last executing test programs: 8.04915631s ago: executing program 2 (id=328): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000300)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 7.788890145s ago: executing program 2 (id=332): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000), 0xff, 0x50d4, &(0x7f00000051c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x101142, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 6.004934077s ago: executing program 2 (id=343): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r2, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 5.349914692s ago: executing program 2 (id=348): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x8, 0x0, 0xfffffffe}) r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 4.98492015s ago: executing program 3 (id=351): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x443e, &(0x7f00000088c0)="$eJzs3c9PlGceAPDnfWFXcNUF14ObbLKTrMludjcEPO0uJouIIii1sdU0vYwDjEo7MAaGpgcP9GbSU5MeGg+mTXrjZDj0av+EXnq0Z5P20EsTE1OamXkHeN+ZKVPLQDGfTyIP7/MbvvM+84zJyxMnKncXVnILK7nCUq48d3vlbO69cml1sRjifXLQ49OZbsRJ7A/OtQuX3rh5NoQv579+trm5uRmqekNLIzu+/+H7+3M704Y406bab+ve9srbIYRTTfOq6gkhvPVFCFEI4XySN56k/SGEE6FedvP+h7dyezSbx0+L5/IvZh5sjJ6ZXn+00f5nj0J4WPrzv+8sfvu3ntFv/rlHwwMAAAAAAAAAAAAAAAAAcMhNXr924/XhkfAkCr3rUfPzupNJ2vr52P4k3dwDf+1ovs+T2r/upwYAAAAAAAAAAAAAAAAAAIDflu3n/3PRyRbP/08k6Vib9pv/7/4c6Z6p165NXBweSc5/j5rK/5NkfXe+Jwy2OPc9e/77+Uz71ue/N4/zshrza4w7EKJ4KHUdx0NDIXyWHPx+Ojoal8orlX/dLq8uze/ZNA6tdPzrp/enopMc6N9p/Mcz/Xf//P8/Nb2aqte39u4l9kpLx7+nbb3PP4g6iv+FTLv9iP/PO9Ld4Q+5dPx7a3n9OyuM1ReAavw/6t09/hOZ/rsV/xMhhFxUnWsutQJU9zDV/Hb7FdLS8f9dLS+1dCa/yHb3//NM/C9m+j+o9X8t+0ZES+n4/76W15eqsX3/D8a73/+XMv0fRPyr81/z/t+RdPyT98reVJXab7LT9X8y03+34n8jTuZ5Ikq9Atajen7rv1dX99BrY0s6/n1N5duf/+L6+p/kt4v/5Uz7/fr81xi38fmvsfz/I6p//qO1dPz729br9P6fyrTr9vo/Vtv/vRSrQFP8j9by0nvngdrXTuM/nem/W/Gv7Ur6GvHfDuWPR+r5n9r/dSQd/z/UM+OdNdZqX2v7v2j3/f+VTP8Hsf+rzn8t7u6or4p0/I+1rVeN/1cd/P/P1Uy77sc/hGEr+UtLx/9423q1+79v9/jPZNp1O/5/72bnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIfAeJIOhCgeSl3H8dBQCBeS69PhaDRbmM/Plspz766EMJHk58LJ6E6pPFso5ReWyvPFfKFUKs+FcDEpPxX6opVSuZJfLNy7tNVXf3S3WFiuzBYLlRDCZJL/l3C80dfsQmWxcC+EcHmr7I9xefne3cJSfn5h+X/Dw8PDYWprDoNR8f1KcalSH71eGsL0VtuBaMfkasVXtuZyLHqnvLq8VCjV8q/uaFMqzxVKO9rMJGUfh8Gosry6NFeoFPOl8p3GeAdpLEknpq6/ef3qSFP5raieju/vtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4hZ6M/veTEEJv/SoOIeSi5Jso+Zfy+GnxXP7FzION0TPT6482nrWqAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYVd+kdpIIjiAPxmLLT0GFbLbme7oogWrgieQI/hYfQoXsI7WKRImyIEklkI+we2Sarvax7Mj5n3YB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDc41v3/lo3ESmutpcRv59//8f5c6nfd9P3L84wI6fz9NLdP9RN+fc0ym/L0arN+3Sz/vqIidr7GezJcJ8Oxn2G5vZtbr6+73WkXEVEW/KblHNVLXsLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAdO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvwIAAP//8CkgJg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001b40)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 4.720336074s ago: executing program 2 (id=353): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a57802000000010474", 0x1b, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000032a9000070100f3ff83"], 0x0}, 0x0) 4.149361259s ago: executing program 1 (id=354): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x10, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0xc000000}, 0x20000000) 3.734713363s ago: executing program 1 (id=356): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r1, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 3.500081334s ago: executing program 1 (id=357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) 3.362306231s ago: executing program 3 (id=358): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x21445a, &(0x7f00000001c0)=ANY=[], 0x1, 0x1c4, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x800000)=nil, &(0x7f0000058000/0x2000)=nil, &(0x7f0000311000/0x2000)=nil, &(0x7f000050b000/0x1000)=nil, &(0x7f0000367000/0x4000)=nil, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000000f40)="4b7911cf1b97dcf089a73088a5f96bf36239c99da419c8f0ff86872abaecdf1781e7ae28759a46872059df9debbcc576761506776c9764405ade4e1970781167f66e0e5434d755705ae0baf9e63d4d1506927fbc2cf9a295c4bdaf55bc9d9c7f7744f1af7c4dec190fb4b657638ae2e62257322dc2bba8d19ed8fde25aa11ab3043bf33468e1c0d947d79d3b44fbd3dc9b7e9d1cb81c59a4371ded644d634c428e8c822383e02b7cb5638034942967080f71cd0af19c7328b1bcae78f6e0ba654b", 0xc1}, 0x68) sync_file_range(r0, 0x7, 0x0, 0x6) 2.60172187s ago: executing program 0 (id=360): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000010c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x60009c0e, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2df0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000003100)={0x10, 0x0, r1}, 0x10) 2.572839204s ago: executing program 3 (id=361): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x8, 0x0, 0xfffffffe}) r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 2.389144339s ago: executing program 1 (id=362): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 2.380466079s ago: executing program 0 (id=363): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @msi={0xc, 0xc0000000, 0x6, 0x6}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) 2.356497093s ago: executing program 3 (id=364): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x10, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0xc000000}, 0x20000000) 2.248639787s ago: executing program 2 (id=365): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460) 2.188906664s ago: executing program 1 (id=366): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) r0 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.15058778s ago: executing program 3 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x1, 0x80000001, 0x2, 0x7, 0x3, 0x258, 0x4}]}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x16, 0x5}) 2.023534246s ago: executing program 0 (id=368): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r1}) r2 = eventfd2(0x9, 0x80001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r2}) 1.665406653s ago: executing program 0 (id=369): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) 1.546905858s ago: executing program 3 (id=370): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000003c0)={0x40, 0xe}, 0x0, 0x0}) 1.281008583s ago: executing program 1 (id=371): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x1001, 0x9, 0x4, 0x8000, 0xfffd, 0x8ec, 0x3906, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 715.751447ms ago: executing program 0 (id=372): syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000001540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x2) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x1ffd) 0s ago: executing program 0 (id=373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x8, 0x0, 0xfffffffe}) r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 58.143112][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.166400][ T5436] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: [ 58.960148][ T5524] sshd (5524) used greatest stack depth: 19312 bytes left OK syzkaller Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts. syzkaller login: [ 82.106874][ T5758] cgroup: Unknown subsys name 'net' [ 82.244525][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.008269][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.639444][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.649823][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.675349][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.687151][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.696392][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.706077][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.727313][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.739292][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.747275][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.798292][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.807724][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.816139][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.824575][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.832397][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.841066][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.849476][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.857777][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.866837][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.874965][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.896291][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.905519][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.913802][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.936423][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.945850][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.363295][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 86.464250][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 86.585959][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.593395][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.602444][ T5773] bridge_slave_0: entered allmulticast mode [ 86.610062][ T5773] bridge_slave_0: entered promiscuous mode [ 86.624761][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.632228][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.639891][ T5773] bridge_slave_1: entered allmulticast mode [ 86.647611][ T5773] bridge_slave_1: entered promiscuous mode [ 86.655712][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 86.687647][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 86.719359][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.726736][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.733930][ T5776] bridge_slave_0: entered allmulticast mode [ 86.741531][ T5776] bridge_slave_0: entered promiscuous mode [ 86.790982][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.798560][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.806223][ T5776] bridge_slave_1: entered allmulticast mode [ 86.813721][ T5776] bridge_slave_1: entered promiscuous mode [ 86.834899][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.847453][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.923463][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.958559][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.982580][ T5773] team0: Port device team_slave_0 added [ 86.993242][ T5773] team0: Port device team_slave_1 added [ 87.041105][ T5776] team0: Port device team_slave_0 added [ 87.071839][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.079567][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.087022][ T5777] bridge_slave_0: entered allmulticast mode [ 87.094092][ T5777] bridge_slave_0: entered promiscuous mode [ 87.113826][ T5776] team0: Port device team_slave_1 added [ 87.120861][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.128088][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.154741][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.167370][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.174627][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.182429][ T5777] bridge_slave_1: entered allmulticast mode [ 87.190083][ T5777] bridge_slave_1: entered promiscuous mode [ 87.209014][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.235459][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.242861][ T5769] bridge_slave_0: entered allmulticast mode [ 87.251141][ T5769] bridge_slave_0: entered promiscuous mode [ 87.291173][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.299802][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.326708][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.381592][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.393384][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.402910][ T5769] bridge_slave_1: entered allmulticast mode [ 87.414400][ T5769] bridge_slave_1: entered promiscuous mode [ 87.424520][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.435898][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.463027][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.583182][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.626877][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.633902][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.685297][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.717609][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.736110][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.754585][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.776206][ T5085] Bluetooth: hci0: command tx timeout [ 87.784567][ T5773] hsr_slave_0: entered promiscuous mode [ 87.792881][ T5773] hsr_slave_1: entered promiscuous mode [ 87.867266][ T5769] team0: Port device team_slave_0 added [ 87.902831][ T5777] team0: Port device team_slave_0 added [ 87.911592][ T5769] team0: Port device team_slave_1 added [ 87.935585][ T5085] Bluetooth: hci1: command tx timeout [ 87.958695][ T5777] team0: Port device team_slave_1 added [ 87.983097][ T5776] hsr_slave_0: entered promiscuous mode [ 87.990376][ T5776] hsr_slave_1: entered promiscuous mode [ 87.997135][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.005135][ T5776] Cannot create hsr debugfs directory [ 88.015431][ T5772] Bluetooth: hci3: command tx timeout [ 88.021381][ T5085] Bluetooth: hci2: command tx timeout [ 88.063576][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.070645][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.096699][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.109273][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.119874][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.147586][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.176258][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.183292][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.209808][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.222231][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.230496][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.258253][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.387927][ T5769] hsr_slave_0: entered promiscuous mode [ 88.398588][ T5769] hsr_slave_1: entered promiscuous mode [ 88.405531][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.413519][ T5769] Cannot create hsr debugfs directory [ 88.446213][ T5777] hsr_slave_0: entered promiscuous mode [ 88.453457][ T5777] hsr_slave_1: entered promiscuous mode [ 88.460456][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.468910][ T5777] Cannot create hsr debugfs directory [ 88.820926][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.851915][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.862982][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.873994][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.966892][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.982967][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.019818][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.032529][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.089006][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.116596][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.132743][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.151198][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.229959][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.240991][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.254858][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.276081][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.329352][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.365064][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.414082][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.421542][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.453039][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.460340][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.538921][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.613919][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.624311][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.651806][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.659035][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.673525][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.718072][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.742185][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.791452][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.798726][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.833817][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.841191][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.853626][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.861133][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.868104][ T5085] Bluetooth: hci0: command tx timeout [ 89.894409][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.946915][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.954180][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.965033][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.972449][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.016038][ T5085] Bluetooth: hci1: command tx timeout [ 90.096568][ T5772] Bluetooth: hci3: command tx timeout [ 90.102160][ T5085] Bluetooth: hci2: command tx timeout [ 90.263408][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.443251][ T5773] veth0_vlan: entered promiscuous mode [ 90.491169][ T5773] veth1_vlan: entered promiscuous mode [ 90.627945][ T5773] veth0_macvtap: entered promiscuous mode [ 90.659901][ T5773] veth1_macvtap: entered promiscuous mode [ 90.731601][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.767841][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.794140][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.810089][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.819608][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.829902][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.839018][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.848038][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.912800][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.021828][ T5776] veth0_vlan: entered promiscuous mode [ 91.075460][ T5776] veth1_vlan: entered promiscuous mode [ 91.082254][ T5769] veth0_vlan: entered promiscuous mode [ 91.142326][ T5777] veth0_vlan: entered promiscuous mode [ 91.162558][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.169299][ T5769] veth1_vlan: entered promiscuous mode [ 91.197947][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.244537][ T5777] veth1_vlan: entered promiscuous mode [ 91.276414][ T2903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.284413][ T2903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.305122][ T5776] veth0_macvtap: entered promiscuous mode [ 91.327811][ T5776] veth1_macvtap: entered promiscuous mode [ 91.388209][ T5769] veth0_macvtap: entered promiscuous mode [ 91.408395][ T5777] veth0_macvtap: entered promiscuous mode [ 91.428667][ T5769] veth1_macvtap: entered promiscuous mode [ 91.448169][ T5777] veth1_macvtap: entered promiscuous mode [ 91.458403][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.472930][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.487277][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.534705][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.555654][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.569522][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.584879][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.600171][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.624755][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.640201][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.660378][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.678805][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692811][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.710585][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.720703][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.746202][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.756887][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.770103][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.781547][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.815051][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.831208][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.851316][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.864946][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.876113][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.886600][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.897940][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.910543][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.929096][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.941972][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.948120][ T5085] Bluetooth: hci0: command tx timeout [ 91.958889][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.968409][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.999100][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.010211][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.022437][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.038776][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.048969][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.059840][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.071639][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.095818][ T5085] Bluetooth: hci1: command tx timeout [ 92.118941][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.128873][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.137870][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.146803][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.176169][ T5085] Bluetooth: hci2: command tx timeout [ 92.181712][ T5772] Bluetooth: hci3: command tx timeout [ 92.356387][ T788] cfg80211: failed to load regulatory.db [ 92.418909][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.436254][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.458686][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.471280][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.523312][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.542875][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.570092][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.594272][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.666853][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.674762][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.727456][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.759557][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.894942][ T5875] syz.3.7[5875]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.912210][ T5875] loop3: detected capacity change from 0 to 256 [ 92.930432][ T5875] ======================================================= [ 92.930432][ T5875] WARNING: The mand mount option has been deprecated and [ 92.930432][ T5875] and is ignored by this kernel. Remove the mand [ 92.930432][ T5875] option from the mount to silence this warning. [ 92.930432][ T5875] ======================================================= [ 92.993818][ T5873] wireguard0: entered promiscuous mode [ 93.000469][ T5873] wireguard0: entered allmulticast mode [ 93.080096][ T5875] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.095321][ T5875] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 93.134543][ T5875] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 93.298914][ T5866] kernel write not supported for file /3/attr/exec (pid: 5866 comm: kworker/0:6) [ 93.706459][ T5885] loop2: detected capacity change from 0 to 4096 [ 93.707315][ T5892] loop1: detected capacity change from 0 to 512 [ 93.754435][ T5885] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 93.819616][ T5894] netlink: 'syz.0.13': attribute type 7 has an invalid length. [ 93.820392][ T5885] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 93.845134][ T5892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.876370][ T5894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13'. [ 93.902151][ T5892] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.971811][ T5898] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.016931][ T5772] Bluetooth: hci0: command tx timeout [ 94.052954][ T5900] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.150297][ T5885] syz.2.10: attempt to access beyond end of device [ 94.150297][ T5885] loop2: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 94.159477][ T28] audit: type=1800 audit(1768688286.498:2): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 94.198164][ T5772] Bluetooth: hci1: command tx timeout [ 94.237554][ T5885] syz.2.10: attempt to access beyond end of device [ 94.237554][ T5885] loop2: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 94.255640][ T5772] Bluetooth: hci3: command tx timeout [ 94.261141][ T5772] Bluetooth: hci2: command tx timeout [ 94.302043][ T5885] syz.2.10: attempt to access beyond end of device [ 94.302043][ T5885] loop2: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 94.327191][ T5885] syz.2.10: attempt to access beyond end of device [ 94.327191][ T5885] loop2: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 94.352432][ T5885] syz.2.10: attempt to access beyond end of device [ 94.352432][ T5885] loop2: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 94.407999][ T5885] syz.2.10: attempt to access beyond end of device [ 94.407999][ T5885] loop2: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 94.445797][ T5885] syz.2.10: attempt to access beyond end of device [ 94.445797][ T5885] loop2: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 94.495737][ T5885] syz.2.10: attempt to access beyond end of device [ 94.495737][ T5885] loop2: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 94.540100][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.550657][ T5885] syz.2.10: attempt to access beyond end of device [ 94.550657][ T5885] loop2: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 94.901947][ T5913] netlink: 64 bytes leftover after parsing attributes in process `syz.2.19'. [ 95.293665][ T5906] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.656931][ T5916] loop1: detected capacity change from 0 to 32768 [ 95.843689][ T28] audit: type=1800 audit(1768688288.208:3): pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 95.875745][ T5926] input: syz0 as /devices/virtual/input/input5 [ 96.698396][ T5942] loop1: detected capacity change from 0 to 128 [ 96.762068][ T5942] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.782528][ T5942] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.940197][ T5942] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x17) [ 97.044427][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.183923][ T5956] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET) [ 97.482455][ T5962] syz_tun: entered promiscuous mode [ 97.510696][ T5962] syz_tun: left promiscuous mode [ 97.802585][ T5958] loop3: detected capacity change from 0 to 32768 [ 97.989473][ T5958] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 98.123320][ T5960] loop0: detected capacity change from 0 to 32768 [ 98.148849][ T5958] (syz.3.35,5958,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 98.180510][ T5958] (syz.3.35,5958,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 98.248792][ T5971] mmap: syz.1.40 (5971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.483620][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 98.740534][ T5965] loop2: detected capacity change from 0 to 32768 [ 98.795948][ T28] audit: type=1800 audit(1768688291.158:4): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.38" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 99.875203][ C1] sched: RT throttling activated [ 99.984308][ T5156] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.069192][ T5974] loop3: detected capacity change from 0 to 131072 [ 100.086138][ T5974] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 100.093216][ T5974] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 100.107683][ T5974] F2FS-fs (loop3): invalid crc value [ 100.172177][ T5974] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.246380][ T5156] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.265967][ T5974] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 100.273420][ T5974] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 100.301713][ T5156] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.349598][ T5156] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.372325][ T5156] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.400381][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.446787][ T5156] usb 3-1: config 0 descriptor?? [ 101.036604][ T5156] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 101.158869][ T6044] syz_tun: entered promiscuous mode [ 101.224455][ T5156] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 101.315702][ T6044] syz_tun: left promiscuous mode [ 101.473627][ T5156] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 101.673748][ T5156] usb 3-1: USB disconnect, device number 2 [ 101.780318][ T6064] fido_id[6064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 101.908747][ T6066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.51'. [ 102.255345][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'. [ 102.765694][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.955775][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 102.982925][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 103.025161][ T27] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 103.044984][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.074337][ T27] usb 1-1: Product: syz [ 103.078924][ T27] usb 1-1: Manufacturer: syz [ 103.091806][ T27] usb 1-1: SerialNumber: syz [ 103.111448][ T27] usb 1-1: config 0 descriptor?? [ 103.143430][ T27] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 103.160957][ T27] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 103.286058][ T6090] loop2: detected capacity change from 0 to 4096 [ 103.387224][ T6090] ntfs: volume version 3.1. [ 103.572037][ T6090] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 103.638896][ T6090] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 103.698123][ T6090] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to map page. [ 103.706614][ T6090] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 103.717679][ T6090] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 103.766618][ T6090] ntfs: (device loop2): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 103.804906][ T27] em28xx 1-1:0.0: chip ID is em2765 [ 103.823692][ T6098] loop3: detected capacity change from 0 to 256 [ 104.313237][ T27] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 104.352280][ T27] em28xx 1-1:0.0: board has no eeprom [ 104.443765][ T27] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 104.476391][ T27] em28xx 1-1:0.0: dvb set to bulk mode. [ 104.482508][ T5823] em28xx 1-1:0.0: Binding DVB extension [ 104.553598][ T27] usb 1-1: USB disconnect, device number 2 [ 104.595476][ T27] em28xx 1-1:0.0: Disconnecting em28xx [ 104.730069][ T5823] em28xx 1-1:0.0: Registering input extension [ 104.752509][ T27] em28xx 1-1:0.0: Closing input extension [ 104.840561][ T27] em28xx 1-1:0.0: Freeing device [ 105.242171][ T6121] xt_CT: No such helper "pptp" [ 105.459987][ T6110] loop3: detected capacity change from 0 to 32768 [ 105.515809][ T28] audit: type=1800 audit(1768688297.878:5): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.68" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 107.465533][ T6164] netlink: 104 bytes leftover after parsing attributes in process `syz.2.92'. [ 107.771205][ T6173] loop2: detected capacity change from 0 to 4096 [ 107.868121][ T6177] loop5: detected capacity change from 0 to 2327 [ 107.932585][ T6177] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 108.457249][ T6166] loop0: detected capacity change from 0 to 32768 [ 108.538056][ T28] audit: type=1800 audit(1768688300.908:6): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.90" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 108.907595][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 109.150486][ T6179] loop1: detected capacity change from 0 to 32768 [ 109.262989][ T6186] xt_CT: No such helper "pptp" [ 109.306097][ T6179] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.641843][ T6207] loop3: detected capacity change from 0 to 512 [ 109.668963][ T6179] XFS (loop1): Ending clean mount [ 109.738145][ T6207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.766888][ T6179] XFS (loop1): Quotacheck needed: Please wait. [ 109.776575][ T6207] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.779294][ T6213] loop2: detected capacity change from 0 to 512 [ 109.928773][ T6179] XFS (loop1): Quotacheck: Done. [ 109.933198][ T6213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.990210][ T6213] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.216813][ T6218] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 110.322462][ T5769] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.333196][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.356908][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.579230][ T6226] syz_tun: entered promiscuous mode [ 110.597837][ T6225] loop2: detected capacity change from 0 to 2048 [ 110.624254][ T6225] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 110.636665][ T6226] syz_tun: left promiscuous mode [ 110.681282][ T6225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.088258][ T6230] xt_CT: No such helper "pptp" [ 111.115133][ T6235] input: syz1 as /devices/virtual/input/input7 [ 111.491493][ T6244] loop3: detected capacity change from 0 to 4096 [ 111.935627][ T6233] loop1: detected capacity change from 0 to 32768 [ 112.071883][ T28] audit: type=1800 audit(1768688304.438:7): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.111" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 112.271802][ T6262] syz_tun: entered promiscuous mode [ 112.299387][ T6262] syz_tun: left promiscuous mode [ 112.445545][ T5837] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 112.922259][ T6269] Invalid ELF header magic: != ELF [ 113.156221][ T6265] loop0: detected capacity change from 0 to 32768 [ 113.293446][ T6265] JBD2: Ignoring recovery information on journal [ 113.367913][ T6265] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 113.578448][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.589485][ T5837] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 113.790534][ T6267] loop2: detected capacity change from 0 to 131072 [ 113.799764][ T5837] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 113.810545][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.825779][ T6267] F2FS-fs (loop2): invalid crc value [ 113.837520][ T5837] usb 4-1: config 0 descriptor?? [ 113.848470][ T6267] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.911509][ T6267] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.958136][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 113.992388][ T6267] F2FS-fs (loop2): recover xattr in inode (7), error(0) [ 114.000696][ T6267] F2FS-fs (loop2): set inode (7) has corrupted xattr [ 114.032449][ T6267] F2FS-fs (loop2): set inode (7) has corrupted xattr [ 114.061619][ T6274] loop1: detected capacity change from 0 to 4096 [ 114.172585][ T6260] warning: `syz.3.123' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.208313][ T5823] usb 4-1: USB disconnect, device number 2 [ 115.993889][ T6305] loop0: detected capacity change from 0 to 2048 [ 116.127994][ T6305] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.199779][ T6311] loop1: detected capacity change from 0 to 512 [ 116.260159][ T6311] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 116.291325][ T6311] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 116.315332][ T6311] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 116.353213][ T6311] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 116.378939][ T6295] loop3: detected capacity change from 0 to 32768 [ 116.382292][ T6311] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080] [ 116.436409][ T6311] EXT4-fs (loop1): orphan cleanup on readonly fs [ 116.458531][ T6311] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.145: bg 0: block 34: padding at end of block bitmap is not set [ 116.483531][ T6311] Quota error (device loop1): write_blk: dquota write failed [ 116.493275][ T6311] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 116.506633][ T28] audit: type=1800 audit(1768688308.878:8): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.136" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 116.536509][ T6311] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.145: Failed to acquire dquot type 1 [ 116.595894][ T6311] EXT4-fs (loop1): 1 truncate cleaned up [ 116.618362][ T6311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.749207][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.895447][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.119320][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.155342][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.196576][ T27] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 117.220501][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 117.235946][ T27] usb 3-1: SerialNumber: syz [ 117.498583][ T27] usb 3-1: 0:2 : does not exist [ 117.550223][ T27] usb 3-1: USB disconnect, device number 3 [ 117.566010][ T5823] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.636792][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.758342][ T5823] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.771298][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.781712][ T6337] loop3: detected capacity change from 0 to 256 [ 117.791052][ T5823] usb 1-1: config 0 descriptor?? [ 117.804996][ T5823] cp210x 1-1:0.0: cp210x converter detected [ 118.231501][ T5823] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 118.262785][ T5823] usb 1-1: cp210x converter now attached to ttyUSB0 [ 118.455293][ T5866] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.488040][ T5823] usb 1-1: USB disconnect, device number 3 [ 118.524938][ T5823] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 118.563540][ T6350] loop1: detected capacity change from 0 to 512 [ 118.572560][ T5823] cp210x 1-1:0.0: device disconnected [ 118.614459][ T6350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.646635][ T6350] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.666220][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 118.687744][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.720370][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.781497][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.801780][ T5866] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.817848][ T6350] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.160: corrupted inode contents [ 118.834774][ T5866] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.848608][ T6350] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #2: comm syz.1.160: mark_inode_dirty error [ 118.860262][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.892576][ T6350] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.160: corrupted inode contents [ 118.897557][ T6346] loop3: detected capacity change from 0 to 32768 [ 118.923891][ T6354] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.160: corrupted inode contents [ 118.973699][ T6354] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #2: comm syz.1.160: mark_inode_dirty error [ 119.002110][ T6346] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 119.013008][ T6354] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.160: corrupted inode contents [ 119.027568][ T6354] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.160: mark_inode_dirty error [ 119.039683][ T6354] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.160: corrupted inode contents [ 119.052900][ T6354] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #2: comm syz.1.160: mark_inode_dirty error [ 119.080692][ T6350] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.160: corrupted inode contents [ 119.085935][ T5866] usb 3-1: GET_CAPABILITIES returned 0 [ 119.105320][ T5866] usbtmc 3-1:16.0: can't read capabilities [ 119.353121][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.365149][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.388079][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.405294][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.414543][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.431887][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.441180][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.447352][ T6346] syz.3.158 (6346) used greatest stack depth: 17680 bytes left [ 119.450455][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.467145][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.544770][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.554165][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.563534][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.596437][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 119.603162][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.612425][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.621782][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.631045][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.642204][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.729888][ T27] usb 3-1: USB disconnect, device number 4 [ 119.761641][ T6364] loop1: detected capacity change from 0 to 2048 [ 119.817962][ T6365] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.108163][ T6365] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 120.143978][ T6365] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 120.196504][ T6365] Remounting filesystem read-only [ 120.212121][ T6039] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 120.232337][ T6039] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 120.245283][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.265350][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.295461][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.304490][ T6039] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 120.356150][ T6039] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 120.363616][ T6039] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 120.393410][ T6039] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 120.417323][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.452139][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 120.468589][ T6039] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 120.478107][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.498700][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.515311][ T6039] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 120.532399][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.565315][ T6039] NILFS (loop1): discard dirty page: offset=131072, ino=3 [ 120.572756][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.615372][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.624500][ T6039] NILFS (loop1): discard dirty block: blocknr=46, size=1024 [ 120.656006][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.680246][ T6039] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 120.695323][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.719647][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.735309][ T6039] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 120.755337][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.774550][ T6039] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 120.791763][ T6039] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 120.805311][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.836562][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.855417][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.890613][ T6039] NILFS (loop1): discard dirty page: offset=0, ino=12 [ 120.915401][ T6039] NILFS (loop1): discard dirty block: blocknr=17, size=1024 [ 120.922960][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.958320][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.974302][ T6367] loop3: detected capacity change from 0 to 32768 [ 120.984858][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.017298][ T6367] (syz.3.164,6367,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.024246][ T6039] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 121.042412][ T6367] (syz.3.164,6367,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.064396][ T6039] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 121.089358][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.109537][ T6367] JBD2: Ignoring recovery information on journal [ 121.125332][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.161060][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.170729][ T6039] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 121.183121][ T6039] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 121.191627][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.201323][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.210770][ T6039] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 121.221191][ T5769] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 121.247512][ T5769] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 121.258683][ T6367] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 121.276779][ T5769] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 121.316078][ T5769] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 121.338960][ T5769] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 121.365315][ T5769] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 121.644620][ T6375] loop2: detected capacity change from 0 to 32768 [ 121.696742][ T6375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.169 (6375) [ 121.866689][ T6375] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.887899][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 121.916736][ T6375] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 121.940152][ T6375] BTRFS info (device loop2): setting nodatacow, compression disabled [ 121.985451][ T6375] BTRFS info (device loop2): max_inline at 0 [ 122.007681][ T6375] BTRFS info (device loop2): enabling disk space caching [ 122.038768][ T6375] BTRFS info (device loop2): turning off barriers [ 122.052303][ T6375] BTRFS info (device loop2): turning on flush-on-commit [ 122.085021][ T6375] BTRFS info (device loop2): doing ref verification [ 122.107858][ T6375] BTRFS info (device loop2): force clearing of disk cache [ 122.135349][ T6375] BTRFS info (device loop2): enabling ssd optimizations [ 122.151492][ T6375] BTRFS info (device loop2): max_inline at 4096 [ 122.172937][ T6393] xt_CT: No such helper "pptp" [ 122.213642][ T6375] BTRFS info (device loop2): disk space caching is enabled [ 122.426124][ T6375] BTRFS info (device loop2): auto enabling async discard [ 122.480523][ T6422] binder: binder_mmap: 6421 200000000000-200000b36000 bad vm_flags failed -1 [ 122.522486][ T6375] BTRFS info (device loop2): rebuilding free space tree [ 122.709483][ T6427] loop0: detected capacity change from 0 to 256 [ 122.716929][ T6375] BTRFS info (device loop2): disabling free space tree [ 122.724817][ T6375] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.744040][ T6375] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.417973][ T5776] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.900242][ T6434] loop1: detected capacity change from 0 to 32768 [ 123.923478][ T6434] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.184 (6434) [ 123.955748][ T6439] xt_CT: No such helper "pptp" [ 123.985109][ T6434] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.032716][ T6434] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 124.085369][ T6434] BTRFS info (device loop1): metadata ratio 4 [ 124.111071][ T6434] BTRFS info (device loop1): setting nodatasum [ 124.124201][ T6434] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 124.153384][ T6434] BTRFS info (device loop1): trying to use backup root at mount time [ 124.175964][ T6434] BTRFS info (device loop1): use zlib compression, level 3 [ 124.183292][ T6434] BTRFS info (device loop1): enabling ssd optimizations [ 124.207249][ T6434] BTRFS info (device loop1): disabling tree log [ 124.213601][ T6434] BTRFS info (device loop1): using free space tree [ 124.318197][ T2975] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 124.355780][ T6434] BTRFS warning (device loop1): couldn't read tree root [ 124.375335][ T6434] BTRFS warning (device loop1): try to load backup roots slot 1 [ 124.395160][ T6048] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 124.429785][ T6434] BTRFS warning (device loop1): couldn't read tree root [ 124.440120][ T6434] BTRFS warning (device loop1): try to load backup roots slot 2 [ 124.463104][ T6059] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 124.482111][ T6434] BTRFS warning (device loop1): couldn't read tree root [ 124.489403][ T5823] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.505786][ T6434] BTRFS warning (device loop1): try to load backup roots slot 3 [ 124.540150][ T6434] BTRFS info (device loop1): auto enabling async discard [ 124.572027][ T6434] BTRFS info (device loop1): rebuilding free space tree [ 124.621780][ T6434] BTRFS info (device loop1): checking UUID tree [ 124.681965][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 124.697804][ T5823] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 124.726173][ T5823] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 124.734619][ T5823] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 124.762934][ T5823] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 124.772540][ T5823] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 124.782541][ T5823] usb 4-1: config 0 has no interface number 0 [ 124.793494][ T5823] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 124.805331][ T5823] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 124.815963][ T5823] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.826449][ T5823] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.850997][ T5823] usb 4-1: config 0 interface 125 has no altsetting 0 [ 124.861228][ T5823] usb 4-1: config 0 interface 125 has no altsetting 2 [ 124.876918][ T5823] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 124.886548][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.894603][ T5823] usb 4-1: Product: syz [ 124.927491][ T5823] usb 4-1: Manufacturer: syz [ 124.946298][ T5823] usb 4-1: SerialNumber: syz [ 124.978312][ T5823] usb 4-1: config 0 descriptor?? [ 125.007417][ T5823] usb 4-1: selecting invalid altsetting 2 [ 125.236119][ T6454] loop2: detected capacity change from 0 to 32768 [ 125.273713][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.345127][ T6454] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.544397][ T6454] XFS (loop2): Ending clean mount [ 125.598318][ T6454] XFS (loop2): Quotacheck needed: Please wait. [ 125.658140][ T6484] input: syz0 as /devices/virtual/input/input8 [ 125.769558][ T6454] XFS (loop2): Quotacheck: Done. [ 125.869850][ T5823] parport0: fix this legacy no-device port driver! [ 126.031923][ T5776] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.132209][ T5823] usb 4-1: USB disconnect, device number 3 [ 126.230187][ T6488] netlink: 6664 bytes leftover after parsing attributes in process `syz.1.193'. [ 126.387417][ T6492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.198'. [ 126.556551][ T6498] netlink: 'syz.0.200': attribute type 39 has an invalid length. [ 126.929750][ T5837] IPVS: starting estimator thread 0... [ 126.945287][ T6505] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 127.055824][ T6507] IPVS: using max 21 ests per chain, 50400 per kthread [ 127.263750][ T6518] loop3: detected capacity change from 0 to 4096 [ 127.328865][ T6519] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.365008][ T6517] loop1: detected capacity change from 0 to 4096 [ 127.378186][ T6517] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 127.520045][ T6518] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 127.594765][ T6518] Remounting filesystem read-only [ 127.737852][ T5773] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 127.764480][ T5773] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 127.795505][ T5773] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 127.803886][ T5773] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 127.821315][ T5773] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 127.857275][ T5773] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 127.885495][ T5773] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 127.895637][ T5773] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 127.902770][ T5773] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 127.963016][ T5773] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 127.995347][ T5773] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 128.002830][ T5773] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 128.043082][ T5773] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 128.072795][ T5773] NILFS (loop3): discard dirty page: offset=532480, ino=3 [ 128.085730][ T5773] NILFS (loop3): discard dirty block: blocknr=33, size=4096 [ 128.969942][ T6539] loop1: detected capacity change from 0 to 32768 [ 128.976698][ T6534] loop2: detected capacity change from 0 to 40427 [ 128.995749][ T6534] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 129.006886][ T6539] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.217 (6539) [ 129.047400][ T6534] F2FS-fs (loop2): invalid crc value [ 129.085037][ T6534] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.135401][ T6539] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.178045][ T6539] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 129.216852][ T6539] BTRFS info (device loop1): using free space tree [ 129.305097][ T6543] loop3: detected capacity change from 0 to 32768 [ 129.326071][ T6534] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.334228][ T6541] loop0: detected capacity change from 0 to 32768 [ 129.364794][ T6543] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.403698][ T6534] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 129.431083][ T6543] XFS (loop3): Ending clean mount [ 129.471667][ T6543] XFS (loop3): Quotacheck needed: Please wait. [ 129.482012][ T6539] BTRFS info (device loop1): enabling ssd optimizations [ 129.530210][ T6539] BTRFS info (device loop1): auto enabling async discard [ 129.574114][ T6543] XFS (loop3): Quotacheck: Done. [ 129.824915][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.857171][ T5769] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.142029][ T6576] process 'syz.0.223' launched './file0' with NULL argv: empty string added [ 130.396253][ T5785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5785) [ 132.044997][ T6578] loop1: detected capacity change from 0 to 32768 [ 132.170681][ T6574] loop2: detected capacity change from 0 to 32768 [ 132.229865][ T6578] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.290821][ T6574] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 132.383719][ T6574] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 132.396812][ T6583] loop3: detected capacity change from 0 to 32768 [ 132.571848][ T6583] JBD2: Ignoring recovery information on journal [ 132.613246][ T6578] XFS (loop1): Ending clean mount [ 132.821657][ T6574] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 132.843109][ T6583] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 132.912379][ T6039] (kworker/u4:21,6039,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 132.964045][ T5156] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 132.976408][ T5156] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 133.094138][ T6599] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 133.196895][ T6599] XFS (loop1): Unmount and run xfs_repair [ 133.227087][ T6599] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 133.236227][ T5156] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 259ms [ 133.281638][ T6599] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 133.313235][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.330801][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.347168][ T5156] gfs2: fsid=syz:syz.0: jid=0: Done [ 133.353528][ T6583] (syz.3.221,6583,0):ocfs2_get_suballoc_slot_bit:2726 ERROR: invalid inode 2 requested [ 133.400209][ T6599] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 133.415657][ T6574] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 133.433579][ T6583] (syz.3.221,6583,0):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -22 [ 133.457280][ T6587] loop0: detected capacity change from 0 to 262144 [ 133.469400][ T6599] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 133.489914][ T6583] (syz.3.221,6583,1):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -22 [ 133.497499][ T6574] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 133.511456][ T6583] (syz.3.221,6583,1):ocfs2_test_inode_bit:2874 ERROR: status = -22 [ 133.526628][ T6599] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 133.557342][ T6599] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 133.585788][ T6599] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 133.594990][ T6587] F2FS-fs (loop0): Found nat_bits in checkpoint [ 133.636441][ T6599] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 133.653038][ T6599] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 133.666784][ T6599] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74 [ 133.686570][ T6587] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.736104][ T6599] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x183c/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 133.775516][ T6599] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 133.819320][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 133.857857][ T5769] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.387705][ T6609] loop2: detected capacity change from 0 to 164 [ 134.440498][ T6609] rock: directory entry would overflow storage [ 134.467024][ T6609] rock: sig=0x66, size=4, remaining=3 [ 134.559933][ T6609] rock: directory entry would overflow storage [ 134.578684][ T6609] rock: sig=0x66, size=4, remaining=3 [ 134.791582][ T6612] loop1: detected capacity change from 0 to 8192 [ 135.095362][ T5156] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.288546][ T5156] usb 3-1: config 0 has no interfaces? [ 135.304508][ T5156] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.325462][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.361187][ T5156] usb 3-1: config 0 descriptor?? [ 136.633990][ T6625] loop1: detected capacity change from 0 to 32768 [ 136.670758][ T6625] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.685511][ T6625] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 136.698500][ T6625] BTRFS info (device loop1): using free space tree [ 136.812171][ T6625] BTRFS info (device loop1): enabling ssd optimizations [ 136.825277][ T6625] BTRFS info (device loop1): auto enabling async discard [ 136.895474][ T6610] loop3: detected capacity change from 0 to 131072 [ 136.937337][ T6610] F2FS-fs (loop3): invalid crc value [ 136.961211][ T6610] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.002629][ T6625] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.115794][ T6610] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 137.368574][ T28] audit: type=1326 audit(1768688329.738:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.1.238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0a4d9acb9 code=0x0 [ 137.787309][ T6650] loop0: detected capacity change from 0 to 32768 [ 137.826740][ T6650] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 137.856620][ T6650] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 137.892261][ T2937] (kworker/u4:9,2937,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 137.922428][ T5156] usb 3-1: USB disconnect, device number 5 [ 138.162475][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 139.532975][ T6690] loop3: detected capacity change from 0 to 512 [ 139.586579][ T6690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 139.635491][ T6690] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.743986][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 140.325484][ T5866] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 140.538009][ T5866] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 140.552216][ T5866] usb 1-1: config 0 has no interface number 0 [ 140.572768][ T5866] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 140.582892][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.591395][ T5866] usb 1-1: Product: syz [ 140.596296][ T5866] usb 1-1: Manufacturer: syz [ 140.601047][ T5866] usb 1-1: SerialNumber: syz [ 140.609237][ T5866] usb 1-1: config 0 descriptor?? [ 140.840531][ T5866] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 140.871754][ T5866] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 140.917888][ T5866] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 140.952911][ T5866] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 140.983512][ T5866] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 141.009125][ T6735] loop1: detected capacity change from 0 to 1024 [ 141.080961][ T6735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.135612][ T6708] loop0: detected capacity change from 0 to 512 [ 141.175457][ T6708] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 141.461971][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.509855][ T2128] usb 1-1: USB disconnect, device number 4 [ 141.553555][ T2128] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 141.618323][ T2128] keyspan 1-1:0.133: device disconnected [ 141.634061][ T6726] loop2: detected capacity change from 0 to 32768 [ 141.669092][ T6726] (syz.2.266,6726,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 141.707028][ T6726] (syz.2.266,6726,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 141.773896][ T6726] JBD2: Ignoring recovery information on journal [ 141.831871][ T6726] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 141.891990][ T6748] xt_CT: No such helper "pptp" [ 142.088127][ T6755] Bluetooth: MGMT ver 1.22 [ 142.139651][ T6755] Bluetooth: hci0: too big key_count value 32768 [ 142.276858][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 142.646191][ T6770] loop0: detected capacity change from 0 to 512 [ 142.715054][ T6770] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 142.759018][ T6770] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 142.805422][ T6770] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.281: Failed to acquire dquot type 1 [ 142.938807][ T6770] EXT4-fs (loop0): 1 truncate cleaned up [ 142.966256][ T6770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.983232][ T6757] loop1: detected capacity change from 0 to 32768 [ 143.002851][ T6757] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.276 (6757) [ 143.019948][ T6770] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.074684][ T6757] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 143.101547][ T6757] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 143.127274][ T6757] BTRFS info (device loop1): using free space tree [ 143.156039][ T6781] xt_CT: No such helper "pptp" [ 143.181046][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.285373][ T6803] loop3: detected capacity change from 0 to 128 [ 143.307053][ T6757] BTRFS info (device loop1): enabling ssd optimizations [ 143.318565][ T6757] BTRFS info (device loop1): auto enabling async discard [ 143.328872][ T6803] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 143.389745][ T6803] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.437585][ T6803] ext2 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.731507][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.911643][ T5769] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 143.965704][ T5866] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 144.155654][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 144.196298][ T5866] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 144.219402][ T5866] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 144.241295][ T5866] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 144.270789][ T5866] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 144.293011][ T5866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 144.325252][ T5866] usb 1-1: config 0 has no interface number 0 [ 144.331551][ T5866] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 144.393417][ T5866] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 144.406474][ T5866] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.417448][ T5866] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.432331][ T5866] usb 1-1: config 0 interface 125 has no altsetting 0 [ 144.445676][ T5866] usb 1-1: config 0 interface 125 has no altsetting 2 [ 144.461663][ T5866] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 144.493034][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.523524][ T5866] usb 1-1: Product: syz [ 144.541785][ T5866] usb 1-1: Manufacturer: syz [ 144.548233][ T5866] usb 1-1: SerialNumber: syz [ 144.597869][ T6809] loop2: detected capacity change from 0 to 32768 [ 144.602025][ T5866] usb 1-1: config 0 descriptor?? [ 144.639501][ T5866] usb 1-1: selecting invalid altsetting 2 [ 144.702721][ T28] audit: type=1800 audit(1768688337.068:10): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.286" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 144.767276][ T6809] read_mapping_page failed! [ 144.772607][ T6809] ERROR: (device loop2): txCommit: [ 144.772607][ T6809] [ 144.921871][ T6825] xt_CT: No such helper "pptp" [ 144.962511][ T6826] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 144.962511][ T6826] [ 145.075306][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 145.288201][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 145.300307][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.321688][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.348019][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.359812][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.384921][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.410998][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.465378][ T5866] parport1: fix this legacy no-device port driver! [ 145.678307][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 145.703157][ T27] usbtmc 2-1:16.0: can't read capabilities [ 145.741796][ T5866] usb 1-1: USB disconnect, device number 5 [ 145.781347][ T6847] Dead loop on virtual device ip6_vti0, fix it urgently! [ 145.802118][ T6847] Dead loop on virtual device ip6_vti0, fix it urgently! [ 145.810320][ T6847] Dead loop on virtual device ip6_vti0, fix it urgently! [ 145.818670][ T6847] Dead loop on virtual device ip6_vti0, fix it urgently! [ 145.835959][ T6847] Dead loop on virtual device ip6_vti0, fix it urgently! [ 145.843683][ T6847] Dead loop on virtual device ip6_vti0, fix it urgently! [ 145.920552][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.929759][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.939115][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.948372][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.978639][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.987840][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.996988][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 146.006224][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 146.016181][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 146.025355][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 146.034710][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 146.045748][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 146.054928][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 146.064085][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 146.074452][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 146.083717][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 146.112853][ T27] usb 2-1: USB disconnect, device number 2 [ 146.227856][ T6855] loop3: detected capacity change from 0 to 512 [ 146.270671][ T6852] xt_CT: No such helper "pptp" [ 146.279239][ T6855] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2852: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 146.296169][ T6855] EXT4-fs (loop3): 1 truncate cleaned up [ 146.302861][ T6855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.497684][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.722110][ T6865] loop3: detected capacity change from 0 to 4096 [ 146.804972][ T6865] NILFS (loop3): invalid segment: Checksum error in segment payload [ 146.835057][ T6865] NILFS (loop3): trying rollback from an earlier position [ 146.940701][ T6865] NILFS (loop3): recovery complete [ 146.980286][ T6872] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.305913][ T6884] loop1: detected capacity change from 0 to 512 [ 147.392824][ T6884] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.436250][ T6886] xt_CT: No such helper "pptp" [ 147.514726][ T6893] loop0: detected capacity change from 0 to 512 [ 147.543832][ T6895] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.312: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 8, max 0(0), depth 0(0) [ 147.563896][ T6893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.630206][ T6895] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.312: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 8, max 0(0), depth 0(0) [ 147.698066][ T6893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.711141][ T6884] EXT4-fs error (device loop1): ext4_quota_enable:7136: comm syz.1.312: Bad quota inum: 2, type: 1 [ 147.722397][ T6893] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.770926][ T6884] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 147.829695][ T6893] EXT4-fs (loop0): shut down requested (2) [ 147.977053][ T5769] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 148.027224][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.357455][ T6915] loop2: detected capacity change from 0 to 64 [ 148.475850][ T28] audit: type=1800 audit(1768688340.848:11): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.322" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 148.526038][ T6907] loop3: detected capacity change from 0 to 32768 [ 148.562043][ T6907] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.647841][ T6907] XFS (loop3): Ending clean mount [ 148.711481][ T6907] XFS (loop3): Quotacheck needed: Please wait. [ 148.822242][ T6907] XFS (loop3): Quotacheck: Done. [ 148.892461][ T6928] loop2: detected capacity change from 0 to 256 [ 149.090014][ T6928] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 149.190564][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.233101][ T28] audit: type=1800 audit(1768688341.588:12): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.323" name="file1" dev="loop2" ino=1048601 res=0 errno=0 [ 149.281588][ T6911] loop1: detected capacity change from 0 to 40427 [ 149.324561][ T6911] F2FS-fs (loop1): build fault injection attr: rate: 25, type: 0x7ffff [ 149.408696][ T6911] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7698c [ 149.464669][ T6911] F2FS-fs (loop1): invalid crc value [ 149.529789][ T6911] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 149.578528][ T6911] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.700928][ T6911] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 149.756405][ T6928] syz.2.323: attempt to access beyond end of device [ 149.756405][ T6928] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 149.821561][ T6911] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 149.934278][ T6911] F2FS-fs (loop1): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 150.090331][ T6911] F2FS-fs (loop1): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 150.210340][ T6938] xt_CT: No such helper "pptp" [ 150.251870][ T5769] syz-executor: attempt to access beyond end of device [ 150.251870][ T5769] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.283433][ T5769] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 151.165776][ T6952] loop2: detected capacity change from 0 to 32768 [ 151.195915][ T6952] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.332 (6952) [ 151.272324][ T6952] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 151.288964][ T6966] netlink: 'syz.1.336': attribute type 22 has an invalid length. [ 151.327692][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 151.337894][ T6952] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 151.385391][ T6952] BTRFS info (device loop2): using free space tree [ 151.403862][ T6966] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.413698][ T6966] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.422599][ T6966] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.432017][ T6966] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.472078][ T6966] netlink: 'syz.1.336': attribute type 22 has an invalid length. [ 151.480145][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 151.491142][ T6966] Zero length message leads to an empty skb [ 151.574442][ T6974] xt_CT: No such helper "pptp" [ 151.667130][ T6952] BTRFS info (device loop2): enabling ssd optimizations [ 151.674276][ T6952] BTRFS info (device loop2): auto enabling async discard [ 151.998522][ T6992] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.028478][ T6992] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 152.115973][ T6992] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 152.133359][ T6968] loop3: detected capacity change from 0 to 32768 [ 152.156729][ T6992] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.175538][ T6992] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 152.190858][ T5776] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 152.220273][ T6992] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 152.247066][ T6992] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.271918][ T6992] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 152.386850][ T6992] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 152.419916][ T6992] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.450329][ T6992] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.517145][ T6992] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.543681][ T5785] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop2 scanned by udevd (5785) [ 152.585926][ T7002] netlink: 'syz.2.343': attribute type 12 has an invalid length. [ 153.076607][ T7009] loop0: detected capacity change from 0 to 8192 [ 153.225479][ T7009] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 153.317923][ T7009] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 153.348239][ T7011] xt_CT: No such helper "pptp" [ 153.363755][ T7009] REISERFS (device loop0): using ordered data mode [ 153.387700][ T7009] reiserfs: using flush barriers [ 153.440241][ T7009] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.503329][ T7009] REISERFS (device loop0): checking transaction log (loop0) [ 153.578177][ T7022] loop1: detected capacity change from 0 to 512 [ 153.613616][ T7022] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 153.649857][ T7022] EXT4-fs (loop1): invalid journal inode [ 153.667826][ T7022] EXT4-fs (loop1): can't get journal size [ 153.749803][ T7022] EXT4-fs (loop1): 1 truncate cleaned up [ 153.811205][ T7022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.865469][ T5837] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.887615][ T7009] REISERFS (device loop0): Using tea hash to sort names [ 153.910662][ T7009] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 154.022644][ T5772] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.059343][ T7027] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 154.089182][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 154.109215][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.137747][ T7020] loop3: detected capacity change from 0 to 32768 [ 154.164876][ T7020] JBD2: Ignoring recovery information on journal [ 154.175333][ T5772] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.178766][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.189872][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.255769][ T5837] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.262462][ T5772] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.323412][ T7020] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 154.354504][ T5837] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.384678][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.418221][ T5772] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.446556][ T5837] usb 3-1: config 0 descriptor?? [ 154.909683][ T5837] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 154.921072][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 154.929099][ T5837] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 154.936662][ T5837] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 154.944414][ T5837] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 154.951979][ T5837] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 154.959323][ T5837] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 154.978770][ T5837] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 155.007080][ T5837] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 155.014412][ T5837] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 155.031260][ T5837] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 155.051223][ T5837] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input10 [ 155.216753][ T5837] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 155.276241][ T5837] usb 3-1: USB disconnect, device number 6 [ 155.352877][ T7046] loop3: detected capacity change from 0 to 47 [ 155.431473][ T7044] fido_id[7044]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 155.807212][ T7054] xt_CT: No such helper "pptp" [ 156.096568][ T5772] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.255346][ T5772] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.337501][ T5772] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.496164][ T5772] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.025349][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 157.195438][ T5837] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 157.231223][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 157.255251][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.263321][ T9] usb 4-1: Product: syz [ 157.275446][ T9] usb 4-1: Manufacturer: syz [ 157.280118][ T9] usb 4-1: SerialNumber: syz [ 157.301140][ T9] usb 4-1: config 0 descriptor?? [ 157.318496][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 157.415973][ T5837] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.443238][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.459780][ T5837] usb 2-1: Product: syz [ 157.464072][ T5837] usb 2-1: Manufacturer: syz [ 157.490277][ T5837] usb 2-1: SerialNumber: syz [ 157.602195][ T7089] loop0: detected capacity change from 0 to 2048 [ 157.652870][ T7090] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.698796][ T7090] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 157.711180][ T7090] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 157.734026][ T7090] Remounting filesystem read-only [ 157.743064][ T6048] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 157.762743][ T7091] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 157.777995][ T6048] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 157.790172][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.804951][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.829074][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.841291][ T6048] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 157.852239][ T6048] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 157.862884][ T6048] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 157.876734][ T6048] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 157.884415][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.898584][ T6048] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 157.907793][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.920870][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.933001][ T6048] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 157.947818][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.959605][ T6048] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 157.971539][ T6048] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 157.981720][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 157.994588][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.008791][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.019868][ T6048] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 158.031807][ T6048] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 158.043229][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.058661][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.070754][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.084889][ T6048] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 158.093274][ T6048] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 158.107112][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.119185][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.131144][ T6048] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 158.148171][ T7089] NILFS (loop0): mounting fs with errors [ 158.175407][ T5772] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.213795][ T7090] ------------[ cut here ]------------ [ 158.220075][ T7090] WARNING: CPU: 1 PID: 7090 at fs/buffer.c:1188 mark_buffer_dirty+0x2bb/0x4c0 [ 158.229236][ T7090] Modules linked in: [ 158.233202][ T7090] CPU: 1 PID: 7090 Comm: segctord Not tainted syzkaller #0 [ 158.240778][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.251622][ T7090] RIP: 0010:mark_buffer_dirty+0x2bb/0x4c0 [ 158.258826][ T7090] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 cf 9a fc ff e8 5a c8 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 6a 09 e8 ff e8 45 c8 88 ff <0f> 0b e9 84 fd ff ff e8 39 c8 88 ff 0f 0b e9 b0 fd ff ff e8 2d c8 [ 158.279273][ T7090] RSP: 0018:ffffc9000368f6f0 EFLAGS: 00010293 [ 158.285579][ T7090] RAX: ffffffff81fe2adb RBX: ffff88805de0dcb0 RCX: ffff88805f66da00 [ 158.293631][ T7090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 158.301762][ T7090] RBP: ffffc9000368fb01 R08: ffff88805de0dcb7 R09: 1ffff1100bbc1b96 [ 158.309828][ T7090] R10: dffffc0000000000 R11: ffffed100bbc1b97 R12: 1ffff1100bbfac2a [ 158.318006][ T7090] R13: ffff88805dfd6160 R14: ffff88807a690328 R15: 1ffff1100bbfac2c [ 158.326410][ T7090] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 158.335574][ T5772] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.341635][ T7090] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.348906][ T7090] CR2: 00007ffcdaceed20 CR3: 0000000061793000 CR4: 00000000003506e0 [ 158.357225][ T7090] Call Trace: [ 158.360600][ T7090] [ 158.363592][ T7090] nilfs_segctor_do_construct+0x307/0x68a0 [ 158.369792][ T7090] ? verify_lock_unused+0x140/0x140 [ 158.375233][ T7090] ? verify_lock_unused+0x140/0x140 [ 158.380508][ T7090] ? nilfs_transaction_unlock+0x220/0x220 [ 158.386361][ T7090] ? nilfs_bmap_test_and_clear_dirty+0x50/0x70 [ 158.392600][ T7090] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 158.398250][ T7090] ? __lock_acquire+0x7d40/0x7d40 [ 158.403346][ T7090] ? __rwlock_init+0x150/0x150 [ 158.408494][ T7090] ? do_raw_spin_unlock+0x121/0x230 [ 158.413853][ T7090] ? _raw_spin_unlock+0x28/0x40 [ 158.418918][ T7090] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 158.424441][ T7090] nilfs_segctor_construct+0x17b/0x690 [ 158.430167][ T7090] nilfs_segctor_thread+0x536/0x10d0 [ 158.435620][ T7090] ? nilfs_iput_work_func+0x70/0x70 [ 158.440872][ T7090] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 158.447078][ T7090] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 158.453563][ T7090] ? wake_bit_function+0x200/0x200 [ 158.459177][ T7090] ? __kthread_parkme+0x7a/0x1c0 [ 158.464214][ T7090] kthread+0x2fa/0x390 [ 158.468429][ T7090] ? nilfs_iput_work_func+0x70/0x70 [ 158.473684][ T7090] ? kthread_blkcg+0xd0/0xd0 [ 158.478763][ T7090] ret_from_fork+0x48/0x80 [ 158.481310][ T5772] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.483222][ T7090] ? kthread_blkcg+0xd0/0xd0 [ 158.493966][ T7090] ret_from_fork_asm+0x11/0x20 [ 158.499124][ T7090] [ 158.502205][ T7090] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.509540][ T7090] CPU: 1 PID: 7090 Comm: segctord Not tainted syzkaller #0 [ 158.516871][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.527148][ T7090] Call Trace: [ 158.530494][ T7090] [ 158.533463][ T7090] dump_stack_lvl+0x18c/0x250 [ 158.538195][ T7090] ? show_regs_print_info+0x20/0x20 [ 158.543455][ T7090] ? load_image+0x400/0x400 [ 158.548048][ T7090] panic+0x2dc/0x730 [ 158.552018][ T7090] ? bpf_jit_dump+0xd0/0xd0 [ 158.556697][ T7090] ? ret_from_fork_asm+0x11/0x20 [ 158.561870][ T7090] __warn+0x2e0/0x470 [ 158.565902][ T7090] ? mark_buffer_dirty+0x2bb/0x4c0 [ 158.571165][ T7090] ? mark_buffer_dirty+0x2bb/0x4c0 [ 158.576512][ T7090] report_bug+0x2be/0x4f0 [ 158.580876][ T7090] ? mark_buffer_dirty+0x2bb/0x4c0 [ 158.586255][ T7090] ? mark_buffer_dirty+0x2bb/0x4c0 [ 158.591470][ T7090] ? mark_buffer_dirty+0x2bd/0x4c0 [ 158.596630][ T7090] handle_bug+0xcf/0x120 [ 158.600918][ T7090] exc_invalid_op+0x1a/0x50 [ 158.605456][ T7090] asm_exc_invalid_op+0x1a/0x20 [ 158.610361][ T7090] RIP: 0010:mark_buffer_dirty+0x2bb/0x4c0 [ 158.616219][ T7090] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 cf 9a fc ff e8 5a c8 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 6a 09 e8 ff e8 45 c8 88 ff <0f> 0b e9 84 fd ff ff e8 39 c8 88 ff 0f 0b e9 b0 fd ff ff e8 2d c8 [ 158.635955][ T7090] RSP: 0018:ffffc9000368f6f0 EFLAGS: 00010293 [ 158.642055][ T7090] RAX: ffffffff81fe2adb RBX: ffff88805de0dcb0 RCX: ffff88805f66da00 [ 158.650067][ T7090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 158.658073][ T7090] RBP: ffffc9000368fb01 R08: ffff88805de0dcb7 R09: 1ffff1100bbc1b96 [ 158.666075][ T7090] R10: dffffc0000000000 R11: ffffed100bbc1b97 R12: 1ffff1100bbfac2a [ 158.674074][ T7090] R13: ffff88805dfd6160 R14: ffff88807a690328 R15: 1ffff1100bbfac2c [ 158.682177][ T7090] ? mark_buffer_dirty+0x2bb/0x4c0 [ 158.687353][ T7090] nilfs_segctor_do_construct+0x307/0x68a0 [ 158.693223][ T7090] ? verify_lock_unused+0x140/0x140 [ 158.698556][ T7090] ? verify_lock_unused+0x140/0x140 [ 158.703891][ T7090] ? nilfs_transaction_unlock+0x220/0x220 [ 158.710013][ T7090] ? nilfs_bmap_test_and_clear_dirty+0x50/0x70 [ 158.716224][ T7090] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 158.721880][ T7090] ? __lock_acquire+0x7d40/0x7d40 [ 158.727143][ T7090] ? __rwlock_init+0x150/0x150 [ 158.732059][ T7090] ? do_raw_spin_unlock+0x121/0x230 [ 158.737314][ T7090] ? _raw_spin_unlock+0x28/0x40 [ 158.742207][ T7090] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 158.747793][ T7090] nilfs_segctor_construct+0x17b/0x690 [ 158.753310][ T7090] nilfs_segctor_thread+0x536/0x10d0 [ 158.758897][ T7090] ? nilfs_iput_work_func+0x70/0x70 [ 158.764124][ T7090] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 158.770057][ T7090] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 158.776129][ T7090] ? wake_bit_function+0x200/0x200 [ 158.781383][ T7090] ? __kthread_parkme+0x7a/0x1c0 [ 158.786405][ T7090] kthread+0x2fa/0x390 [ 158.790566][ T7090] ? nilfs_iput_work_func+0x70/0x70 [ 158.795900][ T7090] ? kthread_blkcg+0xd0/0xd0 [ 158.800534][ T7090] ret_from_fork+0x48/0x80 [ 158.804982][ T7090] ? kthread_blkcg+0xd0/0xd0 [ 158.809615][ T7090] ret_from_fork_asm+0x11/0x20 [ 158.814428][ T7090] [ 158.818149][ T7090] Kernel Offset: disabled [ 158.822672][ T7090] Rebooting in 86400 seconds..