last executing test programs: 6m9.093925218s ago: executing program 1 (id=104): syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 6m7.781254794s ago: executing program 1 (id=108): socket$packet(0x11, 0x3, 0x300) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) preadv(r6, &(0x7f0000000040), 0x0, 0x80, 0xa7) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 6m6.251346353s ago: executing program 1 (id=112): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(r1) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) 6m4.702132793s ago: executing program 1 (id=114): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000680)=ANY=[], 0x1, 0x18a, &(0x7f0000000380)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0xffffffd3, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) 6m3.2187778s ago: executing program 1 (id=119): rt_sigtimedwait(&(0x7f00000001c0), 0x0, 0xfffffffffffffffc, 0x8) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000500)={0x0, &(0x7f0000000400)=""/16}) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000380)={[{@ssd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@datacow}, {@flushoncommit}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x74, 0x37, 0x78, 0x39, 0x30, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000600)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000200)=0x2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101200, 0x199) 6m0.783789231s ago: executing program 1 (id=126): ioprio_set$pid(0x3, 0x0, 0x0) 5m59.375360094s ago: executing program 32 (id=126): ioprio_set$pid(0x3, 0x0, 0x0) 4m26.407047777s ago: executing program 2 (id=341): socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, 0x0, 0x0) 4m24.822919209s ago: executing program 2 (id=345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYBLOB="13800000"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 4m22.738798301s ago: executing program 2 (id=352): syz_mount_image$erofs(&(0x7f0000000300), &(0x7f0000000040)='./file2\x00', 0x280400b, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES8, @ANYBLOB="8a860eebd525029c179be4e44784cfc8120f21226b158d74b0c1eb547d8eb764c4daf6abb2b3d112ff5642dc5d75ddf95a2b62eeeef75db999cf3a4e404dff5ed6b482951969d49f8d6242af5d8d64a4e61cb1babd9b40bf17593bf4d67aad942dbe6e4203bb67b254f6cdf1059371dd2ce7075856577fc1d95b8d684367fa819b0f0279ecbdb9904ce9f95c22353a722093ace37c33d17cbc5a012399f3a892b1ef3ec485c895d59844974c80de8f3006da2f9f1c236e0a1c56769a4c9dea63afa420148e7da85d2d8e92942244a7"], 0x1, 0x23a, &(0x7f0000000080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x18100) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/42, 0x2a}], 0x1}, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) capset(&(0x7f0000a31000)={0x20080522}, 0x0) 4m16.74682517s ago: executing program 2 (id=369): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_dev$video(0x0, 0x7, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f0000000680)={[{@noblock_validity}, {@inlinecrypt}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@grpjquota}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobh}, {@nomblk_io_submit}, {@resuid}, {@nodioread_nolock}, {@dax_never}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, 0x0, 0x0) 4m13.805019521s ago: executing program 2 (id=377): r0 = socket(0x2b, 0x2, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'veth0_to_team\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@gettfilter={0x44, 0x2e, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0xffe0, 0x10}, {0xf, 0xa}}, [{0x8}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0x9}, {0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) write$rfkill(r3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") setgroups(0x1, &(0x7f0000000080)=[0xee00]) read$msr(0xffffffffffffffff, &(0x7f0000000d40)=""/43, 0x2b) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="6b6565705f646f74732c64697363617264b2732c7569", @ANYRESHEX=0x0, @ANYBLOB=',utf8,errors=remount-ro,sys_tz,iocharset=cp862,dmask=00000000000000000000001,time_offset=0x0000000000000006,errors=remount-ro,errors=continue,zero_size_dir,\x00'], 0x1, 0x152b, &(0x7f0000000a00)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) 4m10.55762249s ago: executing program 2 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRES32], 0x38}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3m55.282013359s ago: executing program 33 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRES32], 0x38}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 11.434264524s ago: executing program 5 (id=1012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f0000000840), &(0x7f0000004880)=@udp=r1}, 0x20) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x14f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) 11.433548794s ago: executing program 3 (id=1013): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x7, 0x9, 0x44e}, &(0x7f0000000100)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) open(0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 10.593826293s ago: executing program 0 (id=1016): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x7, 0x3, 0x8, 0x6, 0x2, 0x2, 0x80, 0x8, 0x7, 0x15, 0x1d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 10.502103948s ago: executing program 5 (id=1017): socket(0x2, 0x80805, 0x0) syz_io_uring_setup(0x1320, &(0x7f00000003c0)={0x0, 0xa5b1, 0x733295cfbbd46c95, 0x2003, 0x3ae}, &(0x7f0000000100), &(0x7f00000000c0)) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002340), 0x0, 0x0) shutdown(r0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x41) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x9) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, &(0x7f0000002b00)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000000100)="441dc4cccf61bbe670c9a162ee3f4131f7ac93e15ff13e5e3266848f4ac39db1d922e8e19d1b0caf9b88b18d9c81f0af935f3fcd6e0a16373e04b463f98d1aeafc3a6ac932c774e6e0611525b8562297592bbc2ffae0c996a6a6e4e9fc86eaf126c239c24ddcb16a04449dcb3115b95e9cac1d35320e1f866472e4f38cdd2b018beccb380d7fc746839f90af4b119b2167ac65109ae202edc80dbb609f86e6141a2be5fa0c0272193ff985952ec06a2ec1e0410448e3d09d842c6cdccf8e59b465aab77390a79c4b81d91d43a1e1bf5861a2f04fbd636f309a91f5a9c33d25f7b03c589dab2f4d4849c2146bbc1c24e4998baefbdbdefc809a8d1550c4695d7c082ec2931863500f279624f7e6da93a78308daf5d34fe0735607e50a9fbaa1c8c5ce53936ab9cfc7cb1ff318f8050c0a669d7c46cd481148740b913d20dcc2fe3efbe4e040f9464b40c399449267ab6a4dd15fa1edc9da962771958a7ca1d56f6a40a28acded95c4c385bbb0cf25d7975e993ef164f1218e335424cacf51f5829d7acaf77f8f4b20ce4bd7e2d9f7650f8f5bdf53bee073543fd7bbdddff61fccfe0bef7f98973239ab8ca31ce6d9a7f7b68cc8061719ddb57ae2eb36b3b4847a4ff38f80118b17185a8551fbf4848bad9798626cd35d5cebd64c5c602a72b99f7862d3e7a48222b8d2604f8c7eb2f9d54908fec591b1565442dbb6066cc69baef5c4df83c421cfd744b95ce864b99cd4de0e62a1242fe2fd01652a7f7fbe9e0ffe66c782e0c5c75a7c722ffcb91f55ddc05409c265bddb7dd5e2bf6bb67aef46ad2710195b9d7941ef7850c028cfb9debd302f59e2d4d8fe7fdc32b433a1f7f087119e2f03a8b04b5fc9d384cabed3cd1cfe21027c0b4cc72b471506736cd6b0b9477adb0c71a1bd17e5e1c04bbf0088e1dd47380195c7892483aed16ff4e1614af924111a32c753b654fc7434028d78f7ba3ae95f622dd8e090769fa2d1cacdbaef4e16e2c984e2f918ad1d4c6c1320266c29c28f31117c8a3f78ddd82086169963d170eb9aa3e08a67fba771c693204cde736ecaa670eac58dc1ee1264c614002f020ac804ca964dc871e4c7d6f45d8f36c9286694bf5404b0962c77bd6e017f9581f349c07a64d71ea8cb603e17ffb1eeb685e64ff661eb711cf239df16061a18f1b5f2b205253fe94e7b88da5f89d25c23ecf7581d13ce04c9142a854bc10d80c448bd32e4ff95a4d4198ec6497af86207717fe41b075245d3733f6b86989b6f928cbb4bd217e71f5f0d0b7f773d4e358d48241db916c8a823029d0dbd3f84c5bd883248e1074cbec741381b5e2f33aa9b11dbf5c8efc44cde79160971f8b99a4508d7f526f05e9b4045c479682867f8e0b3080457b7361ee27d6e41eeb19af163a851db51dfc7622251d43d2f157178b78f505eefe2b74544db9e9192912c3c5e0c05fce01b7769a9a8c7b95c7ca0c9351a24a5b9457839fe24994b5044501eb7dbb37eac1ada55ab8ab1026b0599e2015550a6ac51b0347ed33d1ade8f6284d65b070808c8c23bfe9aa433b4600e18de836649074801f5f0ba422489544eb1dfe70ec72f61cc2bed2dcec65a2acf6f22e8779f30e565bf2353d82dd647e1bfe4e737463e987981418c93944947eca531f74997c9a8faa78a1688fbc525645f4ee9e59d5fa98e19684bd156ec7b70b31f9f5d0a4760e47f72fae3300be641d1d99eb98b4028b898d0a937e9d68df6da9dc11423bc513873a2b3b29b2a226fe1d4ed24a9c16e9c17df2d3c6fc9d08ee229653e1864766376339245b69f7a0f958ad2c218b1a536b4b979dd2b09894b6726bd6e33d5c1abee084c7a9287166befdf18e3a887b35d26564a91ac6c76b07ae0470cc4fa3759523284aa371905696b52edeff38636b8acdbf099d13a2b6ed6f3a10278f3cd56842911ff6b47b58f1123a68831df551072dab8903781188b17da457bcd1c3412625864eb3cc7d9bf51626ba9f20407030d8b8492ef2c87369745ca372ea82a0996737b6ca99a6460de5a24aa4fbc0991482213f0e7849781884c464203b12eae572d92d11d17f9fb34fbdcd24109dc05b89901c12caa034848435982d592936e8c0b0f15be8172fd8967580de63aa4719880ad332ad87957fd29f80bdec08a17bf1a7d3bf9ae4e954c6a5cad1f1fb1342ab76cada4e5d324aaa765c78b0776f2152ed0824f24c2249170fdb29524335ceb34cdc6e2bbee0e4ca2e81c3b5fbdd23fa3c58c7f5d0667142232225da4c19a7ca407c2da4c8a7d20fba24bdfd53e7cfd877a812b626767cce2f99ee2936a37002df1cb5be7e77fc42b474c4276588e0f967303e17bd23743f28dc328e8f689beed0967574261bbc1a6b3115543b43b82e1c99e717e8f0c0df34cd23ff66b65083118af200aa87c3e61c06db197beff820264377a3cd249606f5a0d72647e5a9b85fc582c47e6691e1c737c02266f9c290c712e97738bc32c307ba0c16d0c15af199fa45e056e172e80b0f0d68f344bfbae09a9f94f3dd8a6e70f966a874ea3800bebd327751e01b5ebc766f4800431a7259a9cb88a27a4fe4860f008b4c00ec2be65b959dd1b9dc15384216fe75da6ff9fe769f0042bd0e339c791deaafcd5b26de034554fece99179614a87d40738cd0ee9bd62555c2008f2bdbbfd850cf3367665a58bb5aecf8d89512d73a33e58404ca784537153d75edc0fefd4f5d47fe55a271f70572c4c188afe52bd604248bc429840805caccc0dae96a6988bfc6117727a9ad99ded65ffaef5c5c50d4def8f193083f6d699b9a0e5eaf24d07a730d93a939cb993c8ea23a6ea282aa676e1b200713920050738cc89c5658009297c27ad9f605b1fa92308f768a948eb77a2892b85483ec3664c72532a00ade0207d6e0f9ff12d90d0c525ed2912489836a6d112dd09eb217152fd91bd0870d185bccaa9e7c646bbd36fe857cb36829b224c1ad2d3243bcbdaa4051a606b5c1458f627add211416a5c28fadb44a65169c1bcef2fa8dae2a3e53853ed27816a380832ef3abc8ea3357906c76dba49c27377222106f9b5ca4ed9403f8b3ce751a7002a8c0e12893f4180a07946f94a4f91c81423aae6a77d77bf406f4aac5cf77ffabeedc305738d0bdaccc7b0f9757cd608f9e891f3a6fd4105b948f84cd75830454d1c81e58c6bde555de5e7322c68a696b6c74c3e74178bca0bdcb1691311202f35cebb67c87c81c1c9de7f9b1aa93544ac5df04c11dfeb2bb71655caa89fb4517fd3a1daa553e740a4ae33c0dc976bdfa380d347192dffda313480fb9b77c6f2d12cce6b0951d28a8f6f710dc02edf6dafc93cd87f3ad27f00a063f78ca38fb0d265b976322aa9e30924b60a37fa906054a53056cb607f4303100972af2ea00c41c8db02d04f01a59a241b541c016e69b0578ad67418cada774f285ec2fd83823ae087c05292e5eb9b93c4acacceaf4effc97377038e6a1263d941d8d8f54b677a8103df3bf76a6051bad0953330ffb8c8cdd68167c8e92ce2bf856cf6fa89ca3e6f4e377e5bac1093439a25c07b9789859ac40538fdbfb5b43af4d606223c257b10ef6caecc44d8e396db0327735369eb7767fbe824284ecf77742534a6a5965c1ed88b25afcd512b650b1a90b5eda3e0990425d17ceca1e08a98250de33e9cb8dd146f00acf5e9fed71fa92542eea7a5d29e078b0f590a561934d68ec9585b955c699d339ee4f587f7080c40781b323afeea02b5f690f6555c4fb6b8171b0ece634421835c314468f0391cba486447de54a5e5edf1c154a32ce223c4ed872b34593f501d30eb3ac2cf1b5ee15e20cf9c0cb4acfb1e6d89f1b5f32f08c126a576ac9c85b86eeb930c3f1ee72a41b70856a92addc2dfdda2b33fe252006c3931a7028964259c42eff45079cf2e6a72abeb44690301cc35ec501e808177687bc11693ad4e45797e5f2ffb343f2597ea504926f696e9258c85472e4238faa76d1156af7cda89f3fef5158071e9a20bae9f7fed127e8966b4869a24b2e372c0fa3ac0627e9091afd14a86c7bcc48db479f563051b89878c7701c6af4032ba45712376603966840dd022e8d5b54f80c30e05b986a87a7d1fc99b0cdcc1b0acf4c99a05dbd990559c3635a5881d2c4d23f7be8ea1ab5e4f83376279e8ecd593803a3674acc0ae36c07b50c3143aa252a35b36f57131be8aefafebdb25c6a702700ff2355682e7d6a50177ada7c02b2999217b4aa60268e638b1efa316b2cd15cb4ef9d031acfa2dc38577c6cf93fe536fd6e98931d9fd7df076b93f1cae3bccb2ecac8c7304bb96e6b8d17f14cb2c5026b67b8b8a0ab0dcb08ce13970d30c3571ff64d24c06328d5385de3f18c37669f95f35de2d30e3a3721fe0b49bec68e42bd5ed0fcd2490da357747c93449725f0a4a80d48567b68e516585847b9dc3e6cad9f5065271ca56cb645b97a2b368a60daf5d9add5c218bac5ba0995cfbe9f6255a6a239111ce294a70f50018f651669998a9340a01aa0c423e16c03dad2b0f8cc0af9ba210ab0b456d353a989111178128e00812b34cbe90cad16af7ebc86cabfff0935e0e655c6fe536e2e432071f1da249f11f5937dd679b56d3fd5e784345a7efde8fc886c4177c19e0dd326c1579132c4e75169aebee1728a4a9f258ecdb9a0b43c882f62e682b39895a7b8f9aed8188b8401f00d9046fa9867344d4ee76cc2c28280fc31fc84398215758fe4eec79550efc2ac8126af6391d216ac4e3a22b063868925680e56213302d6a1bd256d6c13178d1255d1022c8664ab6c1dbdacc601381d3ad300cb19480b9bbc35bd11b231bfde95befe250ab89d9daae0f131f050c17b8e51589a171210b469df4a4c5d95736109a35ded00a19b3fb691261d4590cb29a935ade8cc4dd7d023bdf898123b5b72b9838834634e57acb4c5789a49e40427837598fb2b3a71f466b8c7ab0b9773cd98c84260af113a494dffce9b8a825cab0aed4149c40def029ab9c3a03369189ee180afc7af502ccb3c6ed50af87d80e244d5a663edb3dde4b45fc4812907c74860de5dd54065f4f017e00a9e0b6df3b28f6a5da7b1d51469f6e6d0ff116d32a90f5fbd0b7e7afd3256ec99ce54987baf6578c97e2bd08b120be33b98cb43811650f46f69ea130df6937cdbe0262343633680b16e1a2dc317706e8915657ea1e32b05dbceeea0554c6f0345a36ed6f212f77af75c090c44d5043a76e49fd323dfb5b58346a550c0d732ac8c991d4a77cc7ead0ac259a3f63255a735ce1a8de746929e4bf6311407b40e905b97e8876268281639cdeddd698e3715906e63f7c9d6403e4b42f4c0fa2083d91e6e5d44b880a03d6f41b0b0909f6fb789493ecb32774bdf0122a5c7e8c1c38385cea9fd9a235f95d7731b48e94deca481630b8998c5ae3dd2438a9d228a7b7f1fb38a6ef8bd9e37ccb1437ea9157219ba3f2d1d63872065d40314f1aafbee2b315ffd0a69cb1550d78e997c4e2403ae8dcc833bf9e54e145a4c08766fb090c99cec5cf7dba079478713027fbab6f03244f47baa354360d6d7ac067162106657db4be7e80fae25178a0550f425d5214dcadaf44ea99ea41e2a5afdeb22e1133e6d3748265c4947c40ba479b83772945819e8bc34d78a124faf3748ce5f524003540bdf529b22199369654e4cafb3e9bbb20dc9a855f817164b44867b7b146f285780cf3573483798d85265157563ffde156c03d0b5b233fe1a7fe34be0573085d4cee9f9e4ebacf9b7dd708d981c7fbc2ba7f9f57053a6d7da3ab162f5ae03554edb471fa12c4b37290d7dfc819943332a2b5afe2c8185d0986bc27dc7f70530a544b189b87e7471af9811040435b5a1db64c905a94b5bb51876eeb6378a82d8a9864a142e4ebaf48847ffd65b2410554ac5e414404c8ed72cc788f77fd296fad040626f5cc4adbe8e89711aeb58f73746ecb92a910f0de212f8804e368cc1cb1c2f737ffe0f076d9c563b88fd2ec44ed7287ad93cbd4da73de5c787aedaef7038301bffa81e1ac3adc9551be5cfb0c928c98a8145c627e562481593890eb73f6f10e4bbcb4d731e725450cb507f5ee60cf763f31538fdbaef8db325fca8108c7732b67b9d246f4ec07423e98e460e7653ef5cd1307779f8eff8e17831a6bccb54142f6c5d9869e0a5b8182af12cc3a3c3b2d300e5e16a868a2dce782d156261a17770038edcbef522592c631d27ae9e89d40fe3f1044d8594556ff9c5c7c93b607552532908e1232833cfd804142f143bb50fd2d9cc7c9d4812d51260c6932018d524dcd1de744b886046220cf1fc512a0d6dc5f68d2a71c1938b2c16d984289743f712e5a66fd560bc64de623a2b4f879f6b6d554c2361a994ccab499df8612b24204689b604c4ca3065823eaf0d3464b3ea414308e4e27fb44ab72c4c178c0500a18a2f6adda1eab34c3b78ba4c820a536f8e5a7f6b9d79703f73bc63bdbc1d551dc03c6cfcf96f6935fa9881002a6523778e05af641e761932733bce5962722341f7f34a1ad35e3e35813c2b626ed9133f50452b2492e846591d8a42e8ef3333ec1ce387cda54825c5c2dad96515a50cca5dad736d73cdf4cf9dfe055314d308163583e4d36a6ac2a6dfd0bb6de9a6c57607797def82c4a10f2503959ac61f56bba409bd5b63d3416e57bf1cb75aee0e191222a195eb8716346b0eda19d2a78f51cc8b5f8d5059a06e315b885c5f72ac58f502d4c5c1b399bc1030bba9a97b17cf59f333271f486083089d219c4327e564d599ed74c7234715e0c7737bf0cf261013736e78be3b32992d4cf0aa7b0172b83a7558b18dd35d9d61dd07e3a4f93c9280a294e4982e5a7d8a142aef26e0e4c587f1485a81231fac207311d7db351842ec97722bfca487be1b2f7d2b63c1ce9fe35ac17fcdd987c2d7832109860784028e46521298860d7f46d869c0ac152febfca95aca8420d54a25019b4d98ff2342c8c3f162ba450e6c4996edfe348d14aec300d808f2d6c85b10b08673761497e249ab4d20b293ba9279bb9db3593e3c7c2e05ab34cb77621e2d4ce175d3ce0b25c7a0bc85a5df782a81e0a32f89dc6d472b07fbc4efb382a94f6483bc2c2776c088094e89c5a49d5628ad78ce7ecbdbee528a0c184bfc2a4f07442591e27524d75136c3eae29d19c430628916f71ce5ff944c1ab27fd110d8f902bdad1f4973bce379fcf82ceb2899b0c3869ca04042da8ae1ddc904eea800724ede5b54b92f83d2bc65fc34d266188112f2c6128261545a789c82cd76d3f29bcd1a2067af3a78ec756524ef5c33f73e750c9148f9b3e7b04a53a73058c26a7c4047c30696bda0ec170e8e32122684be3387b4701c2af19c3b3624b4b23848871ce51c33c5b9401131e9f5b5783b4d09c5e5b2a6f943f83764dfe01908ecd82cbc948cf69d2a595fb5d3507ce13d24f8f6b1f71ae08858d34b1e20539aaf16288743b80281f2a2db1fdb663fb26a528a0ac27d52e1ad7e49f5e8c15e76b3b269ce383eedd5778fe81fd57feb9d5a71fe140b707fe09e4709f2dcaf61f8d184d31a7c6bbe767ea27af3c97b0c103f5234815f0d1fbb9268bfc84fcebbb6a738da7c7d2007c81f9ccdce18ed017571b0ada3eb21733a1df52db0313d1f7be846e0048ef39538a284d7c8f15abe0010013f8c678531ea6774ee4536e2f84ce995d43658a19a859c349a552efbd58ad64c7e973f7eb3fb5c35a224719fa141be5707c01b52f9885f17891e5722c93c605377f44858ee0255acaad2a1a7cf4d4b12d03adf6bba3afbd23e99776866268833a0867d40a2167916f2ba706781522b623694345af64e23511cd4add8755206e8bd168578452730b5a3a318de3d081d7b13007e3881fad3e7299716ab6509192d6df781917d1a41a595934490e75dbb77ceef99df4e8b1655f7c6787280300000057649f6482bcd99aa76c8b92e8eb98ec6c84d7b34968c1a720e420573491ccfd6534aebebe3b67226c9d664d92bb478f4c335cda6a8116f3be19b13ca294018a9691b86007b3846c0e27b613bded91903fd3976cea5975afeeb4d53de10e6aa595ad308f1dd502726781e33da8d9b589b5cf28427d38f3ee20820a662076a4f6a0a962de55adcb99025a124a9ad2f0c108224aff8287b42221ff790f3f3347987dcdc28557e12bc1c9230b7b12880f473f85983d75fb7652e0138a289a7e6d995be48b477114fcf8c52f9528abd9a8e059232b94e0e6741e79d98de5678452740f8c32531d5e31b5bf9773fa441d135da0284783e9773a15b78f3c1721472a47e80d6b4bfc6d3e99105e6cc1d2e004beab92e4c883ace98b985dcf87b88d143998945a06cd204c6106adfa08c26fb769e1e8228c163639e820c39c20233adb29d0043b5be34ef2b6218910d1c9bae133325d4ca0c8f2db33a9a5d77716b311d9a630a5932611e57133eb9f90a7549b116d67aead1017a1de54f551fa94c3e38fc768e65ce35d8acef134530224a5e5a43e8fe3b6687dfb48281805f24b9ae6e888817569a6f9d698758f2efdddd9908bfe08e66adf1b2bd014b8e064297750f8ba3670d7f338569999f90d9f437fefea9b101323cd638c8ede385c29efb0102824dfb10bba3bb02149935681b918b155210648d503db811a4c361ed562c8581bc5753268ea7ae665bcbd075139d86b938a2ebccf2e327e0be4ede5c1e1416bd5260217363c8e0724bc2640a008903e44407c1d79b30c93e6d370634a99544697e1fb00f3313090931d69d211fbdbb7c9226ef8230c49ad6e1ea9b2fe73fff13997d2c1cf5da28d829f3438c063af9f7e5d7ee3eefce8b805565442d321745200451c266ce8783a0e7cbb43e4b6dc5230c3244250defa5049e8a370f697262f7c35f7efeb6aecea096fde2bc3e0dc2b26bc20ee5fc21ba8c54c4bcd0f0b487f26382e98043fe18e9252f7f5883ede0006c8e378ee10e627771ba4602e16e8768f94fdee69d198fc8fe8f082f6fcdf72194a6fdf33936e5dd121c3a395b400b12f23e38b9fb72f9d4a3e58b2315e710f97a15eb3a76461cdc77947e5a2d0a771c67815752ee42b2b433a7a16909b8a21c5f85297f71db0ad81fd490ba7245b044ed173d03bd7e4c1527d466ba868acb2e7bf297ee96b6b4547235981f4592622a0d78db9f5904ae2becd8a6a85df77be9ccc7c9a447c472d25df6fbcf14e77e83712b784b10f4949bfb3505c0543d9de34e968a83ca322605ad219db671f91052334fe7f259fd0b072d3f8743ab1795962d98297b8de451f93af47554276f1b6d15661b31470a88cdcb0ebdb7564a659ec8de6dba91be1bfe288a4f2894c216ec86eae3f5b4b9ab519ab6fa784d3fb8cb41e77b457e6cce024a7ede2ce90e3c7fb9abfd8852d6a07d3614fc0806e458baf370a4e6bbae200b1021ebcdba8ae6acace1235a6e0bbfa67c087e72922bf910cd78c39429270b9097c97a30541acb246a4aa5e5133cdd2f7ff53cbc4c0d6b026541949d31659fe0e899c1bcd70c1c8775cf192696451d102052aabbbccc4b9adce945de8270f56c7abb34c4cc64a4de49fe3b2d6d3846bea4c200fc4818cbc29b42f3137bda22f1c30179bf65a8970c02fe95cda6c33b57dc4a42bd642d75a28912c218c6e4c3fce1b85f7e73aa3b2f1349a52f55a6bc8bfc8e707b9f215701350394faffc29aee230f3befdeab7a79f08b453c42155f03c9dcc88a8659f5231ecb1ff1d569ce49dbc1c653eab0377c2ac0e631e43d0d65002d3b1c2abbb09831b881f9ba0d62f531e2f5fcbc9ee6bc4decf0e8e4c487552a9f8a7fab9a9b532ad4600458d0732160c21b5fd12984e250ac6f50bdb8e00a1f9fe8d9fe4b4c5fcb583def1c0909ff3bab7e980c57105d40ae0b80002b3a43c663bcd793f80596ad50f99f7ca32194a49ebcd7b623e8b31c344c2411352539141c144e8d6e80f463737dbd0878005693457c7341f86db8d9d846a091c7ff5ad639bbf03a20c7130e9aed2c745b27bd9d7459984fc647732b64b21b2d6510a0c59850ad65ff8407e6dcedece3c8791a72e84d85530da4d82cbd4eb5ef846e861328df902d7c8eb9008b1f0f7e681b0c3557833a83a6bc2862f6cd69fee060eb796305617b80465514544c6416463648598581527b4618d5fe5cf9d90432db2e03efaa4c37223daf9abba782a6f0c2bfdf69c81f41c277123e1eca24ce04320de85b4a589f99e4d6c9dbe1ddbd8bcb2a78fdbcd1e83acaf5fbc8e080b5cc76401437a3858c551203cde584b73e30265a75b23167628aa4a277c0bb67ab2c59adad13015ef3bf44b62bdfc8754b2cc5bcf28e5c78594882eb3f095880e9d5a7719bdff1c870ad0ac30a6e65881621b8e7e497e6930c56b84ce227c17371916b4800382016549b61246c6143349c22d19b6bfa6d1d120addcdf6120a5b252a772ddc73d495ae2ec0401b2fc0ca90128631878ce83538b48881b79648b5d2b9cff7467804f757f949453b251f845ec2dd5293d8d1890ba6af69aeb973920ad2c222c6d9f11073c2475dd99347f9ab9f110e3d4fdf88f7b19c3e2adfe7e99806048c9c97f44e7936e585ed4e10af8e8c5e1ddfaebf2508c7161f97a01dd61acae0db57b409d78d98c30cbe8db2aa9e18b1a8230a24601463115fe0cece698bc58550f9f031dd01fddddf76e7d514481e5dba6fb872e2787891a5529b30863e3b36d55ceb585ab3a5a85e436ce86499f3d4d32d1a67fe1f910a4b7105fe65b350758f5b916f8a9b01ed55addbc73e2693261fe6bd0fe64a3d4e8d58b8956479b15be5b78038fa7b930f313173df02c325710a6358f7268e0be7aa1861c062928f6d5c6b438d22660fd7872ca4c2bd010a675d7b901054cdaf7c74a9ed303cf97f7392faf48647888fbe86368ca6675a83ed451b046f542e289a641b2849377e0a1534371cdffcf5767a9cb939ef5641b30239e42fd277e5355f488caab80f8fff77c770d5102aa55f2c2a73d404241c51034a50e916751da67ec159a856b6dd7946c597cd566b824202ac0b8841656a4e7564cac21f73af79001bfe411c93288a2c3615aa11028c6d5f6b814468ee01f965bfd309bd30857e9ba41733fdae310033e91ac09ff4532194c830f5cd2ca5e9baeb318cf8c2053fb465166943625a7040c332f80c03a58ee37a6d112de0913f7e5e6403f892430e8e3e4a9a04c8e86aa71cda551177c398dee2187de9d6944b7741e451d699791e4cb9beee18344e7c427785abb664e02ec3d8d5fd21dc5fcb0adf9d58019852565da4a830e7cb81c1a1c9c8ffaa0d82fe78b583ebe2d94a043bacc11f5218b18df82232f1efc20001aa48b1e9172a713e7a8a7d9c3f16c26d420ba0526e1bd154c8cae3f7661ef6de83da1441f99a4754f448549191f255fe77840577564e1d2e803d8bf371e97b7edb020cbf1098aa950eed5a0ef0ab1f76980be4c4df29c9927ce71b9f1a83b8e2c4bd63dce14ad9487b5a31d9de8bc6f2b856f33f20b457648185970f6f48e22b3aa4eb736a0acfe31f2b5ceb7d9b80a83aa07ba5ea748c372446059da75c1bc8100", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 10.200292836s ago: executing program 0 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES32], 0x38}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x4004801) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) 9.407928492s ago: executing program 5 (id=1021): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x400000000024}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000400)=""/223, 0xdf, 0x2}, @fda={0x66646185, 0x9, 0x0, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 9.214970813s ago: executing program 0 (id=1022): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004600), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSLCKTRMIOS(r3, 0x5432, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) 8.92115453s ago: executing program 5 (id=1023): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffdcd}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000200)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a497090000009b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e80c00000000000000e9c6ad7d2a8103ef2f4f93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef5911cee26d7b48241847bf9e343ef4674c45e2a085060f1119b0527fe5ff48fea9860fe68aa12fbc2e4212fade0ce1bbe83cd44a1f4bbe", 0xed}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 8.830342456s ago: executing program 6 (id=1024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f0000000840), &(0x7f0000004880)=@udp=r2}, 0x20) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x14f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ptrace$peekuser(0x3, 0x0, 0x485) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfe) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.862912622s ago: executing program 5 (id=1025): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0x6, 0xcc, 0xff, 0x6, 0x2, 0xad, 0xf, 0x1}, 0x0, &(0x7f0000000280)={0x9, 0x7ffffffb, 0x7, 0x20000018c, 0x5834, 0xcbc, 0x40000000000003}, &(0x7f0000000340)={0x0, 0x989680}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = semget(0x1, 0x4, 0x69c) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ringbuf_query={{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x18}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x353, @time={0x95}}) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 7.737474119s ago: executing program 6 (id=1026): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x184) copy_file_range(r2, 0x0, r1, 0x0, 0x180000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$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") read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740), 0x80000, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$IOCTL_GET_NUM_DEVICES(r5, 0x40046104, &(0x7f0000000780)) pwrite64(r4, &(0x7f00000000c0)="c4ceae62a0daa42e23bb04d037b4246e31ccdec34127a899e4fc81f3118b97b2009cb368184fa04e9156b2858f37a92b3b102d21aff177b715bf5c89a6355164ac52ebeb9cc51db449041aa7ad0af0c573fff5b8349f51402c0af44499e24ad94c49f911ba2e749f3b312bc27de9c40fbc8a00535ea9d6e19b18a4302410d2ecc0fcce8d64f00c8558bc4da00ca8525bcb2c364d109114e4bfc7fc3e1070b8765873439dda4394c465fb16c54249de88f086b3f0da0b84d4e60d99395cc0de64b5672219c61984cb4cde317466bd262124a60802e36bf8bdb489e6b10827b1eb36f2a90bb97a35", 0xe7, 0x6) msgctl$IPC_RMID(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x2c, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 6.654519152s ago: executing program 6 (id=1027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f0000000840), &(0x7f0000004880)=@udp=r1}, 0x20) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x14f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) 5.953207463s ago: executing program 4 (id=1028): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/4082, 0xff2}, {&(0x7f00000013c0)=""/113, 0x71}], 0x2) 5.870233318s ago: executing program 6 (id=1029): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x149000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, 0x0) 5.772114523s ago: executing program 3 (id=1030): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x7, 0x3, 0x8, 0x6, 0x2, 0x2, 0x80, 0x8, 0x7, 0x15, 0x1d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5.454858662s ago: executing program 4 (id=1031): socket(0x2, 0x80805, 0x0) syz_io_uring_setup(0x1320, &(0x7f00000003c0)={0x0, 0xa5b1, 0x733295cfbbd46c95, 0x2003, 0x3ae}, &(0x7f0000000100), &(0x7f00000000c0)) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002340), 0x0, 0x0) shutdown(r0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x41) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x9) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, &(0x7f0000002b00)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000000100)="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", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 5.454589192s ago: executing program 6 (id=1032): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(r0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000f, 0x10010, r6, 0x0) 5.279185972s ago: executing program 3 (id=1033): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x400000000024}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000400)=""/223, 0xdf, 0x2}, @fda={0x66646185, 0x9, 0x0, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 3.650268747s ago: executing program 6 (id=1034): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0xa00086, &(0x7f0000009780), 0x1, 0x9798, &(0x7f00000097c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 3.553107903s ago: executing program 4 (id=1035): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffdcd}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000200)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a497090000009b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e80c00000000000000e9c6ad7d2a8103ef2f4f93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef5911cee26d7b48241847bf9e343ef4674c45e2a085060f1119b0527fe5ff48fea9860fe68aa12fbc2e4212fade0ce1bbe83cd44a1f4bbe", 0xed}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 3.242931851s ago: executing program 4 (id=1036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f0000000840), &(0x7f0000004880)=@udp=r2}, 0x20) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x14f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ptrace$peekuser(0x3, 0x0, 0x485) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfe) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.109713079s ago: executing program 3 (id=1037): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x184) copy_file_range(r2, 0x0, r1, 0x0, 0x180000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$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") read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740), 0x80000, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$IOCTL_GET_NUM_DEVICES(r5, 0x40046104, &(0x7f0000000780)) pwrite64(r4, &(0x7f00000000c0)="c4ceae62a0daa42e23bb04d037b4246e31ccdec34127a899e4fc81f3118b97b2009cb368184fa04e9156b2858f37a92b3b102d21aff177b715bf5c89a6355164ac52ebeb9cc51db449041aa7ad0af0c573fff5b8349f51402c0af44499e24ad94c49f911ba2e749f3b312bc27de9c40fbc8a00535ea9d6e19b18a4302410d2ecc0fcce8d64f00c8558bc4da00ca8525bcb2c364d109114e4bfc7fc3e1070b8765873439dda4394c465fb16c54249de88f086b3f0da0b84d4e60d99395cc0de64b5672219c61984cb4cde317466bd262124a60802e36bf8bdb489e6b10827b1eb36f2a90bb97a35", 0xe7, 0x6) msgctl$IPC_RMID(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x2c, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 2.40769836s ago: executing program 5 (id=1038): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.06439554s ago: executing program 4 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f0000000840), &(0x7f0000004880)=@udp=r1}, 0x20) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x14f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) 1.823289764s ago: executing program 0 (id=1040): unshare(0xa000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 1.794005525s ago: executing program 4 (id=1041): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x7, 0x9, 0x44e}, &(0x7f0000000100)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) open(0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 968.652484ms ago: executing program 3 (id=1042): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/4082, 0xff2}, {&(0x7f00000013c0)=""/113, 0x71}], 0x2) 227.065426ms ago: executing program 0 (id=1043): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x149000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, 0x0) 161.78598ms ago: executing program 3 (id=1044): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 0 (id=1045): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): 939057][ T5352] BTRFS info (device loop2): enabling ssd optimizations [ 173.946304][ T5352] BTRFS info (device loop2): using spread ssd allocation scheme [ 173.954155][ T4976] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.988637][ T5352] BTRFS info (device loop2): max_inline at 4096 [ 174.026033][ T5352] BTRFS info (device loop2): turning off barriers [ 174.094629][ T5352] BTRFS info (device loop2): setting datacow [ 174.119172][ T5352] BTRFS info (device loop2): disabling tree log [ 174.194883][ T5352] BTRFS info (device loop2): enabling disk space caching [ 174.215306][ T5352] BTRFS info (device loop2): disk space caching is enabled [ 174.582794][ T5352] BTRFS error (device loop2): open_ctree failed: -12 [ 174.621763][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.646754][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.664240][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.947219][ T4484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.981897][ T4484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.061124][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.303171][ T5416] loop5: detected capacity change from 0 to 1024 [ 177.263564][ T5416] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 177.579367][ T4976] EXT4-fs (loop5): unmounting filesystem. [ 177.702613][ T5437] loop2: detected capacity change from 0 to 512 [ 177.863988][ T5437] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 177.877294][ T5437] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 178.469056][ T5437] EXT4-fs (loop2): 1 truncate cleaned up [ 178.474884][ T5437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 178.917618][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 179.139058][ T128] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 179.364262][ T128] usb 6-1: Using ep0 maxpacket: 32 [ 180.803078][ T5457] sd 0:0:1:0: device reset [ 181.877673][ T5461] loop0: detected capacity change from 0 to 65536 [ 182.003434][ T5461] XFS (loop0): Mounting V5 Filesystem [ 182.061102][ T5461] XFS (loop0): Ending clean mount [ 182.070431][ T5461] XFS (loop0): Quotacheck needed: Please wait. [ 182.206862][ T5461] XFS (loop0): Quotacheck: Done. [ 182.500550][ T4269] XFS (loop0): Unmounting Filesystem [ 182.628910][ T128] usb 6-1: unable to get BOS descriptor or descriptor too short [ 182.640412][ T128] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 182.648045][ T128] usb 6-1: can't read configurations, error -71 [ 182.699038][ T4420] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 182.889049][ T4420] usb 4-1: Using ep0 maxpacket: 32 [ 182.923617][ T4420] usb 4-1: config 47 has an invalid interface number: 59 but max is 0 [ 182.964620][ T4420] usb 4-1: config 47 has no interface number 0 [ 182.992641][ T4420] usb 4-1: config 47 interface 59 altsetting 136 endpoint 0xB has invalid maxpacket 975, setting to 64 [ 183.567808][ T4420] usb 4-1: config 47 interface 59 has no altsetting 0 [ 184.030591][ T4420] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=5e.30 [ 184.147936][ T4420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.210207][ T4420] usb 4-1: Product: syz [ 184.229241][ T4420] usb 4-1: Manufacturer: syz [ 184.256366][ T4420] usb 4-1: SerialNumber: syz [ 186.597075][ T4420] ath6kl: Failed to submit usb control message: -71 [ 186.610354][ T4420] ath6kl: unable to send the bmi data to the device: -71 [ 186.627953][ T4420] ath6kl: Unable to send get target info: -71 [ 186.637064][ T4420] ath6kl: Failed to init ath6kl core: -71 [ 186.813206][ T5510] loop2: detected capacity change from 0 to 256 [ 187.123708][ T4420] ath6kl_usb: probe of 4-1:47.59 failed with error -71 [ 187.185456][ T4420] usb 4-1: USB disconnect, device number 3 [ 187.416807][ T5515] loop4: detected capacity change from 0 to 128 [ 187.454649][ T5515] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 187.602221][ T5515] hpfs: filesystem error: improperly stopped [ 187.629131][ T5515] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 187.689089][ T5515] hpfs: You really don't want any checks? You are crazy... [ 187.697881][ T5515] hpfs: hpfs_map_sector(): read error [ 187.809073][ T5515] hpfs: code page support is disabled [ 187.814658][ T5515] hpfs: hpfs_map_4sectors(): unaligned read [ 187.919473][ T5515] hpfs: hpfs_map_4sectors(): unaligned read [ 187.925448][ T5515] hpfs: filesystem error: unable to find root dir [ 188.260972][ T5525] tun0: tun_chr_ioctl cmd 1074025675 [ 188.266383][ T5525] tun0: persist enabled [ 188.338129][ T5525] tun0: tun_chr_ioctl cmd 1074025675 [ 188.344100][ T5525] tun0: persist enabled [ 188.629345][ T5515] hpfs: hpfs_map_4sectors(): unaligned read [ 189.760637][ T5531] loop2: detected capacity change from 0 to 32768 [ 189.790421][ T5531] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.249 (5531) [ 189.824745][ T5531] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.834950][ T5531] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 189.843755][ T5531] BTRFS info (device loop2): using free space tree [ 190.853158][ T5531] BTRFS info (device loop2): enabling ssd optimizations [ 191.400185][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 191.799177][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 191.805265][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 191.811820][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 191.940318][ T5566] overlayfs: failed to resolve './bus': -2 [ 192.022851][ T4268] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 195.241998][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.248627][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.692748][ T5592] loop0: detected capacity change from 0 to 128 [ 195.780491][ T5595] loop5: detected capacity change from 0 to 64 [ 195.802954][ T5592] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 195.962192][ T5592] hpfs: filesystem error: improperly stopped [ 195.968323][ T5592] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 195.999206][ T5592] hpfs: You really don't want any checks? You are crazy... [ 196.006640][ T5592] hpfs: hpfs_map_sector(): read error [ 196.079143][ T5592] hpfs: code page support is disabled [ 196.084751][ T5592] hpfs: hpfs_map_4sectors(): unaligned read [ 197.382147][ T5592] hpfs: hpfs_map_4sectors(): unaligned read [ 197.399920][ T5592] hpfs: filesystem error: unable to find root dir [ 197.423641][ T5592] hpfs: hpfs_map_4sectors(): unaligned read [ 197.839200][ T4420] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 198.129642][ T4420] usb 4-1: Using ep0 maxpacket: 8 [ 198.136717][ T4420] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.260884][ T4420] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.349101][ T4420] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.361389][ T4420] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.376330][ T4420] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.388377][ T4420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.688649][ T4420] usb 4-1: GET_CAPABILITIES returned 0 [ 198.699043][ T4420] usbtmc 4-1:16.0: can't read capabilities [ 198.924515][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.972956][ T4420] usb 4-1: USB disconnect, device number 4 [ 200.639271][ T5638] loop5: detected capacity change from 0 to 16 [ 200.670057][ T5638] erofs: (device loop5): mounted with root inode @ nid 36. [ 202.838553][ T5657] loop3: detected capacity change from 0 to 1024 [ 202.928108][ T5657] ext4: Bad value for 'barrier' [ 202.940602][ T5401] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 203.088101][ T5401] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 203.334525][ T5666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.277'. [ 204.089028][ T5401] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 204.197156][ T5401] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 205.871765][ T5682] overlayfs: failed to resolve './bus': -2 [ 205.898299][ T5671] fido_id[5671]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.553168][ T5687] loop5: detected capacity change from 0 to 8 [ 207.445092][ T5692] loop3: detected capacity change from 0 to 32768 [ 207.489148][ T5689] SQUASHFS error: Failed to read block 0x1ec: -5 [ 207.496124][ T5689] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 207.914284][ T5692] XFS (loop3): Mounting V5 Filesystem [ 208.008316][ T5711] loop5: detected capacity change from 0 to 16 [ 208.174974][ T5711] erofs: (device loop5): mounted with root inode @ nid 36. [ 209.743878][ T5692] XFS (loop3): Ending clean mount [ 210.258824][ T4284] XFS (loop3): Unmounting Filesystem [ 211.811029][ T5739] Invalid ELF header magic: != ELF [ 213.151182][ T5734] loop0: detected capacity change from 0 to 4096 [ 213.159940][ T5734] ntfs3: Unknown parameter 'hide_dot_files' [ 213.416627][ T4271] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.447590][ T5746] loop5: detected capacity change from 0 to 1024 [ 213.529996][ T5746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.536706][ T5746] EXT4-fs: Ignoring removed bh option [ 213.772443][ T5746] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 213.946282][ T5744] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 217.011183][ T4976] EXT4-fs (loop5): unmounting filesystem. [ 217.111802][ T5773] loop3: detected capacity change from 0 to 32768 [ 217.328444][ T5773] XFS (loop3): Mounting V5 Filesystem [ 217.485914][ T5788] sg_write: data in/out 124/1 bytes for SCSI command 0xdb-- guessing data in; [ 217.485914][ T5788] program syz.5.306 not setting count and/or reply_len properly [ 218.059169][ T5773] XFS (loop3): Ending clean mount [ 218.264799][ T5789] loop2: detected capacity change from 0 to 16 [ 218.429327][ T5789] erofs: (device loop2): mounted with root inode @ nid 36. [ 218.593016][ T4284] XFS (loop3): Unmounting Filesystem [ 219.417308][ T5799] loop0: detected capacity change from 0 to 1024 [ 220.363927][ T5799] hfsplus: b-tree write err: -5, ino 3 [ 220.594568][ T5815] loop5: detected capacity change from 0 to 1024 [ 220.725018][ T5815] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 220.776239][ T4546] hfsplus: bad catalog file entry [ 220.781910][ T4546] hfsplus: b-tree write err: -5, ino 3 [ 221.945977][ T5833] loop3: detected capacity change from 0 to 1764 [ 221.982633][ T4976] EXT4-fs (loop5): unmounting filesystem. [ 222.758244][ T5833] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 224.123267][ T5849] loop5: detected capacity change from 0 to 16 [ 224.178227][ T5849] erofs: (device loop5): mounted with root inode @ nid 36. [ 225.409303][ T4420] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 225.610860][ T5872] loop3: detected capacity change from 0 to 256 [ 225.615390][ T4420] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 225.634147][ T4420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.728961][ T4420] usb 1-1: Product: syz [ 225.733327][ T4420] usb 1-1: Manufacturer: syz [ 225.739606][ T4420] usb 1-1: SerialNumber: syz [ 225.759797][ T4420] usb 1-1: config 0 descriptor?? [ 225.782021][ T4420] hub 1-1:0.0: bad descriptor, ignoring hub [ 225.789164][ T4420] hub: probe of 1-1:0.0 failed with error -5 [ 226.019126][ T4420] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 226.041769][ T4420] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 226.051985][ T4420] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 226.074231][ T4420] usb 1-1: media controller created [ 226.126401][ T4420] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.664171][ T5883] i2c i2c-1: Invalid block size returned: 204 [ 227.029575][ T4420] DVB: Unable to find symbol dib7000p_attach() [ 227.035776][ T4420] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 227.299184][ T4420] rc_core: IR keymap rc-dib0700-rc5 not found [ 227.491631][ T4420] Registered IR keymap rc-empty [ 227.503763][ T4420] dvb-usb: could not initialize remote control. [ 227.518423][ T4420] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 227.563455][ T4420] usb 1-1: USB disconnect, device number 4 [ 227.882864][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 227.907251][ T4420] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 228.185613][ T5906] loop5: detected capacity change from 0 to 16 [ 228.646228][ T5906] erofs: (device loop5): mounted with root inode @ nid 36. [ 228.940339][ T5913] tmpfs: Unknown parameter '> äù+ÕÊ”b§¶—ƒ"#:šSIOe F¥ã¬å´ù+Bn¯ºTÈË[âå ÙÝcÄÿœe@hü)mvín‰ŒžEP€H"JI)…[7QóEa—çéž}<¨¤ù¦À¡øþèU3ÔÙ½oµv¬bU¥Ìä22ìPFFýy§Õqë¶cÖ¸Uœ¦½9þº€ÛùŽÌ¯ö¢î’ýØtÖª   [ 228.940339][ T5913] ìæcÁ„±œÝU]>r†(¯€Ê«}~5ºïÒ\¿ê®¡ôæyl¶üø' [ 229.015908][ T5907] loop0: detected capacity change from 0 to 32768 [ 229.160326][ T5913] overlayfs: failed to resolve './file1': -2 [ 229.594071][ T5919] trusted_key: encrypted_key: insufficient parameters specified [ 231.716029][ T5935] Illegal XDP return value 4294900224 on prog (id 24) dev syz_tun, expect packet loss! [ 232.889615][ T5955] loop3: detected capacity change from 0 to 1024 [ 232.896925][ T5955] ext4: Bad value for 'barrier' [ 233.135728][ T5958] loop4: detected capacity change from 0 to 256 [ 233.192953][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.350'. [ 233.752465][ T5958] exfat: Deprecated parameter 'utf8' [ 234.049510][ T5958] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 234.094306][ T5971] loop2: detected capacity change from 0 to 16 [ 234.796300][ T5971] erofs: (device loop2): mounted with root inode @ nid 36. [ 235.755330][ T5992] loop5: detected capacity change from 0 to 512 [ 235.952552][ T5992] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 236.029869][ T5992] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.025529][ T4976] EXT4-fs (loop5): unmounting filesystem. [ 238.324313][ T6020] loop5: detected capacity change from 0 to 32768 [ 238.981961][ T6020] XFS (loop5): Mounting V5 Filesystem [ 239.344581][ T6020] XFS (loop5): Ending clean mount [ 239.355376][ T6020] XFS (loop5): Quotacheck needed: Please wait. [ 239.406757][ T6042] loop2: detected capacity change from 0 to 1024 [ 239.426810][ T6042] EXT4-fs: inline encryption not supported [ 239.433438][ T6042] EXT4-fs: inline encryption not supported [ 239.439802][ T6042] EXT4-fs: Ignoring removed nobh option [ 239.445777][ T6042] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.453127][ T6042] ext4: Unknown parameter 'nodioread_' [ 239.458686][ T6020] XFS (loop5): Quotacheck: Done. [ 240.533816][ T4976] XFS (loop5): Unmounting Filesystem [ 241.204880][ T6053] loop4: detected capacity change from 0 to 512 [ 242.816047][ T6072] loop0: detected capacity change from 0 to 16 [ 242.933572][ T6072] erofs: (device loop0): mounted with root inode @ nid 36. [ 243.171577][ T6053] EXT4-fs (loop4): Test dummy encryption mode enabled [ 243.178443][ T6053] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 243.220925][ T6053] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.373: bad orphan inode 131083 [ 243.256397][ T6053] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 243.779553][ T6088] loop2: detected capacity change from 0 to 256 [ 244.351847][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 246.394342][ T6122] loop4: detected capacity change from 0 to 128 [ 246.415006][ T6118] loop0: detected capacity change from 0 to 1024 [ 246.578012][ T6118] EXT4-fs: inline encryption not supported [ 246.619898][ T6122] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 246.646429][ T6118] EXT4-fs: inline encryption not supported [ 246.659214][ T6122] hpfs: filesystem error: improperly stopped [ 247.043445][ T6122] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 247.052154][ T6118] EXT4-fs: Ignoring removed nobh option [ 247.058460][ T6118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.089006][ T6122] hpfs: You really don't want any checks? You are crazy... [ 247.175626][ T6118] ext4: Unknown parameter 'nodioread_' [ 247.199314][ T6122] hpfs: hpfs_map_sector(): read error [ 247.204802][ T6122] hpfs: code page support is disabled [ 247.314361][ T6122] hpfs: hpfs_map_4sectors(): unaligned read [ 247.376447][ T6122] hpfs: hpfs_map_4sectors(): unaligned read [ 247.400789][ T6122] hpfs: filesystem error: unable to find root dir [ 247.809792][ T6122] hpfs: hpfs_map_4sectors(): unaligned read [ 247.844619][ T6131] loop3: detected capacity change from 0 to 1024 [ 248.031851][ T6138] binder: 6134:6138 ioctl c0306201 2000000003c0 returned -14 [ 248.166076][ T6131] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 249.184695][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 253.674308][ T6182] loop4: detected capacity change from 0 to 128 [ 253.735407][ T6182] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 253.835137][ T6182] hpfs: filesystem error: improperly stopped [ 253.889351][ T6182] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 253.897151][ T6182] hpfs: You really don't want any checks? You are crazy... [ 254.026633][ T6182] hpfs: hpfs_map_sector(): read error [ 254.041153][ T6186] loop5: detected capacity change from 0 to 1024 [ 254.070130][ T6186] ext4: Bad value for 'barrier' [ 254.089646][ T6182] hpfs: code page support is disabled [ 254.095214][ T6182] hpfs: hpfs_map_4sectors(): unaligned read [ 254.129487][ T6182] hpfs: hpfs_map_4sectors(): unaligned read [ 254.145716][ T6182] hpfs: filesystem error: unable to find root dir [ 254.162630][ T4271] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.318117][ T6182] hpfs: hpfs_map_4sectors(): unaligned read [ 254.392862][ T6191] netlink: 20 bytes leftover after parsing attributes in process `syz.5.408'. [ 255.326746][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.336129][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.344578][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.563855][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.410'. [ 256.131824][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.138407][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.494231][ T6205] loop3: detected capacity change from 0 to 1024 [ 256.544578][ T6205] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.586140][ T6205] EXT4-fs: Ignoring removed bh option [ 258.088476][ T6205] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 258.737210][ T6229] loop4: detected capacity change from 0 to 1024 [ 258.831681][ T6229] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 259.170640][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 259.855479][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 261.646019][ T6258] loop0: detected capacity change from 0 to 1024 [ 261.750021][ T6258] ext4: Bad value for 'barrier' [ 261.813469][ T4490] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.056574][ T6266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.421'. [ 262.636765][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 263.221618][ T6278] loop0: detected capacity change from 0 to 32768 [ 263.230463][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 263.264325][ T6278] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.426 (6278) [ 263.292903][ T6278] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 263.303219][ T6278] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 263.312020][ T6278] BTRFS info (device loop0): using free space tree [ 264.469006][ T6278] BTRFS info (device loop0): enabling ssd optimizations [ 264.478697][ T6311] loop5: detected capacity change from 0 to 1024 [ 264.511381][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.529413][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.651941][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.775478][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.783205][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 264.798734][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.909252][ T6311] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 265.545364][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.813739][ T4976] EXT4-fs (loop5): unmounting filesystem. [ 267.071983][ T4276] Bluetooth: hci2: command 0x0409 tx timeout [ 267.403768][ T6335] overlayfs: missing 'lowerdir' [ 267.404071][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.937617][ T4269] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 268.560412][ T6345] loop4: detected capacity change from 0 to 2048 [ 268.635990][ T6345] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.643322][ T6350] loop3: detected capacity change from 0 to 512 [ 268.670888][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.676238][ T6350] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 269.069270][ T6350] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 269.099014][ T6351] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 269.121519][ T6350] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 269.161643][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 269.181796][ T6350] System zones: 1-12 [ 269.280370][ T6350] EXT4-fs (loop3): orphan cleanup on readonly fs [ 269.405161][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.429767][ T6350] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.437: invalid indirect mapped block 2 (level 2) [ 269.493902][ T6350] EXT4-fs (loop3): Remounting filesystem read-only [ 269.535608][ T6350] EXT4-fs (loop3): 1 truncate cleaned up [ 269.574915][ T6350] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 269.969607][ T6359] loop0: detected capacity change from 0 to 256 [ 271.243987][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 271.269590][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 271.358142][ T6369] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 272.111009][ T6306] chnl_net:caif_netlink_parms(): no params data found [ 272.115366][ T6371] loop3: detected capacity change from 0 to 1024 [ 272.399995][ T6371] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 273.268149][ T6380] loop0: detected capacity change from 0 to 4096 [ 273.309424][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 273.320339][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 273.367799][ T6380] ntfs3: Unknown parameter 'hide_dot_files' [ 275.559045][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.567026][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.607993][ T6306] device bridge_slave_0 entered promiscuous mode [ 277.171491][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.178755][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.324889][ T6306] device bridge_slave_1 entered promiscuous mode [ 277.927682][ T6306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.075501][ T6306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.762768][ T6306] team0: Port device team_slave_0 added [ 278.791612][ T6306] team0: Port device team_slave_1 added [ 279.381475][ T6429] loop3: detected capacity change from 0 to 1024 [ 279.487518][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.505420][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.599868][ T6306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.613587][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.621089][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.648227][ T6306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.652201][ T6429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 279.884561][ T6437] loop4: detected capacity change from 0 to 4096 [ 279.915088][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 279.947104][ T6437] ntfs3: Unknown parameter 'hide_dot_files' [ 282.785804][ T6445] loop5: detected capacity change from 0 to 2048 [ 282.823127][ T6306] device hsr_slave_0 entered promiscuous mode [ 282.879990][ T6306] device hsr_slave_1 entered promiscuous mode [ 282.910866][ T6445] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.928275][ T6306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.956577][ T6306] Cannot create hsr debugfs directory [ 283.136777][ T6456] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh [ 283.549539][ T9] device hsr_slave_0 left promiscuous mode [ 283.566742][ T9] device hsr_slave_1 left promiscuous mode [ 284.161415][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.170557][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.208913][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.223339][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.237507][ T9] device bridge_slave_1 left promiscuous mode [ 284.245161][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.262879][ T9] device bridge_slave_0 left promiscuous mode [ 284.281532][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.520736][ T9] device veth1_macvtap left promiscuous mode [ 284.526858][ T9] device veth0_macvtap left promiscuous mode [ 284.578084][ T9] device veth1_vlan left promiscuous mode [ 284.587577][ T9] device veth0_vlan left promiscuous mode [ 286.342279][ T6481] loop5: detected capacity change from 0 to 32768 [ 286.613857][ T6481] XFS (loop5): Mounting V5 Filesystem [ 286.646918][ T6481] XFS (loop5): Ending clean mount [ 286.745626][ T6496] loop3: detected capacity change from 0 to 1024 [ 286.928661][ T6496] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 287.260872][ T6502] loop0: detected capacity change from 0 to 128 [ 287.379947][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 287.391454][ T6502] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 287.535002][ T6502] hpfs: filesystem error: improperly stopped [ 287.598929][ T6502] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 287.670664][ T6502] hpfs: You really don't want any checks? You are crazy... [ 287.678347][ T6502] hpfs: hpfs_map_sector(): read error [ 287.722330][ T6481] syz.5.463 (6481) used greatest stack depth: 20368 bytes left [ 287.748205][ T6502] hpfs: code page support is disabled [ 287.764994][ T6502] hpfs: hpfs_map_4sectors(): unaligned read [ 287.771362][ T6502] hpfs: hpfs_map_4sectors(): unaligned read [ 289.096718][ T6502] hpfs: filesystem error: unable to find root dir [ 289.175125][ T6504] loop3: detected capacity change from 0 to 4096 [ 289.183031][ T4976] XFS (loop5): Unmounting Filesystem [ 289.213424][ T6504] ntfs3: Unknown parameter 'hide_dot_files' [ 292.454487][ T6527] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 292.464779][ T6527] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 292.495595][ T6519] fuse: Unknown parameter 'group_id00000000000000000000' [ 292.819036][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 292.881293][ T9] team0 (unregistering): Port device team_slave_1 removed [ 293.015006][ T7] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 293.036929][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.064428][ T7] usb 5-1: config 0 descriptor?? [ 293.086645][ T9] team0 (unregistering): Port device team_slave_0 removed [ 293.240349][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.887971][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.687030][ T6552] loop3: detected capacity change from 0 to 4096 [ 295.732203][ T6552] ntfs3: Unknown parameter 'hide_dot_files' [ 297.751601][ T9] bond0 (unregistering): Released all slaves [ 298.018567][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 298.119133][ T7] [drm] vendor descriptor length:92 data:00 00 00 00 00 00 00 00 00 00 00 [ 298.127851][ T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 298.169128][ T7] [drm:udl_init] *ERROR* Selecting channel failed [ 298.247398][ T7] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 298.280573][ T7] [drm] Initialized udl on minor 2 [ 298.295743][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 298.307797][ T7] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 298.336695][ T7] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 298.376193][ T7] usb 5-1: USB disconnect, device number 2 [ 298.415739][ T5401] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 298.456486][ T5401] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 298.465428][ T5401] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 299.718784][ T6587] loop3: detected capacity change from 0 to 128 [ 299.839544][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 299.851555][ T6587] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 299.956039][ T6587] hpfs: filesystem error: improperly stopped [ 300.006077][ T6587] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 300.068989][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 300.102827][ T6587] hpfs: You really don't want any checks? You are crazy... [ 300.126176][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 300.141222][ T6587] hpfs: hpfs_map_sector(): read error [ 300.146790][ T6587] hpfs: code page support is disabled [ 300.185457][ T6306] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 300.195932][ T6587] hpfs: hpfs_map_4sectors(): unaligned read [ 300.206189][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 300.239854][ T6587] hpfs: hpfs_map_4sectors(): unaligned read [ 300.245830][ T6587] hpfs: filesystem error: unable to find root dir [ 300.248929][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 300.293455][ T7] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 300.307391][ T6306] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 300.344954][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.375715][ T7] usb 1-1: Product: syz [ 300.394024][ T7] usb 1-1: Manufacturer: syz [ 300.398702][ T7] usb 1-1: SerialNumber: syz [ 300.446634][ T6306] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 300.469544][ T7] usb 1-1: config 0 descriptor?? [ 300.508315][ T6306] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 300.532588][ T7] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 300.739719][ T7] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 301.041400][ T7] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 301.245879][ T7] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 301.551428][ T6306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.612849][ T7] usb 1-1: USB disconnect, device number 5 [ 301.694187][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.735636][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.780977][ T6306] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.811119][ T6608] loop3: detected capacity change from 0 to 4096 [ 301.831163][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.846219][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.886146][ T6608] ntfs3: Unknown parameter 'hide_dot_files' [ 301.892736][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.900117][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.920073][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.929789][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.945699][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.952912][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.969460][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.234084][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.290084][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.359251][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 303.413905][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.491927][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.529638][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.558550][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.568456][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.591230][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.610757][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.675869][ T22] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 303.708463][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.754758][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.786750][ T22] usb 5-1: config 0 descriptor?? [ 304.045344][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.224385][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.271843][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.454123][ T22] usb 5-1: language id specifier not provided by device, defaulting to English [ 305.373882][ T22] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 306.098950][ T22] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 306.168079][ T22] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 306.188529][ T6641] loop5: detected capacity change from 0 to 128 [ 306.200719][ T22] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 306.208277][ T22] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 306.255177][ T6641] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 306.284673][ T22] usb 5-1: USB disconnect, device number 3 [ 306.315982][ T6641] hpfs: filesystem error: improperly stopped [ 306.343897][ T6641] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 306.410362][ T6641] hpfs: You really don't want any checks? You are crazy... [ 306.417988][ T6641] hpfs: hpfs_map_sector(): read error [ 306.460619][ T6641] hpfs: code page support is disabled [ 306.466212][ T6641] hpfs: hpfs_map_4sectors(): unaligned read [ 306.506766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.532687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.543383][ T6641] hpfs: hpfs_map_4sectors(): unaligned read [ 306.560751][ T6306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.587271][ T6641] hpfs: filesystem error: unable to find root dir [ 306.619101][ T6641] hpfs: hpfs_map_4sectors(): unaligned read [ 307.174684][ T6658] loop5: detected capacity change from 0 to 16 [ 307.196693][ T6658] erofs: (device loop5): mounted with root inode @ nid 36. [ 307.468651][ T6662] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 308.642181][ T6680] loop5: detected capacity change from 0 to 2048 [ 308.701461][ T6680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.880422][ T6690] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh [ 310.912816][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 310.979778][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 311.022481][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 311.042047][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.053978][ T6306] device veth0_vlan entered promiscuous mode [ 311.065403][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.249770][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.326796][ T6306] device veth1_vlan entered promiscuous mode [ 312.448861][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 312.462311][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 312.518589][ T6306] device veth0_macvtap entered promiscuous mode [ 312.541198][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 312.551453][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.605988][ T6306] device veth1_macvtap entered promiscuous mode [ 312.615465][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 312.630076][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 312.693497][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.769019][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.811896][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.844340][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.919188][ T6722] sg_write: data in/out 124/1 bytes for SCSI command 0xdb-- guessing data in; [ 312.919188][ T6722] program syz.3.517 not setting count and/or reply_len properly [ 312.964473][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.068995][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.079780][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.479377][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.525290][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.543196][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 313.560145][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.600390][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.631129][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.643283][ T6736] overlayfs: missing 'lowerdir' [ 313.653744][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.678324][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.710319][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.759018][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.780032][ T6306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.797781][ T6306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.852893][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.865859][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 313.881440][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 313.942934][ T6306] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.086349][ T6742] loop0: detected capacity change from 0 to 2048 [ 314.103077][ T6306] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.803314][ T6742] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.820883][ T6306] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.919135][ T6306] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.054769][ T6750] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 315.757302][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.824961][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.896633][ T6757] loop5: detected capacity change from 0 to 1024 [ 315.914650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 315.940127][ T6757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.977598][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.987541][ T6757] EXT4-fs: Ignoring removed bh option [ 315.997750][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.074493][ T6757] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 316.092504][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 317.167379][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.178508][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.269781][ T5401] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 317.519028][ T5401] usb 7-1: device descriptor read/64, error -71 [ 317.797720][ T6782] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 317.832043][ T5401] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 318.018941][ T5401] usb 7-1: device descriptor read/64, error -71 [ 318.139845][ T5401] usb usb7-port1: attempt power cycle [ 318.557086][ T5401] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 319.060766][ T5401] usb 7-1: device descriptor read/8, error -71 [ 319.304706][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 319.328987][ T5401] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 319.351458][ T6802] device bridge_slave_1 left promiscuous mode [ 319.369666][ T5401] usb 7-1: device descriptor read/8, error -71 [ 319.489252][ T5401] usb usb7-port1: unable to enumerate USB device [ 319.661638][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.580732][ T6802] device bridge_slave_0 left promiscuous mode [ 320.657552][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.837795][ T4976] EXT4-fs (loop5): unmounting filesystem. [ 321.896154][ T6821] loop6: detected capacity change from 0 to 32768 [ 321.917364][ T6821] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.541 (6821) [ 321.938054][ T6821] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 321.948352][ T6821] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 321.957072][ T6821] BTRFS info (device loop6): enabling ssd optimizations [ 321.964368][ T6821] BTRFS info (device loop6): using spread ssd allocation scheme [ 321.972138][ T6821] BTRFS info (device loop6): setting nodatacow, compression disabled [ 321.980246][ T6821] BTRFS info (device loop6): not using ssd optimizations [ 321.987371][ T6821] BTRFS info (device loop6): not using spread ssd allocation scheme [ 321.995440][ T6821] BTRFS info (device loop6): setting datacow [ 322.001590][ T6821] BTRFS info (device loop6): turning on flush-on-commit [ 322.009136][ T6821] BTRFS info (device loop6): max_inline at 0 [ 322.015227][ T6821] BTRFS info (device loop6): using free space tree [ 322.667868][ T6306] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 322.850524][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 323.014540][ T6856] loop5: detected capacity change from 0 to 256 [ 323.069102][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 323.089966][ T22] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 323.119006][ T22] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.130174][ T22] usb 1-1: config 0 interface 0 has no altsetting 0 [ 323.155239][ T22] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 323.165164][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.173371][ T22] usb 1-1: Product: syz [ 323.178165][ T22] usb 1-1: Manufacturer: syz [ 323.184366][ T22] usb 1-1: SerialNumber: syz [ 323.210810][ T22] usb 1-1: config 0 descriptor?? [ 323.256484][ T22] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 323.546046][ T22] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 323.553895][ T22] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 323.563216][ T22] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 323.909177][ T4762] usb 1-1: USB disconnect, device number 6 [ 324.048300][ T6867] loop3: detected capacity change from 0 to 1024 [ 324.104449][ T6867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.139010][ T6867] EXT4-fs: Ignoring removed bh option [ 324.250014][ T6870] binder: 6869:6870 ioctl c0306201 2000000003c0 returned -14 [ 324.277183][ T6867] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 324.345726][ T6870] binder_alloc: 6869: binder_alloc_buf, no vma [ 325.930631][ T6891] sg_write: data in/out 124/1 bytes for SCSI command 0xdb-- guessing data in; [ 325.930631][ T6891] program syz.5.553 not setting count and/or reply_len properly [ 326.107425][ T6898] overlayfs: missing 'workdir' [ 326.485973][ T6906] loop4: detected capacity change from 0 to 256 [ 328.316118][ T5400] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 328.550130][ T5400] usb 5-1: not running at top speed; connect to a high speed hub [ 328.561764][ T5400] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 328.571482][ T5400] usb 5-1: config 1 has no interface number 1 [ 328.577782][ T5400] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 328.661023][ T5400] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.722560][ T5400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.732484][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 328.809255][ T5400] usb 5-1: Product: syz [ 328.823802][ T5400] usb 5-1: Manufacturer: syz [ 328.828677][ T5400] usb 5-1: SerialNumber: syz [ 329.645612][ T5400] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 330.467975][ T5400] usb 5-1: failed to enable PITCH for EP 0x82 [ 331.391300][ T5400] usb 5-1: USB disconnect, device number 4 [ 331.901497][ T6968] loop4: detected capacity change from 0 to 32768 [ 331.922378][ T6968] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.572 (6968) [ 331.957956][ T6968] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.968313][ T6968] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 331.977168][ T6968] BTRFS info (device loop4): enabling ssd optimizations [ 331.984132][ T6968] BTRFS info (device loop4): using spread ssd allocation scheme [ 331.991969][ T6968] BTRFS info (device loop4): setting nodatacow, compression disabled [ 332.000053][ T6968] BTRFS info (device loop4): not using ssd optimizations [ 332.007085][ T6968] BTRFS info (device loop4): not using spread ssd allocation scheme [ 332.015341][ T6968] BTRFS info (device loop4): setting datacow [ 332.021437][ T6968] BTRFS info (device loop4): turning on flush-on-commit [ 332.028401][ T6968] BTRFS info (device loop4): max_inline at 0 [ 332.034451][ T6968] BTRFS info (device loop4): using free space tree [ 332.088518][ T6965] loop5: detected capacity change from 0 to 2048 [ 332.102406][ T4492] udevd[4492]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.241960][ T6965] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.655629][ T6988] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh [ 333.457056][ T4280] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 334.669150][ T128] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 334.868956][ T128] usb 6-1: Using ep0 maxpacket: 8 [ 335.074516][ T128] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 335.095914][ T128] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.127221][ T128] usb 6-1: config 0 interface 0 has no altsetting 0 [ 335.140155][ T128] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 335.168929][ T128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.189143][ T128] usb 6-1: Product: syz [ 335.193658][ T128] usb 6-1: Manufacturer: syz [ 335.208999][ T128] usb 6-1: SerialNumber: syz [ 335.333574][ T128] usb 6-1: config 0 descriptor?? [ 335.695529][ T128] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 335.772909][ T128] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 335.783893][ T128] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 335.805268][ T128] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 336.130996][ T5401] usb 6-1: USB disconnect, device number 4 [ 338.509495][ T4423] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 338.599474][ T4420] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 339.117254][ T4423] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 339.159122][ T4423] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.167214][ T4423] usb 4-1: Product: syz [ 339.199327][ T4423] usb 4-1: Manufacturer: syz [ 339.204219][ T4423] usb 4-1: SerialNumber: syz [ 339.214785][ T4420] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 339.236684][ T4420] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.256060][ T4423] usb 4-1: config 0 descriptor?? [ 339.278941][ T4420] usb 6-1: Product: syz [ 339.283459][ T4420] usb 6-1: Manufacturer: syz [ 339.290819][ T4423] ch341 4-1:0.0: ch341-uart converter detected [ 339.317417][ T4420] usb 6-1: SerialNumber: syz [ 339.349182][ T4420] usb 6-1: config 0 descriptor?? [ 339.363973][ T4420] hub 6-1:0.0: bad descriptor, ignoring hub [ 339.402583][ T4420] hub: probe of 6-1:0.0 failed with error -5 [ 339.466408][ T7055] blktrace: Concurrent blktraces are not allowed on nullb0 [ 339.586022][ T4420] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 339.631793][ T4420] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 339.647593][ T4420] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 339.662581][ T4420] usb 6-1: media controller created [ 339.903780][ T4420] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.224196][ T7057] fuse: Bad value for 'fd' [ 340.327030][ T4423] usb 4-1: failed to send control message: -71 [ 340.357396][ T4423] ch341-uart: probe of ttyUSB0 failed with error -71 [ 340.370828][ T4420] DVB: Unable to find symbol dib7000p_attach() [ 340.385460][ T4420] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 340.428269][ T4423] usb 4-1: USB disconnect, device number 5 [ 340.436631][ T4423] ch341 4-1:0.0: device disconnected [ 340.509011][ T5257] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 340.645674][ T7067] loop4: detected capacity change from 0 to 128 [ 340.704864][ T7067] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 340.716977][ T5257] usb 7-1: Using ep0 maxpacket: 16 [ 340.724343][ T5257] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 340.728983][ T7067] hpfs: filesystem error: improperly stopped [ 340.749100][ T4420] rc_core: IR keymap rc-dib0700-rc5 not found [ 340.756632][ T4420] Registered IR keymap rc-empty [ 340.768178][ T5257] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 340.774452][ T7067] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 340.826070][ T5257] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.846923][ T7067] hpfs: You really don't want any checks? You are crazy... [ 340.853950][ T5257] usb 7-1: Product: syz [ 340.883089][ T5257] usb 7-1: Manufacturer: syz [ 340.889481][ T7067] hpfs: hpfs_map_sector(): read error [ 340.896624][ T5257] usb 7-1: SerialNumber: syz [ 340.914257][ T7067] hpfs: code page support is disabled [ 340.949415][ T7067] hpfs: hpfs_map_4sectors(): unaligned read [ 340.968212][ T5257] usb 7-1: config 0 descriptor?? [ 340.978012][ T7067] hpfs: hpfs_map_4sectors(): unaligned read [ 340.998747][ T5257] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 341.004743][ T7067] hpfs: filesystem error: unable to find root dir [ 341.049087][ T5257] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 341.114207][ T7067] hpfs: hpfs_map_4sectors(): unaligned read [ 341.909195][ T5257] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 343.631644][ T7078] binder: 7077:7078 ioctl c0306201 2000000003c0 returned -14 [ 343.836572][ T5257] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 343.897322][ T5257] em28xx 7-1:0.0: board has no eeprom [ 344.776805][ T5257] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 344.844044][ T4420] dvb-usb: could not initialize remote control. [ 344.909144][ T4420] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 344.992353][ T5257] em28xx 7-1:0.0: dvb set to bulk mode. [ 345.143862][ T14] em28xx 7-1:0.0: Binding DVB extension [ 345.256996][ T4420] usb 6-1: USB disconnect, device number 5 [ 345.270225][ T5257] usb 7-1: USB disconnect, device number 6 [ 345.330721][ T5257] em28xx 7-1:0.0: Disconnecting em28xx [ 345.413999][ T4420] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 346.215436][ T14] em28xx 7-1:0.0: Registering input extension [ 346.239769][ T5257] em28xx 7-1:0.0: Closing input extension [ 346.390419][ T5257] em28xx 7-1:0.0: Freeing device [ 347.343564][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.604'. [ 347.470323][ T7119] device bridge_slave_1 left promiscuous mode [ 347.498539][ T7126] binder: BINDER_SET_CONTEXT_MGR already set [ 347.509099][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.548183][ T7126] binder: 7125:7126 ioctl 4018620d 200000000040 returned -16 [ 349.285324][ T7119] device bridge_slave_0 left promiscuous mode [ 349.307609][ T7134] binder: 7125:7134 ioctl c0306201 2000000003c0 returned -14 [ 349.320775][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.889045][ T4420] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 351.089427][ T4420] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 351.154616][ T4420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.178935][ T4420] usb 1-1: Product: syz [ 351.189163][ T4420] usb 1-1: Manufacturer: syz [ 351.211811][ T4420] usb 1-1: SerialNumber: syz [ 351.236857][ T4420] usb 1-1: config 0 descriptor?? [ 351.252415][ T4420] hub 1-1:0.0: bad descriptor, ignoring hub [ 351.272684][ T4420] hub: probe of 1-1:0.0 failed with error -5 [ 351.452784][ T4420] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 351.492386][ T4420] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 351.535452][ T4420] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 351.544898][ T4420] usb 1-1: media controller created [ 351.618141][ T4420] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.878345][ T4420] DVB: Unable to find symbol dib7000p_attach() [ 352.884926][ T4420] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 353.769110][ T4420] rc_core: IR keymap rc-dib0700-rc5 not found [ 353.775295][ T4420] Registered IR keymap rc-empty [ 353.817948][ T7181] vivid-002: disconnect [ 353.856503][ T7181] vivid-002: reconnect [ 357.429883][ T4420] dvb-usb: could not initialize remote control. [ 357.445746][ T4420] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 357.540116][ T4420] usb 1-1: USB disconnect, device number 7 [ 357.632964][ T4420] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 358.109399][ T4317] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 358.288890][ T4317] usb 5-1: Using ep0 maxpacket: 8 [ 358.291403][ T4317] usb 5-1: config 1 interface 0 has no altsetting 0 [ 358.293862][ T4317] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 358.293895][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.293917][ T4317] usb 5-1: Product: syz [ 358.293933][ T4317] usb 5-1: Manufacturer: syz [ 358.293948][ T4317] usb 5-1: SerialNumber: syz [ 359.041514][ T4317] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input9 [ 359.047379][ T3623] bcm5974 5-1:1.0: could not read from device [ 359.137639][ T4317] usb 5-1: USB disconnect, device number 5 [ 359.721533][ T7234] binder: 7233:7234 ioctl c0306201 2000000003c0 returned -14 [ 363.381270][ T4317] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 363.489102][ T4515] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 363.569053][ T4317] usb 5-1: Using ep0 maxpacket: 8 [ 363.588245][ T4317] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 363.600481][ T4317] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 363.613361][ T4317] usb 5-1: config 0 interface 0 has no altsetting 0 [ 363.639519][ T4317] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 363.649000][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.657108][ T4317] usb 5-1: Product: syz [ 363.668090][ T4317] usb 5-1: Manufacturer: syz [ 363.675224][ T4317] usb 5-1: SerialNumber: syz [ 363.749930][ T4515] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 363.760930][ T4317] usb 5-1: config 0 descriptor?? [ 363.777210][ T4515] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.822483][ T4317] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 363.829632][ T4515] usb 7-1: Product: syz [ 363.833997][ T4515] usb 7-1: Manufacturer: syz [ 363.839831][ T4515] usb 7-1: SerialNumber: syz [ 363.872969][ T4515] usb 7-1: config 0 descriptor?? [ 363.892783][ T4515] hub 7-1:0.0: bad descriptor, ignoring hub [ 363.899046][ T4515] hub: probe of 7-1:0.0 failed with error -5 [ 364.032408][ T4317] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 364.044221][ T4317] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 364.054091][ T4317] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 364.100160][ T4515] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 364.125526][ T4515] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 364.176239][ T4515] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 364.232067][ T4515] usb 7-1: media controller created [ 364.260697][ T5257] usb 5-1: USB disconnect, device number 6 [ 364.330182][ T4515] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.731313][ T4515] DVB: Unable to find symbol dib7000p_attach() [ 364.740059][ T4515] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 364.887909][ T7281] usb usb8: usbfs: process 7281 (syz.5.644) did not claim interface 0 before use [ 365.060719][ T7284] binder: 7283:7284 ioctl c0306201 2000000003c0 returned -14 [ 365.108994][ T4515] rc_core: IR keymap rc-dib0700-rc5 not found [ 365.117138][ T4515] Registered IR keymap rc-empty [ 366.026064][ T7297] loop3: detected capacity change from 0 to 2048 [ 366.082889][ T7297] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.187209][ T7300] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 367.920737][ T5257] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 368.169010][ T5257] usb 4-1: Using ep0 maxpacket: 8 [ 368.180060][ T5257] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.321839][ T5257] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.528279][ T5257] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.640059][ T5257] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.850297][ T5257] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 368.895435][ T5257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.195238][ T7330] binder: 7329:7330 ioctl c0306201 2000000003c0 returned -14 [ 369.233399][ T5257] usb 4-1: GET_CAPABILITIES returned 0 [ 369.242249][ T5257] usbtmc 4-1:16.0: can't read capabilities [ 369.334913][ T4515] dvb-usb: could not initialize remote control. [ 369.348713][ T4515] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 369.435196][ T4515] usb 7-1: USB disconnect, device number 7 [ 369.444175][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.453426][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.462567][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.471798][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.480882][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.568196][ T4515] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 369.689756][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.698908][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.708111][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.717416][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.769401][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.778626][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.787733][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.796839][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.805932][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.842486][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.851640][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.880648][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.895107][ T4515] usb 4-1: USB disconnect, device number 6 [ 370.494244][ T7351] loop4: detected capacity change from 0 to 256 [ 371.132622][ T7360] sg_write: data in/out 124/1 bytes for SCSI command 0xdb-- guessing data in; [ 371.132622][ T7360] program syz.6.663 not setting count and/or reply_len properly [ 372.946331][ T7377] CIFS: Unable to determine destination address [ 373.018112][ T7378] loop2: detected capacity change from 0 to 7 [ 373.100103][ T7378] Dev loop2: unable to read RDB block 7 [ 373.106441][ T7378] loop2: unable to read partition table [ 373.114231][ T7378] loop2: partition table beyond EOD, truncated [ 373.120633][ T7378] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 373.669374][ T7374] binder: BINDER_SET_CONTEXT_MGR already set [ 373.888922][ T7385] blktrace: Concurrent blktraces are not allowed on nullb0 [ 374.062285][ T7374] binder: 7373:7374 ioctl 4018620d 200000000040 returned -16 [ 374.694104][ T7398] QAT: failed to copy from user cfg_data. [ 374.949051][ T5401] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 375.009403][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 375.169260][ T5401] usb 7-1: Using ep0 maxpacket: 8 [ 375.180020][ T5401] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.218921][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 375.231159][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.252963][ T5401] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 375.289170][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.298414][ T5401] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.314925][ T5401] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.330764][ T5401] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 375.343982][ T5401] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.352513][ T14] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 375.374430][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.386298][ T14] usb 1-1: Product: syz [ 375.395875][ T14] usb 1-1: Manufacturer: syz [ 375.405432][ T14] usb 1-1: SerialNumber: syz [ 375.605909][ T5401] usb 7-1: GET_CAPABILITIES returned 0 [ 375.616027][ T5401] usbtmc 7-1:16.0: can't read capabilities [ 375.629001][ T14] usb 1-1: 0:2 : does not exist [ 375.638715][ T14] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 375.678908][ T5257] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 375.742434][ T14] usb 1-1: USB disconnect, device number 8 [ 375.808363][ T4271] udevd[4271]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.826939][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 375.836039][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 375.845098][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 375.854152][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 375.863292][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 375.872347][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 375.881497][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 375.919163][ T5257] usb 6-1: Using ep0 maxpacket: 8 [ 375.929765][ T5257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 375.940082][ T5257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 375.949873][ T5257] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 375.959512][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 375.964479][ T5257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.968622][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 375.985943][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 375.994493][ T5257] usb 6-1: config 0 descriptor?? [ 375.995123][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 376.002010][ T5257] hso 6-1:0.0: Can't find BULK IN endpoint [ 376.144157][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 376.153308][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 376.162375][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 376.171588][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 376.180788][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 376.426041][ T5257] usb 7-1: USB disconnect, device number 8 [ 376.499820][ T7428] sg_write: data in/out 124/1 bytes for SCSI command 0xdb-- guessing data in; [ 376.499820][ T7428] program syz.4.679 not setting count and/or reply_len properly [ 377.704009][ T7441] CIFS: Unable to determine destination address [ 377.775325][ T7442] loop2: detected capacity change from 0 to 7 [ 377.795760][ T7442] Dev loop2: unable to read RDB block 7 [ 377.801516][ T7442] loop2: unable to read partition table [ 377.807364][ T7442] loop2: partition table beyond EOD, truncated [ 377.813671][ T7442] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 378.602911][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.609412][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.508303][ T7453] binder: BINDER_SET_CONTEXT_MGR already set [ 379.544773][ T7453] binder: 7451:7453 ioctl 4018620d 200000000040 returned -16 [ 379.869022][ T7463] loop0: detected capacity change from 0 to 1024 [ 379.893167][ T7463] ext4: Bad value for 'barrier' [ 381.967011][ T7482] CIFS: Unable to determine destination address [ 381.976911][ T7482] loop2: detected capacity change from 0 to 7 [ 381.995507][ T7482] Dev loop2: unable to read RDB block 7 [ 382.001207][ T7482] loop2: unable to read partition table [ 382.006994][ T7482] loop2: partition table beyond EOD, truncated [ 382.013697][ T7482] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 382.689570][ T14] usb 6-1: USB disconnect, device number 6 [ 383.468960][ T5400] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 383.683016][ T5400] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 383.711932][ T5400] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.754544][ T5400] usb 7-1: Product: syz [ 383.765647][ T5400] usb 7-1: Manufacturer: syz [ 383.789031][ T5400] usb 7-1: SerialNumber: syz [ 383.966941][ T7512] loop4: detected capacity change from 0 to 1024 [ 384.035778][ T7512] ext4: Bad value for 'barrier' [ 384.981376][ T5400] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 385.004741][ T5400] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 385.025200][ T5400] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 385.088281][ T5400] lan78xx: probe of 7-1:1.0 failed with error -71 [ 385.250552][ T5400] usb 7-1: USB disconnect, device number 9 [ 386.031679][ T7531] CIFS: Unable to determine destination address [ 386.064492][ T7531] loop2: detected capacity change from 0 to 7 [ 386.079428][ T7531] Dev loop2: unable to read RDB block 7 [ 386.085219][ T7531] loop2: unable to read partition table [ 386.091086][ T7531] loop2: partition table beyond EOD, truncated [ 386.097258][ T7531] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 386.459011][ T22] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 386.688716][ T22] usb 7-1: Using ep0 maxpacket: 32 [ 386.733279][ T22] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 386.744175][ T22] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 386.754959][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 386.765011][ T22] usb 7-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 386.792705][ T22] usb 7-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 386.801911][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.813303][ T22] usb 7-1: Product: syz [ 386.817585][ T22] usb 7-1: Manufacturer: syz [ 386.829813][ T22] usb 7-1: SerialNumber: syz [ 386.850153][ T22] usb 7-1: config 0 descriptor?? [ 386.868772][ T7533] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 386.993188][ T22] pn533_usb 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 388.045014][ T5400] usb 7-1: USB disconnect, device number 10 [ 388.568920][ T4317] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 388.769004][ T4317] usb 5-1: Using ep0 maxpacket: 8 [ 388.785929][ T4317] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 388.813563][ T4317] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 388.843922][ T4317] usb 5-1: config 0 interface 0 has no altsetting 0 [ 388.896079][ T4317] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 390.042348][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.050884][ T4317] usb 5-1: Product: syz [ 390.055297][ T4317] usb 5-1: Manufacturer: syz [ 390.060653][ T4317] usb 5-1: SerialNumber: syz [ 390.072798][ T4317] usb 5-1: config 0 descriptor?? [ 390.143946][ T4317] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 390.353892][ T4317] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 391.090182][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 391.270039][ T4317] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 391.286343][ T4317] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 391.303055][ T4317] usb 5-1: USB disconnect, device number 7 [ 392.729043][ T4420] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 392.803707][ T7601] blktrace: Concurrent blktraces are not allowed on nullb0 [ 393.474015][ T7604] loop6: detected capacity change from 0 to 32768 [ 393.495348][ T7604] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.728 (7604) [ 393.508898][ T4420] usb 4-1: Using ep0 maxpacket: 16 [ 393.523182][ T4420] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.534460][ T4420] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.545580][ T4420] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.553170][ T4420] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 393.562784][ T4420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.634448][ T4420] usb 4-1: config 0 descriptor?? [ 393.665617][ T7604] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 393.675955][ T7604] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 393.684738][ T7604] BTRFS info (device loop6): using free space tree [ 394.083550][ T4420] cougar 0003:060B:500A.0003: unexpected long global item [ 394.108663][ T4420] cougar 0003:060B:500A.0003: parse failed [ 394.114906][ T4420] cougar: probe of 0003:060B:500A.0003 failed with error -22 [ 394.640707][ T4420] usb 4-1: USB disconnect, device number 7 [ 394.680437][ T7604] BTRFS info (device loop6): enabling ssd optimizations [ 395.598289][ T6306] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 396.052059][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 396.368389][ T4490] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop6 scanned by udevd (4490) [ 399.293135][ T7669] blktrace: Concurrent blktraces are not allowed on nullb0 [ 400.767165][ T7690] loop4: detected capacity change from 0 to 1024 [ 400.799098][ T7690] EXT4-fs: Ignoring removed nomblk_io_submit option [ 400.826659][ T7690] EXT4-fs: Ignoring removed bh option [ 400.919575][ T7692] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 400.926549][ T7692] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 400.955529][ T7690] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 401.088465][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.750'. [ 401.125970][ T7692] vhci_hcd vhci_hcd.0: Device attached [ 401.329566][ T4420] vhci_hcd: vhci_device speed not set [ 401.409255][ T4420] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 404.248939][ T7722] sg_write: data in/out 124/1 bytes for SCSI command 0xdb-- guessing data in; [ 404.248939][ T7722] program syz.6.754 not setting count and/or reply_len properly [ 404.952248][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 405.379638][ T7739] loop0: detected capacity change from 0 to 32768 [ 405.410308][ T7739] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 406.608218][ T4490] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 408.391615][ T7767] loop3: detected capacity change from 0 to 1024 [ 408.470846][ T7767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 408.478195][ T7767] EXT4-fs: Ignoring removed bh option [ 408.867888][ T7767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 409.149894][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 409.350881][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.369069][ T7693] vhci_hcd: connection reset by peer [ 409.380693][ T5304] vhci_hcd: stop threads [ 409.388898][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.418364][ T5304] vhci_hcd: release socket [ 409.448861][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 409.505321][ T5304] vhci_hcd: disconnect device [ 409.526697][ T14] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 409.556287][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.570611][ T4420] vhci_hcd: vhci_device speed not set [ 409.591708][ T14] usb 1-1: config 0 descriptor?? [ 410.067454][ T7795] loop6: detected capacity change from 0 to 32768 [ 410.087343][ T14] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 410.104145][ T7795] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 410.114363][ T7795] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 410.123085][ T7795] BTRFS info (device loop6): using free space tree [ 410.217675][ T14] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 410.440913][ T14] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 410.476720][ T14] usb 1-1: USB disconnect, device number 9 [ 410.690534][ T7795] BTRFS info (device loop6): enabling ssd optimizations [ 412.054872][ T7812] fido_id[7812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 412.277158][ T6306] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 413.416243][ T4284] EXT4-fs (loop3): unmounting filesystem. [ 415.424983][ T7888] blktrace: Concurrent blktraces are not allowed on nullb0 [ 416.962086][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 417.014853][ T7905] device bridge_slave_1 left promiscuous mode [ 417.052034][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.299269][ T7909] loop0: detected capacity change from 0 to 32768 [ 417.306937][ T7909] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.787 (7909) [ 417.321751][ T7909] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 417.331932][ T7909] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 417.341181][ T7909] BTRFS info (device loop0): using free space tree [ 417.519423][ T7905] device bridge_slave_0 left promiscuous mode [ 417.539586][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.807426][ T7909] BTRFS info (device loop0): enabling ssd optimizations [ 420.113248][ T4269] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 420.124527][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.792'. [ 421.527070][ T7984] blktrace: Concurrent blktraces are not allowed on nullb0 [ 421.560441][ T4385] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 421.938891][ T4515] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 422.159181][ T7990] loop0: detected capacity change from 0 to 32768 [ 422.166675][ T4385] usb 6-1: Using ep0 maxpacket: 16 [ 422.179482][ T7990] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.803 (7990) [ 422.193597][ T7990] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 422.203927][ T7990] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 422.212664][ T7990] BTRFS info (device loop0): enabling ssd optimizations [ 422.219638][ T7990] BTRFS info (device loop0): using spread ssd allocation scheme [ 422.227280][ T7990] BTRFS info (device loop0): setting nodatacow, compression disabled [ 422.235492][ T7990] BTRFS info (device loop0): not using ssd optimizations [ 422.242849][ T7990] BTRFS info (device loop0): not using spread ssd allocation scheme [ 422.250886][ T7990] BTRFS info (device loop0): setting datacow [ 422.257422][ T7990] BTRFS info (device loop0): turning on flush-on-commit [ 422.264429][ T7990] BTRFS info (device loop0): max_inline at 0 [ 422.270718][ T7990] BTRFS info (device loop0): using free space tree [ 422.299677][ T4515] usb 5-1: Using ep0 maxpacket: 8 [ 422.306939][ T4515] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 422.309667][ T4385] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 422.336415][ T7994] loop6: detected capacity change from 0 to 2048 [ 422.353174][ T4515] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 422.358673][ T4385] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.392862][ T4515] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.426199][ T4515] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 422.428460][ T4385] usb 6-1: Product: syz [ 422.465292][ T7994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.471751][ T4385] usb 6-1: Manufacturer: syz [ 422.490939][ T4385] usb 6-1: SerialNumber: syz [ 422.498423][ T4515] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.500146][ T4385] r8152-cfgselector 6-1: config 0 descriptor?? [ 422.546607][ T4515] usb 5-1: Product: syz [ 422.551464][ T4515] usb 5-1: Manufacturer: syz [ 422.556219][ T4515] usb 5-1: SerialNumber: syz [ 422.623927][ T4515] usb 5-1: config 0 descriptor?? [ 422.662521][ T4515] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 422.722788][ T8011] UDF-fs: error (device loop6): udf_read_inode: (ino 1345) failed !bh [ 422.844300][ T4515] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 422.867653][ T4515] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 422.877881][ T4515] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 422.987017][ T4269] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 423.050303][ T4515] usb 5-1: USB disconnect, device number 8 [ 425.221025][ T8033] CIFS: Unable to determine destination address [ 425.251614][ T8033] loop2: detected capacity change from 0 to 7 [ 425.274209][ T8033] Dev loop2: unable to read RDB block 7 [ 425.280068][ T8033] loop2: unable to read partition table [ 425.285892][ T8033] loop2: partition table beyond EOD, truncated [ 425.292635][ T8033] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 425.378980][ T4385] r8152-cfgselector 6-1: Unknown version 0x0000 [ 425.447891][ T4385] r8152-cfgselector 6-1: Unknown version 0x0000 [ 425.473339][ T4385] r8152-cfgselector 6-1: bad CDC descriptors [ 425.635610][ T4385] r8152-cfgselector 6-1: Unknown version 0x0000 [ 425.688486][ T4385] r8152-cfgselector 6-1: USB disconnect, device number 7 [ 426.342886][ T8056] blktrace: Concurrent blktraces are not allowed on nullb0 [ 426.799047][ T8060] binder: 8059:8060 ioctl 4018620d 0 returned -22 [ 426.841811][ T8060] binder: 8059:8060 ioctl c0306201 2000000003c0 returned -14 [ 427.051110][ T8062] loop6: detected capacity change from 0 to 2048 [ 427.880207][ T8062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.043135][ T8075] CIFS: Unable to determine destination address [ 428.082629][ T8075] loop2: detected capacity change from 0 to 7 [ 428.133251][ T8075] Dev loop2: unable to read RDB block 7 [ 428.138969][ T8075] loop2: unable to read partition table [ 428.144769][ T8075] loop2: partition table beyond EOD, truncated [ 428.151074][ T8075] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 428.247024][ T8078] UDF-fs: error (device loop6): udf_read_inode: (ino 1345) failed !bh [ 428.285115][ T5400] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 428.668986][ T5400] usb 6-1: device descriptor read/64, error -71 [ 429.005715][ T5400] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 429.103210][ T5263] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 429.189215][ T5400] usb 6-1: device descriptor read/64, error -71 [ 429.481653][ T5400] usb usb6-port1: attempt power cycle [ 429.559161][ T5263] usb 4-1: Using ep0 maxpacket: 16 [ 429.667941][ T5263] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.747849][ T5263] usb 4-1: config 0 interface 0 has no altsetting 0 [ 429.783764][ T5263] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 429.829764][ T5263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.878451][ T5263] usb 4-1: config 0 descriptor?? [ 429.888936][ T5400] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 429.941029][ T5400] usb 6-1: device descriptor read/8, error -71 [ 430.549441][ T5400] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 430.629565][ T5400] usb 6-1: device descriptor read/8, error -71 [ 430.749479][ T5400] usb usb6-port1: unable to enumerate USB device [ 432.229047][ T8110] binder: BINDER_SET_CONTEXT_MGR already set [ 432.235102][ T8110] binder: 8109:8110 ioctl 4018620d 200000000040 returned -16 [ 432.407577][ T8118] loop0: detected capacity change from 0 to 1024 [ 432.430779][ T8118] ext4: Bad value for 'barrier' [ 432.473240][ T8121] device syzkaller1 entered promiscuous mode [ 432.487492][ T4271] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 432.739823][ T8126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.832'. [ 432.762435][ T5400] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 433.419468][ T5400] usb 5-1: Using ep0 maxpacket: 8 [ 433.434392][ T5400] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 433.464806][ T5400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.486281][ T5400] usb 5-1: Product: syz [ 433.506765][ T5400] usb 5-1: Manufacturer: syz [ 433.523644][ T5400] usb 5-1: SerialNumber: syz [ 433.542799][ T5400] usb 5-1: config 0 descriptor?? [ 433.593741][ T5400] gspca_main: se401-2.14.0 probing 047d:5003 [ 433.954223][ T5400] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 433.982756][ T5263] usbhid 4-1:0.0: can't add hid device: -71 [ 433.990991][ T5400] se401: probe of 5-1:0.0 failed with error -71 [ 434.009039][ T5263] usbhid: probe of 4-1:0.0 failed with error -71 [ 434.050181][ T5400] usb 5-1: USB disconnect, device number 9 [ 434.060276][ T5263] usb 4-1: USB disconnect, device number 8 [ 434.237597][ T8144] sg_write: data in/out 124/1 bytes for SCSI command 0xdb-- guessing data in; [ 434.237597][ T8144] program syz.3.840 not setting count and/or reply_len properly [ 434.254835][ T5401] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 434.418997][ T5401] usb 6-1: device descriptor read/64, error -71 [ 435.188958][ T5401] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 436.328919][ T5401] usb 6-1: device descriptor read/64, error -71 [ 436.739946][ T5401] usb usb6-port1: attempt power cycle [ 437.052547][ T8162] binder: BINDER_SET_CONTEXT_MGR already set [ 437.077223][ T8162] binder: 8161:8162 ioctl 4018620d 200000000040 returned -16 [ 440.043806][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.052879][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.730800][ T8203] loop6: detected capacity change from 0 to 256 [ 441.492848][ T8206] binder: BINDER_SET_CONTEXT_MGR already set [ 441.663788][ T8206] binder: 8205:8206 ioctl 4018620d 200000000040 returned -16 [ 442.338963][ T22] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 442.628859][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 442.636855][ T22] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 443.426923][ T22] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 443.437038][ T22] usb 7-1: config 0 interface 0 has no altsetting 0 [ 443.447461][ T22] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 443.487915][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.544823][ T22] usb 7-1: Product: syz [ 443.573700][ T22] usb 7-1: Manufacturer: syz [ 443.578378][ T22] usb 7-1: SerialNumber: syz [ 443.596994][ T22] usb 7-1: config 0 descriptor?? [ 443.605970][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'. [ 443.618381][ T8225] device bridge_slave_1 left promiscuous mode [ 443.661362][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.710261][ T8230] blktrace: Concurrent blktraces are not allowed on nullb0 [ 444.143723][ T22] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 444.157746][ T8225] device bridge_slave_0 left promiscuous mode [ 444.169202][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.345826][ T22] snd_usb_toneport 7-1:0.0: cannot get proper max packet size [ 444.378658][ T22] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 444.412349][ T22] snd_usb_toneport: probe of 7-1:0.0 failed with error -22 [ 444.995229][ T5256] usb 7-1: USB disconnect, device number 11 [ 445.385108][ T8241] loop0: detected capacity change from 0 to 32768 [ 445.469095][ T5400] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 445.518466][ T8241] XFS (loop0): Mounting V5 Filesystem [ 445.619421][ T8241] XFS (loop0): Ending clean mount [ 445.666100][ T5400] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.817180][ T5400] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.764694][ T5400] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.778045][ T5400] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.816195][ T5400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.930105][ T4269] XFS (loop0): Unmounting Filesystem [ 446.943829][ T5400] usb 6-1: config 0 descriptor?? [ 447.401718][ T5400] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 447.432974][ T5400] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 447.533435][ T5400] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 447.679123][ T22] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 447.730848][ T5400] usb 6-1: USB disconnect, device number 15 [ 447.879103][ T22] usb 7-1: Using ep0 maxpacket: 16 [ 447.896988][ T22] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.931638][ T22] usb 7-1: config 0 interface 0 has no altsetting 0 [ 447.991801][ T22] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 448.055280][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.085051][ T8263] fido_id[8263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 448.134493][ T22] usb 7-1: config 0 descriptor?? [ 448.655252][ T22] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 448.777823][ T8275] blktrace: Concurrent blktraces are not allowed on nullb0 [ 450.095492][ T5256] usb 7-1: USB disconnect, device number 12 [ 450.231003][ T8285] binder: 8283:8285 ioctl c0306201 0 returned -14 [ 450.260730][ T8285] binder: 8283:8285 ioctl c0306201 2000000003c0 returned -14 [ 450.314586][ T8278] fido_id[8278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 450.640129][ T5400] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 450.830701][ T5400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.887607][ T5400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.929414][ T5400] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 450.984111][ T5400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.057937][ T5400] usb 5-1: config 0 descriptor?? [ 451.502630][ T5400] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 451.597158][ T5400] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 451.598060][ T8291] loop5: detected capacity change from 0 to 32768 [ 451.641748][ T5256] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 451.729722][ T5400] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 452.214568][ T5256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.240303][ T5256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.241290][ T5400] usb 5-1: USB disconnect, device number 10 [ 452.263726][ T5256] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 452.285049][ T5400] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 452.298849][ T5256] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 452.349041][ T5256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.406467][ T8291] XFS (loop5): Mounting V5 Filesystem [ 452.425276][ T5256] usb 4-1: config 0 descriptor?? [ 452.488595][ T8291] XFS (loop5): Ending clean mount [ 452.668718][ T8309] fido_id[8309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 452.907045][ T5256] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 452.924143][ T4976] XFS (loop5): Unmounting Filesystem [ 453.035009][ T8320] blktrace: Concurrent blktraces are not allowed on nullb0 [ 453.448626][ T5256] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 453.533425][ T5256] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 453.618410][ T5256] usb 4-1: USB disconnect, device number 9 [ 453.803433][ T8324] binder: 8323:8324 ioctl c0306201 0 returned -14 [ 453.848430][ T8324] binder: 8323:8324 ioctl c0306201 2000000003c0 returned -14 [ 454.052412][ T8322] fido_id[8322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 455.139621][ T8341] loop2: detected capacity change from 0 to 7 [ 455.148412][ T4490] Dev loop2: unable to read RDB block 7 [ 455.156898][ T4490] loop2: unable to read partition table [ 455.164142][ T4490] loop2: partition table beyond EOD, truncated [ 455.216560][ T8341] Dev loop2: unable to read RDB block 7 [ 455.239220][ T8341] loop2: unable to read partition table [ 455.257370][ T8341] loop2: partition table beyond EOD, truncated [ 455.287690][ T8341] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 455.298959][ T5256] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 455.349388][ T3638] Dev loop2: unable to read RDB block 7 [ 455.355164][ T3638] loop2: unable to read partition table [ 455.362642][ T3638] loop2: partition table beyond EOD, truncated [ 455.509475][ T5256] usb 4-1: no configurations [ 455.514127][ T5256] usb 4-1: can't read configurations, error -22 [ 455.599034][ T5401] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 455.628945][ T4320] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 455.669089][ T5256] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 455.781652][ T8348] blktrace: Concurrent blktraces are not allowed on nullb0 [ 455.799016][ T5401] usb 6-1: Using ep0 maxpacket: 32 [ 455.816226][ T5401] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 455.826837][ T5401] usb 6-1: config 0 has no interface number 0 [ 455.836658][ T5401] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 455.838907][ T4320] usb 5-1: Using ep0 maxpacket: 16 [ 455.862869][ T5256] usb 4-1: no configurations [ 455.865821][ T4320] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 455.931838][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.931989][ T5256] usb 4-1: can't read configurations, error -22 [ 455.955584][ T4320] usb 5-1: Product: syz [ 455.973921][ T4320] usb 5-1: Manufacturer: syz [ 455.976389][ T5401] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 455.981265][ T4320] usb 5-1: SerialNumber: syz [ 456.015043][ T4320] r8152-cfgselector 5-1: config 0 descriptor?? [ 456.100907][ T5401] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.125437][ T5256] usb usb4-port1: attempt power cycle [ 456.276185][ T5401] usb 6-1: Product: syz [ 456.345653][ T5401] usb 6-1: Manufacturer: syz [ 456.436515][ T5401] usb 6-1: SerialNumber: syz [ 456.509829][ T5401] usb 6-1: config 0 descriptor?? [ 456.515634][ T8345] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 456.531537][ T4320] r8152-cfgselector 5-1: Unknown version 0x0000 [ 456.545628][ T4320] r8152-cfgselector 5-1: Unknown version 0x0000 [ 456.566222][ T4320] r8152-cfgselector 5-1: bad CDC descriptors [ 456.584805][ T4320] r8152-cfgselector 5-1: Unknown version 0x0000 [ 456.600813][ T4320] r8152-cfgselector 5-1: USB disconnect, device number 11 [ 456.648890][ T5256] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 456.713647][ T5256] usb 4-1: no configurations [ 456.718494][ T5256] usb 4-1: can't read configurations, error -22 [ 456.745779][ T8345] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 456.865884][ T8360] loop0: detected capacity change from 0 to 1024 [ 456.874112][ T8360] ext4: Bad value for 'barrier' [ 456.883340][ T5256] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 456.936568][ T5256] usb 4-1: no configurations [ 456.942990][ T5256] usb 4-1: can't read configurations, error -22 [ 456.997919][ T5256] usb usb4-port1: unable to enumerate USB device [ 457.005224][ T4385] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 457.185130][ T8362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.912'. [ 457.939821][ T4385] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.972023][ T4385] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.991568][ T4385] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.005327][ T4385] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.015252][ T4385] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.028044][ T4385] usb 7-1: config 0 descriptor?? [ 458.445016][ T4385] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 458.463522][ T4385] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 458.493419][ T4385] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 458.722901][ T4385] usb 7-1: USB disconnect, device number 13 [ 458.875706][ T8382] fido_id[8382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 458.899042][ T26] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 459.088869][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 459.098048][ T26] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 459.107260][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.115712][ T26] usb 5-1: Product: syz [ 459.121057][ T26] usb 5-1: Manufacturer: syz [ 459.126080][ T26] usb 5-1: SerialNumber: syz [ 459.149435][ T26] usb 5-1: config 0 descriptor?? [ 459.366636][ T26] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 459.939499][ T5256] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 460.014399][ T5401] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 460.040344][ T5401] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 460.047631][ T8393] loop3: detected capacity change from 0 to 1024 [ 460.062012][ T5401] asix: probe of 6-1:0.188 failed with error -71 [ 460.072303][ T5401] usb 6-1: USB disconnect, device number 16 [ 460.098515][ T8393] ext4: Bad value for 'barrier' [ 460.151304][ T5256] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 460.170052][ T5256] usb 7-1: config 0 has no interface number 0 [ 460.297494][ T5256] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 460.327315][ T5256] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.375758][ T5256] usb 7-1: Product: syz [ 460.412121][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.924'. [ 460.488618][ T5256] usb 7-1: Manufacturer: syz [ 460.531520][ T5256] usb 7-1: SerialNumber: syz [ 460.628992][ T5256] usb 7-1: config 0 descriptor?? [ 460.978440][ T5256] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 461.016667][ T5256] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 461.044412][ T5256] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 461.055678][ T5256] usb 7-1: media controller created [ 461.091477][ T5256] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.333926][ T26] usb write operation failed. (-71) [ 461.358186][ T26] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 461.377353][ T26] dvbdev: DVB: registering new adapter (Terratec H7) [ 461.385263][ T26] usb 5-1: media controller created [ 461.396306][ T26] usb read operation failed. (-71) [ 461.407024][ T26] usb write operation failed. (-71) [ 461.423005][ T26] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 461.440519][ T26] usb 5-1: USB disconnect, device number 12 [ 461.469103][ T5401] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 461.499049][ T4339] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 461.673667][ T5401] usb 1-1: no configurations [ 461.678360][ T5401] usb 1-1: can't read configurations, error -22 [ 461.689052][ T4339] usb 4-1: Using ep0 maxpacket: 8 [ 461.701813][ T4339] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 461.725970][ T4339] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 461.735942][ T4339] usb 4-1: config 0 interface 0 has no altsetting 0 [ 461.751830][ T4339] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 461.752517][ T8407] loop5: detected capacity change from 0 to 1024 [ 461.766322][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.779757][ T8407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 461.787354][ T8407] EXT4-fs: Ignoring removed bh option [ 461.798482][ T4339] usb 4-1: Product: syz [ 461.811105][ T4339] usb 4-1: Manufacturer: syz [ 461.815782][ T4339] usb 4-1: SerialNumber: syz [ 461.825436][ T4339] usb 4-1: config 0 descriptor?? [ 461.835403][ T4339] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 461.843356][ T8407] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 461.852436][ T5401] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 462.067455][ T5401] usb 1-1: no configurations [ 462.068836][ T4339] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 462.072284][ T5401] usb 1-1: can't read configurations, error -22 [ 462.108612][ T4339] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 462.116774][ T5401] usb usb1-port1: attempt power cycle [ 462.168408][ T4339] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 462.280121][ T5256] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 462.316204][ T4421] usb 4-1: USB disconnect, device number 14 [ 462.371208][ T5256] usb 7-1: USB disconnect, device number 14 [ 462.528996][ T5401] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 462.559952][ T5401] usb 1-1: no configurations [ 462.564703][ T5401] usb 1-1: can't read configurations, error -22 [ 462.719022][ T5401] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 462.751459][ T5401] usb 1-1: no configurations [ 462.756311][ T5401] usb 1-1: can't read configurations, error -22 [ 462.758799][ T4976] EXT4-fs (loop5): unmounting filesystem. [ 462.763308][ T5263] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 462.781488][ T5401] usb usb1-port1: unable to enumerate USB device [ 463.004060][ T5263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.156721][ T8422] blktrace: Concurrent blktraces are not allowed on nullb0 [ 463.498745][ T5263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.535666][ T5263] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 463.582400][ T5263] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 463.597867][ T5263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.621980][ T5263] usb 5-1: config 0 descriptor?? [ 463.755228][ T8431] loop6: detected capacity change from 0 to 1024 [ 463.772545][ T8431] ext4: Bad value for 'barrier' [ 464.022503][ T8434] netlink: 20 bytes leftover after parsing attributes in process `syz.6.937'. [ 464.720520][ T5263] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 464.780756][ T5263] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 464.836521][ T5263] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 465.012771][ T5263] usb 5-1: USB disconnect, device number 13 [ 465.078919][ T4421] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 465.290771][ T4421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.307704][ T8442] fido_id[8442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 465.312027][ T4421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.405517][ T4421] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 465.418856][ T4421] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.478519][ T8445] loop5: detected capacity change from 0 to 256 [ 465.904806][ T4421] usb 7-1: config 0 descriptor?? [ 466.408713][ T4421] hid-steam 0003:28DE:1142.000C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 466.469356][ T4421] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 467.059113][ T4421] hid-steam 0003:28DE:1142.000C: Steam wireless receiver connected [ 467.108534][ T4421] usb 7-1: USB disconnect, device number 15 [ 467.211224][ T4421] hid-steam 0003:28DE:1142.000C: Steam wireless receiver disconnected [ 467.498909][ T8456] fido_id[8456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 467.671749][ T8464] blktrace: Concurrent blktraces are not allowed on nullb0 [ 467.879110][ T8472] syz.0.951 uses obsolete (PF_INET,SOCK_PACKET) [ 467.938898][ T5263] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 468.011479][ T8472] netlink: 36 bytes leftover after parsing attributes in process `syz.0.951'. [ 468.294468][ T5263] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.628874][ T5263] usb 7-1: config 0 has no interfaces? [ 468.692745][ T5263] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 468.737797][ T5263] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.761533][ T8479] sg_write: data in/out 124/1 bytes for SCSI command 0xdb-- guessing data in; [ 468.761533][ T8479] program syz.0.954 not setting count and/or reply_len properly [ 468.797653][ T5263] usb 7-1: Product: syz [ 468.810078][ T5263] usb 7-1: Manufacturer: syz [ 468.822366][ T5263] usb 7-1: SerialNumber: syz [ 468.833806][ T5263] usb 7-1: config 0 descriptor?? [ 469.031919][ T5401] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 469.319108][ T5401] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.480132][ T5401] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.557286][ T5401] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 469.659177][ T5401] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 469.668680][ T5401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.719704][ T5401] usb 4-1: config 0 descriptor?? [ 470.039141][ T5263] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 470.161148][ T5401] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 470.176785][ T5401] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 470.195448][ T5401] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 470.239136][ T5263] usb 5-1: Using ep0 maxpacket: 32 [ 470.247880][ T5263] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 470.273160][ T5263] usb 5-1: config 0 has no interface number 0 [ 470.288616][ T5263] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 470.308003][ T5263] usb 5-1: config 0 interface 196 has no altsetting 0 [ 470.319164][ T22] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 470.331195][ T5263] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 470.340844][ T5263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.351721][ T5263] usb 5-1: Product: syz [ 470.357375][ T5263] usb 5-1: Manufacturer: syz [ 470.362718][ T5263] usb 5-1: SerialNumber: syz [ 470.371730][ T5263] usb 5-1: config 0 descriptor?? [ 470.377783][ T8488] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 470.430730][ T4339] usb 4-1: USB disconnect, device number 15 [ 470.520801][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.532160][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.543555][ T22] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 470.553074][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.575568][ T22] usb 1-1: config 0 descriptor?? [ 470.602000][ T5263] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 470.617051][ T5263] ipheth: probe of 5-1:0.196 failed with error -71 [ 470.645124][ T5263] usb 5-1: USB disconnect, device number 14 [ 470.966155][ T4339] usb 7-1: USB disconnect, device number 16 [ 470.988548][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 470.997212][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 471.053113][ T22] usb 1-1: USB disconnect, device number 14 [ 471.592380][ T8506] loop4: detected capacity change from 0 to 32768 [ 471.600672][ T8506] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.964 (8506) [ 471.618435][ T8506] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 471.628706][ T8506] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 471.637772][ T8506] BTRFS info (device loop4): using free space tree [ 471.699271][ T8510] binder: 8509:8510 ioctl c0306201 2000000003c0 returned -14 [ 471.849499][ T8506] BTRFS info (device loop4): enabling ssd optimizations [ 473.270531][ T4280] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 473.698983][ T26] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 473.758952][ T4421] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 473.852679][ T8549] loop6: detected capacity change from 0 to 256 [ 473.938945][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 473.958502][ T26] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 473.971675][ T4421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.006525][ T4421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.026980][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.036277][ T4421] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 474.055618][ T26] usb 4-1: Product: syz [ 474.060484][ T26] usb 4-1: Manufacturer: syz [ 474.065349][ T26] usb 4-1: SerialNumber: syz [ 474.096636][ T26] usb 4-1: config 0 descriptor?? [ 474.101760][ T4421] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 474.126414][ T4421] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.185555][ T4421] usb 6-1: config 0 descriptor?? [ 474.324530][ T26] snd-usb-6fire 4-1:0.0: unable to receive device firmware state. [ 474.349955][ T26] snd-usb-6fire: probe of 4-1:0.0 failed with error -71 [ 474.407965][ T26] usb 4-1: USB disconnect, device number 16 [ 474.622068][ T4421] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 474.661142][ T4421] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 474.678277][ T4421] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 474.901623][ T4421] usb 6-1: USB disconnect, device number 17 [ 475.038486][ T8552] fido_id[8552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 475.549135][ T4421] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 476.134582][ T8568] loop3: detected capacity change from 0 to 32768 [ 476.149289][ T8568] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.981 (8568) [ 476.166090][ T8568] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 476.176343][ T8568] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 476.185020][ T8568] BTRFS info (device loop3): using free space tree [ 476.199606][ T8569] binder: 8567:8569 ioctl c0306201 2000000003c0 returned -14 [ 476.207579][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.261962][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.327973][ T4421] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 476.347961][ T4421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.369290][ T4421] usb 1-1: config 0 descriptor?? [ 476.665386][ T8568] BTRFS info (device loop3): enabling ssd optimizations [ 476.797791][ T4421] usbhid 1-1:0.0: can't add hid device: -71 [ 476.807391][ T4421] usbhid: probe of 1-1:0.0 failed with error -71 [ 476.818673][ T8596] loop5: detected capacity change from 0 to 1024 [ 476.828138][ T8596] ext4: Bad value for 'barrier' [ 477.592154][ T4421] usb 1-1: USB disconnect, device number 15 [ 477.689703][ T8600] netlink: 20 bytes leftover after parsing attributes in process `syz.5.986'. [ 478.385842][ T4284] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 478.453173][ T8602] loop4: detected capacity change from 0 to 2048 [ 478.578352][ T8602] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 478.750757][ T8607] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 478.964386][ T4490] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (4490) [ 479.566176][ T8620] binder: 8619:8620 ioctl c0306201 2000000003c0 returned -14 [ 480.648535][ T8638] loop4: detected capacity change from 0 to 32768 [ 480.675766][ T8638] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 480.696643][ T8641] loop2: detected capacity change from 0 to 7 [ 480.715265][ T4468] Dev loop2: unable to read RDB block 7 [ 480.773830][ T4271] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.869329][ T4468] loop2: AHDI p1 p2 p3 [ 480.873583][ T4468] loop2: partition table partially beyond EOD, truncated [ 480.980807][ T4468] loop2: p1 start 1601398130 is beyond EOD, truncated [ 481.027562][ T4468] loop2: p2 start 1702059890 is beyond EOD, truncated [ 481.067211][ T8641] Dev loop2: unable to read RDB block 7 [ 481.092396][ T8641] loop2: AHDI p1 p2 p3 [ 481.099129][ T8641] loop2: partition table partially beyond EOD, truncated [ 481.133132][ T8641] loop2: p1 start 1601398130 is beyond EOD, truncated [ 481.140245][ T8644] loop5: detected capacity change from 0 to 1024 [ 481.219114][ T8641] loop2: p2 start 1702059890 is beyond EOD, truncated [ 481.295958][ T8644] ext4: Bad value for 'barrier' [ 481.754760][ T3638] Dev loop2: unable to read RDB block 7 [ 481.775122][ T3638] loop2: AHDI p1 p2 p3 [ 481.917951][ T3638] loop2: partition table partially beyond EOD, truncated [ 481.935861][ T3638] loop2: p1 start 1601398130 is beyond EOD, truncated [ 482.013055][ T8655] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1000'. [ 482.270168][ T3638] loop2: p2 start 1702059890 is beyond EOD, truncated [ 483.073792][ T8672] binder: 8671:8672 ioctl c0306201 2000000003c0 returned -14 [ 484.121661][ T8688] loop0: detected capacity change from 0 to 32768 [ 484.129945][ T8688] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 484.270229][ T4490] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 485.355038][ T8713] loop2: detected capacity change from 0 to 7 [ 485.369031][ T4420] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 485.379177][ T4490] Dev loop2: unable to read RDB block 7 [ 485.384857][ T4490] loop2: AHDI p1 p2 p3 [ 485.428467][ T4490] loop2: partition table partially beyond EOD, truncated [ 485.450578][ T4490] loop2: p1 start 1601398130 is beyond EOD, truncated [ 485.466054][ T4490] loop2: p2 start 1702059890 is beyond EOD, truncated [ 485.485728][ T8713] Dev loop2: unable to read RDB block 7 [ 485.498923][ T8713] loop2: AHDI p1 p2 p3 [ 485.599093][ T4420] usb 4-1: Using ep0 maxpacket: 16 [ 486.132727][ T4420] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.143962][ T4420] usb 4-1: config 0 interface 0 has no altsetting 0 [ 486.151164][ T8713] loop2: partition table partially beyond EOD, truncated [ 486.190738][ T8713] loop2: p1 start 1601398130 is beyond EOD, truncated [ 486.201077][ T8713] loop2: p2 start 1702059890 is beyond EOD, truncated [ 486.215881][ T4420] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 486.227162][ T4420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.315469][ T4420] usb 4-1: config 0 descriptor?? [ 486.419673][ T8719] binder: 8718:8719 ioctl c0306201 2000000003c0 returned -14 [ 486.788508][ T4420] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 487.683006][ T4385] usb 4-1: USB disconnect, device number 17 [ 488.008380][ T8723] process 'syz.0.1022' launched './file2' with NULL argv: empty string added [ 488.177808][ T8736] loop6: detected capacity change from 0 to 32768 [ 488.203239][ T8736] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 488.778671][ T8729] fido_id[8729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 489.597973][ T4271] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 492.089368][ T8755] binder: 8754:8755 ioctl 4018620d 0 returned -22 [ 492.169675][ T8755] binder: 8754:8755 ioctl c0306201 2000000003c0 returned -14 [ 493.370821][ T8762] loop3: detected capacity change from 0 to 32768 [ 493.385324][ T8762] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 493.395555][ T8762] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 493.404308][ T8762] BTRFS info (device loop3): using free space tree [ 493.785123][ T8762] BTRFS info (device loop3): enabling ssd optimizations [ 493.859035][ T4423] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 494.029027][ T4423] usb 6-1: device descriptor read/64, error -71 [ 494.309076][ T4423] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 494.479003][ T4423] usb 6-1: device descriptor read/64, error -71 [ 494.599046][ T4423] usb usb6-port1: attempt power cycle [ 494.689213][ T4284] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 494.868929][ T4385] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 495.009034][ T4423] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 495.070317][ T4385] usb 5-1: Using ep0 maxpacket: 16 [ 495.070584][ T4423] usb 6-1: device descriptor read/8, error -71 [ 495.078178][ T4385] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.159247][ T4385] usb 5-1: config 0 interface 0 has no altsetting 0 [ 495.187475][ T4385] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 495.227261][ T4385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.280452][ T4385] usb 5-1: config 0 descriptor?? [ 495.399021][ T4423] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 495.457046][ T4423] usb 6-1: device descriptor read/8, error -71 [ 495.584742][ T4423] usb usb6-port1: unable to enumerate USB device [ 495.694271][ T4385] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 495.858483][ T8804] [ 495.860886][ T8804] ====================================================== [ 495.867923][ T8804] WARNING: possible circular locking dependency detected [ 495.874969][ T8804] syzkaller #0 Not tainted [ 495.879515][ T8804] ------------------------------------------------------ [ 495.886557][ T8804] syz.0.1045/8804 is trying to acquire lock: [ 495.888810][ T5401] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 495.892534][ T8804] ffff888077a21458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x10d/0xae0 [ 495.911765][ T8804] [ 495.911765][ T8804] but task is already holding lock: [ 495.919299][ T8804] ffff888077a20130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 495.929061][ T8804] [ 495.929061][ T8804] which lock already depends on the new lock. [ 495.929061][ T8804] [ 495.939556][ T8804] [ 495.939556][ T8804] the existing dependency chain (in reverse order) is: [ 495.948580][ T8804] [ 495.948580][ T8804] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 495.956534][ T8804] lock_sock_nested+0x44/0x100 [ 495.961982][ T8804] smc_listen_out+0x109/0x3d0 [ 495.967196][ T8804] smc_listen_work+0x581/0xd70 [ 495.972486][ T8804] process_one_work+0x8a2/0x1160 [ 495.978003][ T8804] worker_thread+0xaa2/0x1270 [ 495.983214][ T8804] kthread+0x29d/0x330 [ 495.987841][ T8804] ret_from_fork+0x1f/0x30 [ 495.992922][ T8804] [ 495.992922][ T8804] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 496.003164][ T8804] __lock_acquire+0x2d07/0x7d10 [ 496.008645][ T8804] lock_acquire+0x1bb/0x4a0 [ 496.013700][ T8804] __flush_work+0x126/0xae0 [ 496.018813][ T8804] __cancel_work_timer+0x3f4/0x560 [ 496.024600][ T8804] smc_clcsock_release+0x5c/0xe0 [ 496.030165][ T8804] __smc_release+0x661/0x7d0 [ 496.035317][ T8804] smc_close_non_accepted+0xd1/0x1f0 [ 496.041169][ T8804] smc_close_active+0xb00/0xea0 [ 496.046580][ T8804] __smc_release+0x8d/0x7d0 [ 496.051627][ T8804] smc_release+0x2ca/0x530 [ 496.056674][ T8804] sock_close+0xd5/0x240 [ 496.061523][ T8804] __fput+0x22c/0x920 [ 496.066087][ T8804] task_work_run+0x1d0/0x260 [ 496.071333][ T8804] exit_to_user_mode_loop+0xe6/0x110 [ 496.077257][ T8804] exit_to_user_mode_prepare+0xee/0x180 [ 496.083360][ T8804] syscall_exit_to_user_mode+0x16/0x40 [ 496.089384][ T8804] do_syscall_64+0x58/0xa0 [ 496.094362][ T8804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.100950][ T8804] [ 496.100950][ T8804] other info that might help us debug this: [ 496.100950][ T8804] [ 496.111369][ T8804] Possible unsafe locking scenario: [ 496.111369][ T8804] [ 496.118863][ T8804] CPU0 CPU1 [ 496.124254][ T8804] ---- ---- [ 496.129653][ T8804] lock(sk_lock-AF_SMC/1); [ 496.134185][ T8804] lock((work_completion)(&new_smc->smc_listen_work)); [ 496.143675][ T8804] lock(sk_lock-AF_SMC/1); [ 496.150849][ T8804] lock((work_completion)(&new_smc->smc_listen_work)); [ 496.157845][ T8804] [ 496.157845][ T8804] *** DEADLOCK *** [ 496.157845][ T8804] [ 496.166111][ T8804] 2 locks held by syz.0.1045/8804: [ 496.171248][ T8804] #0: ffff888073fdc410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 496.181802][ T8804] #1: ffff888077a20130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 496.191255][ T8804] [ 496.191255][ T8804] stack backtrace: [ 496.197181][ T8804] CPU: 1 PID: 8804 Comm: syz.0.1045 Not tainted syzkaller #0 [ 496.204567][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 496.214635][ T8804] Call Trace: [ 496.217918][ T8804] [ 496.220857][ T8804] dump_stack_lvl+0x188/0x24e [ 496.225555][ T8804] ? load_image+0x400/0x400 [ 496.230187][ T8804] ? show_regs_print_info+0x12/0x12 [ 496.235397][ T8804] ? print_circular_bug+0x12b/0x1a0 [ 496.240613][ T8804] check_noncircular+0x296/0x330 [ 496.245566][ T8804] ? look_up_lock_class+0x75/0x140 [ 496.250704][ T8804] ? add_chain_block+0x940/0x940 [ 496.255670][ T8804] ? lockdep_lock+0xf1/0x1f0 [ 496.260372][ T8804] ? lock_release+0xcf/0x920 [ 496.265000][ T8804] ? _find_first_zero_bit+0xcf/0x100 [ 496.270330][ T8804] __lock_acquire+0x2d07/0x7d10 [ 496.275216][ T8804] ? unwind_next_frame+0x1880/0x20b0 [ 496.280570][ T8804] ? deref_stack_reg+0x19f/0x230 [ 496.285588][ T8804] ? __bfs+0x2a3/0x5c0 [ 496.289777][ T8804] ? verify_lock_unused+0x140/0x140 [ 496.295007][ T8804] ? mark_lock+0x94/0x320 [ 496.299363][ T8804] ? __lock_acquire+0x13cf/0x7d10 [ 496.304403][ T8804] ? add_chain_block+0x940/0x940 [ 496.309394][ T8804] ? lockdep_unlock+0x142/0x2e0 [ 496.314285][ T8804] lock_acquire+0x1bb/0x4a0 [ 496.318815][ T8804] ? __flush_work+0x10d/0xae0 [ 496.323519][ T8804] ? __lock_acquire+0x13cf/0x7d10 [ 496.328582][ T8804] ? read_lock_is_recursive+0x10/0x10 [ 496.333985][ T8804] ? __flush_work+0x10d/0xae0 [ 496.338713][ T8804] __flush_work+0x126/0xae0 [ 496.343246][ T8804] ? __flush_work+0x10d/0xae0 [ 496.347960][ T8804] ? verify_lock_unused+0x140/0x140 [ 496.353183][ T8804] ? flush_work+0x20/0x20 [ 496.357636][ T8804] ? try_to_grab_pending+0xfa/0x860 [ 496.362859][ T8804] ? lockdep_hardirqs_off+0x70/0x100 [ 496.368163][ T8804] ? mark_lock+0x94/0x320 [ 496.372506][ T8804] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 496.378526][ T8804] ? lock_chain_count+0x20/0x20 [ 496.383398][ T8804] ? __cancel_work_timer+0x36a/0x560 [ 496.388744][ T8804] __cancel_work_timer+0x3f4/0x560 [ 496.393890][ T8804] ? cancel_work_sync+0x20/0x20 [ 496.398853][ T8804] ? __smc_release+0x659/0x7d0 [ 496.403773][ T8804] ? __local_bh_enable_ip+0x136/0x1c0 [ 496.409662][ T8804] ? lockdep_hardirqs_on+0x94/0x140 [ 496.414881][ T8804] ? __local_bh_enable_ip+0x136/0x1c0 [ 496.420268][ T8804] ? _local_bh_enable+0xa0/0xa0 [ 496.425152][ T8804] smc_clcsock_release+0x5c/0xe0 [ 496.430135][ T8804] __smc_release+0x661/0x7d0 [ 496.434761][ T8804] ? do_raw_spin_unlock+0x11d/0x230 [ 496.439995][ T8804] smc_close_non_accepted+0xd1/0x1f0 [ 496.445323][ T8804] smc_close_active+0xb00/0xea0 [ 496.450215][ T8804] ? sock_no_sendpage_locked+0x1c0/0x1c0 [ 496.455888][ T8804] __smc_release+0x8d/0x7d0 [ 496.460492][ T8804] ? do_raw_spin_unlock+0x11d/0x230 [ 496.465724][ T8804] smc_release+0x2ca/0x530 [ 496.470165][ T8804] sock_close+0xd5/0x240 [ 496.474525][ T8804] ? sock_mmap+0x90/0x90 [ 496.478797][ T8804] __fput+0x22c/0x920 [ 496.482808][ T8804] task_work_run+0x1d0/0x260 [ 496.487423][ T8804] ? task_work_cancel+0x220/0x220 [ 496.492459][ T8804] ? exit_to_user_mode_loop+0x3b/0x110 [ 496.497930][ T8804] exit_to_user_mode_loop+0xe6/0x110 [ 496.503313][ T8804] exit_to_user_mode_prepare+0xee/0x180 [ 496.508880][ T8804] syscall_exit_to_user_mode+0x16/0x40 [ 496.514360][ T8804] do_syscall_64+0x58/0xa0 [ 496.518799][ T8804] ? clear_bhb_loop+0x60/0xb0 [ 496.523544][ T8804] ? clear_bhb_loop+0x60/0xb0 [ 496.528425][ T8804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.534343][ T8804] RIP: 0033:0x7fe3fe99aeb9 [ 496.538790][ T8804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.558699][ T8804] RSP: 002b:00007ffd70b1fd28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 496.567133][ T8804] RAX: 0000000000000000 RBX: 00007fe3fec17da0 RCX: 00007fe3fe99aeb9 [ 496.575208][ T8804] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 496.583398][ T8804] RBP: 00007fe3fec17da0 R08: 00007fe3fec16038 R09: 0000000000000000 [ 496.591610][ T8804] R10: 00000000003ffd5c R11: 0000000000000246 R12: 0000000000079398 [ 496.599599][ T8804] R13: 00007fe3fec15fac R14: 00000000000790c6 R15: 00007ffd70b1fe30 [ 496.607602][ T8804] [ 496.668400][ T4423] usb 5-1: USB disconnect, device number 15 [ 496.692277][ T8807] fido_id[8807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 496.801048][ T5401] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.813628][ T5401] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.823990][ T5401] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 496.836800][ T5401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.852062][ T5401] usb 4-1: config 0 descriptor?? [ 496.879223][ T8805] loop6: detected capacity change from 0 to 32768 [ 496.901295][ T8805] XFS (loop6): Mounting V5 Filesystem [ 496.930166][ T8805] XFS (loop6): Ending clean mount [ 496.977044][ T6306] XFS (loop6): Unmounting Filesystem [ 497.263926][ T5401] usbhid 4-1:0.0: can't add hid device: -71 [ 497.275923][ T5401] usbhid: probe of 4-1:0.0 failed with error -71 [ 497.295649][ T5401] usb 4-1: USB disconnect, device number 18 [ 501.480628][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.486946][ T1278] ieee802154 phy1 wpan1: encryption failed: -22