last executing test programs: 27m26.539697277s ago: executing program 1 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000070000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x4, 0x8, 0x3, 0x0, 0x0, {0x27762807ea17ea17, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x20, r6, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40850}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x6, 0x6, 0x5}}]}, 0x40}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r11, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r11}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r12 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r12, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r13 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x14, 0x0, &(0x7f00000003c0)) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}}}, 0x24}}, 0x0) 27m21.994920452s ago: executing program 1 (id=18): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) 27m20.548866719s ago: executing program 1 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_pidfd_open(r0, 0x0) keyctl$session_to_parent(0x12) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000000)="adbcc72ca6d732549f13db1a0206c4583a651644a810e3241e5547ad229e6b5c", 0x20) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") socket(0x29, 0x5, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000120001"], 0x26}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x2020) recvfrom$rxrpc(r7, &(0x7f0000000500)=""/160, 0xa0, 0x2000, &(0x7f00000005c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x7fffffff, @rand_addr=' \x01\x00', 0xaf62}}, 0x24) ioctl$TIOCCONS(r8, 0x541d) 27m17.588588541s ago: executing program 1 (id=26): r0 = open$dir(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400001, 0x21) openat(r0, &(0x7f0000000040)='./file0\x00', 0x10001, 0x100) io_uring_setup(0x108c, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) creat(0x0, 0x49) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x13c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$key(r4, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000680)=@ethtool_gstrings={0x18, 0x1}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) setreuid(0xee01, 0xee00) 27m15.167324082s ago: executing program 1 (id=28): prlimit64(0x0, 0x3, &(0x7f0000000180)={0xffffffffffffffad, 0x107}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c) pipe(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000180)=0x5, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0xa) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) syslog(0x4, &(0x7f0000000000)=""/29, 0x1d) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x5, 0xc8, 0xc, 0x20}}}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000300)=0x7) fcntl$setstatus(r5, 0x4, 0x2400) 27m13.034815607s ago: executing program 1 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./bus\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = open$dir(0x0, 0x418000, 0x88) name_to_handle_at(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000080000000006000001000000000c6d71d0c10000033e00000b860000080000000080"], &(0x7f0000000240), 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'syz_tun\x00', @random="0163014030d9"}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000000000)='./file0\x00', 0x100000a, &(0x7f0000000100)={[{@journal_async_commit}, {@heartbeat_none}, {@user_xattr}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@resv_level={'resv_level', 0x3d, 0x3}}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 26m56.341122734s ago: executing program 32 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./bus\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = open$dir(0x0, 0x418000, 0x88) name_to_handle_at(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000080000000006000001000000000c6d71d0c10000033e00000b860000080000000080"], &(0x7f0000000240), 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'syz_tun\x00', @random="0163014030d9"}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000000000)='./file0\x00', 0x100000a, &(0x7f0000000100)={[{@journal_async_commit}, {@heartbeat_none}, {@user_xattr}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@resv_level={'resv_level', 0x3d, 0x3}}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 17m29.345506142s ago: executing program 2 (id=695): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105500, &(0x7f0000000380)=@urb_type_control={0x2, {0x6, 0x1}, 0x9, 0x2, 0x0, 0x0, 0xfffffff9, 0x80000001, 0x0, 0x10, 0xf4, 0x0}) 17m29.090451057s ago: executing program 2 (id=697): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000400)) 17m28.333423004s ago: executing program 2 (id=698): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='setgroups\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 17m26.981997005s ago: executing program 2 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000000000000000000000000000000000000000000000000000100000000900000000000000000000000000000002000100000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0004000000"], 0x140}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414"], 0xb0}, 0x1, 0x7}, 0x0) syz_open_dev$loop(0x0, 0x2, 0x60500) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') listen(r5, 0x1ad72f7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x48}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) 17m25.798303408s ago: executing program 2 (id=702): socket(0x10, 0x803, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000080)=""/37, 0x0, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 17m24.016968856s ago: executing program 2 (id=703): syz_read_part_table(0x638, &(0x7f0000000c80)="$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") 17m8.84948226s ago: executing program 33 (id=703): syz_read_part_table(0x638, &(0x7f0000000c80)="$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") 20.943423384s ago: executing program 0 (id=2290): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$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") r0 = open(&(0x7f0000000600)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 18.77298315s ago: executing program 0 (id=2294): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x10, 0x101000) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(r4, 0x455, 0x8000008, r5, 0x0) fanotify_mark(r4, 0x7e, 0x800003a, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x34f000, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000000)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@discard}, {@grpjquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") 17.670355135s ago: executing program 0 (id=2296): socket(0x10, 0x803, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000080)=""/37, 0x0, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 15.88598111s ago: executing program 5 (id=2300): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) fcntl$setstatus(r1, 0x4, 0x2c00) 15.800289885s ago: executing program 0 (id=2301): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x200002, &(0x7f0000000040), 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x2000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x800000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000d4a80)={{0x0, 0xfffffffffffff801, 0x7, 0x6, 0x3, 0x8, 0x2, 0xfffffb8d, 0x5, 0xe3d8, 0x2, 0x0, 0x2, 0x1457, 0xfffffffffffffffb}, 0x20, [0x0, 0x0, 0x0, 0x0]}) 13.222579376s ago: executing program 5 (id=2310): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setfsgid(0xffffffffffffffff) 13.094185073s ago: executing program 3 (id=2311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 13.024759428s ago: executing program 3 (id=2312): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000006000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000020080000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182100", @ANYRES32=r0, @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) shmget$private(0x0, 0x14000, 0x100, &(0x7f000075e000/0x14000)=nil) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bb71bbbbbbbbaaaaaaaaaaaa08060001081c0e040002aaaaaaaaaaaaac1414bb0180c2000000ac1414bb918ff4483ed284e6684f370313d3e2d5d3e4a9c039782e"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0xd0, 0xd0, 0x2d8, 0x1b8, 0x0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xff000000, 0x0, 0xff, 0xffffffff], 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {0x1fe}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0xff], [], 'syzkaller1\x00', 'ip6tnl0\x00', {}, {}, 0x2b, 0x0, 0x4, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@ipv6={@mcast2, @loopback, [], [0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x7f}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r8, 0x891d, &(0x7f00000000c0)) shutdown(r4, 0x1) 11.706711974s ago: executing program 3 (id=2313): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002340)={0xffffffffffffffff, 0xe0, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x42, &(0x7f0000002140)=[{}, {}], 0x10, 0x10, &(0x7f0000002180), &(0x7f00000021c0), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000002200)}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002380)={0xffffffffffffffff}, 0x4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x109042, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x4, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000023c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', r1, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r2, r3, 0x8, &(0x7f0000002540)=[r4, r4], &(0x7f0000002400)=[{0x0, 0x2, 0xc, 0x8}, {0x1, 0x1000003, 0x2, 0xb}, {0x4, 0x3, 0x6, 0xa}, {0x4, 0x1, 0xc, 0xb}, {0x1, 0x2, 0x4, 0x9}, {0x0, 0x2, 0xd, 0xc}, {0x2, 0x5, 0x5, 0x6}, {0x2, 0x5, 0xe, 0xb}], 0x10, 0x2}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000380)={0x0}, 0x1) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r8, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) io_uring_enter(r9, 0x27e2, 0x0, 0x0, 0x0, 0x0) dup3(r8, r7, 0x80000) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 10.006373744s ago: executing program 3 (id=2314): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000880)="370797894c6e186d5e7a7aa20ec4ecb86e7948f9812016e60ef4a28112706ff49c731aa3e96d92fa250cdc0a97a1adf4aa491c55dade7333967c53e8219e775ea5a8c0f4e439642132aa1858a360c2785a2c7876eb08577b04cbb53cf717539e8fdc1fdc979e5615c6f5691c85d54d68bd2ee05f6c94942072a00b1c5e628b36c32e561ad288b06ba4e66ce626170cc45337530312a9935fd2ce10bb928234890c4102555c523c9f27e9980a8e600080ba15a9508dc68220b43eb6931aae6f88145e38c1ca1912f972b0df373f1b70c2a06272265aea9a01cf22730906808ca147ccad88862e57906d47053a", 0xec}], 0x1) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000008450c0b7600000000000109022400010000000009040000ff0300000009210400000122850009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB="002185000000850a62fe9785d8f2d201a703e47d72a005b7cea16727d1d4cede0b47e356248835a54ad4e3d5c08ba5ba0a78d9b7e5b1fbec62d57262e0ba20670850163c9c08a9fd97b34d82c413c60118ad8a7b46323d1f26161c2585465e3c686fd889c2e4d36a95cd81"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.834359964s ago: executing program 4 (id=2315): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 9.642134295s ago: executing program 5 (id=2316): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000006000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000020080000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182100", @ANYRES32=r0, @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x41100}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) shmget$private(0x0, 0x14000, 0x100, &(0x7f000075e000/0x14000)=nil) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bb71bbbbbbbbaaaaaaaaaaaa08060001081c0e040002aaaaaaaaaaaaac1414bb0180c2000000ac1414bb918ff4483ed284e6684f370313d3e2d5d3e4a9c039782e"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0xd0, 0xd0, 0x2d8, 0x1b8, 0x0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xff000000, 0x0, 0xff, 0xffffffff], 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {0x1fe}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0xff], [], 'syzkaller1\x00', 'ip6tnl0\x00', {}, {}, 0x2b, 0x0, 0x4, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@ipv6={@mcast2, @loopback, [], [0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x7f}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r7, 0x891d, &(0x7f00000000c0)) shutdown(0xffffffffffffffff, 0x1) 9.530222281s ago: executing program 4 (id=2317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001009d2743af1ad9d86b629f4567", @ANYRES32=r2, @ANYBLOB="240404000300000034001280110001006272696467655f736c617665000000001c0005"], 0x54}, 0x1, 0x0, 0x0, 0x200444c1}, 0x2404c884) 9.193958301s ago: executing program 0 (id=2318): socket(0x10, 0x803, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000080)=""/37, 0x0, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) 9.05454124s ago: executing program 4 (id=2319): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2, &(0x7f0000000540)=ANY=[], 0xd, 0x192, &(0x7f0000000700)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) 7.039630808s ago: executing program 5 (id=2320): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000020080000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182100", @ANYRES32=r0, @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x41100}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) shmget$private(0x0, 0x14000, 0x100, &(0x7f000075e000/0x14000)=nil) syz_emit_ethernet(0x2a, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0xd0, 0xd0, 0x2d8, 0x1b8, 0x0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xff000000, 0x0, 0xff, 0xffffffff], 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {0x1fe}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0xff], [], 'syzkaller1\x00', 'ip6tnl0\x00', {}, {}, 0x2b, 0x0, 0x4, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@ipv6={@mcast2, @loopback, [], [0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x7f}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) socket$nl_route(0x10, 0x3, 0x0) shutdown(r4, 0x1) 6.978354861s ago: executing program 4 (id=2321): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000006000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000020080000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182100", @ANYRES32=r0, @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) shmget$private(0x0, 0x14000, 0x100, &(0x7f000075e000/0x14000)=nil) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bb71bbbbbbbbaaaaaaaaaaaa08060001081c0e040002aaaaaaaaaaaaac1414bb0180c2000000ac1414bb918ff4483ed284e6684f370313d3e2d5d3e4a9c039782e"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0xd0, 0xd0, 0x2d8, 0x1b8, 0x0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xff000000, 0x0, 0xff, 0xffffffff], 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {0x1fe}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0xff], [], 'syzkaller1\x00', 'ip6tnl0\x00', {}, {}, 0x2b, 0x0, 0x4, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@ipv6={@mcast2, @loopback, [], [0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x7f}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r8, 0x891d, &(0x7f00000000c0)) shutdown(r4, 0x1) 6.903787586s ago: executing program 0 (id=2322): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f0000000680)=[{0x0, 0xa201, 0x1, &(0x7f0000000180)='\b'}, {0x0, 0x1001, 0x0, 0x0}], 0x2}) 1.787594705s ago: executing program 5 (id=2323): r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}, 0x660}], 0x2, 0x10000, 0x0) 1.695372441s ago: executing program 4 (id=2324): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x541b, 0x0) 1.466784324s ago: executing program 5 (id=2325): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db28709050201200003100d0905"], 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)={0x0, 0x7, 0x9, "c41d21447228b20bbf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 690.581729ms ago: executing program 3 (id=2326): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x100, 0x3, 0xfffffffe, 0x717e387a, 0x40, "1ac36a282e781d2eb2fbcb9aa500", 0x108, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 657.023751ms ago: executing program 3 (id=2327): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\x84rusted:'}, 0x1d, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000003c0)={0x0, 0x0, 0x20000}) r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) close(0x3) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x11, &(0x7f0000000040)="020000000980", 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x2) r5 = userfaultfd(0xc0001) ppoll(&(0x7f0000000180)=[{r5, 0x404}], 0x1, 0x0, &(0x7f0000000340)={[0x401]}, 0x8) bind$alg(r0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r6, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 0s ago: executing program 4 (id=2328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000200)={{0xeeef0000, 0xffff1000, 0x3, 0x7, 0x40, 0x0, 0x80, 0x3, 0x0, 0x24, 0x11, 0x65}, {0x5000, 0xeeef0000, 0x4, 0x0, 0xa, 0x1, 0x1, 0xf1, 0xe9, 0x80, 0x8, 0x4}, {0x54000, 0xb000, 0xcf660349c277f8b2, 0x5, 0xff, 0x5, 0x81, 0x6, 0x0, 0x5, 0xff, 0x1}, {0x60000, 0xa2a25000, 0xa, 0xd, 0x7, 0x17, 0x81, 0x7, 0x7, 0x9, 0x5, 0xe7}, {0x7000, 0x8080000, 0xd, 0x7c, 0x6, 0x9, 0x1, 0xe1, 0xb, 0x10, 0x9}, {0xb000, 0x7000, 0xe, 0x2, 0x7, 0x9, 0xd, 0x3, 0x80, 0xad, 0xe, 0x5}, {0x4000, 0x5000, 0xe, 0x0, 0x1, 0x0, 0x2f, 0x9, 0x9, 0x0, 0x10, 0x3}, {0xc000, 0x2545bd18827d370b, 0xc, 0x8, 0x1, 0x2, 0x4, 0x7, 0x1, 0x9e, 0x5, 0x7}, {0x9000, 0x1000}, {0x2000, 0x3}, 0xf0000023, 0x0, 0x8000000, 0x100221, 0x5, 0x2000, 0x4, 0x1, [0x7f, 0x8000, 0x4f55, 0x3]}) kernel console output (not intermixed with test programs): 92949][T10749] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1008'. [ 902.223277][T10752] xt_TPROXY: Can be used only with -p tcp or -p udp [ 903.468569][T10758] loop4: detected capacity change from 0 to 512 [ 903.594268][T10768] xt_TPROXY: Can be used only with -p tcp or -p udp [ 904.433108][T10758] EXT4-fs (loop4): 1 truncate cleaned up [ 904.440289][T10758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.070209][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.055994][T10794] loop4: detected capacity change from 0 to 16 [ 907.084289][T10794] erofs: (device loop4): mounted with root inode @ nid 36. [ 907.507828][T10800] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1020'. [ 909.049358][T10808] xt_TPROXY: Can be used only with -p tcp or -p udp [ 910.021385][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1024'. [ 910.428087][T10823] xt_TPROXY: Can be used only with -p tcp or -p udp [ 911.330801][T10821] loop0: detected capacity change from 0 to 1024 [ 913.410419][T10837] loop0: detected capacity change from 0 to 2048 [ 913.796005][T10840] loop5: detected capacity change from 0 to 16 [ 913.866385][T10840] erofs: (device loop5): mounted with root inode @ nid 36. [ 913.884916][T10837] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 913.905097][T10842] loop4: detected capacity change from 0 to 128 [ 914.071016][ T28] audit: type=1800 audit(1770348394.226:27): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1029" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 915.228658][T10852] xt_TPROXY: Can be used only with -p tcp or -p udp [ 916.475531][T10860] loop4: detected capacity change from 0 to 1764 [ 917.087205][T10869] loop4: detected capacity change from 0 to 4096 [ 917.304148][T10875] loop5: detected capacity change from 0 to 64 [ 917.312841][T10869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 918.403173][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.484430][T10898] xt_TPROXY: Can be used only with -p tcp or -p udp [ 922.875190][T10897] xt_TPROXY: Can be used only with -p tcp or -p udp [ 926.813074][T10919] xt_TPROXY: Can be used only with -p tcp or -p udp [ 929.297420][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1053'. [ 929.837894][T10939] xt_TPROXY: Can be used only with -p tcp or -p udp [ 930.993053][T10943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 932.011719][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.043798][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.374114][T10977] xt_TPROXY: Can be used only with -p tcp or -p udp [ 938.531211][T10991] loop4: detected capacity change from 0 to 512 [ 938.567861][T10994] Invalid option length (1040122) for dns_resolver key [ 939.127506][T11014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1075'. [ 941.364775][T11023] xt_TPROXY: Can be used only with -p tcp or -p udp [ 942.701933][T11030] xt_TPROXY: Can be used only with -p tcp or -p udp [ 945.718262][T11040] loop5: detected capacity change from 0 to 32768 [ 945.827758][T11040] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 946.492201][T11057] xt_TPROXY: Can be used only with -p tcp or -p udp [ 947.331223][T11040] XFS (loop5): Ending clean mount [ 947.529634][T11062] loop4: detected capacity change from 0 to 1764 [ 947.546398][ T9418] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 947.686896][T11062] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 951.574174][T11076] xt_TPROXY: Can be used only with -p tcp or -p udp [ 951.874353][T11078] xt_TPROXY: Can be used only with -p tcp or -p udp [ 954.028311][T11086] loop4: detected capacity change from 0 to 256 [ 955.482618][T11086] FAT-fs (loop4): Directory bread(block 64) failed [ 955.523730][T11086] FAT-fs (loop4): Directory bread(block 65) failed [ 955.562487][T11086] FAT-fs (loop4): Directory bread(block 66) failed [ 955.587073][T11086] FAT-fs (loop4): Directory bread(block 67) failed [ 955.623547][T11086] FAT-fs (loop4): Directory bread(block 68) failed [ 955.668423][T11086] FAT-fs (loop4): Directory bread(block 69) failed [ 955.716099][T11086] FAT-fs (loop4): Directory bread(block 70) failed [ 955.722722][T11086] FAT-fs (loop4): Directory bread(block 71) failed [ 955.778349][T11086] FAT-fs (loop4): Directory bread(block 72) failed [ 955.798801][T11086] FAT-fs (loop4): Directory bread(block 73) failed [ 956.205702][T11092] loop5: detected capacity change from 0 to 32768 [ 956.280560][T11092] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 956.529605][T11090] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 956.769187][T11098] loop5: detected capacity change from 0 to 256 [ 956.841289][T11100] xt_TPROXY: Can be used only with -p tcp or -p udp [ 958.145418][T11098] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x68d18d75, utbl_chksum : 0xe619d30d) [ 958.310079][T11098] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000008) bogus content (0x00080000) [ 958.353720][T11098] exFAT-fs (loop5): Filesystem has been set read-only [ 958.427318][T11111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1099'. [ 962.960506][T11127] loop4: detected capacity change from 0 to 32768 [ 962.997433][T11127] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 963.195549][T11083] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 963.661301][T11140] xt_TPROXY: Can be used only with -p tcp or -p udp [ 964.691256][T11146] loop0: detected capacity change from 0 to 1024 [ 964.811041][T11146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.839661][T11146] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.1111: reserved inode found cleared - inode=18 [ 964.948178][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.362807][T11159] loop5: detected capacity change from 0 to 512 [ 967.138579][T11159] EXT4-fs (loop5): 1 truncate cleaned up [ 967.145430][T11159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.460437][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.565472][T11171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1115'. [ 969.941393][T11184] xt_TPROXY: Can be used only with -p tcp or -p udp [ 971.015710][T11196] loop4: detected capacity change from 0 to 64 [ 971.106773][T11196] syz.4.1123: attempt to access beyond end of device [ 971.106773][T11196] loop4: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 971.179977][T11196] Buffer I/O error on dev loop4, logical block 1295, async page read [ 971.239482][T11196] syz.4.1123: attempt to access beyond end of device [ 971.239482][T11196] loop4: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 971.303935][T11196] Buffer I/O error on dev loop4, logical block 1295, async page read [ 971.323749][ T28] audit: type=1800 audit(1770348451.466:28): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1123" name="file2" dev="loop4" ino=6 res=0 errno=0 [ 978.401884][T11227] xt_TPROXY: Can be used only with -p tcp or -p udp [ 979.382966][T11232] loop0: detected capacity change from 0 to 4096 [ 979.391367][T11232] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 979.500493][T11232] ntfs: volume version 3.1. [ 981.604364][T11242] netlink: 'syz.0.1135': attribute type 10 has an invalid length. [ 981.654656][T11242] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.662142][T11242] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.735258][T11242] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.742875][T11242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.753452][T11242] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.760768][T11242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.812496][T11242] team0: Port device bridge0 added [ 983.862615][T11253] loop0: detected capacity change from 0 to 4096 [ 984.236565][T11253] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 984.797754][T11262] xt_TPROXY: Can be used only with -p tcp or -p udp [ 989.921349][T11283] loop0: detected capacity change from 0 to 16 [ 989.974928][T11283] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 994.329622][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.336100][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.822162][T11306] xt_TPROXY: Can be used only with -p tcp or -p udp [ 998.657660][T11327] loop5: detected capacity change from 0 to 512 [ 998.683315][T11327] EXT4-fs: Ignoring removed nobh option [ 998.771666][T11327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.818191][T11327] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 998.935183][T11327] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1155: corrupted xattr block 33: bad e_name length [ 999.180937][T11327] EXT4-fs error (device loop5): ext4_get_inode_usage:888: inode #15: comm syz.5.1155: corrupted xattr block 33: bad e_name length [ 999.376954][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.571917][T11323] loop0: detected capacity change from 0 to 40427 [ 1000.806295][T11323] F2FS-fs (loop0): invalid crc value [ 1001.014220][T11351] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1001.158845][T11323] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 1001.880734][T11359] loop0: detected capacity change from 0 to 512 [ 1001.955088][T11359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1002.001478][T11359] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1002.116700][T11359] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1002.133760][T11359] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 1002.164290][T11359] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 1002.209634][T11359] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1002.260770][T11359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1002.764164][T11359] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 1003.323861][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.398017][T11370] loop4: detected capacity change from 0 to 136 [ 1003.492873][T11374] loop0: detected capacity change from 0 to 512 [ 1003.716041][T11374] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1003.763666][T11374] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1003.772859][T11374] System zones: 0-1, 15-15, 18-18, 34-34 [ 1003.779957][T11374] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1003.786867][T11374] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1003.796715][T11374] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1003.813207][T11374] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1003.830085][T11374] EXT4-fs (loop0): 1 truncate cleaned up [ 1003.842174][T11374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1003.904419][T11374] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 1005.145750][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.671996][T11390] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1006.386337][T11395] loop0: detected capacity change from 0 to 8 [ 1006.766836][T11399] loop4: detected capacity change from 0 to 1024 [ 1006.822567][T11401] loop5: detected capacity change from 0 to 512 [ 1006.892069][T11401] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1007.022848][T11404] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1007.054787][T11404] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1007.091439][T11406] loop4: detected capacity change from 0 to 512 [ 1007.100804][T11406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1007.168383][T11406] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1007.221181][T11406] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1007.248521][T11406] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 1008.864084][T11406] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 1008.923716][T11406] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1008.976538][T11406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1009.086091][T11406] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 1009.227581][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.010236][T11421] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1010.900036][ T6618] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1011.080517][T11428] loop4: detected capacity change from 0 to 8 [ 1011.167662][T11434] loop0: detected capacity change from 0 to 512 [ 1011.180434][T11434] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1011.220540][T11435] loop5: detected capacity change from 0 to 512 [ 1011.396687][T11435] EXT4-fs (loop5): 1 truncate cleaned up [ 1011.421614][T11435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.815649][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.850622][T11452] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1017.487788][T11470] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1017.855625][T11462] loop4: detected capacity change from 0 to 40427 [ 1018.129553][T11462] F2FS-fs (loop4): invalid crc value [ 1018.256381][T11462] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1018.605061][T11462] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1018.831795][T11489] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1202'. [ 1020.987135][T11497] loop5: detected capacity change from 0 to 1024 [ 1021.004858][T11497] EXT4-fs: Ignoring removed oldalloc option [ 1021.010830][T11497] EXT4-fs: Ignoring removed orlov option [ 1021.067226][T11497] EXT4-fs: Ignoring removed oldalloc option [ 1021.073227][T11497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1021.148844][T11497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1021.258157][T11497] EXT4-fs error (device loop5): ext4_xattr_set_entry:1670: inode #13: comm syz.5.1209: corrupted xattr entries [ 1021.307004][T11497] EXT4-fs (loop5): Remounting filesystem read-only [ 1021.332603][T11497] EXT4-fs warning (device loop5): ext4_xattr_ibody_set:2277: inode #18: comm syz.5.1209: dec ref error=-5 [ 1021.478440][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.590048][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1217'. [ 1021.947236][T11508] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1025.520575][T11530] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1031.392856][T11551] loop5: detected capacity change from 0 to 2048 [ 1031.459312][T11551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.505840][T11551] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.621058][T11551] EXT4-fs error (device loop5): ext4_xattr_block_find:1879: inode #15: comm syz.5.1213: corrupted xattr block 128: overlapping e_value [ 1031.819982][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.166201][T11561] loop0: detected capacity change from 0 to 512 [ 1032.252453][T11561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.267756][T11561] ext4 filesystem being mounted at /302/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.325660][T11561] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1225: corrupted xattr block 33: overlapping e_value [ 1032.478573][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.539800][T11557] loop4: detected capacity change from 0 to 32768 [ 1034.282238][T11557] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page [ 1034.282238][T11557] [ 1034.309659][T11557] ERROR: (device loop4): remounting filesystem as read-only [ 1036.849042][T11589] trusted_key: encrypted_key: keylen parameter is missing [ 1037.734913][T11593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1236'. [ 1047.784549][T11629] trusted_key: encrypted_key: keylen parameter is missing [ 1048.735692][T11635] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1051.510142][T11648] trusted_key: encrypted_key: keylen parameter is missing [ 1055.065154][T11669] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1055.087083][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.093488][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.989317][T11682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1059.888717][T11687] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1060.391225][T11692] loop5: detected capacity change from 0 to 512 [ 1060.806427][T11692] EXT4-fs (loop5): 1 truncate cleaned up [ 1060.813527][T11692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.078948][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.283827][T11710] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1064.317619][T11718] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1072.495376][T11752] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1076.228744][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'. [ 1078.518455][T11777] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1078.639725][T11775] loop4: detected capacity change from 0 to 512 [ 1079.165281][T11775] EXT4-fs (loop4): 1 truncate cleaned up [ 1079.172513][T11775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1084.781371][T11806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1284'. [ 1085.308810][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.734722][T11814] loop5: detected capacity change from 0 to 512 [ 1086.218755][T11814] EXT4-fs (loop5): 1 truncate cleaned up [ 1086.231244][T11814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1086.621293][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.729344][T11822] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1086.753919][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1087.010012][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1087.052895][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.091874][ T9] usb 5-1: Product: syz [ 1087.126637][ T9] usb 5-1: Manufacturer: syz [ 1087.157081][ T9] usb 5-1: SerialNumber: syz [ 1087.523932][ T9420] Bluetooth: hci1: command 0x0406 tx timeout [ 1087.720464][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1087.813368][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1087.836014][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1087.850802][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1087.862694][ T9] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1089.562931][ T9] usb 5-1: USB disconnect, device number 4 [ 1093.054028][T11856] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1095.986038][T11874] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1097.193806][ T5779] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1097.413419][ T5779] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1097.447975][ T5779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.480119][ T5779] usb 6-1: Product: syz [ 1097.499153][ T5779] usb 6-1: Manufacturer: syz [ 1097.513667][ T5779] usb 6-1: SerialNumber: syz [ 1098.235863][T11887] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1100.627471][ T5779] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1100.639887][ T5779] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1100.657616][ T5779] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1100.709533][ T5779] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1100.819073][ T5779] lan78xx: probe of 6-1:1.0 failed with error -71 [ 1100.855437][ T5779] usb 6-1: USB disconnect, device number 2 [ 1102.742665][T11910] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1104.775149][T11912] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1107.111845][T11930] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1111.597049][T11953] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1112.464800][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1325'. [ 1112.878757][T11963] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1114.924340][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1328'. [ 1116.915176][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.921514][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.040989][T11990] trusted_key: encrypted_key: keylen parameter is missing [ 1119.489030][T11992] loop0: detected capacity change from 0 to 256 [ 1119.549379][T11992] FAT-fs (loop0): Directory bread(block 64) failed [ 1119.563755][T11992] FAT-fs (loop0): Directory bread(block 65) failed [ 1119.581972][T11992] FAT-fs (loop0): Directory bread(block 66) failed [ 1119.601540][T11992] FAT-fs (loop0): Directory bread(block 67) failed [ 1119.622633][T11992] FAT-fs (loop0): Directory bread(block 68) failed [ 1119.638718][T11992] FAT-fs (loop0): Directory bread(block 69) failed [ 1119.658577][T11992] FAT-fs (loop0): Directory bread(block 70) failed [ 1119.673104][T11992] FAT-fs (loop0): Directory bread(block 71) failed [ 1119.687804][T11992] FAT-fs (loop0): Directory bread(block 72) failed [ 1119.701498][T11992] FAT-fs (loop0): Directory bread(block 73) failed [ 1121.412552][T11992] syz.0.1332: attempt to access beyond end of device [ 1121.412552][T11992] loop0: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 1121.915232][T12005] loop5: detected capacity change from 0 to 1024 [ 1123.535072][T12007] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1125.374869][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 1127.301615][T12021] loop0: detected capacity change from 0 to 512 [ 1127.359712][T12021] EXT4-fs (loop0): 1 truncate cleaned up [ 1127.366988][T12021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1127.613462][T12027] trusted_key: encrypted_key: insufficient parameters specified [ 1129.386406][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.604322][T12045] trusted_key: encrypted_key: keylen parameter is missing [ 1135.287699][T12061] trusted_key: encrypted_key: insufficient parameters specified [ 1137.527306][T12072] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1142.806306][T12092] trusted_key: encrypted_key: keylen parameter is missing [ 1152.661793][T12129] loop5: detected capacity change from 0 to 512 [ 1153.411070][T12129] EXT4-fs (loop5): 1 truncate cleaned up [ 1153.418764][T12129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1153.688216][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.984385][T12136] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1156.795690][T12146] trusted_key: encrypted_key: keylen parameter is missing [ 1161.258744][T12167] loop0: detected capacity change from 0 to 1764 [ 1161.962458][T12172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1166.927481][ T9420] Bluetooth: hci4: unexpected event for opcode 0x1804 [ 1167.556056][T12205] loop5: detected capacity change from 0 to 4096 [ 1167.671749][T12209] trusted_key: encrypted_key: keylen parameter is missing [ 1167.684297][T12205] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 1168.055896][T12213] trusted_key: encrypted_key: keylen parameter is missing [ 1171.353662][ T9420] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1171.365924][ T9420] Bluetooth: hci4: Injecting HCI hardware error event [ 1171.376489][ T9420] Bluetooth: hci4: hardware error 0x00 [ 1171.523115][T12224] loop5: detected capacity change from 0 to 8192 [ 1171.641453][T12224] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1171.770421][T12224] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1171.826536][T12224] FAT-fs (loop5): Filesystem has been set read-only [ 1172.774281][T12243] loop5: detected capacity change from 0 to 512 [ 1173.320051][T12243] EXT4-fs (loop5): 1 truncate cleaned up [ 1173.332978][T12243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.603819][ T9420] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1173.627976][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.700970][T12248] trusted_key: encrypted_key: keylen parameter is missing [ 1174.151740][T12257] loop0: detected capacity change from 0 to 512 [ 1174.214568][T12257] EXT4-fs (loop0): 1 truncate cleaned up [ 1174.221209][T12257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.829881][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.453224][T12272] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1177.535907][T12279] trusted_key: encrypted_key: keylen parameter is missing [ 1177.767991][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.785818][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.635736][T12283] loop4: detected capacity change from 0 to 512 [ 1179.610103][T12283] EXT4-fs (loop4): 1 truncate cleaned up [ 1179.616845][T12283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1180.009970][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.438257][T12293] trusted_key: encrypted_key: keylen parameter is missing [ 1180.679116][T12296] loop5: detected capacity change from 0 to 512 [ 1181.854963][T12296] EXT4-fs (loop5): 1 truncate cleaned up [ 1181.862143][T12296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1182.126865][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.959249][T12309] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1184.392598][T12323] trusted_key: encrypted_key: keylen parameter is missing [ 1184.542388][T12324] loop5: detected capacity change from 0 to 512 [ 1185.256065][T12324] EXT4-fs (loop5): 1 truncate cleaned up [ 1185.263191][T12324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.625139][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.668202][T12346] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1189.936554][T12358] trusted_key: encrypted_key: keylen parameter is missing [ 1190.850448][T12360] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1191.782717][T12369] loop0: detected capacity change from 0 to 512 [ 1192.582614][T12367] trusted_key: encrypted_key: keylen parameter is missing [ 1192.629143][T12369] EXT4-fs (loop0): 1 truncate cleaned up [ 1192.635884][T12369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.867208][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.178709][T12368] loop4: detected capacity change from 0 to 4096 [ 1194.471425][T12368] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1194.573460][T12368] ntfs3: loop4: Failed to read $UpCase (-4). [ 1195.091024][T12386] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1197.632722][T12400] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1198.214583][T12398] Invalid ELF header magic: != ELF [ 1198.389834][T12403] trusted_key: encrypted_key: keylen parameter is missing [ 1200.149823][T12414] loop0: detected capacity change from 0 to 512 [ 1201.964960][T12414] EXT4-fs (loop0): 1 truncate cleaned up [ 1201.972067][T12414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1202.243150][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.271430][T12426] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1206.126758][T12439] loop5: detected capacity change from 0 to 512 [ 1206.917735][T12439] EXT4-fs (loop5): 1 truncate cleaned up [ 1206.925000][T12439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1207.188279][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.369711][T12446] trusted_key: encrypted_key: keylen parameter is missing [ 1208.584643][T12450] loop5: detected capacity change from 0 to 256 [ 1211.946261][T12461] loop4: detected capacity change from 0 to 64 [ 1213.614378][T12473] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1215.107777][T12484] loop5: detected capacity change from 0 to 512 [ 1215.130640][T12484] EXT4-fs (loop5): 1 truncate cleaned up [ 1215.137887][T12484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1215.773198][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1216.341949][T12491] trusted_key: encrypted_key: keylen parameter is missing [ 1220.753165][T12511] loop5: detected capacity change from 0 to 512 [ 1220.796835][T12511] EXT4-fs (loop5): 1 truncate cleaned up [ 1220.804275][T12511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1221.079565][T12515] loop0: detected capacity change from 0 to 1764 [ 1221.475171][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.773272][T12517] loop0: detected capacity change from 0 to 4096 [ 1222.134025][T12525] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1228.495694][T12555] loop5: detected capacity change from 0 to 512 [ 1228.579581][T12555] EXT4-fs (loop5): 1 truncate cleaned up [ 1228.588192][T12555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1229.089032][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.542797][T12565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1234.732154][T12602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1486'. [ 1234.859489][T12605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1487'. [ 1238.168631][T12625] loop5: detected capacity change from 0 to 256 [ 1238.266956][T12625] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 1239.918528][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.925150][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.533191][T12686] loop5: detected capacity change from 0 to 512 [ 1249.547002][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1508'. [ 1249.568443][T12686] EXT4-fs (loop5): 1 truncate cleaned up [ 1249.576074][T12686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1250.821139][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.002400][T12699] loop0: detected capacity change from 0 to 2048 [ 1251.068029][T12702] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1251.206794][T12699] NILFS (loop0): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 1251.241226][T12699] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1251.290163][T12699] Remounting filesystem read-only [ 1251.320835][T12699] NILFS (loop0): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 1251.352310][T12699] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1251.380684][T12699] NILFS (loop0): error -5 truncating bmap (ino=16) [ 1251.569653][ T5768] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 1251.584091][ T5768] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 1251.622383][ T5768] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1251.644161][ T5768] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1251.653099][ T5768] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1251.684082][ T5768] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1251.999532][T12711] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1254.533221][T12719] trusted_key: encrypted_key: keylen parameter is missing [ 1255.848375][T12732] loop5: detected capacity change from 0 to 256 [ 1255.879117][T12732] exfat: Deprecated parameter 'utf8' [ 1255.923008][T12732] exfat: Deprecated parameter 'namecase' [ 1255.969658][T12732] exfat: Deprecated parameter 'namecase' [ 1256.010188][T12732] exfat: Deprecated parameter 'utf8' [ 1257.248332][T12732] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1258.064148][T12743] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1259.215208][T12748] ip6gre1: entered promiscuous mode [ 1259.247931][T12746] loop0: detected capacity change from 0 to 512 [ 1259.284760][T12746] EXT4-fs (loop0): 1 truncate cleaned up [ 1259.291880][T12746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1261.214914][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1262.876566][T12767] trusted_key: encrypted_key: keylen parameter is missing [ 1266.002607][T12780] trusted_key: encrypted_key: keylen parameter is missing [ 1266.216765][T12783] loop0: detected capacity change from 0 to 512 [ 1266.234217][T12783] EXT4-fs (loop0): 1 truncate cleaned up [ 1266.259446][T12783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1266.362473][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.762488][T12789] loop0: detected capacity change from 0 to 512 [ 1266.796146][T12789] EXT4-fs (loop0): 1 truncate cleaned up [ 1266.803238][T12789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1267.495041][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.801458][T12804] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1269.424448][T12811] x_tables: duplicate underflow at hook 4 [ 1271.236907][T12826] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1272.022267][T12824] trusted_key: encrypted_key: keylen parameter is missing [ 1273.932424][T12838] loop4: detected capacity change from 0 to 2048 [ 1274.043873][T12839] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1275.164387][T12838] NILFS (loop4): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 1275.263621][T12838] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1275.324665][T12838] Remounting filesystem read-only [ 1275.331017][T12838] NILFS (loop4): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 1275.374524][T12838] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1275.433816][T12838] NILFS (loop4): error -5 truncating bmap (ino=16) [ 1275.528188][ T6080] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 1275.543653][ T6080] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 1275.551009][ T6080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1275.598209][ T6080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1275.624483][ T6080] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1275.644099][ T6080] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1277.050254][T12851] loop5: detected capacity change from 0 to 512 [ 1277.111467][T12851] EXT4-fs (loop5): 1 truncate cleaned up [ 1277.118171][T12851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1277.796638][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.307589][T12862] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1280.614055][T12873] trusted_key: encrypted_key: keylen parameter is missing [ 1286.327011][T12914] loop4: detected capacity change from 0 to 256 [ 1286.515925][T12914] FAT-fs (loop4): Directory bread(block 64) failed [ 1286.583799][T12914] FAT-fs (loop4): Directory bread(block 65) failed [ 1286.590570][T12914] FAT-fs (loop4): Directory bread(block 66) failed [ 1286.628852][T12914] FAT-fs (loop4): Directory bread(block 67) failed [ 1286.635724][T12914] FAT-fs (loop4): Directory bread(block 68) failed [ 1286.642303][T12914] FAT-fs (loop4): Directory bread(block 69) failed [ 1286.694888][T12914] FAT-fs (loop4): Directory bread(block 70) failed [ 1286.701502][T12914] FAT-fs (loop4): Directory bread(block 71) failed [ 1286.750017][T12914] FAT-fs (loop4): Directory bread(block 72) failed [ 1286.803998][T12914] FAT-fs (loop4): Directory bread(block 73) failed [ 1286.933912][T12925] netlink: 'syz.5.1568': attribute type 2 has an invalid length. [ 1286.941802][T12925] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1568'. [ 1287.197695][T12930] trusted_key: encrypted_key: keylen parameter is missing [ 1289.429666][T12943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1292.080989][T12954] kernel read not supported for file /  (pid: 12954 comm: syz.0.1567) [ 1292.190134][ T28] audit: type=1800 audit(1770348772.346:29): pid=12954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1567" name=200120 dev="mqueue" ino=27696 res=0 errno=0 [ 1292.683902][T12961] trusted_key: encrypted_key: keylen parameter is missing [ 1292.746116][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1583'. [ 1292.775876][T12963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1583'. [ 1292.825927][T12963] ip6gretap1: entered allmulticast mode [ 1294.831082][T12965] loop5: detected capacity change from 0 to 32768 [ 1295.985728][T12965] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1296.014186][T12965] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop5": -EINTR [ 1296.015109][T12965] XFS (loop5): log mount failed [ 1296.414177][T12988] trusted_key: encrypted_key: keylen parameter is missing [ 1297.316098][T12995] loop5: detected capacity change from 0 to 256 [ 1297.513750][T12997] loop0: detected capacity change from 0 to 16 [ 1297.521964][T12997] erofs: (device loop0): mounted with root inode @ nid 36. [ 1297.544568][T12995] FAT-fs (loop5): Directory bread(block 64) failed [ 1297.551260][T12995] FAT-fs (loop5): Directory bread(block 65) failed [ 1297.583222][T12995] FAT-fs (loop5): Directory bread(block 66) failed [ 1297.603587][T12995] FAT-fs (loop5): Directory bread(block 67) failed [ 1297.643742][T12995] FAT-fs (loop5): Directory bread(block 68) failed [ 1297.643781][T12995] FAT-fs (loop5): Directory bread(block 69) failed [ 1297.643878][T12995] FAT-fs (loop5): Directory bread(block 70) failed [ 1297.701296][T12995] FAT-fs (loop5): Directory bread(block 71) failed [ 1297.719342][T12995] FAT-fs (loop5): Directory bread(block 72) failed [ 1297.741298][T12995] FAT-fs (loop5): Directory bread(block 73) failed [ 1297.782947][T13003] loop0: detected capacity change from 0 to 1024 [ 1297.869796][T13003] hfsplus: bad catalog entry type [ 1297.988584][T12496] hfsplus: b-tree write err: -5, ino 4 [ 1298.267078][T13006] trusted_key: encrypted_key: keylen parameter is missing [ 1298.480200][T13010] loop5: detected capacity change from 0 to 256 [ 1298.495229][T13010] exfat: Deprecated parameter 'utf8' [ 1298.554790][T13010] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 1301.043510][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.050011][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.403425][T13024] loop4: detected capacity change from 0 to 1024 [ 1302.394968][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 1302.894044][T13034] hsr0: VLAN not yet supported [ 1303.037365][T13036] loop4: detected capacity change from 0 to 512 [ 1303.099482][T13036] EXT4-fs (loop4): 1 truncate cleaned up [ 1303.127343][T13036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1303.145517][T13040] loop5: detected capacity change from 0 to 64 [ 1303.361672][T13043] trusted_key: encrypted_key: keylen parameter is missing [ 1303.967813][T13047] loop0: detected capacity change from 0 to 1024 [ 1304.004788][T13047] EXT4-fs: Ignoring removed oldalloc option [ 1304.125457][T13047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1304.163632][T13047] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1305.514749][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1305.697382][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1609'. [ 1306.287315][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.752677][T13098] loop4: detected capacity change from 0 to 2048 [ 1312.787654][T13098] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1312.888665][T13101] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1320.890087][T13138] loop5: detected capacity change from 0 to 512 [ 1321.990419][T13138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1322.055039][T13138] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1322.208235][T13138] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1637: corrupted xattr block 33: invalid checksum [ 1322.391935][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1322.883945][T13151] netlink: 'syz.3.1634': attribute type 10 has an invalid length. [ 1322.891841][T13151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1634'. [ 1322.924851][T13151] batadv0: entered promiscuous mode [ 1322.930140][T13151] batadv0: entered allmulticast mode [ 1322.943102][T13151] bridge0: port 3(batadv0) entered blocking state [ 1322.963270][T13151] bridge0: port 3(batadv0) entered disabled state [ 1322.996766][T13151] bridge0: port 3(batadv0) entered blocking state [ 1323.005124][T13151] bridge0: port 3(batadv0) entered forwarding state [ 1323.629560][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1323.639702][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1323.923044][T13154] loop4: detected capacity change from 0 to 32768 [ 1324.231252][T13154] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1326.144171][ T6080] ocfs2: Unmounting device (7,4) on (node local) [ 1328.222191][T13195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1654'. [ 1328.231560][T13195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1654'. [ 1330.596214][T13206] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1331.454166][T13212] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1331.660893][T13216] netlink: 'syz.3.1660': attribute type 10 has an invalid length. [ 1333.295900][T13216] team0: Port device dummy0 added [ 1335.796363][T13237] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1340.037830][T13269] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1342.642323][T13289] loop5: detected capacity change from 0 to 256 [ 1342.781980][T13291] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1343.167198][T13289] FAT-fs (loop5): Directory bread(block 64) failed [ 1343.400214][T13289] FAT-fs (loop5): Directory bread(block 65) failed [ 1343.441152][T13289] FAT-fs (loop5): Directory bread(block 66) failed [ 1343.489480][T13289] FAT-fs (loop5): Directory bread(block 67) failed [ 1343.534107][T13289] FAT-fs (loop5): Directory bread(block 68) failed [ 1343.555640][T13288] loop0: detected capacity change from 0 to 4096 [ 1343.576957][T13289] FAT-fs (loop5): Directory bread(block 69) failed [ 1343.612932][T13288] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1343.624505][T13289] FAT-fs (loop5): Directory bread(block 70) failed [ 1343.631105][T13289] FAT-fs (loop5): Directory bread(block 71) failed [ 1343.687296][T13289] FAT-fs (loop5): Directory bread(block 72) failed [ 1343.722839][T13289] FAT-fs (loop5): Directory bread(block 73) failed [ 1343.741119][T13288] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1343.820695][T13288] ntfs3: loop0: Failed to load $Extend (-22). [ 1343.847345][T13288] ntfs3: loop0: Failed to initialize $Extend. [ 1348.103645][ T5770] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1348.153143][T13319] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1349.222152][ T5770] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.239426][ T5770] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1349.262658][ T5770] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1349.293592][ T5770] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1349.312946][ T5770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.392442][T13326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1694'. [ 1349.853182][ T5770] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1349.875727][ T5770] usb 6-1: invalid MIDI out EP 0 [ 1352.828676][ T5770] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 1352.896465][ T5770] usb 6-1: USB disconnect, device number 3 [ 1360.918698][T13389] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1361.886693][T13399] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1704'. [ 1362.091479][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.097912][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.583331][T13411] loop4: detected capacity change from 0 to 512 [ 1362.639821][T13411] EXT4-fs (loop4): 1 truncate cleaned up [ 1362.647040][T13411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1365.026508][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.169318][T13458] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1371.530326][T13468] loop0: detected capacity change from 0 to 512 [ 1371.632936][T13472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.640422][T13472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.015829][T13468] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1722: bg 0: block 5: invalid block bitmap [ 1373.103569][T13468] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 1373.117036][T13468] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1722: invalid indirect mapped block 3 (level 2) [ 1373.140900][T13468] EXT4-fs (loop0): 1 orphan inode deleted [ 1373.173869][T13468] EXT4-fs (loop0): 1 truncate cleaned up [ 1373.181039][T13468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1373.241816][ T9420] Bluetooth: to_multiplier 23404 > 3200 [ 1373.418493][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.997834][ T5837] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1375.204283][T13489] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1375.324948][ T9420] Bluetooth: hci1: command 0x0406 tx timeout [ 1376.112089][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 1376.124192][ T5837] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1376.132487][ T5837] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1376.163515][ T5837] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1376.189472][ T5837] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1376.215336][ T5837] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1376.235902][ T5837] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1376.253319][ T5837] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1376.531305][ T5837] usb 1-1: Product: syz [ 1376.536146][ T5837] usb 1-1: Manufacturer: syz [ 1376.540787][ T5837] usb 1-1: SerialNumber: syz [ 1376.550585][ T5837] usb 1-1: config 0 descriptor?? [ 1376.560503][ T5837] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1376.646464][T13495] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1376.859199][ T5837] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1377.185876][ T5837] usb 1-1: USB disconnect, device number 8 [ 1377.245594][ T5837] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1377.848816][T13510] loop0: detected capacity change from 0 to 4096 [ 1379.247473][T13510] ntfs: volume version 3.1. [ 1379.896617][T13521] loop4: detected capacity change from 0 to 512 [ 1381.547082][T13521] EXT4-fs (loop4): 1 truncate cleaned up [ 1381.554331][T13521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1383.830412][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1384.169588][T13538] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1384.762340][T13540] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1385.096541][T13532] loop5: detected capacity change from 0 to 32768 [ 1385.197334][T13532] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1385.353698][T13532] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1385.610200][T13532] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1385.852654][T13532] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1392.028262][T13585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1758'. [ 1392.127029][T13587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1392.391956][T13577] loop0: detected capacity change from 0 to 40427 [ 1392.794399][T13577] F2FS-fs (loop0): invalid crc value [ 1392.823493][T13577] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1393.265350][T13597] loop4: detected capacity change from 0 to 1024 [ 1393.284548][T13577] F2FS-fs (loop0): Start checkpoint disabled! [ 1393.315069][T13597] EXT4-fs: inline encryption not supported [ 1393.335993][T13577] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1393.402838][T13597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1393.641406][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.902018][T13611] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1400.963996][ T9707] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1401.326502][ T9707] usb 5-1: config 0 has an invalid interface number: 90 but max is 0 [ 1401.335756][ T9707] usb 5-1: config 0 has no interface number 0 [ 1401.341953][ T9707] usb 5-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 1401.365711][ T9707] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 1401.392148][ T9707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.495580][T13637] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1401.713709][ T5770] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1401.938683][ T5770] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1402.038494][ T5770] usb 1-1: config 0 has no interface number 0 [ 1402.057219][ T5770] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1402.078377][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.107504][ T5770] usb 1-1: config 0 descriptor?? [ 1402.136687][ T5770] usb 1-1: selecting invalid altsetting 1 [ 1402.179613][ T5770] dvb_ttusb_budget: ttusb_init_controller: error [ 1402.198909][ T5770] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1402.420597][ T9707] usb 5-1: Product: syz [ 1402.424996][ T9707] usb 5-1: Manufacturer: syz [ 1402.429631][ T9707] usb 5-1: SerialNumber: syz [ 1403.528904][ T9707] usb 5-1: config 0 descriptor?? [ 1403.560211][T13630] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1403.586149][ T5770] DVB: Unable to find symbol cx22700_attach() [ 1405.094189][ T5770] DVB: Unable to find symbol tda10046_attach() [ 1405.112656][ T5770] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1405.131791][ T5770] usb 1-1: USB disconnect, device number 9 [ 1405.228313][ T9707] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 1405.326880][ T9707] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.90/input/input5 [ 1405.381465][T13655] loop0: detected capacity change from 0 to 2048 [ 1405.420005][ C1] powermate: config urb returned -71 [ 1405.426090][ C1] powermate: config urb returned -71 [ 1405.431533][ C1] powermate: config urb returned -71 [ 1405.437134][ C1] powermate: config urb returned -71 [ 1405.478324][ T9707] usb 5-1: USB disconnect, device number 5 [ 1405.478410][ C1] powermate 5-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 1405.548898][T13655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1405.910036][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.067402][T13666] loop4: detected capacity change from 0 to 256 [ 1406.488218][T13672] loop4: detected capacity change from 0 to 512 [ 1406.526374][T13672] EXT4-fs: Ignoring removed bh option [ 1406.554025][T13672] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1406.605093][T13672] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1406.645140][T13672] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1406.657587][T13672] EXT4-fs (loop4): 1 truncate cleaned up [ 1406.700842][T13672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1407.010797][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.401060][ T5826] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1407.566324][T13683] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1410.578091][ T5826] usb 6-1: device descriptor read/all, error -71 [ 1413.362640][T13706] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1421.113587][ T9707] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1421.364361][ T9707] usb 6-1: config index 0 descriptor too short (expected 2084, got 36) [ 1421.372708][ T9707] usb 6-1: config 0 has an invalid interface number: 240 but max is 0 [ 1421.400108][ T9707] usb 6-1: config 0 has no interface number 0 [ 1421.423999][ T9707] usb 6-1: config 0 interface 240 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.453380][ T9707] usb 6-1: config 0 interface 240 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1421.471960][ T9707] usb 6-1: config 0 interface 240 has no altsetting 0 [ 1421.479309][ T9707] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1421.491869][ T9707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.533013][ T9707] usb 6-1: config 0 descriptor?? [ 1422.003352][ T9707] uclogic 0003:5543:004D.0001: interface is invalid, ignoring [ 1422.014448][T13745] loop4: detected capacity change from 0 to 512 [ 1422.088016][T13745] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1422.140825][T13745] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1422.154446][T13745] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.1795: iget: bad i_size value: 360287970189639680 [ 1422.192596][T13745] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1795: couldn't read orphan inode 15 (err -117) [ 1422.226942][ T5857] usb 6-1: USB disconnect, device number 6 [ 1422.265844][T13745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1422.334820][T13745] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #2: block 3: comm syz.4.1795: lblock 0 mapped to illegal pblock 3 (length 1) [ 1422.404219][T13747] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #2: block 3: comm syz.4.1795: lblock 0 mapped to illegal pblock 3 (length 1) [ 1422.541576][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.305569][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.311900][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.034382][T13753] loop5: detected capacity change from 0 to 4096 [ 1425.126324][T13753] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 1426.550821][T13753] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 1427.819306][T13767] loop5: detected capacity change from 0 to 512 [ 1428.790366][T13767] EXT4-fs (loop5): 1 truncate cleaned up [ 1428.797548][T13767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1429.088855][T13772] loop4: detected capacity change from 0 to 256 [ 1429.111996][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.393913][T13772] FAT-fs (loop4): Directory bread(block 64) failed [ 1429.400665][T13772] FAT-fs (loop4): Directory bread(block 65) failed [ 1429.435170][T13772] FAT-fs (loop4): Directory bread(block 66) failed [ 1429.484096][T13772] FAT-fs (loop4): Directory bread(block 67) failed [ 1429.490837][T13772] FAT-fs (loop4): Directory bread(block 68) failed [ 1429.534944][T13772] FAT-fs (loop4): Directory bread(block 69) failed [ 1429.541721][T13772] FAT-fs (loop4): Directory bread(block 70) failed [ 1429.577328][T13772] FAT-fs (loop4): Directory bread(block 71) failed [ 1429.597556][T13772] FAT-fs (loop4): Directory bread(block 72) failed [ 1429.619180][T13772] FAT-fs (loop4): Directory bread(block 73) failed [ 1431.032523][T13781] loop4: detected capacity change from 0 to 512 [ 1431.103713][T13781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1431.400409][T13781] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1431.572261][T13787] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1432.475818][ T28] audit: type=1800 audit(1770348912.636:30): pid=13781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1807" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1432.757917][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.875056][T13811] loop4: detected capacity change from 0 to 1024 [ 1437.057038][T13817] trusted_key: encrypted_key: keylen parameter is missing [ 1437.627729][T13811] hfsplus: bad catalog entry type [ 1438.014331][ T9483] hfsplus: b-tree write err: -5, ino 4 [ 1439.093577][ T5857] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1439.286420][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 1440.184461][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.217934][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.234892][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1440.250918][ T5857] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1440.265654][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.282214][ T5857] usb 5-1: config 0 descriptor?? [ 1440.578898][T13834] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1440.731272][ T5857] hid (null): report_id 0 is invalid [ 1440.765043][ T5857] shield 0003:0955:7214.0002: report_id 0 is invalid [ 1440.802630][ T5857] shield 0003:0955:7214.0002: item 0 0 1 8 parsing failed [ 1440.825220][ T5857] shield 0003:0955:7214.0002: Parse failed [ 1440.831175][ T5857] shield: probe of 0003:0955:7214.0002 failed with error -22 [ 1440.932644][T13837] loop0: detected capacity change from 0 to 2048 [ 1441.015877][T13837] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1441.031705][ T5857] usb 5-1: USB disconnect, device number 6 [ 1442.117459][T13837] UDF-fs: unknown compression code (0) [ 1442.525186][T13846] trusted_key: encrypted_key: keylen parameter is missing [ 1443.610541][T13850] loop0: detected capacity change from 0 to 512 [ 1444.324774][T13850] EXT4-fs (loop0): 1 truncate cleaned up [ 1444.332014][T13850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1444.587542][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.624154][T13871] trusted_key: encrypted_key: keylen parameter is missing [ 1448.398799][T13878] loop4: detected capacity change from 0 to 256 [ 1452.434751][T13895] loop4: detected capacity change from 0 to 131072 [ 1452.471996][T13895] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 1452.480599][T13895] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 1452.488311][T13895] F2FS-fs (loop4): QUOTA feature is enabled, so ignore jquota_fmt [ 1452.496219][T13895] F2FS-fs (loop4): inline_xattr_size option should be set with inline_xattr option [ 1452.743773][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1454.013829][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1454.043536][ T9] usb 1-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 1454.052679][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.114779][ T9] usb 1-1: config 0 descriptor?? [ 1454.121207][T13897] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1454.522959][T13894] loop5: detected capacity change from 0 to 32768 [ 1454.594457][ T9] betop 0003:8380:1850.0003: unknown main item tag 0x3 [ 1454.621740][ T9] betop 0003:8380:1850.0003: unknown main item tag 0x3 [ 1454.645230][ T9] betop 0003:8380:1850.0003: item fetching failed at offset 3/5 [ 1454.674373][ T9] betop 0003:8380:1850.0003: parse failed [ 1454.695875][ T9] betop: probe of 0003:8380:1850.0003 failed with error -22 [ 1454.799876][ T9] usb 1-1: USB disconnect, device number 10 [ 1455.259146][ T5770] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1455.466006][ T5770] usb 6-1: Using ep0 maxpacket: 16 [ 1455.489241][T13912] trusted_key: encrypted_key: keylen parameter is missing [ 1455.572339][ T5770] usb 6-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.745896][ T5770] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1455.832982][ T5770] usb 6-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 1455.951485][ T5770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.131746][ T5770] usb 6-1: config 0 descriptor?? [ 1458.384815][ T5770] input: HID 28bd:0934 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0934.0004/input/input6 [ 1458.526661][ T5770] uclogic 0003:28BD:0934.0004: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.5-1/input0 [ 1459.620775][ T5770] usb 6-1: USB disconnect, device number 7 [ 1461.340997][T13928] fido_id[13928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1462.344017][T13938] loop0: detected capacity change from 0 to 512 [ 1463.092655][T13938] EXT4-fs (loop0): 1 truncate cleaned up [ 1463.099639][T13938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1464.456085][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1465.628617][ T5770] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1465.765782][T13960] trusted_key: encrypted_key: keylen parameter is missing [ 1466.086454][ T5770] usb 6-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1466.096256][ T5770] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1466.123656][ T5770] usb 6-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1466.154550][ T5770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.200056][ T5770] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1467.844167][ T5770] gspca_sn9c2028: read1 error -71 [ 1467.849748][ T5770] gspca_sn9c2028: read1 error -71 [ 1467.863903][ T5770] gspca_sn9c2028: read1 error -71 [ 1467.869071][ T5770] sn9c2028: probe of 6-1:220.0 failed with error -71 [ 1467.878560][ T5770] usb 6-1: USB disconnect, device number 8 [ 1472.637464][T13992] trusted_key: encrypted_key: keylen parameter is missing [ 1473.758284][T14000] loop4: detected capacity change from 0 to 256 [ 1477.243327][T14019] loop5: detected capacity change from 0 to 512 [ 1478.054015][T14019] EXT4-fs (loop5): 1 truncate cleaned up [ 1478.061090][T14019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1479.416481][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1481.071831][T14036] loop5: detected capacity change from 0 to 256 [ 1481.911400][ T5815] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1482.135373][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 1482.176499][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.231254][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.314064][ T5815] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1482.372369][ T5815] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1482.413616][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.508520][ T5815] usb 1-1: config 0 descriptor?? [ 1483.633861][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1483.724379][ T5815] hid (null): report_id 0 is invalid [ 1483.737550][ T5815] shield 0003:0955:7214.0005: report_id 0 is invalid [ 1483.744419][ T5815] shield 0003:0955:7214.0005: item 0 0 1 8 parsing failed [ 1483.752381][ T5815] shield 0003:0955:7214.0005: Parse failed [ 1483.760819][ T5815] shield: probe of 0003:0955:7214.0005 failed with error -22 [ 1483.771880][ T5815] usb 1-1: USB disconnect, device number 11 [ 1483.842263][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1483.888268][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.946575][ T9] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1483.998767][ T9] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1484.018845][ T9] usb 5-1: Manufacturer: syz [ 1484.054251][ T9] usb 5-1: config 0 descriptor?? [ 1484.741114][T14062] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1485.836906][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.843353][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.320896][ T9] usb 5-1: can't set config #0, error -71 [ 1486.339517][ T9] usb 5-1: USB disconnect, device number 7 [ 1486.605943][T14078] trusted_key: encrypted_key: keylen parameter is missing [ 1490.438763][T14097] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1491.664162][ T5857] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1492.448822][T14114] loop4: detected capacity change from 0 to 512 [ 1493.826793][ T5857] usb 6-1: Using ep0 maxpacket: 32 [ 1493.840151][ T5857] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1493.853616][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.861720][ T5857] usb 6-1: Product: syz [ 1493.874833][ T5857] usb 6-1: Manufacturer: syz [ 1493.879512][ T5857] usb 6-1: SerialNumber: syz [ 1493.886855][ T5857] usb 6-1: config 0 descriptor?? [ 1493.904771][T14114] EXT4-fs (loop4): 1 truncate cleaned up [ 1493.912067][T14114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1493.931000][ T5857] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1493.939656][ T5857] dvb-usb: bulk message failed: -22 (4/0) [ 1493.946332][ T5857] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1493.957467][ T5857] dvb-usb: bulk message failed: -22 (5/0) [ 1493.963433][ T5857] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1493.980141][ T5857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1493.993866][ T5857] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1494.001991][ T5857] usb 6-1: media controller created [ 1494.155764][T14102] dvb-usb: bulk message failed: -22 (7/0) [ 1494.155866][T14102] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1494.156095][T14102] ttusb2: i2c transfer failed. [ 1494.213102][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1494.224334][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1494.277039][ T5857] usb 6-1: selecting invalid altsetting 3 [ 1494.277098][ T5857] ttusb2: set interface to alts=3 failed [ 1495.493606][ T5857] DVB: Unable to find symbol tda10086_attach() [ 1495.499864][ T5857] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1495.625636][ T5857] dvb-usb: bulk message failed: -22 (4/0) [ 1495.683894][ T5857] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1495.721053][ T5857] dvb-usb: bulk message failed: -22 (5/0) [ 1495.744132][ T5857] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1495.764264][ T5857] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1495.798059][ T5857] usb 6-1: USB disconnect, device number 9 [ 1496.047082][ T5857] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1496.106644][T14138] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1496.118269][ T9707] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1496.312089][ T9707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1496.354954][ T9707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1496.429207][ T9707] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1496.515801][ T9707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.730446][ T9707] usb 1-1: config 0 descriptor?? [ 1497.449981][ T9707] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1497.467985][ T9707] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1497.475451][ T9707] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1497.482893][ T9707] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1497.491387][ T9707] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1497.499858][ T9707] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1497.507576][ T9707] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1497.691995][T14145] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1498.561158][ T9707] isku 0003:1E7D:319C.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 1498.576535][ T9707] isku 0003:1E7D:319C.0006: couldn't init struct isku_device [ 1498.585232][ T9707] isku 0003:1E7D:319C.0006: couldn't install keyboard [ 1498.596681][ T9707] isku: probe of 0003:1E7D:319C.0006 failed with error -71 [ 1498.608853][ T9707] usb 1-1: USB disconnect, device number 12 [ 1498.617441][T14153] trusted_key: encrypted_key: keylen parameter is missing [ 1499.981270][T14157] fido_id[14157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1504.828308][T14182] loop4: detected capacity change from 0 to 512 [ 1505.549179][T14182] EXT4-fs (loop4): 1 truncate cleaned up [ 1505.556329][T14182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1505.810383][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1507.323952][T14200] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1508.260662][T14206] trusted_key: encrypted_key: keylen parameter is missing [ 1508.460468][T14208] loop5: detected capacity change from 0 to 256 [ 1511.746521][T14208] FAT-fs (loop5): Directory bread(block 64) failed [ 1511.774894][T14208] FAT-fs (loop5): Directory bread(block 65) failed [ 1511.794507][T14208] FAT-fs (loop5): Directory bread(block 66) failed [ 1511.801112][T14208] FAT-fs (loop5): Directory bread(block 67) failed [ 1511.824072][T14208] FAT-fs (loop5): Directory bread(block 68) failed [ 1511.830741][T14208] FAT-fs (loop5): Directory bread(block 69) failed [ 1511.853939][T14208] FAT-fs (loop5): Directory bread(block 70) failed [ 1511.863897][T14208] FAT-fs (loop5): Directory bread(block 71) failed [ 1511.884053][T14208] FAT-fs (loop5): Directory bread(block 72) failed [ 1511.890762][T14208] FAT-fs (loop5): Directory bread(block 73) failed [ 1512.921934][T14226] capability: warning: `syz.3.1918' uses 32-bit capabilities (legacy support in use) [ 1514.728121][T14240] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1515.362521][T14241] loop4: detected capacity change from 0 to 512 [ 1515.569060][T14241] EXT4-fs (loop4): 1 truncate cleaned up [ 1515.595433][T14241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1515.846610][T14246] trusted_key: encrypted_key: keylen parameter is missing [ 1516.476338][T14252] trusted_key: encrypted_key: keylen parameter is missing [ 1518.570116][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.981143][T14282] trusted_key: encrypted_key: keylen parameter is missing [ 1524.143889][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1524.423345][ T9] usb 1-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1524.542814][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1524.608145][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 1524.686348][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.725146][ T9] usb 1-1: config 0 descriptor?? [ 1525.161760][T14291] trusted_key: encrypted_key: keylen parameter is missing [ 1525.728144][ T9] lenovo 0003:17EF:60B5.0007: unknown main item tag 0x0 [ 1525.809743][ T9] lenovo 0003:17EF:60B5.0007: unknown main item tag 0x0 [ 1525.827363][ T9] lenovo 0003:17EF:60B5.0007: unknown main item tag 0x0 [ 1525.888385][ T9] lenovo 0003:17EF:60B5.0007: hidraw0: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.0-1/input0 [ 1526.009617][ T9] usb 1-1: USB disconnect, device number 13 [ 1526.139768][T14293] fido_id[14293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1526.393501][T14283] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1526.576483][T14283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1526.610732][T14301] trusted_key: encrypted_key: keylen parameter is missing [ 1527.255392][T14283] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1527.269360][T14283] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1527.278836][T14283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.295282][T14283] usb 5-1: config 0 descriptor?? [ 1527.785683][T14283] lenovo 0003:17EF:6067.0008: unknown main item tag 0xd [ 1527.818435][T14283] lenovo 0003:17EF:6067.0008: hidraw0: USB HID v0.01 Device [HID 17ef:6067] on usb-dummy_hcd.4-1/input0 [ 1528.036642][ T5826] usb 5-1: USB disconnect, device number 8 [ 1528.148730][T14306] fido_id[14306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1529.832009][T14314] loop4: detected capacity change from 0 to 512 [ 1529.923202][T14314] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 1529.960673][T14316] loop5: detected capacity change from 0 to 2048 [ 1529.980819][T14314] EXT4-fs (loop4): 1 truncate cleaned up [ 1529.988144][T14314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1530.083486][T14316] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1530.476521][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1531.026892][T14328] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1531.527218][T14326] TCP: TCP_TX_DELAY enabled [ 1535.903682][ T5815] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1536.093504][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 1536.125202][ T5815] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1536.158894][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.184040][ T5815] usb 1-1: config 0 descriptor?? [ 1536.678130][ T5815] kye 0003:0458:0087.0009: unknown main item tag 0x5 [ 1536.709729][ T5815] kye 0003:0458:0087.0009: item fetching failed at offset 3/5 [ 1536.779244][ T5815] kye 0003:0458:0087.0009: parse failed [ 1536.806481][ T5815] kye: probe of 0003:0458:0087.0009 failed with error -22 [ 1538.655474][ T9] usb 1-1: USB disconnect, device number 14 [ 1539.185807][T14365] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1542.999534][T14391] sg_write: process 1718 (syz.0.1968) changed security contexts after opening file descriptor, this is not allowed. [ 1543.015282][T14393] xt_SECMARK: invalid mode: 2 [ 1543.643746][T14401] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1543.655511][T12314] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1543.843684][T12314] usb 5-1: Using ep0 maxpacket: 16 [ 1543.863882][T12314] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1543.943616][T12314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1544.057591][T12314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1544.232718][T12314] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1544.413528][T12314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.432976][T12314] usb 5-1: config 0 descriptor?? [ 1545.182294][T14405] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1545.694879][T12314] sony 0003:054C:024B.000A: unknown main item tag 0x6 [ 1545.752132][T12314] sony 0003:054C:024B.000A: unknown main item tag 0x5 [ 1545.783845][T12314] sony 0003:054C:024B.000A: unknown main item tag 0x4 [ 1545.790725][T12314] sony 0003:054C:024B.000A: item fetching failed at offset 31/160 [ 1545.859214][T12314] sony 0003:054C:024B.000A: parse failed [ 1545.897455][T12314] sony: probe of 0003:054C:024B.000A failed with error -22 [ 1545.934485][T12314] usb 5-1: USB disconnect, device number 9 [ 1546.293980][T14411] loop0: detected capacity change from 0 to 40427 [ 1546.305343][T14411] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1546.313227][T14411] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1546.338027][T14411] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1546.410865][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.418097][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.427309][T14411] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1546.448073][T14411] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1548.972391][T14435] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1978'. [ 1551.792177][T14459] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1552.803466][T12314] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1553.016338][T12314] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.032174][T12314] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1553.043014][T12314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.080523][T12314] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1553.123731][ T9681] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1553.306358][ T9681] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.317145][ T9681] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1553.326241][ T9681] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1553.336098][ T9681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.347988][ T9681] usb 1-1: config 0 descriptor?? [ 1553.357358][ T9681] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1553.371101][ T9681] dvb-usb: bulk message failed: -22 (3/0) [ 1553.393797][ T9681] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1553.404180][ T9681] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1553.411504][ T9681] usb 1-1: media controller created [ 1553.420505][ T9681] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1553.439002][ T9681] dvb-usb: bulk message failed: -22 (6/0) [ 1553.454417][ T9681] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1553.467563][ T9681] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 1553.486416][ T9681] dvb-usb: schedule remote query interval to 150 msecs. [ 1553.496752][ T9681] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1554.666592][T12314] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1554.674494][T14464] dvb-usb: bulk message failed: -22 (2/0) [ 1554.675201][T12314] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 1554.688401][T12314] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 1554.792792][T12314] usb 5-1: USB disconnect, device number 10 [ 1554.809351][ T9681] dvb-usb: bulk message failed: -22 (1/0) [ 1554.824076][ T9681] dvb-usb: error while querying for an remote control event. [ 1554.836280][ T5815] usb 1-1: USB disconnect, device number 15 [ 1554.940903][ T5815] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1561.352141][T14512] loop4: detected capacity change from 0 to 512 [ 1561.453608][T14512] EXT4-fs (loop4): 1 truncate cleaned up [ 1561.460646][T14512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1563.378046][T14522] trusted_key: encrypted_key: keylen parameter is missing [ 1564.506992][T14528] loop0: detected capacity change from 0 to 512 [ 1565.157814][T14528] EXT4-fs (loop0): 1 truncate cleaned up [ 1565.164963][T14528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1565.465264][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1565.853687][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1566.225388][T14538] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1566.814154][T14534] loop0: detected capacity change from 0 to 4096 [ 1568.697891][T14534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1568.827004][T14534] fs-verity: sha512 using implementation "sha512-avx2" [ 1569.130528][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.263762][T14565] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge_slave_1 [ 1573.193767][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'. [ 1575.160097][T14583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2022'. [ 1578.176043][T14603] trusted_key: encrypted_key: keylen parameter is missing [ 1578.493696][T12314] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1579.033532][T12314] usb 5-1: Using ep0 maxpacket: 32 [ 1579.073451][T12314] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1579.118393][T12314] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 243, changing to 11 [ 1580.783201][T12314] usb 5-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1580.850776][T12314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1580.889566][T12314] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 1580.932284][T12314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.954644][T12314] usb 5-1: config 0 descriptor?? [ 1581.074979][T12314] usbhid 5-1:0.0: can't add hid device: -71 [ 1581.093481][T12314] usbhid: probe of 5-1:0.0 failed with error -71 [ 1581.121906][T12314] usb 5-1: USB disconnect, device number 11 [ 1581.183505][ T5770] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 1583.138194][ T5770] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1583.157976][ T5770] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1583.193430][ T5770] usb 6-1: config 0 has no interface number 0 [ 1583.200011][ T5770] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1583.243435][ T5770] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1583.263672][ T5770] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1583.272805][ T5770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.304217][ T5770] usb 6-1: config 0 descriptor?? [ 1584.061975][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2030'. [ 1584.126401][ T5770] usb 6-1: USB disconnect, device number 10 [ 1586.362866][T14638] loop0: detected capacity change from 0 to 512 [ 1586.564562][T14638] EXT4-fs (loop0): 1 truncate cleaned up [ 1586.571756][T14638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1587.035371][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.446052][T14651] trusted_key: encrypted_key: keylen parameter is missing [ 1590.473741][T14668] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1593.300856][T14681] trusted_key: encrypted_key: keylen parameter is missing [ 1594.085303][T14683] loop0: detected capacity change from 0 to 512 [ 1594.198200][T14683] EXT4-fs (loop0): 1 truncate cleaned up [ 1594.206185][T14683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.454319][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.793902][T14693] trusted_key: encrypted_key: keylen parameter is missing [ 1594.873703][ T5826] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1594.911841][T14695] loop5: detected capacity change from 0 to 512 [ 1594.972893][T14695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1595.013549][T14695] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1595.051633][T14695] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.2046: invalid size [ 1595.063679][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 1595.075383][T14695] EXT4-fs (loop5): Remounting filesystem read-only [ 1595.088327][ T5826] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1595.127822][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.158345][ T5826] usb 1-1: Product: syz [ 1595.173658][ T5826] usb 1-1: Manufacturer: syz [ 1596.325525][ T5826] usb 1-1: SerialNumber: syz [ 1596.333521][ T5826] usb 1-1: config 0 descriptor?? [ 1596.349315][ T5826] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 1596.358399][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1596.382014][ T49] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1596.424249][ T49] Quota error (device loop5): write_blk: dquota write failed [ 1596.453602][ T49] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 1596.483649][ T49] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1596.499659][ T49] Quota error (device loop5): write_blk: dquota write failed [ 1596.528202][ T49] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 1596.823060][T14706] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1597.293137][ T5826] usb 1-1: clie_3_5_startup: get interface number bad return length: 0 [ 1597.413689][ T5826] visor: probe of 1-1:0.0 failed with error -5 [ 1597.758203][ T9707] usb 1-1: USB disconnect, device number 16 [ 1599.343723][ T5770] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1599.576223][T14724] trusted_key: encrypted_key: keylen parameter is missing [ 1600.374745][ T5770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1600.420029][ T5770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.458804][ T5770] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1600.489412][ T5770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.533688][ T5770] usb 6-1: config 0 descriptor?? [ 1600.787156][T14726] loop0: detected capacity change from 0 to 512 [ 1600.830689][T14726] EXT4-fs (loop0): 1 truncate cleaned up [ 1600.838074][T14726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1600.992182][ T5770] bigben 0003:146B:0902.000B: unexpected rdesc, please submit for review [ 1601.021920][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1601.034634][ T5770] bigben 0003:146B:0902.000B: unbalanced delimiter at end of report description [ 1601.055113][ T5770] bigben 0003:146B:0902.000B: parse failed [ 1601.061089][ T5770] bigben: probe of 0003:146B:0902.000B failed with error -22 [ 1601.159181][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'. [ 1601.230154][ T5770] usb 6-1: USB disconnect, device number 11 [ 1603.440390][T14744] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1606.083593][ T9681] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1606.225873][T14756] trusted_key: encrypted_key: keylen parameter is missing [ 1606.321281][ T9681] usb 5-1: device descriptor read/all, error -71 [ 1606.806144][T14763] trusted_key: encrypted_key: keylen parameter is missing [ 1609.382318][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1609.393853][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.574577][T14783] loop0: detected capacity change from 0 to 256 [ 1609.644775][T14783] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 1611.072839][T14792] trusted_key: encrypted_key: keylen parameter is missing [ 1611.495666][T14797] trusted_key: encrypted_key: keylen parameter is missing [ 1612.152933][T14799] loop0: detected capacity change from 0 to 512 [ 1612.255262][T14799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1612.323833][T14799] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1613.522545][T14799] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.2080: invalid size [ 1613.576838][T14799] EXT4-fs (loop0): Remounting filesystem read-only [ 1613.696337][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.716666][T14590] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1613.727818][T14590] Quota error (device loop0): write_blk: dquota write failed [ 1613.736483][T14590] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 1613.745922][T14590] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1613.757694][T14590] Quota error (device loop0): write_blk: dquota write failed [ 1613.770193][T14590] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 1613.833687][ T5826] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1614.024182][ T5826] usb 6-1: Using ep0 maxpacket: 16 [ 1614.034388][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.051353][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1614.075186][ T5826] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1614.097909][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.118886][ T5826] usb 6-1: config 0 descriptor?? [ 1614.569513][ T5826] hid-multitouch 0003:1FD2:6007.000C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 1614.712349][T14833] loop4: detected capacity change from 0 to 4096 [ 1614.925988][ T5826] usb 6-1: USB disconnect, device number 12 [ 1614.934943][T14833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1615.020393][T14839] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1615.889732][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1616.335843][T14857] loop4: detected capacity change from 0 to 256 [ 1616.409535][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'. [ 1617.263788][ T5770] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1617.460294][T14868] loop5: detected capacity change from 0 to 4096 [ 1617.468238][ T5770] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.482419][T14872] sp0: Synchronizing with TNC [ 1617.514547][ T5770] usb 1-1: config 7 interface 1 has no altsetting 0 [ 1617.528750][ T5770] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1617.557533][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.574795][T14868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1617.608959][ T5770] usb 1-1: Product: syz [ 1617.629194][ T5770] usb 1-1: Manufacturer: syz [ 1617.660994][ T5770] usb 1-1: SerialNumber: syz [ 1617.844490][ T5770] option 1-1:7.1: GSM modem (1-port) converter detected [ 1617.948389][T14878] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1618.849213][ T5770] rndis_wlan: probe of 1-1:7.0 failed with error -16 [ 1618.874138][ T5770] rndis_host: probe of 1-1:7.0 failed with error -16 [ 1618.934506][ T5770] option 1-1:7.0: GSM modem (1-port) converter detected [ 1618.947217][T14886] trusted_key: encrypted_key: keylen parameter is missing [ 1619.044204][ T5770] usb 1-1: USB disconnect, device number 17 [ 1619.178081][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.188427][ T5770] option 1-1:7.1: device disconnected [ 1619.297844][ T5770] option 1-1:7.0: device disconnected [ 1619.399852][T14892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1619.613223][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2107'. [ 1624.001843][T14921] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1626.878042][T14932] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1627.826629][T14938] trusted_key: encrypted_key: keylen parameter is missing [ 1631.638648][T14960] loop0: detected capacity change from 0 to 164 [ 1631.690127][T14953] loop5: detected capacity change from 0 to 32768 [ 1631.829998][T14953] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1632.091563][T14953] XFS (loop5): Ending clean mount [ 1632.160461][T14953] XFS (loop5): Quotacheck needed: Please wait. [ 1632.365068][T14953] XFS (loop5): Quotacheck: Done. [ 1632.743916][T14978] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1633.719583][T14983] IPv6: Can't replace route, no match found [ 1633.748413][ T9418] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1634.120273][T14987] trusted_key: encrypted_key: keylen parameter is missing [ 1634.794663][ T9420] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 1635.072591][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2137'. [ 1636.770521][T15008] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1638.814371][ T9420] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1638.824698][ T9420] Bluetooth: hci3: Injecting HCI hardware error event [ 1638.834309][ T9420] Bluetooth: hci3: hardware error 0x00 [ 1639.332182][T15025] loop0: detected capacity change from 0 to 512 [ 1640.136461][T15026] trusted_key: encrypted_key: keylen parameter is missing [ 1640.176383][T15025] EXT4-fs (loop0): 1 truncate cleaned up [ 1640.185347][T15025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1640.485024][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1641.097585][ T9420] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1647.800226][T15051] loop5: detected capacity change from 0 to 32768 [ 1647.833588][T15051] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2145 (15051) [ 1647.868884][T15051] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1647.909199][T15051] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1647.938228][T15051] BTRFS info (device loop5): enabling auto defrag [ 1647.953856][T15051] BTRFS info (device loop5): use no compression [ 1647.960195][T15051] BTRFS info (device loop5): force clearing of disk cache [ 1648.008538][T15051] BTRFS info (device loop5): max_inline at 4096 [ 1648.050321][T15051] BTRFS info (device loop5): disabling free space tree [ 1648.239471][T15051] BTRFS info (device loop5): enabling ssd optimizations [ 1648.295427][T15051] BTRFS info (device loop5): auto enabling async discard [ 1648.317521][T15051] BTRFS info (device loop5): rebuilding free space tree [ 1648.739836][T15083] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1649.626193][T15051] BTRFS info (device loop5): disabling free space tree [ 1649.633268][T15051] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1649.669629][T15051] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1650.046699][T15093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2157'. [ 1650.512076][ T9418] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1655.663761][T15108] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1655.913876][T15110] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1657.548177][T15122] trusted_key: encrypted_key: keylen parameter is missing [ 1661.092800][T15137] loop4: detected capacity change from 0 to 32768 [ 1661.112003][T15139] netlink: 'syz.3.2170': attribute type 3 has an invalid length. [ 1661.162762][T15137] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2162 (15137) [ 1661.379813][T15137] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1661.390215][T15137] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1661.402673][T15137] BTRFS info (device loop4): turning off barriers [ 1661.411095][T15137] BTRFS info (device loop4): enabling ssd optimizations [ 1661.419754][T15137] BTRFS info (device loop4): using spread ssd allocation scheme [ 1661.429004][T15137] BTRFS info (device loop4): enabling auto defrag [ 1661.437112][T15137] BTRFS info (device loop4): not using ssd optimizations [ 1661.504417][T15145] loop5: detected capacity change from 0 to 512 [ 1661.716289][T15145] EXT4-fs (loop5): 1 truncate cleaned up [ 1661.728669][T15145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1661.813733][T15137] BTRFS info (device loop4): not using spread ssd allocation scheme [ 1661.874032][T15137] BTRFS info (device loop4): ignoring data csums [ 1661.922150][T15137] BTRFS info (device loop4): force zlib compression, level 3 [ 1662.033793][T15137] BTRFS info (device loop4): enabling ssd optimizations [ 1662.071044][T15137] BTRFS info (device loop4): using spread ssd allocation scheme [ 1662.140297][T15137] BTRFS info (device loop4): using free space tree [ 1662.356545][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.445699][T15156] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1663.575684][T15176] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1664.223933][ T6080] BTRFS info (device loop4: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1664.963522][ T9707] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1665.536715][ T9707] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1665.695793][ T9707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.011924][T15199] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1666.064895][ T9707] usb 5-1: config 0 descriptor?? [ 1666.257014][ T9707] cp210x 5-1:0.0: cp210x converter detected [ 1667.940750][T15205] loop5: detected capacity change from 0 to 64 [ 1668.165675][T15207] loop0: detected capacity change from 0 to 512 [ 1668.174621][T15207] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1668.193625][ T9707] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1668.201199][ T9707] cp210x 5-1:0.0: querying part number failed [ 1668.227208][ T9707] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1668.262524][ T9707] usb 5-1: USB disconnect, device number 14 [ 1668.274647][T15207] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.2184: invalid indirect mapped block 4294967295 (level 0) [ 1668.295259][ T9707] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1668.304961][T15207] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.2184: invalid indirect mapped block 4294967295 (level 1) [ 1668.319188][ T9707] cp210x 5-1:0.0: device disconnected [ 1668.332793][T15207] EXT4-fs (loop0): 1 orphan inode deleted [ 1668.339795][T15207] EXT4-fs (loop0): 1 truncate cleaned up [ 1668.347383][T15207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1669.883899][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.890296][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.131711][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1670.573542][ T5815] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1670.741072][T15223] loop0: detected capacity change from 0 to 16 [ 1670.764841][ T5815] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1670.779486][T15223] erofs: (device loop0): mounted with root inode @ nid 36. [ 1670.786878][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.818500][ T5815] usb 6-1: Product: syz [ 1670.822771][ T5815] usb 6-1: Manufacturer: syz [ 1670.845677][ T28] audit: type=1800 audit(1770349151.006:31): pid=15223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2190" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1670.846306][ T5815] usb 6-1: SerialNumber: syz [ 1670.927286][ T5815] usb 6-1: config 0 descriptor?? [ 1670.949163][ T5815] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1671.012477][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1671.045180][ T5815] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1671.073493][ T5815] usb 6-1: media controller created [ 1671.126237][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1671.194618][T15217] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 1671.566683][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'. [ 1673.523636][ T5815] DVB: Unable to find symbol mt352_attach() [ 1673.622576][ T5815] DVB: Unable to find symbol nxt6000_attach() [ 1673.630082][ T5815] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1673.664244][ T5815] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 1673.732993][ T5815] dvb-usb: schedule remote query interval to 1000 msecs. [ 1673.767863][ T5815] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1673.843797][ T5815] dvb-usb: bulk message failed: -22 (7/0) [ 1673.849635][ T5815] dvb-usb: bulk message failed: -22 (7/0) [ 1673.930869][ T5815] usb 6-1: USB disconnect, device number 13 [ 1674.079708][ T5815] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1675.793728][T15275] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1679.847467][T15298] loop5: detected capacity change from 0 to 512 [ 1680.621575][T15298] EXT4-fs (loop5): 1 truncate cleaned up [ 1680.628818][T15298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1680.885790][ T9418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1681.152079][T15302] loop5: detected capacity change from 0 to 4096 [ 1684.498702][T15318] loop0: detected capacity change from 0 to 1024 [ 1689.310467][T15344] loop4: detected capacity change from 0 to 512 [ 1690.332042][ T9707] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1690.453135][T15344] EXT4-fs (loop4): 1 truncate cleaned up [ 1690.460617][T15344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1690.519276][T15351] fuse: Bad value for 'fd' [ 1690.691775][ T9707] usb 6-1: Using ep0 maxpacket: 32 [ 1690.702132][ T9707] usb 6-1: config 0 has an invalid interface number: 191 but max is 0 [ 1690.716935][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1690.723671][ T9707] usb 6-1: config 0 has no interface number 0 [ 1690.732186][ T9707] usb 6-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 1690.766030][ T9707] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 1690.804113][ T9707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.812224][ T9707] usb 6-1: Product: syz [ 1690.843455][ T9707] usb 6-1: Manufacturer: syz [ 1690.848135][ T9707] usb 6-1: SerialNumber: syz [ 1690.864803][ T9707] usb 6-1: config 0 descriptor?? [ 1690.873091][T15339] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1694.075345][ T9707] asix: probe of 6-1:0.191 failed with error -71 [ 1694.107067][ T9707] usb 6-1: USB disconnect, device number 14 [ 1698.687836][T15376] loop4: detected capacity change from 0 to 256 [ 1699.940362][T15386] loop4: detected capacity change from 0 to 512 [ 1700.653592][T15386] EXT4-fs (loop4): 1 truncate cleaned up [ 1700.660737][T15386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1700.821241][T15392] loop0: detected capacity change from 0 to 1024 [ 1700.930498][ T6080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1700.953510][ T5779] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1701.153570][ T5779] usb 6-1: Using ep0 maxpacket: 8 [ 1701.161955][ T5779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1701.187064][ T5779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1701.197903][ T5779] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1701.210340][ T5779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 1701.234908][ T5779] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1701.259975][ T5779] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1701.275557][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.300689][ T5779] usb 6-1: config 0 descriptor?? [ 1701.317401][T15389] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1702.672493][ T1095] kworker/u4:7: attempt to access beyond end of device [ 1702.672493][ T1095] loop0: rw=1, sector=2380, nr_sectors = 3560 limit=1024 [ 1702.750967][ T5779] usb 6-1: USB disconnect, device number 15 [ 1702.757313][ T9420] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 1703.388682][T15412] loop0: detected capacity change from 0 to 512 [ 1704.055599][T15412] EXT4-fs (loop0): 1 truncate cleaned up [ 1704.062754][T15412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1705.372454][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1710.227738][T15439] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1711.924388][ T5779] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1711.993524][ T9707] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1712.238776][ T9707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1712.357853][ T9707] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1712.414097][ T9707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.423514][ T5779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1712.526735][ T9707] usb 5-1: config 0 descriptor?? [ 1712.824271][ T5779] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1712.833506][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.854380][ T5779] usb 6-1: config 0 descriptor?? [ 1712.962427][T15470] loop0: detected capacity change from 0 to 1024 [ 1713.092438][ T9707] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 1713.138760][ T9707] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 1713.152728][ T9707] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 1713.181782][ T9707] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 1713.193596][ T9707] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 1713.200640][ T9707] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 1713.220261][ T9707] elecom 0003:056E:00FE.000D: unknown main item tag 0x0 [ 1713.239271][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 1713.249352][ T9707] elecom 0003:056E:00FE.000D: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 1713.306663][ T5779] lenovo 0003:17EF:6047.000E: item fetching failed at offset 2/5 [ 1713.345755][ T5779] lenovo 0003:17EF:6047.000E: hid_parse failed [ 1713.352057][ T5779] lenovo: probe of 0003:17EF:6047.000E failed with error -22 [ 1713.399504][ T9707] usb 5-1: USB disconnect, device number 15 [ 1713.436638][T15475] fido_id[15475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1713.533507][ T5779] usb 6-1: USB disconnect, device number 16 [ 1713.632295][T15481] loop0: detected capacity change from 0 to 4096 [ 1713.642508][T15481] EXT4-fs: inline encryption not supported [ 1713.882714][T15481] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1713.898093][T15481] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 1713.907779][T15481] System zones: 0-5 [ 1713.918215][T15481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1714.688532][ T28] audit: type=1800 audit(1770349194.756:32): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2261" name="bus" dev="loop0" ino=15 res=0 errno=0 [ 1716.318903][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.386565][ T5779] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1716.595402][ T5779] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1716.622863][ T5779] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1716.658321][ T5779] usb 5-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 1716.693472][ T5779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.777567][T15503] loop0: detected capacity change from 0 to 512 [ 1716.827609][T15503] EXT4-fs (loop0): 1 truncate cleaned up [ 1716.834799][T15503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1717.329084][ T5779] usb 5-1: config 0 descriptor?? [ 1717.463184][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.798927][ T5779] wacom 0003:056A:0013.000F: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 1717.844343][ T5779] wacom 0003:056A:0013.000F: hidraw0: USB HID v0.00 Device [HID 056a:0013] on usb-dummy_hcd.4-1/input0 [ 1717.876491][ T5779] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0013.000F/input/input10 [ 1718.096252][ T5779] usb 5-1: USB disconnect, device number 16 [ 1718.459329][T15528] loop0: detected capacity change from 0 to 512 [ 1718.645295][T15528] EXT4-fs (loop0): 1 truncate cleaned up [ 1718.657913][T15528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1720.196324][T14626] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1720.205556][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1720.427436][T14626] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.453354][T14626] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 1720.483407][T14626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.517571][T14626] usb 6-1: config 0 descriptor?? [ 1720.594990][T15543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2281'. [ 1720.604425][T15543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2281'. [ 1721.076141][T15547] loop0: detected capacity change from 0 to 512 [ 1721.273884][T15547] EXT4-fs (loop0): 1 truncate cleaned up [ 1721.285418][T15547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1721.799932][T14626] apple 0003:05AC:0292.0010: unbalanced collection at end of report description [ 1721.814166][T14626] apple 0003:05AC:0292.0010: parse failed [ 1721.820081][T14626] apple: probe of 0003:05AC:0292.0010 failed with error -22 [ 1721.865725][T14626] usb 6-1: USB disconnect, device number 17 [ 1722.015321][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1722.639165][T15564] loop0: detected capacity change from 0 to 512 [ 1723.240041][T15564] EXT4-fs (loop0): 1 truncate cleaned up [ 1723.247296][T15564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1723.514927][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1725.267805][T15579] loop0: detected capacity change from 0 to 256 [ 1725.304447][T15579] exfat: Deprecated parameter 'namecase' [ 1725.330049][T15579] exfat: Deprecated parameter 'utf8' [ 1725.408565][T15579] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1726.382577][T15593] loop0: detected capacity change from 0 to 512 [ 1726.424928][T15593] EXT4-fs (loop0): 1 truncate cleaned up [ 1726.432055][T15593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1726.706108][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1729.047396][T15618] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1729.438447][T14283] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1729.660593][T14283] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1729.696818][T14283] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1729.743601][T14283] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1729.792911][T14283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.836495][T15611] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1729.863903][T14283] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1730.213204][ T9681] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1730.224359][T14626] usb 6-1: USB disconnect, device number 18 [ 1730.332179][T15641] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1730.729754][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.736982][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.424088][ T9681] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.434538][ T9681] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1731.609044][ T9681] usb 5-1: config 1 has no interface number 0 [ 1731.620983][T15636] loop0: detected capacity change from 0 to 32768 [ 1731.624950][ T9681] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1731.645341][T15636] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.2301 (15636) [ 1731.667116][ T9681] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1731.687373][ T9681] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1731.721049][T15649] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1731.754683][ T9681] usb 5-1: Product: syz [ 1731.767727][ T9681] usb 5-1: SerialNumber: syz [ 1732.695724][ T9681] usb 5-1: selecting invalid altsetting 1 [ 1732.720052][T15636] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1732.771542][T15636] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1734.345101][T15636] BTRFS info (device loop0): using free space tree [ 1734.371098][T15636] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1734.391873][T15636] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1734.402824][T15636] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1734.464845][T15636] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1734.482060][T15636] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1734.503801][ T9681] cdc_ncm 5-1:1.1: bind() failure [ 1734.534301][T15636] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1734.544020][T15636] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1734.565537][ T9681] usb 5-1: USB disconnect, device number 17 [ 1734.587435][T15636] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1734.603837][T15636] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1734.624321][T15636] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1734.684414][T15636] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1734.724385][T15636] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1734.764279][T15636] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1734.838754][T15636] BTRFS error (device loop0): open_ctree failed: -12 [ 1735.218126][T15679] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1735.579328][T15683] loop4: detected capacity change from 0 to 47 [ 1740.005067][T15698] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1740.634076][T15699] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1743.133848][ T5779] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1743.287837][T14626] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1743.333469][ T5779] usb 5-1: Using ep0 maxpacket: 8 [ 1743.340949][ T5779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1743.356631][ T5779] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1743.370426][ T5779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.391332][ T5779] usb 5-1: config 0 descriptor?? [ 1743.476015][T14626] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 1743.484639][T14626] usb 6-1: config 4 has no interface number 0 [ 1743.490801][T14626] usb 6-1: config 4 interface 44 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1743.506046][T14626] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1743.515344][T14626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.523931][T14626] usb 6-1: Product: syz [ 1743.528313][T14626] usb 6-1: Manufacturer: syz [ 1743.532945][T14626] usb 6-1: SerialNumber: syz [ 1743.634055][ T5779] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1743.723582][ T5770] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1743.854957][ T5779] usb 5-1: USB disconnect, device number 18 [ 1743.913374][ T5770] usb 1-1: Using ep0 maxpacket: 32 [ 1743.929519][ T5770] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1743.940292][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.949569][ T5770] usb 1-1: Product: syz [ 1743.954457][ T5770] usb 1-1: Manufacturer: syz [ 1743.959105][ T5770] usb 1-1: SerialNumber: syz [ 1743.965211][T14626] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1743.975313][ T5770] usb 1-1: config 0 descriptor?? [ 1743.985840][T14626] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1744.001113][T14626] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1744.008362][T14626] usb 6-1: media controller created [ 1744.021428][T14626] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1744.081237][T14626] DVB: Unable to find symbol dib7000p_attach() [ 1744.088812][T14626] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1744.177349][T14626] rc_core: IR keymap rc-dib0700-rc5 not found [ 1744.187342][T14626] Registered IR keymap rc-empty [ 1744.192511][T14626] dvb-usb: could not initialize remote control. [ 1744.203781][T14626] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1744.221097][ T5770] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 018 [ 1744.468182][T15719] ------------[ cut here ]------------ [ 1744.474020][T15719] usb 6-1: BOGUS control dir, pipe 80001380 doesn't match bRequestType c0 [ 1744.483732][T15719] WARNING: CPU: 0 PID: 15719 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10ac/0x17d0 [ 1744.493872][T15719] Modules linked in: [ 1744.497811][T15719] CPU: 0 PID: 15719 Comm: syz.0.2322 Not tainted syzkaller #0 [ 1744.505375][T15719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1744.515677][T15719] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 1744.521530][T15719] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 40 37 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 9d ef fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 1744.541331][T15719] RSP: 0018:ffffc9000488f870 EFLAGS: 00010246 [ 1744.547537][T15719] RAX: 8b612c2e4f12a900 RBX: ffff888023ad0100 RCX: 0000000000080000 [ 1744.555593][T15719] RDX: ffffc9000bf39000 RSI: 000000000000571e RDI: 000000000000571f [ 1744.563884][T15719] RBP: 1ffff110031d853b R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 1744.571882][T15719] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 1744.580031][T15719] R13: ffff888018ec29d8 R14: 0000000080001380 R15: ffff888024ab4a28 [ 1744.588105][T15719] FS: 00007fa6683f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1744.597351][T15719] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1744.604004][T15719] CR2: 00007f2237870003 CR3: 000000005cdda000 CR4: 00000000003526f0 [ 1744.612000][T15719] Call Trace: [ 1744.615462][T15719] [ 1744.618421][T15719] usb_start_wait_urb+0x12c/0x4e0 [ 1744.623565][T15719] ? usb_api_blocking_completion+0xb0/0xb0 [ 1744.629464][T15719] usb_control_msg+0x233/0x3e0 [ 1744.634346][T15719] dib0700_i2c_xfer+0xb9d/0xf60 [ 1744.639224][T15719] ? rt_mutex_slowlock+0x368/0x610 [ 1744.644474][T15719] ? dib0700_set_gpio+0x1f0/0x1f0 [ 1744.649549][T15719] __i2c_transfer+0x884/0x20c0 [ 1744.654395][T15719] ? i2c_cmd+0x110/0x110 [ 1744.658657][T15719] ? i2c_transfer+0x11b/0x3a0 [ 1744.663386][T15719] i2c_transfer+0x261/0x3a0 [ 1744.667904][T15719] ? __i2c_transfer+0x20c0/0x20c0 [ 1744.672942][T15719] ? __might_fault+0xc6/0x120 [ 1744.677681][T15719] ? __might_fault+0xaa/0x120 [ 1744.682368][T15719] ? _copy_from_user+0xa5/0xe0 [ 1744.687205][T15719] i2cdev_ioctl_rdwr+0x3b0/0x690 [ 1744.692163][T15719] i2cdev_ioctl+0x6a0/0x840 [ 1744.696872][T15719] ? i2cdev_write+0x120/0x120 [ 1744.701631][T15719] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1744.706631][T15719] ? security_file_ioctl+0x80/0xa0 [ 1744.711758][T15719] ? i2cdev_write+0x120/0x120 [ 1744.716483][T15719] __se_sys_ioctl+0xfd/0x170 [ 1744.721094][T15719] do_syscall_64+0x55/0xa0 [ 1744.725752][T15719] ? clear_bhb_loop+0x40/0x90 [ 1744.730486][T15719] ? clear_bhb_loop+0x40/0x90 [ 1744.735271][T15719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1744.741187][T15719] RIP: 0033:0x7fa66a19aeb9 [ 1744.745676][T15719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1744.765523][T15719] RSP: 002b:00007fa6683f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1744.774034][T15719] RAX: ffffffffffffffda RBX: 00007fa66a415fa0 RCX: 00007fa66a19aeb9 [ 1744.782034][T15719] RDX: 0000200000000100 RSI: 0000000000000707 RDI: 0000000000000004 [ 1744.790123][T15719] RBP: 00007fa66a208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1744.798307][T15719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1744.806733][T15719] R13: 00007fa66a416038 R14: 00007fa66a415fa0 R15: 00007ffddb1557a8 [ 1744.814954][T15719] [ 1744.818006][T15719] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1744.825312][T15719] CPU: 0 PID: 15719 Comm: syz.0.2322 Not tainted syzkaller #0 [ 1744.832779][T15719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1744.842847][T15719] Call Trace: [ 1744.846141][T15719] [ 1744.849110][T15719] dump_stack_lvl+0x18c/0x250 [ 1744.853821][T15719] ? show_regs_print_info+0x20/0x20 [ 1744.859048][T15719] ? load_image+0x400/0x400 [ 1744.863601][T15719] panic+0x2dc/0x730 [ 1744.867609][T15719] ? bpf_jit_dump+0xd0/0xd0 [ 1744.872129][T15719] __warn+0x2e0/0x470 [ 1744.876117][T15719] ? usb_submit_urb+0x10ac/0x17d0 [ 1744.881154][T15719] ? usb_submit_urb+0x10ac/0x17d0 [ 1744.886190][T15719] report_bug+0x2be/0x4f0 [ 1744.890611][T15719] ? usb_submit_urb+0x10ac/0x17d0 [ 1744.895653][T15719] ? usb_submit_urb+0x10ac/0x17d0 [ 1744.900685][T15719] ? usb_submit_urb+0x10ae/0x17d0 [ 1744.905717][T15719] handle_bug+0xcf/0x120 [ 1744.910010][T15719] exc_invalid_op+0x1a/0x50 [ 1744.914524][T15719] asm_exc_invalid_op+0x1a/0x20 [ 1744.919374][T15719] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 1744.925015][T15719] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 40 37 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 9d ef fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 1744.944637][T15719] RSP: 0018:ffffc9000488f870 EFLAGS: 00010246 [ 1744.950716][T15719] RAX: 8b612c2e4f12a900 RBX: ffff888023ad0100 RCX: 0000000000080000 [ 1744.958718][T15719] RDX: ffffc9000bf39000 RSI: 000000000000571e RDI: 000000000000571f [ 1744.966695][T15719] RBP: 1ffff110031d853b R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 1744.974670][T15719] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 1744.982645][T15719] R13: ffff888018ec29d8 R14: 0000000080001380 R15: ffff888024ab4a28 [ 1744.990667][T15719] usb_start_wait_urb+0x12c/0x4e0 [ 1744.995710][T15719] ? usb_api_blocking_completion+0xb0/0xb0 [ 1745.001538][T15719] usb_control_msg+0x233/0x3e0 [ 1745.006346][T15719] dib0700_i2c_xfer+0xb9d/0xf60 [ 1745.011213][T15719] ? rt_mutex_slowlock+0x368/0x610 [ 1745.016331][T15719] ? dib0700_set_gpio+0x1f0/0x1f0 [ 1745.021360][T15719] __i2c_transfer+0x884/0x20c0 [ 1745.026149][T15719] ? i2c_cmd+0x110/0x110 [ 1745.030415][T15719] ? i2c_transfer+0x11b/0x3a0 [ 1745.035109][T15719] i2c_transfer+0x261/0x3a0 [ 1745.039621][T15719] ? __i2c_transfer+0x20c0/0x20c0 [ 1745.044827][T15719] ? __might_fault+0xc6/0x120 [ 1745.049548][T15719] ? __might_fault+0xaa/0x120 [ 1745.054240][T15719] ? _copy_from_user+0xa5/0xe0 [ 1745.059027][T15719] i2cdev_ioctl_rdwr+0x3b0/0x690 [ 1745.063984][T15719] i2cdev_ioctl+0x6a0/0x840 [ 1745.068490][T15719] ? i2cdev_write+0x120/0x120 [ 1745.073176][T15719] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1745.078132][T15719] ? security_file_ioctl+0x80/0xa0 [ 1745.083256][T15719] ? i2cdev_write+0x120/0x120 [ 1745.087986][T15719] __se_sys_ioctl+0xfd/0x170 [ 1745.092591][T15719] do_syscall_64+0x55/0xa0 [ 1745.097026][T15719] ? clear_bhb_loop+0x40/0x90 [ 1745.101711][T15719] ? clear_bhb_loop+0x40/0x90 [ 1745.106421][T15719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1745.112321][T15719] RIP: 0033:0x7fa66a19aeb9 [ 1745.116740][T15719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.136360][T15719] RSP: 002b:00007fa6683f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1745.144785][T15719] RAX: ffffffffffffffda RBX: 00007fa66a415fa0 RCX: 00007fa66a19aeb9 [ 1745.152774][T15719] RDX: 0000200000000100 RSI: 0000000000000707 RDI: 0000000000000004 [ 1745.160746][T15719] RBP: 00007fa66a208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1745.168721][T15719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1745.176702][T15719] R13: 00007fa66a416038 R14: 00007fa66a415fa0 R15: 00007ffddb1557a8 [ 1745.184691][T15719] [ 1745.188315][T15719] Kernel Offset: disabled [ 1745.192756][T15719] Rebooting in 86400 seconds..