. [ 245.250249][T14588] CPU: 1 PID: 14588 Comm: syz.2.3826 Not tainted syzkaller #0 [ 245.257730][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.267943][T14588] Call Trace: [ 245.271276][T14588] [ 245.274232][T14588] dump_stack_lvl+0x188/0x250 [ 245.278945][T14588] ? show_regs_print_info+0x20/0x20 [ 245.284245][T14588] ? load_image+0x410/0x410 [ 245.288873][T14588] __lock_acquire+0x170f/0x7d40 [ 245.293883][T14588] ? unwind_next_frame+0x11ec/0x1cf0 [ 245.299295][T14588] ? stack_trace_save+0xf0/0xf0 [ 245.304185][T14588] ? lwtunnel_output+0x27e/0x440 [ 245.309155][T14588] ? kfree+0xef/0x2a0 [ 245.313162][T14588] ? verify_lock_unused+0x140/0x140 [ 245.318393][T14588] ? stack_trace_save+0xa6/0xf0 [ 245.323409][T14588] ? stack_trace_snprint+0xe0/0xe0 [ 245.328729][T14588] ? mark_lock+0x94/0x320 [ 245.333095][T14588] ? __lock_acquire+0x12df/0x7d40 [ 245.338184][T14588] ? kasan_set_track+0x62/0x70 [ 245.342988][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.347886][T14588] lock_acquire+0x19f/0x400 [ 245.352541][T14588] ? rcu_lock_acquire+0x9/0x30 [ 245.357401][T14588] ? rpl_output+0x321/0x730 [ 245.361946][T14588] ? lwtunnel_output+0x27e/0x440 [ 245.366940][T14588] ? rpl_output+0x321/0x730 [ 245.371473][T14588] ? lwtunnel_output+0x27e/0x440 [ 245.376442][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.381850][T14588] ? verify_lock_unused+0x140/0x140 [ 245.387093][T14588] ? mark_lock+0x94/0x320 [ 245.391470][T14588] rcu_lock_acquire+0x2a/0x30 [ 245.396176][T14588] ? rcu_lock_acquire+0x9/0x30 [ 245.400968][T14588] ip6_dst_check+0xe2/0x7a0 [ 245.405599][T14588] ? skb_header_pointer+0x120/0x120 [ 245.410925][T14588] dst_cache_per_cpu_get+0x1a3/0x310 [ 245.416332][T14588] rpl_output+0x165/0x730 [ 245.420703][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.425237][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.430296][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.435712][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.440259][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.445243][T14588] lwtunnel_output+0x27e/0x440 [ 245.450044][T14588] rpl_output+0x321/0x730 [ 245.454413][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.458942][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.463907][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.469321][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.473951][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.478924][T14588] lwtunnel_output+0x27e/0x440 [ 245.483716][T14588] rpl_output+0x321/0x730 [ 245.488083][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.492614][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.497581][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.503005][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.507733][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.512790][T14588] lwtunnel_output+0x27e/0x440 [ 245.517759][T14588] rpl_output+0x321/0x730 [ 245.522206][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.526830][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.531809][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.537230][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.541877][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.546849][T14588] lwtunnel_output+0x27e/0x440 [ 245.551738][T14588] rpl_output+0x321/0x730 [ 245.556232][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.560767][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.565742][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.571254][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.575807][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.580918][T14588] lwtunnel_output+0x27e/0x440 [ 245.585923][T14588] rpl_output+0x321/0x730 [ 245.590324][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.594861][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.599837][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.605245][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.609778][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.614837][T14588] lwtunnel_output+0x27e/0x440 [ 245.619633][T14588] rpl_output+0x321/0x730 [ 245.624000][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.628544][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.633609][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.639125][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.643675][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.648757][T14588] lwtunnel_output+0x27e/0x440 [ 245.653634][T14588] rpl_output+0x321/0x730 [ 245.658006][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.662537][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.667503][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.672919][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.677551][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.682522][T14588] lwtunnel_output+0x27e/0x440 [ 245.687338][T14588] rpl_output+0x321/0x730 [ 245.691800][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.696331][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.701296][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.706789][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.711414][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.716379][T14588] lwtunnel_output+0x27e/0x440 [ 245.721174][T14588] rpl_output+0x321/0x730 [ 245.725547][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.730084][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.735139][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.740540][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.745083][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.750088][T14588] lwtunnel_output+0x27e/0x440 [ 245.754902][T14588] rpl_output+0x321/0x730 [ 245.759279][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.764328][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.769736][T14588] ? __local_bh_enable_ip+0x136/0x1c0 [ 245.775143][T14588] ? lockdep_hardirqs_on+0x94/0x140 [ 245.780390][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.785355][T14588] lwtunnel_output+0x27e/0x440 [ 245.790274][T14588] rpl_output+0x321/0x730 [ 245.794647][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.799636][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.804605][T14588] lwtunnel_output+0x27e/0x440 [ 245.809405][T14588] rpl_output+0x321/0x730 [ 245.813790][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.818429][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.823405][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.828841][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.833390][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.838463][T14588] lwtunnel_output+0x27e/0x440 [ 245.843267][T14588] rpl_output+0x321/0x730 [ 245.847638][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.852179][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.857164][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.862584][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.867135][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.872115][T14588] lwtunnel_output+0x27e/0x440 [ 245.876959][T14588] rpl_output+0x321/0x730 [ 245.881377][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.885941][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.890914][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.896342][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.901017][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.906003][T14588] lwtunnel_output+0x27e/0x440 [ 245.911009][T14588] rpl_output+0x321/0x730 [ 245.915384][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.920296][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.925355][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.930925][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.935496][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.940477][T14588] lwtunnel_output+0x27e/0x440 [ 245.945317][T14588] rpl_output+0x321/0x730 [ 245.949692][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.954229][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.959212][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.964632][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.969274][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.974280][T14588] lwtunnel_output+0x27e/0x440 [ 245.979090][T14588] rpl_output+0x321/0x730 [ 245.983459][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 245.988010][T14588] ? rpl_destroy_state+0x20/0x20 [ 245.993081][T14588] ? read_lock_is_recursive+0x10/0x10 [ 245.998506][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.003079][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.008103][T14588] lwtunnel_output+0x27e/0x440 [ 246.013011][T14588] rpl_output+0x321/0x730 [ 246.017384][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.021921][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.026993][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.032409][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.037132][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.042117][T14588] lwtunnel_output+0x27e/0x440 [ 246.047015][T14588] rpl_output+0x321/0x730 [ 246.051389][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.055940][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.061081][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.066612][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.071152][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.076138][T14588] lwtunnel_output+0x27e/0x440 [ 246.080960][T14588] rpl_output+0x321/0x730 [ 246.085329][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.089865][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.094836][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.100246][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.104793][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.109766][T14588] lwtunnel_output+0x27e/0x440 [ 246.114561][T14588] rpl_output+0x321/0x730 [ 246.118935][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.123473][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.128440][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.133860][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.138398][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.143492][T14588] lwtunnel_output+0x27e/0x440 [ 246.148291][T14588] rpl_output+0x321/0x730 [ 246.152657][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.157304][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.162400][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.167802][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.172337][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.177299][T14588] lwtunnel_output+0x27e/0x440 [ 246.182096][T14588] rpl_output+0x321/0x730 [ 246.186473][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.191014][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.196102][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.201599][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.206135][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.211112][T14588] lwtunnel_output+0x27e/0x440 [ 246.215908][T14588] rpl_output+0x321/0x730 [ 246.220379][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.224911][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.229957][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.235399][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.239938][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.244915][T14588] lwtunnel_output+0x27e/0x440 [ 246.249811][T14588] rpl_output+0x321/0x730 [ 246.254178][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.258859][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.263828][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.269269][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.273808][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.278877][T14588] lwtunnel_output+0x27e/0x440 [ 246.283677][T14588] rpl_output+0x321/0x730 [ 246.288133][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.292676][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.297650][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.303052][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.307592][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.312555][T14588] lwtunnel_output+0x27e/0x440 [ 246.317434][T14588] rpl_output+0x321/0x730 [ 246.321793][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.326334][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.331305][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.336745][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.341283][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.346251][T14588] lwtunnel_output+0x27e/0x440 [ 246.351064][T14588] rpl_output+0x321/0x730 [ 246.355424][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.360040][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.365008][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.370420][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.374963][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.380025][T14588] lwtunnel_output+0x27e/0x440 [ 246.384919][T14588] rpl_output+0x321/0x730 [ 246.389409][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.393941][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.399001][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.404409][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.408946][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.413920][T14588] lwtunnel_output+0x27e/0x440 [ 246.418877][T14588] rpl_output+0x321/0x730 [ 246.423248][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.427787][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.432755][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.438204][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.442742][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.447710][T14588] lwtunnel_output+0x27e/0x440 [ 246.452506][T14588] rpl_output+0x321/0x730 [ 246.456867][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.461430][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.466440][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.471846][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.476383][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.481465][T14588] lwtunnel_output+0x27e/0x440 [ 246.486436][T14588] rpl_output+0x321/0x730 [ 246.490797][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.495327][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.500293][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.505697][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.510329][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.515296][T14588] lwtunnel_output+0x27e/0x440 [ 246.520235][T14588] rpl_output+0x321/0x730 [ 246.524605][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.529141][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.534103][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.539511][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.544223][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.549248][T14588] lwtunnel_output+0x27e/0x440 [ 246.554055][T14588] rpl_output+0x321/0x730 [ 246.558434][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.563011][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.567995][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.573585][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.578125][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.583201][T14588] lwtunnel_output+0x27e/0x440 [ 246.587998][T14588] rpl_output+0x321/0x730 [ 246.592368][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.596915][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.601883][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.607306][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.611943][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.616998][T14588] lwtunnel_output+0x27e/0x440 [ 246.621792][T14588] rpl_output+0x321/0x730 [ 246.626161][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.630813][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.635780][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.641180][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.645716][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.650684][T14588] lwtunnel_output+0x27e/0x440 [ 246.655650][T14588] rpl_output+0x321/0x730 [ 246.660021][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.664559][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.669527][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.674948][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.679485][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.684475][T14588] lwtunnel_output+0x27e/0x440 [ 246.689267][T14588] rpl_output+0x321/0x730 [ 246.693629][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.698158][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.703140][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.708636][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.713284][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.718266][T14588] lwtunnel_output+0x27e/0x440 [ 246.723058][T14588] rpl_output+0x321/0x730 [ 246.727420][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.732044][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.737184][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.742593][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.747229][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.752231][T14588] lwtunnel_output+0x27e/0x440 [ 246.757024][T14588] rpl_output+0x321/0x730 [ 246.761383][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.766036][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.771169][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.776572][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.781198][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.786209][T14588] lwtunnel_output+0x27e/0x440 [ 246.791008][T14588] rpl_output+0x321/0x730 [ 246.795379][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.800068][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.805030][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.810458][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.814997][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.819960][T14588] lwtunnel_output+0x27e/0x440 [ 246.824843][T14588] rpl_output+0x321/0x730 [ 246.829204][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.833733][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.838784][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.844255][T14588] ? rpl_do_srh+0x9c1/0xe50 [ 246.848787][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.853757][T14588] lwtunnel_output+0x27e/0x440 [ 246.858550][T14588] rpl_output+0x321/0x730 [ 246.862915][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.867877][T14588] ? pskb_expand_head+0x363/0x1100 [ 246.873017][T14588] ? read_lock_is_recursive+0x10/0x10 [ 246.878537][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.883592][T14588] lwtunnel_output+0x27e/0x440 [ 246.888491][T14588] rpl_output+0x321/0x730 [ 246.892854][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.897833][T14588] ? rpl_destroy_state+0x20/0x20 [ 246.902882][T14588] lwtunnel_output+0x27e/0x440 [ 246.907675][T14588] ip6_send_skb+0x1af/0x350 [ 246.912203][T14588] ping_v6_sendmsg+0xc6f/0xf50 [ 246.916995][T14588] ? tcpv6_net_exit_batch+0x20/0x20 [ 246.922222][T14588] ? lock_chain_count+0x20/0x20 [ 246.927198][T14588] ? __local_bh_enable_ip+0x136/0x1c0 [ 246.932641][T14588] ? lockdep_hardirqs_on+0x94/0x140 [ 246.937895][T14588] ? __local_bh_enable_ip+0x136/0x1c0 [ 246.943292][T14588] ? _local_bh_enable+0xa0/0xa0 [ 246.948174][T14588] ? inet_sendmsg+0x109/0x2a0 [ 246.952885][T14588] ? inet_sendmsg+0x109/0x2a0 [ 246.957598][T14588] ? inet_send_prepare+0x250/0x250 [ 246.962733][T14588] ____sys_sendmsg+0x5be/0x8f0 [ 246.967704][T14588] ? __sys_sendmsg_sock+0x30/0x30 [ 246.972759][T14588] ? import_iovec+0x6f/0xa0 [ 246.977295][T14588] ___sys_sendmsg+0x236/0x2e0 [ 246.982014][T14588] ? __sys_sendmsg+0x290/0x290 [ 246.986823][T14588] __se_sys_sendmsg+0x1b7/0x2a0 [ 246.991792][T14588] ? __x64_sys_sendmsg+0x80/0x80 [ 246.996752][T14588] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 247.002767][T14588] ? lockdep_hardirqs_on+0x94/0x140 [ 247.008012][T14588] do_syscall_64+0x4c/0xa0 [ 247.012461][T14588] ? clear_bhb_loop+0x30/0x80 [ 247.017161][T14588] ? clear_bhb_loop+0x30/0x80 [ 247.021868][T14588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.027800][T14588] RIP: 0033:0x7f2e259f7559 [ 247.032264][T14588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.051908][T14588] RSP: 002b:00007f2e23c4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.060359][T14588] RAX: ffffffffffffffda RBX: 00007f2e25c7efa0 RCX: 00007f2e259f7559 [ 247.068397][T14588] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 247.076402][T14588] RBP: 00007f2e25a8e8b0 R08: 0000000000000000 R09: 0000000000000000 [ 247.084423][T14588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.092420][T14588] R13: 00007f2e25c7f038 R14: 00007f2e25c7efa0 R15: 00007ffe846b3e58 [ 247.100444][T14588] [ 247.615447][T14588] syz.2.3826 (14588) used greatest stack depth: 7440 bytes left