last executing test programs: 21m4.293681733s ago: executing program 32 (id=138): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f00000002c0)="fd") sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0x8008330e, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5}) 18m19.922844281s ago: executing program 33 (id=620): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000001580)=@urb_type_iso={0x0, {0xc}, 0x4f, 0xe4, &(0x7f0000000040)="506262757a23be2cd0ecef1aad9306b5c4b3", 0x12, 0x3, 0xf, 0x63, 0x8000, 0x2, &(0x7f00000001c0), [{0x7fff, 0x1, 0x6}, {0x10001, 0xc8a, 0x2}, {0x1ff, 0x7, 0x3}, {0xb0f3, 0x3, 0x6}, {0x81, 0x3, 0x1}, {0xffff058e, 0x7, 0x4}, {0xec, 0x0, 0x2}, {0x3, 0x6, 0x9}, {0x101, 0x100, 0xd0}, {0xe90, 0xffff8001}, {0x9, 0x7, 0x3ff}, {0x8, 0x7, 0x200}, {0x300000, 0x7, 0x345}, {0x1, 0xa7f4, 0xfffff801}, {0x4, 0x916, 0x3}, {0x9, 0x5, 0x9}, {0x81, 0x3, 0x6}, {0x2, 0x2, 0x8}, {0xc597, 0x8, 0xe}, {0xd4, 0x3, 0x9}, {0x47, 0x5, 0x6}, {0x9, 0x3, 0x7fffffff}, {0x2, 0x9d9, 0x4}, {0x6, 0x2, 0x3}, {0x2566, 0x8, 0x3ff}, {0x0, 0xfffffff9, 0x40}, {0xfffffff6, 0xeb9, 0x80000000}, {0x5, 0x1, 0x5}, {0x400, 0xfffffffc, 0x4}, {0x7, 0x3, 0x80}, {0x9, 0x100, 0x4}, {0x200, 0x0, 0x6}, {0x9, 0x5, 0x1}, {0x1, 0x10, 0x6}, {0xfffffffc, 0x5, 0xffffffff}, {0x3, 0x9, 0x5}, {0x3, 0xb2, 0x1}, {0x0, 0x2, 0x5}, {0x3ff, 0x5, 0x70000000}, {0x2, 0xd877, 0x10001}, {0xfffffff9, 0x0, 0x8}, {0x4e, 0xffff}, {0x7f800000, 0xc}, {0x8, 0x0, 0x40}, {0x5, 0x9000000}, {0xffffff00, 0x2, 0x2}, {0x3, 0x2, 0x8}, {0x800, 0xa, 0xfffffffa}, {0x10000, 0x5a7, 0x5}, {0x1, 0x8, 0x1}, {0x7, 0x9}, {0xff, 0x1, 0x705}, {0x96c, 0x7, 0xd}, {0x3, 0x8, 0x7f}, {0x7, 0x9e, 0x2}, {0x7, 0x80000001, 0xfffffff7}, {0x7, 0x200, 0xffffff2a}, {0xd71e, 0x5, 0x2}, {0x49, 0xf214, 0x1}, {0x9d, 0x698}, {0xac9, 0x5268c4d7, 0x8a}, {0x401, 0x1, 0x885}, {0x400, 0x4, 0xfffffff8}, {0x8, 0x6, 0x5}, {0x2000, 0x9, 0x8}, {0x1ff, 0x100, 0x7}, {0x1000, 0xf, 0x5}, {0x7, 0x1, 0x6}, {0x1c12, 0x1ff}, {0x4, 0x3, 0xa}, {0x3, 0x1, 0xfffffffb}, {0x9, 0x800, 0xa}, {0x2, 0x3, 0xffff5f2b}, {0xa1de, 0x7, 0x9}, {0x9, 0x4, 0x3}, {0x5, 0x2, 0x6}, {0xffff8001, 0x4, 0xc77c}, {0x80000000, 0x6, 0x1}, {0x7, 0x7, 0xe}, {0x7fff, 0x1, 0x1ff}, {0xfffff9a2, 0x7f, 0x48}, {0x10, 0x0, 0x3688b7c7}, {0xf, 0x3, 0x5578}, {0x8, 0x1ff, 0x4}, {0x8, 0x3, 0x7}, {0xc, 0x8, 0xb027}, {0x5, 0x200, 0x9}, {0xfff, 0x3, 0x6}, {0x5, 0xd412, 0x8}, {0x1ff, 0x2, 0x9}, {0x7, 0x255c, 0xffff8000}, {0x0, 0xe, 0x3}, {0xb, 0xb, 0x7fffffff}, {0x8, 0x0, 0x200}, {0x5, 0x40, 0x8efc}, {0xffffffff, 0x3, 0x10}, {0xf, 0x4, 0x7}, {0x7fff, 0xffff, 0x2}, {0x1000, 0x6, 0x7}]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000402505a8a4412001020b0109021b00010100c000090400000207010100090501"], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000008982, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000fc0)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000001040)={0x60, 0x1, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4, &(0x7f0000001000), 0x0, 0x784, 0x40, 0x44, 0x2}) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r2, 0x0, 0x2000, 0x1000000, 0x0, 0x10}]) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0xe7ffffff, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x4, 0x40}, 0x400, 0x1, {}, 0x1, 0x0, r5}) syz_usb_disconnect(0xffffffffffffffff) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 17m54.341349069s ago: executing program 34 (id=719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 9m2.337079632s ago: executing program 35 (id=2067): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m49.194667197s ago: executing program 36 (id=2371): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) gettid() mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) chdir(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="004f8327d396ec0eb00fb37a43b6f2a507050762f820f0e43393d2fdb569e6e1ba5b213a25ddca1cc458d8d7abdd8a757ccb27d2109bb88e550466f8f8521c"], 0x1, 0x222, &(0x7f0000000000)="$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") 4m47.641451239s ago: executing program 37 (id=2607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000002200)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x2200cd0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 4m32.385141216s ago: executing program 38 (id=2633): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x9e, &(0x7f0000000080)={&(0x7f00000007c0)={0x3f0, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x3a4, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2e8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x2a0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket(0x400000000010, 0x3, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 3m18.091924902s ago: executing program 9 (id=2812): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2, 0x803, 0x2) syz_genetlink_get_family_id$tipc2(0x0, r0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x4c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) 3m16.763681889s ago: executing program 9 (id=2815): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ntfs3\x00', 0x200000, 0x0) r3 = dup(r1) read$eventfd(r3, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000700)="97452a307eb403000b000000e0004a9b8f52ac8e5c7f00003326491f", 0x1c}], 0x18, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x400c804) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xff7f, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) 3m15.59556264s ago: executing program 9 (id=2819): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m11.942464568s ago: executing program 9 (id=2827): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) fchown(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x660042, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x6000, 0x1) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r1, &(0x7f0000001fc0)=""/184, 0x2000208e) 3m11.666752447s ago: executing program 9 (id=2828): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, 0x0, 0xa000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x9, 0x6, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x10000000) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", "277120ae", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) close_range(r0, r1, 0x0) 3m10.457707202s ago: executing program 9 (id=2830): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ntfs3\x00', 0x200000, 0x0) r3 = dup(r1) read$eventfd(r3, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000700)="97452a307eb403000b000000e0004a9b8f52ac8e5c7f00003326491f", 0x1c}], 0x18, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x400c804) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xff7f, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) 2m53.30572342s ago: executing program 39 (id=2830): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ntfs3\x00', 0x200000, 0x0) r3 = dup(r1) read$eventfd(r3, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000700)="97452a307eb403000b000000e0004a9b8f52ac8e5c7f00003326491f", 0x1c}], 0x18, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x400c804) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xff7f, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) 2m34.342084993s ago: executing program 6 (id=2899): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x41, "0062ba7d82000000000000000000f7ffffff00"}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x4}) r3 = syz_open_pts(r1, 0xc0000) dup3(r3, r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 2m30.112412021s ago: executing program 6 (id=2903): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7e) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) 2m28.794097561s ago: executing program 6 (id=2905): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) 2m26.527169365s ago: executing program 6 (id=2910): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, 0x0, 0xa000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x9, 0x6, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x10000000) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", "277120ae", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) close_range(r0, r1, 0x0) 2m25.189183623s ago: executing program 6 (id=2911): fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='\xff\x0fy', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 2m23.366398799s ago: executing program 6 (id=2914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0xb, 0x0, 0x0) 2m6.185872273s ago: executing program 40 (id=2914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0xb, 0x0, 0x0) 2m4.599306163s ago: executing program 1 (id=2950): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_misc(r0, &(0x7f0000000000)="a5", 0x1) 2m2.455482087s ago: executing program 1 (id=2953): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x0, r2}, 0x10) 2m2.259814364s ago: executing program 1 (id=2954): r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2m1.0862833s ago: executing program 1 (id=2956): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10084, &(0x7f00000000c0)={[{@minixdf}, {@i_version}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nomblk_io_submit}, {@lazytime}, {@jqfmt_vfsold}]}, 0x1, 0x401, &(0x7f0000000540)="$eJzs209oHFUYAPBvZpNUm9bEWv+1VbcNYkBNmkSFgJeKioLgQW8eJDRpKW6a0qzYFg8qgqfixZOePOnBoxcPgnj3JHiydykEKZ5lZXZnmm2yGzfprms7vx9M+97MW9578+bbvHkzG0BpVbN/kogDEfF7REy0srcWqLb+++vGh6ezLYlG460/k2a5LF8ULT43nmem04j00ySOdqh3/fKV95ZqtZWLeX62vnphdv3ylWfPrS6dXTm7cn5h8fmT8wuLLywu9KObY1nbrt449tvaV2/+/fmJa+MvXX335WzfgbxAez/6pRrVW89lmyf7XdmQHWxLJyNDbAi7UomIbLhGm/E/EZXYHLyJeOWToTYOGKhGo9HY1/3wRw3gLpbEsFsADEfxh764tx/EffD/2cap1g3Q9v6PRJqXGd1yf9tP1Yi49M5nP2ZbDGgdAgCg3U/Z/OeZTvOfNB5qK3df/mxoMiLuj4hDEfFARByOiAcjmmUfjohHdll/dUt++/wnvb6njvUom/+92HH+W8z+YrKS5w42+z+anDlXWzmZn5PpGN2X5ed2qOPX17/9ptux9vlftmX1F3PBvB3XR7Ys0C0v1Zdup8/tNj6OONJx/pvcfBKQRMSjEXFkj3X8cKrxZbdj/97/wWp8HfFUx/HffHKX7Px8crZ5PcwWV8V2xz64sNyt/mH3Pxv//Tv3fzJpf167vvs6vp88vtHt2F6v/7Hk7WZ6LN93aalevzgXMZa8sX3//OZni3xRPuv/9FTn+D8Um2fiaDaOEfFYRDweEU/kbT8eESciYmqH/r869dpK1/7fExFDHf/vxlupXsd/94nV+Z9/6VZ/b+P/XDM1ne/p5fuv1wbu+cQBAADAHSRtvgOfpDM302k6M9N6h/9w7E9ra+v1p8+svX9+ufWu/GSMpsVK10TbeuhcvjZc5Oe35BfydeMvKvc28zOn12pdF8WA/8R4l/jP/FEZduuAgfN7LSgv8Q/lJf6hvMQ/lJf4h/IS/1BS1yriH0pM/EN5iX8oL/EPpXQ7v+uXkJC4WxPD/mYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoj38CAAD//2Gy3iA=") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0xef) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0xe, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780860d1cbf7966d61fdcf339bffbcc26b96ec71038259ca171ce1a311ef54ec32d71e14ef3dc177e9dc8b000000000000000200", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 2m0.082487942s ago: executing program 1 (id=2958): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xfdff) 1m58.693802348s ago: executing program 1 (id=2964): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x0, r1}, 0x10) 1m57.919376931s ago: executing program 41 (id=2964): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x0, r1}, 0x10) 1m41.500017061s ago: executing program 4 (id=3002): move_pages(0x0, 0xffffffffffffffc0, 0x0, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) 1m39.959135957s ago: executing program 4 (id=3008): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x1) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, 0x0, 0x0, 0xe7c) 1m37.836404602s ago: executing program 4 (id=3012): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000005c0)={0x0, 0xe, 0x68, "0277172d6f0d1ec46939fc7d60e6f4160b1de7de6a710637da9266ead83df4b865fc188f1a075ff4818f75db28a7cb59fc66dd402fb1e9071c28f101ee7a564982b715be282969d0795703cb14779156e0a8f93eaa887d0b028dffa5708973191243be467852d874"}, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="b4040300000054209965ec8ebfe30c1a3e85a40c3f0e5eff52185681600dbd16f20b23c13480fb47d7dafe"], 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1m34.543996727s ago: executing program 4 (id=3018): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@noauto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x5, 0x8, 0x2, 0xdc38}, 0x2, 0x1, 0x3, 0x80000000, 0x6, 0x8, 0x18, 0x8, 0x7, 0x9, {0x1, 0x4, 0x4, 0x6, 0x9, 0x9f4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_io_uring_setup(0x3364, &(0x7f00000016c0)={0x0, 0x0, 0x800, 0x3, 0x8000000}, &(0x7f0000000040)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r7 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r8}) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r7) chdir(&(0x7f0000000140)='./file0\x00') 1m29.73536992s ago: executing program 4 (id=3025): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x8}, 0xc) 1m29.167308225s ago: executing program 4 (id=3027): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x400}], 0x3, 0x100, &(0x7f0000003100)={0x0, 0x989680}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) 1m28.353368599s ago: executing program 42 (id=3027): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x400}], 0x3, 0x100, &(0x7f0000003100)={0x0, 0x989680}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) 22.265188077s ago: executing program 7 (id=3165): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f00000001c0), 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=") openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x1, 0x1400}) 17.075018303s ago: executing program 7 (id=3176): openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7e) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) 14.316048585s ago: executing program 2 (id=3185): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RSYMLINK(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4003a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$P9_RLERRORu(r1, &(0x7f0000000280)={0xe, 0x7, 0x2, {{0x1, '\x00'}, 0xa0000000}}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4", 0xb) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, [@bcast, @null, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 11.611902875s ago: executing program 5 (id=3191): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) 11.594431913s ago: executing program 2 (id=3192): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "c0cae0db"}]}}, 0x0}, 0x0) 11.411905118s ago: executing program 7 (id=3193): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xb) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 10.330130179s ago: executing program 5 (id=3195): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_misc(r0, &(0x7f0000000000)="a5", 0x1) 9.744350343s ago: executing program 8 (id=3196): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x4c}, 0x20049850) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x8) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x4, 0x2, 0x1, 0x0, 0x7}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xa}, 0x10) write(0xffffffffffffffff, &(0x7f0000000100)="240000001a005f0214f9f407000904ff81000e9d0d53c5e6665cd971bfa1328e1f51ac", 0x23) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) 9.709117181s ago: executing program 7 (id=3197): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0xd, @val=@perf_event={0x9}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/244, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000840)) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f0000000380)={[{0x9, 0x4e00, "063771994d29d420f6"}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000680)=0x41) 9.611880289s ago: executing program 0 (id=3198): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.631163676s ago: executing program 0 (id=3199): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xa, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8.630853932s ago: executing program 2 (id=3200): sched_setscheduler(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x32) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) 7.464523069s ago: executing program 2 (id=3201): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x80800) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req={0xfffff741, 0x10, 0xa96, 0x2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r3, 0x62c21a4ade68aba1, 0x70bd2c, 0x0, {{0x5}, {@val={0x8, 0x3, 0xa}, @void, @void}}}, 0x1c}}, 0x0) unshare(0x20060400) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r4) 7.434666196s ago: executing program 8 (id=3202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7.339208762s ago: executing program 0 (id=3203): r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000600)=0x180004) write$binfmt_elf32(r1, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) write$dsp(r1, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0xffffffff, 0x0, 0x0, 0x800, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xa6a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc7, 0x0, 0x0, 0x0, 0x2, 0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) r2 = memfd_secret(0x0) copy_file_range(r2, &(0x7f0000000040)=0x7fffffff, r2, &(0x7f0000000100)=0x1, 0x56344aaf, 0x0) read(r2, &(0x7f00000014c0)=""/4096, 0x1000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) sendto$inet6(r3, &(0x7f0000000640)="389990", 0x3, 0x24069051, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 7.020235063s ago: executing program 8 (id=3204): r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r0}) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0) 6.939330451s ago: executing program 7 (id=3205): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20fffe82) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 6.677950133s ago: executing program 8 (id=3206): syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r0, 0x0, 0x0) 6.419746534s ago: executing program 5 (id=3207): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x150c, &(0x7f0000002d40)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) 6.215692154s ago: executing program 3 (id=3208): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000000)) 5.823703499s ago: executing program 8 (id=3209): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ac4000/0x3000)=nil, 0x3000}) 4.169914771s ago: executing program 5 (id=3210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) 4.168445861s ago: executing program 3 (id=3211): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) 3.89799371s ago: executing program 8 (id=3212): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e289000002", 0x41) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000580)=0xfc) 3.701357412s ago: executing program 3 (id=3213): sched_setscheduler(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x32) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x5) getdents64(r3, 0xfffffffffffffffe, 0x29) 3.467213867s ago: executing program 0 (id=3214): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d271d30d1a5fff9d3b1ce90b597992", 0x90}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.511023336s ago: executing program 3 (id=3215): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xa, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.719734552s ago: executing program 5 (id=3216): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lremovexattr(0xfffffffffffffffe, 0x0) 1.422909925s ago: executing program 7 (id=3217): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0xd, @val=@perf_event={0x9}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/244, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000840)) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f0000000380)={[{0x9, 0x4e00, "063771994d29d420f6"}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000680)=0x41) 1.402500157s ago: executing program 3 (id=3218): r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r0}) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0) 1.037214486s ago: executing program 3 (id=3219): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_misc(r0, &(0x7f0000000000)="a5", 0x1) 923.307835ms ago: executing program 5 (id=3220): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0x14, 0x6, "f99d5133974f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 858.529988ms ago: executing program 2 (id=3221): syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r0, 0x0, 0x0) 731.654966ms ago: executing program 0 (id=3222): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)={[{@shortad}, {@partition={'partition', 0x3d, 0x5}}, {@noadinicb}, {@uid}, {@gid}, {@volume={'volume', 0x3d, 0x6}}]}, 0x1, 0x489, &(0x7f0000000580)="$eJzs29trHOUfx/HPd7K72Wz7+3XbpmmVgquCSsWaQ4/Gix5iqNCkOTQiRYWYbOLSnMimkhTR4o233ngjIgoKUkULIt54pb3zD1AQBL3wQgT3wgMIgszszM5ks2nS7iHd9v2CdifPfGfmOewzz7M7zwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEinnjrZ2WVbnQsAANBIg6Mjnd2M/wAA3FXO8/kfAADgbmJy9L1MfSMFG/D+Lkqezc1dWh7r6698WJt5R7Z48e6/ZFd3z6HDR44eC15vfHyt3aNzo+dPZk7Pzy4sZvP57GRmbC43MT+Z3fQZqj2+3AGvAjKzFy9NTk3lM90He1btXk7/0rqtI917tOOEE8SO9fX3j0ZiYvFbvvoa683wE3K0T6bfHvrUBiU5qr4uNnjv1FubV4gDXiHG+vq9gszkxueW3J1DQUU4fll9iaCOGtAWVWmX3HxZojaf2eJydEKmjp8Ldk5SS1APj3pfDK9/YKwml79lbj6fl/SAmqDNbmOtcvSjTLM7khra+mZFg8XkaFmmP3oLNuzdD9z+5N42zz6TeXpuaj4SO2R+j2r28aGRbvN7U1KOBr07fsFGtjozaDh3svSWTHs+ftmbV8ibl+7oPfrEcE90hrF3g/O4sQf9+eNmxuS4HztkQ2ZO7csFAAAAAAAAQGo1R9/JVPgqEyamTU7kkXFSxQdDma3JIoB6MUdvyzQ8UvC+ho+uS2mJrO8pafZnf/XNf1vy9PzCymJu+qWlivtTyZMv5pcWxycq71abe59tiaZstI6lSnFzlJDpuT8/stJ1i/d/fylAmJsPnwzXzCTLr++9b/5fXM8UPEM6fmFvdLtilm/i+ah7TTNHSzKd2rXPX6uS0po6UzHuc5l+f2+/H+ck3MwHp00XzziVm8l2urFfy/T+v0GstyxK2/zY3WFslxtrMr05sDp2ux/bHsZ2u7H9Ml1/oXLsnjC2x419XaaFXzNBbMqNvc+P7QhjD07Mz0xWqkrgZrn9/yeZ3m3PWNA3YsX339r+/0o4FlwpP9E6fb7a/p+OpF3x+/UFt///tc/ry17/dyr3/zdk+uSL/X5cse8l/P07vf/D/v+sTNPfro5N+bG7wtiuTVdsk3Dbf79MZ/ZcK9WN3/5+C4StFm3/e8vfHXVq/52RtLR/3dbaFB2S8iuXL47PzGQX2WCDDTZKG1t9Z0IjuOP/Z+4s6ssfSvMdf/z3P6aEM6u/Xw3H/97yE9Vp/N8VSev1ZyPxmJRcml2I75WS+ZXLj+Vmx6ez09m5Q51HOg8fOt51/Fg8EUzuwq2q6+pO5Lb/NzL9s+1q6fPu6vlf5fl/qvxEdWr/3ZG01Kr5StVFh9/+V2W6//q10vcSN5r/B9//PPJg8bXUP+vU/u2RtLR/3f/VpugAAAAAAAAAAAAAAAAA0NTi5ugDmc48HrPgt2abWf+35gdodVr/1RFJm2zQ7xWqrlQAaAKOHL0j08Mq2GtuwnZpIPqKO9p/AQAA//9HASOO") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) 87.260784ms ago: executing program 0 (id=3223): syz_usb_connect$cdc_ecm(0x5, 0x66, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x81, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x3, 0x72}, [@mdlm_detail={0x4}, @mdlm={0x15, 0x24, 0x12, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7f, 0x3, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0xd, 0xc}}}}}]}}]}}, 0x0) 0s ago: executing program 2 (id=3224): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xcb08, 0x3, 0x20002f7}) kernel console output (not intermixed with test programs): 17262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.592691][T17262] bridge_slave_0: entered allmulticast mode [ 1217.648194][T17262] bridge_slave_0: entered promiscuous mode [ 1217.742518][T17262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.782698][T17262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.239910][T17262] bridge_slave_1: entered allmulticast mode [ 1218.306864][T17262] bridge_slave_1: entered promiscuous mode [ 1218.630338][T17262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.710117][T17262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.119111][ T5833] Bluetooth: hci3: command tx timeout [ 1219.317122][ T149] bridge_slave_1: left allmulticast mode [ 1219.337063][ T149] bridge_slave_1: left promiscuous mode [ 1219.349857][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.386396][ T149] bridge_slave_0: left allmulticast mode [ 1219.402985][ T149] bridge_slave_0: left promiscuous mode [ 1219.417967][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.407589][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1220.414096][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1221.934158][ T10] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1222.017838][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1222.125421][ T10] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.168844][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1222.209521][ T10] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1222.241166][ T10] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1222.267630][ T149] bond0 (unregistering): Released all slaves [ 1222.284185][ T10] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1222.293368][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.350408][ T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1223.877113][T17262] team0: Port device team_slave_0 added [ 1223.979423][ T10] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1224.047738][T17427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2786'. [ 1224.050175][ T10] usb 10-1: USB disconnect, device number 15 [ 1224.136174][T17262] team0: Port device team_slave_1 added [ 1224.292543][ T149] hsr_slave_0: left promiscuous mode [ 1224.642378][ T149] hsr_slave_1: left promiscuous mode [ 1224.701102][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1224.755783][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1225.890708][ T149] team0 (unregistering): Port device team_slave_1 removed [ 1225.965486][ T149] team0 (unregistering): Port device team_slave_0 removed [ 1228.016803][T17454] tipc: Enabling of bearer rejected, failed to enable media [ 1229.123606][T17262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.150912][T17262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.198429][T17262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.199532][T17517] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2800'. [ 1229.217784][T17262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.226900][T17262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.308684][T17262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.440290][ T5946] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1229.563402][T17525] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 1229.585147][ T5946] usb 5-1: device descriptor read/64, error -71 [ 1230.034862][ T5946] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1230.114616][T17262] hsr_slave_0: entered promiscuous mode [ 1230.140609][T17262] hsr_slave_1: entered promiscuous mode [ 1230.179644][T17262] debugfs: 'hsr0' already exists in 'hsr' [ 1230.196193][T17262] Cannot create hsr debugfs directory [ 1230.205786][ T5946] usb 5-1: device descriptor read/64, error -71 [ 1230.333918][ T5946] usb usb5-port1: attempt power cycle [ 1230.469571][T17532] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2803'. [ 1230.557512][T17536] loop1: detected capacity change from 0 to 512 [ 1230.596720][T17536] EXT4-fs: Ignoring removed i_version option [ 1230.633425][T17536] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1230.733640][T17536] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2804: bad orphan inode 1 [ 1230.750310][ T5946] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1230.794065][ T5946] usb 5-1: device descriptor read/8, error -71 [ 1230.822015][T17536] loop1: lost filesystem error report for type 5 error -117 [ 1230.825055][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1230.838827][ C0] EXT4-fs (loop1): initial error at time 2000000279: ext4_orphan_get:1417 [ 1230.847401][ C0] EXT4-fs (loop1): last error at time 2000000279: ext4_orphan_get:1417 [ 1230.859313][T17536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.947626][ T31] audit: type=1800 audit(2000000279.815:98): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2804" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1231.042673][ T31] audit: type=1804 audit(2000000279.909:99): pid=17544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2804" name="/newroot/494/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 1231.068774][ T5946] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1231.135280][ T5946] usb 5-1: device descriptor read/8, error -71 [ 1231.274207][T14382] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1231.283612][ T5946] usb usb5-port1: unable to enumerate USB device [ 1231.364320][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.496544][T14382] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.518539][T14382] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1231.531443][T14382] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1231.582683][T14382] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1231.603669][T14382] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.710865][T14382] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1231.806975][T17520] loop0: detected capacity change from 0 to 32768 [ 1231.899638][T17520] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2798 (17520) [ 1232.744920][T17520] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1232.777950][T14382] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1232.841229][T14382] usb 10-1: USB disconnect, device number 16 [ 1232.843681][T17520] BTRFS info (device loop0): using sha256 checksum algorithm [ 1233.239052][ T10] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1233.744596][T17520] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1233.792967][T17520] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1234.032954][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1234.044449][T17569] loop3: detected capacity change from 0 to 1024 [ 1234.053108][T17520] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1234.129236][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.164360][T17520] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1234.164667][T17520] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1234.291875][T17520] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1234.337852][T17569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1234.374898][T17520] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1234.375206][T17520] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1234.427545][T17520] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1234.455950][T17569] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1234.660284][T17520] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1234.839014][T17520] BTRFS error (device loop0): open_ctree failed: -12 [ 1235.209207][ T10] usb 5-1: config 0 has no interface number 0 [ 1235.215375][ T10] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1235.297146][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1235.307449][T17390] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm kworker/u8:15: lblock 0 mapped to illegal pblock 0 (length 6) [ 1235.362264][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.402274][T17390] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 1235.463556][T17390] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1235.463556][T17390] [ 1235.497845][ T10] usb 5-1: config 0 descriptor?? [ 1235.538567][T17390] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 1235.616109][ T10] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1235.652092][T17390] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1235.882617][T17390] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1235.882617][T17390] [ 1236.031094][T17600] ntfs3(nbd9): try to read out of volume at offset 0x0 [ 1236.112883][T17262] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1236.465245][T17608] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2816'. [ 1236.527217][T17262] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1236.605709][T16790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1236.610553][T17262] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1236.701154][T17262] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1236.750808][T17611] loop1: detected capacity change from 0 to 512 [ 1236.803433][T17611] EXT4-fs: Ignoring removed i_version option [ 1236.854337][ T10] usb 5-1: USB disconnect, device number 91 [ 1236.920158][T17611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1237.015117][ T5946] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1237.056119][T17611] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2818: bad orphan inode 1 [ 1237.154942][T17611] loop1: lost filesystem error report for type 5 error -117 [ 1237.163159][T17611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1237.187585][ T5946] usb 10-1: device descriptor read/64, error -71 [ 1237.278743][T17632] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2820'. [ 1237.315550][ T31] audit: type=1800 audit(2000000285.774:100): pid=17611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2818" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1237.561094][T17631] tipc: Started in network mode [ 1237.565989][T17631] tipc: Node identity dea6ea07cc68, cluster identity 4711 [ 1237.574558][ T5946] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1237.711742][ T31] audit: type=1804 audit(2000000286.017:101): pid=17640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2818" name="/newroot/500/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 1238.188573][T17631] tipc: Enabled bearer , priority 0 [ 1238.340261][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1238.340572][ T31] audit: type=1800 audit(2000000286.625:102): pid=17640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2818" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1238.384135][ T5946] usb 10-1: device descriptor read/64, error -71 [ 1238.460388][T17642] tipc: Resetting bearer [ 1238.489160][T17262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.512066][ T5946] usb usb10-port1: attempt power cycle [ 1238.538549][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.608628][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1238.656362][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1238.703492][T14382] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1238.723096][ T10] usb 1-1: config 4 has too many interfaces: 231, using maximum allowed: 32 [ 1238.748155][T17629] tipc: Disabling bearer [ 1238.757178][ T10] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 231 [ 1238.788792][ T10] usb 1-1: config 4 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1238.831904][ T10] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1238.894327][ T10] usb 1-1: string descriptor 0 read error: -22 [ 1238.911480][T17262] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.921617][ T10] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1238.953335][T14382] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.964835][ T5946] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1238.995895][T14382] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1238.997298][T17394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.012864][T17394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.025917][ T5946] usb 10-1: device descriptor read/8, error -71 [ 1239.032233][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.090018][T14382] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1239.116037][ T10] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1239.125991][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.133152][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.135546][T14382] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1239.210332][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1239.217197][T14382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.295762][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1239.299322][T14382] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1239.320841][ T5946] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1239.334956][T17624] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1239.346063][ T10] usb 1-1: media controller created [ 1239.397377][ T5946] usb 10-1: device descriptor read/8, error -71 [ 1239.454084][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1239.616112][ T5946] usb usb10-port1: unable to enumerate USB device [ 1240.073823][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1240.122614][T14382] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1240.204773][T14382] usb 5-1: USB disconnect, device number 92 [ 1240.320833][ T5885] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1240.351148][ T10] usb 1-1: USB disconnect, device number 65 [ 1240.560899][ T5885] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1240.591312][ T5885] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1240.660974][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1240.922738][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1241.595220][T17262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.769257][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1241.858607][ T5885] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1241.867689][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1242.895739][ T5885] usb 4-1: Product: syz [ 1242.899921][ T5885] usb 4-1: Manufacturer: syz [ 1242.993459][ T5885] cdc_wdm 4-1:1.0: skipping garbage [ 1243.000964][T17681] ntfs3(nbd9): try to read out of volume at offset 0x0 [ 1243.032212][ T5885] cdc_wdm 4-1:1.0: skipping garbage [ 1243.343332][T17688] loop4: detected capacity change from 0 to 128 [ 1244.275721][ T5885] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1244.305167][ T5885] cdc_wdm 4-1:1.0: Unknown control protocol [ 1245.471412][T17690] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2832'. [ 1245.482669][T17688] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2832'. [ 1246.229447][ T8847] kworker/u8:10: attempt to access beyond end of device [ 1246.229447][ T8847] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1246.314200][ T5885] usb 4-1: USB disconnect, device number 23 [ 1247.883939][T17709] loop1: detected capacity change from 0 to 512 [ 1247.897318][T17709] EXT4-fs: Ignoring removed bh option [ 1248.640085][T17709] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1248.671096][T17709] EXT4-fs (loop1): 1 truncate cleaned up [ 1248.686765][T17709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1249.729730][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.292033][T17262] veth0_vlan: entered promiscuous mode [ 1250.336903][ T5885] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1250.340657][T17262] veth1_vlan: entered promiscuous mode [ 1250.392512][T17262] veth0_macvtap: entered promiscuous mode [ 1250.409916][T17262] veth1_macvtap: entered promiscuous mode [ 1250.431891][T14382] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1250.446921][T17262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.456876][T17262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.476315][ T5885] usb 2-1: device descriptor read/64, error -71 [ 1250.479428][T10999] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.479714][T10999] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.479853][T10999] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.479884][T10999] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.605601][T14382] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1250.605636][T14382] usb 5-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1250.605661][T14382] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1250.606570][T14382] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1250.606594][T14382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1250.606613][T14382] usb 5-1: SerialNumber: syz [ 1250.647463][T14382] hub 5-1:1.0: bad descriptor, ignoring hub [ 1250.647489][T14382] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1250.647942][T14382] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1250.735820][ T5885] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1250.893273][T17726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.926653][T17726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.106728][T17726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.116650][T17726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.185584][T17726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.253036][ T8847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.442676][T17726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.491871][ T8847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.702709][ T5885] usb 2-1: device descriptor read/64, error -71 [ 1251.723840][T14382] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1252.307002][ T5885] usb usb2-port1: attempt power cycle [ 1252.378104][T14382] usb 5-1: USB disconnect, device number 93 [ 1252.532008][T17736] macsec1: entered promiscuous mode [ 1252.537254][T17736] batadv_slave_1: entered promiscuous mode [ 1252.544116][T17736] macsec1: entered allmulticast mode [ 1252.550612][T17736] batadv_slave_1: entered allmulticast mode [ 1252.581319][T17736] batadv_slave_1: left allmulticast mode [ 1252.587010][T17736] batadv_slave_1: left promiscuous mode [ 1252.677417][ T5885] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1252.841932][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.881111][ T5885] usb 2-1: device descriptor read/8, error -71 [ 1252.917771][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.223528][ T5885] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1254.033992][ T5885] usb 2-1: device descriptor read/8, error -71 [ 1254.175511][ T5885] usb usb2-port1: unable to enumerate USB device [ 1257.960807][ T5923] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1258.143236][ T5923] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1258.143330][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.143412][ T5923] usb 2-1: config 0 has no interface number 0 [ 1258.143688][ T5923] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1258.143911][ T5923] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1258.143989][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.685961][T17792] loop6: detected capacity change from 0 to 256 [ 1258.712104][ T5923] usb 2-1: config 0 descriptor?? [ 1258.732882][T17789] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1258.732935][T17789] FAT-fs (loop6): Filesystem has been set read-only [ 1258.732985][T17789] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1258.733012][T17789] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1258.733824][T17789] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 1258.760839][ T31] audit: type=1800 audit(2000000305.810:103): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2855" name="file1" dev="loop6" ino=1048732 res=0 errno=0 [ 1258.812377][ T5923] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 1259.284408][ T5923] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1259.562601][T17800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1259.575587][T17800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1259.604949][T17800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1259.617568][T17800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1259.618690][T17800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1259.852587][ T5923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.852620][ T5923] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1259.853675][ T5923] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1259.853706][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1259.853732][ T5923] usb 4-1: SerialNumber: syz [ 1260.097244][ T9442] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1260.188960][ T5923] usb 4-1: 0:2 : does not exist [ 1260.279449][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1260.287480][ T9442] usb 7-1: no configurations [ 1260.341752][ T9442] usb 7-1: can't read configurations, error -22 [ 1260.345445][ T5923] usb 4-1: USB disconnect, device number 24 [ 1260.439779][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1260.468836][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1260.518184][ T10] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1260.538690][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.553611][ T10] usb 1-1: Product: syz [ 1260.558555][ T10] usb 1-1: Manufacturer: syz [ 1260.563320][ T10] usb 1-1: SerialNumber: syz [ 1260.578112][ T10] usb 1-1: config 0 descriptor?? [ 1260.738022][ T9442] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1260.795899][T14382] usb 2-1: USB disconnect, device number 92 [ 1260.942590][ T9442] usb 7-1: no configurations [ 1261.783954][ T9442] usb 7-1: can't read configurations, error -22 [ 1261.807293][T17800] Bluetooth: hci6: command tx timeout [ 1261.816989][ T9442] usb usb7-port1: attempt power cycle [ 1261.978593][ T10] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 066 [ 1262.255996][ T9442] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1262.810648][T14382] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1262.817155][T17806] i2c i2c-1: failure reading status [ 1262.846387][ T9442] usb 7-1: no configurations [ 1262.851021][ T9442] usb 7-1: can't read configurations, error -22 [ 1262.863268][ T5946] usb 1-1: USB disconnect, device number 66 [ 1263.070566][T14382] usb 2-1: not running at top speed; connect to a high speed hub [ 1263.104289][ T9442] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1263.150723][T14382] usb 2-1: config 1 has an invalid interface number: 191 but max is 0 [ 1263.216711][T14382] usb 2-1: config 1 has no interface number 0 [ 1263.307251][T17798] chnl_net:caif_netlink_parms(): no params data found [ 1263.321250][T14382] usb 2-1: config 1 interface 191 has no altsetting 0 [ 1263.421384][ T9442] usb 7-1: device not accepting address 14, error -71 [ 1263.438175][T14382] usb 2-1: New USB device found, idVendor=2040, idProduct=651f, bcdDevice=5b.dd [ 1263.494304][ T9442] usb usb7-port1: unable to enumerate USB device [ 1263.578656][T14382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.750204][T14382] usb 2-1: Product: syz [ 1263.971060][T14382] usb 2-1: Manufacturer: syz [ 1263.987870][T14382] usb 2-1: SerialNumber: syz [ 1264.040443][T17800] Bluetooth: hci6: command tx timeout [ 1264.733735][T14382] rndis_host 2-1:1.191: More than one union descriptor, skipping ... [ 1264.771573][T14382] usb 2-1: bad CDC descriptors [ 1264.839430][T14382] usb 2-1: USB disconnect, device number 93 [ 1265.706824][T17798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.735771][T17798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.758534][T17798] bridge_slave_0: entered allmulticast mode [ 1265.828760][T17862] validate_nla: 44 callbacks suppressed [ 1265.828781][T17862] netlink: 'syz.1.2873': attribute type 10 has an invalid length. [ 1265.863756][T17798] bridge_slave_0: entered promiscuous mode [ 1265.911021][T17862] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1265.948063][T17798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.963785][T17798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.982396][T17798] bridge_slave_1: entered allmulticast mode [ 1266.014813][T17798] bridge_slave_1: entered promiscuous mode [ 1266.072256][ T5923] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1266.244238][T17800] Bluetooth: hci6: command tx timeout [ 1266.244580][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 1266.285312][T17871] loop1: detected capacity change from 0 to 1024 [ 1266.302099][ T5923] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1266.334733][ T5923] usb 1-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config [ 1266.351623][T17871] EXT4-fs: Ignoring removed mblk_io_submit option [ 1266.405709][ T5923] usb 1-1: config 0 has no interface number 0 [ 1266.422717][ T5923] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1266.435367][T17844] loop4: detected capacity change from 0 to 32768 [ 1266.442547][ T5923] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1266.598919][ T5923] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1266.628958][T17844] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2867 (17844) [ 1267.322461][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.332221][ T5923] usb 1-1: Product: syz [ 1267.462143][T17844] BTRFS error (device loop4): open_ctree failed: -4 [ 1267.494539][ T5923] usb 1-1: Manufacturer: syz [ 1267.499155][ T5923] usb 1-1: SerialNumber: syz [ 1267.560917][T17871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1267.574730][ T5923] usb 1-1: config 0 descriptor?? [ 1267.599256][T17854] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1267.608867][ T5923] asix 1-1:0.34: probe with driver asix failed with error -22 [ 1267.632119][ T50] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.715481][ T31] audit: type=1800 audit(2000000314.210:104): pid=17871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2875" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1267.794369][T17798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.957510][T17798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.004332][T14382] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1268.031694][T17871] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.2875: Allocating blocks 497-513 which overlap fs metadata [ 1268.467611][T17800] Bluetooth: hci6: command tx timeout [ 1268.749886][T14382] usb 7-1: no configurations [ 1268.754547][T14382] usb 7-1: can't read configurations, error -22 [ 1269.422167][T17896] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1269.610703][T14382] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1269.641362][ T50] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.657634][ T9442] usb 1-1: USB disconnect, device number 67 [ 1269.784133][T17871] EXT4-fs (loop1): pa ffff88807dd6d000: logic 48, phys. 177, len 21 [ 1269.792446][T17871] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 1269.858048][T14382] usb 7-1: no configurations [ 1269.893447][T17798] team0: Port device team_slave_0 added [ 1270.017716][T14382] usb 7-1: can't read configurations, error -22 [ 1270.026110][T14382] usb usb7-port1: attempt power cycle [ 1270.064210][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.423172][T14382] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1270.502815][ T50] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.546385][T14382] usb 7-1: no configurations [ 1270.551085][T14382] usb 7-1: can't read configurations, error -22 [ 1270.626290][ T9442] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1271.348377][T17798] team0: Port device team_slave_1 added [ 1271.611608][ T9442] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1271.635869][ T9442] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1271.916432][ T50] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.195563][ T9442] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1272.204727][ T9442] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1272.215776][ T9442] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1272.229073][ T9442] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1272.238413][ T9442] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1272.251227][ T9442] usb 5-1: Product: syz [ 1272.265008][ T9442] usb 5-1: Manufacturer: syz [ 1272.291974][ T9442] cdc_wdm 5-1:1.0: skipping garbage [ 1272.307893][ T9442] cdc_wdm 5-1:1.0: skipping garbage [ 1272.466889][ T9442] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1272.473245][ T9442] cdc_wdm 5-1:1.0: Unknown control protocol [ 1272.702897][T17911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.733358][T17911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.750442][T17798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.781230][T17927] binder: 17926:17927 ioctl c0306201 0 returned -14 [ 1272.788633][T17798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.844636][T17798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.871997][T17911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.884775][T17798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.896895][T17798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.943553][T17911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.025525][T17798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.467076][T17911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.546843][T17911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.678873][T17798] hsr_slave_0: entered promiscuous mode [ 1273.692977][T17798] hsr_slave_1: entered promiscuous mode [ 1273.739875][T17798] debugfs: 'hsr0' already exists in 'hsr' [ 1273.745641][T17798] Cannot create hsr debugfs directory [ 1274.865112][ C1] cdc_wdm 5-1:1.0: Unexpected error -71 [ 1274.872632][ T5923] usb 5-1: USB disconnect, device number 94 [ 1274.872829][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1274.885253][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1274.891334][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1276.081739][ T50] bridge_slave_1: left allmulticast mode [ 1276.087959][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.633715][T17959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2894'. [ 1276.706917][ T50] bridge_slave_0: left allmulticast mode [ 1276.752346][ T50] bridge_slave_0: left promiscuous mode [ 1276.760711][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.182014][T17800] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1282.067055][T18000] loop1: detected capacity change from 0 to 1024 [ 1283.876035][T18000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1283.889321][T18000] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1284.650657][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1285.179247][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1285.281900][ T50] bond0 (unregistering): Released all slaves [ 1285.476485][T10999] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm kworker/u8:19: lblock 0 mapped to illegal pblock 0 (length 6) [ 1285.512937][T10999] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 1285.561807][ T50] tipc: Left network mode [ 1285.613548][T10999] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1285.613548][T10999] [ 1285.618161][T10999] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:19: lblock 8 mapped to illegal pblock 8 (length 8) [ 1285.624336][T10999] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1285.624371][T10999] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1285.624371][T10999] [ 1285.718753][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1286.118209][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1286.118277][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1290.315928][ T50] hsr_slave_0: left promiscuous mode [ 1290.346226][ T50] hsr_slave_1: left promiscuous mode [ 1290.367450][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1290.407588][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1290.608289][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1290.615695][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.740313][ T50] veth1_macvtap: left promiscuous mode [ 1290.745846][ T50] veth0_macvtap: left promiscuous mode [ 1290.805825][T18077] random: crng reseeded on system resumption [ 1290.821825][ T50] veth1_vlan: left promiscuous mode [ 1290.848323][ T50] veth0_vlan: left promiscuous mode [ 1291.334156][ T30] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1291.899326][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.931358][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1291.971744][ T30] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1292.146831][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1292.154988][ T30] usb 5-1: SerialNumber: syz [ 1292.828715][T18091] loop1: detected capacity change from 0 to 1024 [ 1292.839567][ T30] usb 5-1: 0:2 : does not exist [ 1293.782150][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 1294.065229][ T30] usb 5-1: USB disconnect, device number 95 [ 1294.075304][T18091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1294.185476][T18091] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1294.294552][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1294.505521][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1294.628530][T18113] netlink: 'syz.3.2924': attribute type 10 has an invalid length. [ 1294.644131][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1294.724385][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1295.515644][ T5885] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1295.696264][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 1295.732007][ T5885] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1295.774163][ T5885] usb 2-1: config 6 has an invalid interface number: 236 but max is 0 [ 1295.804285][ T5885] usb 2-1: config 6 has no interface number 0 [ 1295.810481][ T5885] usb 2-1: config 6 interface 236 has no altsetting 0 [ 1295.826967][ T5885] usb 2-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=e4.e9 [ 1295.846107][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.856770][ T5885] usb 2-1: Product: syz [ 1295.867978][ T5885] usb 2-1: Manufacturer: syz [ 1295.910206][ T5885] usb 2-1: SerialNumber: syz [ 1296.108368][T18113] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1296.245752][ T5885] usb 2-1: USB disconnect, device number 94 [ 1298.564705][T18148] loop3: detected capacity change from 0 to 64 [ 1301.267900][T17798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1301.442925][T17798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1301.693501][T18170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2936'. [ 1301.749744][T17798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1302.171092][T17798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1302.995507][T17798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.082985][T14382] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1303.087389][T17798] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.183553][T17394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.190777][T17394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.307246][T14382] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.378880][T17394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.386077][T17394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.399639][T14382] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1303.427014][T14382] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1303.448165][T14382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1303.476059][T14382] usb 1-1: SerialNumber: syz [ 1303.728428][T17798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1303.752217][T17798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1303.770257][T14382] usb 1-1: 0:2 : does not exist [ 1304.614912][T14382] usb 1-1: USB disconnect, device number 68 [ 1305.935988][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1306.646265][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1306.657946][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1306.666778][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1306.677880][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1306.687369][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1307.226582][T17798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.314550][T17798] veth0_vlan: entered promiscuous mode [ 1307.487027][T17798] veth1_vlan: entered promiscuous mode [ 1307.842409][T17798] veth0_macvtap: entered promiscuous mode [ 1307.859341][T17800] Bluetooth: hci5: unexpected event for opcode 0x2024 [ 1307.886728][T17798] veth1_macvtap: entered promiscuous mode [ 1307.958458][ T10] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1308.001556][T18215] chnl_net:caif_netlink_parms(): no params data found [ 1308.177510][ T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.221078][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1308.251144][ T10] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1308.283573][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1308.299965][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.329461][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1308.518173][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1308.922305][T17800] Bluetooth: hci4: command tx timeout [ 1309.071274][ T5885] usb 2-1: USB disconnect, device number 95 [ 1309.071930][T17798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.287257][T18240] xt_TCPMSS: Only works on TCP SYN packets [ 1309.393863][T17798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.530746][T18215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.538399][T18215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.597345][T18215] bridge_slave_0: entered allmulticast mode [ 1309.635467][T18215] bridge_slave_0: entered promiscuous mode [ 1309.653695][T18215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.661986][T18215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.724475][T18215] bridge_slave_1: entered allmulticast mode [ 1309.761689][T18215] bridge_slave_1: entered promiscuous mode [ 1310.091001][T10996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.272322][T10996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.698184][T18215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.754838][T10996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.826874][T10996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.845002][ T9584] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1310.895670][T18215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.112466][ T9584] usb 1-1: Using ep0 maxpacket: 16 [ 1311.143848][T17800] Bluetooth: hci4: command tx timeout [ 1311.156542][ T9584] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1311.209158][ T9584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.232992][T18256] loop1: detected capacity change from 0 to 512 [ 1311.269283][T18215] team0: Port device team_slave_0 added [ 1311.272421][T18256] EXT4-fs: Ignoring removed i_version option [ 1311.281066][T18256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1311.315579][ T9584] usb 1-1: Product: syz [ 1311.319799][ T9584] usb 1-1: Manufacturer: syz [ 1311.324416][ T9584] usb 1-1: SerialNumber: syz [ 1311.370154][T18256] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2956: bad orphan inode 1 [ 1311.381559][ T9584] usb 1-1: config 0 descriptor?? [ 1311.477969][T18256] loop1: lost filesystem error report for type 5 error -117 [ 1311.480781][T18256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.590688][ T485] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.748744][ T9584] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 1311.782186][ T31] audit: type=1800 audit(2000000355.423:105): pid=18256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2956" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1311.811000][ T9584] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1311.835746][ T9584] usb 1-1: USB disconnect, device number 69 [ 1311.922512][T18215] team0: Port device team_slave_1 added [ 1311.939886][T18261] loop1: detected capacity change from 512 to 0 [ 1311.950712][ C0] I/O error, dev loop1, sector 236 op 0x1:(WRITE) flags 0x808800 phys_seg 2 prio class 2 [ 1312.070873][ T5813] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 1312.314187][T10367] EXT4-fs error (device loop1): ext4_get_inode_loc:4920: inode #2: block 5: comm syz.1.1084: unable to read itable block [ 1312.351486][ T485] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.417537][T10367] buffer_io_error: 1 callbacks suppressed [ 1312.417553][T10367] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1312.455312][T10367] EXT4-fs (loop1): I/O error while writing superblock [ 1312.505491][T10367] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: IO failure [ 1312.545326][T10367] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1312.553605][T10367] EXT4-fs (loop1): I/O error while writing superblock [ 1312.591704][T10367] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.1084: mark_inode_dirty error [ 1312.636112][T10367] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1312.662277][T10367] EXT4-fs (loop1): I/O error while writing superblock [ 1312.669312][T17388] EXT4-fs warning (device loop1): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 36) [ 1312.693843][T17388] buffer_io_error: 54 callbacks suppressed [ 1312.693860][T17388] Buffer I/O error on device loop1, logical block 36 [ 1312.706343][T17388] Buffer I/O error on device loop1, logical block 37 [ 1312.713173][T17388] Buffer I/O error on device loop1, logical block 38 [ 1312.719855][T17388] Buffer I/O error on device loop1, logical block 39 [ 1312.800745][T17388] Buffer I/O error on device loop1, logical block 40 [ 1312.807468][T17388] Buffer I/O error on device loop1, logical block 41 [ 1312.814237][T17388] Buffer I/O error on device loop1, logical block 42 [ 1312.820927][T17388] Buffer I/O error on device loop1, logical block 43 [ 1312.832592][T17388] Buffer I/O error on device loop1, logical block 44 [ 1312.839288][T17388] Buffer I/O error on device loop1, logical block 45 [ 1312.846980][T17388] EXT4-fs warning (device loop1): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 49) [ 1312.858747][T17388] EXT4-fs warning (device loop1): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 209) [ 1312.872003][ T485] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.892686][T17388] EXT4-fs warning (device loop1): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 65) [ 1312.905569][T17388] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4905: inode #2: block 5: comm kworker/u8:12: unable to read itable block [ 1312.929916][T17388] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1312.938370][T17388] EXT4-fs (loop1): I/O error while writing superblock [ 1312.980235][T10367] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.990255][T18215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.998522][T18215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.026557][T18215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.042176][T10367] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1313.074645][T18215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.111914][T10367] EXT4-fs (loop1): I/O error while writing superblock [ 1313.121804][T18215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.223764][T18215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.268752][T18271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2963'. [ 1313.327008][ T485] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.369059][T17800] Bluetooth: hci4: command tx timeout [ 1313.503682][T18267] loop4: detected capacity change from 0 to 32768 [ 1313.566890][T18267] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2962 (18267) [ 1313.638752][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.664393][T18267] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1313.673010][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.703624][T18267] BTRFS info (device loop4): using sha256 checksum algorithm [ 1313.794844][T18215] hsr_slave_0: entered promiscuous mode [ 1313.853173][T18215] hsr_slave_1: entered promiscuous mode [ 1313.910426][T18267] BTRFS info (device loop4): rebuilding free space tree [ 1313.935068][T18267] BTRFS info (device loop4): turning off barriers [ 1313.941540][T18267] BTRFS info (device loop4): turning on sync discard [ 1313.948818][T18267] BTRFS info (device loop4): enabling free space tree [ 1313.957416][T18267] BTRFS info (device loop4): force clearing of disk cache [ 1313.965067][T18267] BTRFS info (device loop4): enabling auto defrag [ 1314.106843][T10996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.114707][T10996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.170191][ T5816] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1315.601733][T17800] Bluetooth: hci4: command tx timeout [ 1315.702660][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1315.714664][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1315.733403][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1315.768067][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1315.796138][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1316.020665][T18305] loop0: detected capacity change from 0 to 32768 [ 1316.047510][T18305] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2969 (18305) [ 1316.099329][T18305] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1316.109569][T18305] BTRFS info (device loop0): using sha256 checksum algorithm [ 1316.164490][T18305] BTRFS info (device loop0): enabling ssd optimizations [ 1316.171536][T18305] BTRFS info (device loop0): turning on async discard [ 1316.178290][T18305] BTRFS info (device loop0): enabling free space tree [ 1316.195719][ T485] bridge_slave_1: left allmulticast mode [ 1316.232446][ T485] bridge_slave_1: left promiscuous mode [ 1316.400618][ T485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.489489][T18327] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1318.085356][ T485] bridge_slave_0: left allmulticast mode [ 1318.321241][T17800] Bluetooth: hci1: command tx timeout [ 1318.381846][ T485] bridge_slave_0: left promiscuous mode [ 1318.387897][ T485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.425350][ T5814] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1319.620648][ T485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1319.661428][ T485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1319.701237][ T485] bond0 (unregistering): Released all slaves [ 1319.917507][T18352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2977'. [ 1319.984648][T18343] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1319.998563][T18343] team0 (unregistering): Port device team_slave_1 removed [ 1320.562354][T17800] Bluetooth: hci1: command tx timeout [ 1321.568076][ T5885] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1321.656995][T18353] loop4: detected capacity change from 0 to 32768 [ 1322.686410][T18353] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2976 (18353) [ 1322.775306][T17800] Bluetooth: hci1: command tx timeout [ 1323.413195][ T5885] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1323.422059][ T5885] usb 1-1: config 0 has no interface number 0 [ 1323.429170][ T5885] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.439793][ T5885] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1323.482031][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.506131][ T5885] usb 1-1: config 0 descriptor?? [ 1323.511910][ T485] hsr_slave_0: left promiscuous mode [ 1323.569550][ T5885] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 1323.610696][ T485] hsr_slave_1: left promiscuous mode [ 1323.653317][ T485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1323.660720][ T485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.707295][ T485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1323.715021][ T485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.795657][ T485] veth1_macvtap: left promiscuous mode [ 1323.801190][ T485] veth0_macvtap: left promiscuous mode [ 1323.847797][ T485] veth1_vlan: left promiscuous mode [ 1323.853110][ T485] veth0_vlan: left promiscuous mode [ 1324.949501][ T30] usb 1-1: USB disconnect, device number 70 [ 1324.998818][T17800] Bluetooth: hci1: command tx timeout [ 1325.160524][ T485] team0 (unregistering): Port device team_slave_1 removed [ 1325.189510][ T485] team0 (unregistering): Port device team_slave_0 removed [ 1326.172979][ T5885] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1328.003450][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 1328.010474][ T5885] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 1328.019619][T18428] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2988'. [ 1328.074089][ T5885] usb 1-1: config 0 has no interface number 0 [ 1328.111006][ T5885] usb 1-1: config 0 interface 167 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 1328.182105][ T5885] usb 1-1: config 0 interface 167 has no altsetting 0 [ 1328.201374][ T5885] usb 1-1: New USB device found, idVendor=07ca, idProduct=b808, bcdDevice=db.cd [ 1328.218558][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.237810][ T5885] usb 1-1: Product: syz [ 1328.267603][ T5885] usb 1-1: Manufacturer: syz [ 1328.283589][ T5885] usb 1-1: SerialNumber: syz [ 1328.390447][ T5885] usb 1-1: config 0 descriptor?? [ 1328.483563][T18425] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1328.697713][T18215] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1328.736561][T18215] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1328.777636][ T5885] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in cold state, will try to load a firmware [ 1328.783607][T18215] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1328.835796][T18215] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1328.839447][ T5885] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1328.905250][ T5885] dib0700: firmware download failed at 7 with -71 [ 1328.951278][T18301] chnl_net:caif_netlink_parms(): no params data found [ 1328.958323][ T5885] usb 1-1: USB disconnect, device number 71 [ 1329.716320][T18469] loop2: detected capacity change from 0 to 512 [ 1329.823920][T18469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1329.838296][T18469] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1329.966928][T17798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.007836][T18448] loop4: detected capacity change from 0 to 32768 [ 1330.057128][T18448] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2994 (18448) [ 1330.167471][T18448] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1330.227367][T18448] BTRFS info (device loop4): using sha256 checksum algorithm [ 1330.405983][T18448] BTRFS info (device loop4): rebuilding free space tree [ 1330.444113][T18448] BTRFS info (device loop4): turning off barriers [ 1330.459098][T18448] BTRFS info (device loop4): turning on sync discard [ 1330.475779][T18448] BTRFS info (device loop4): enabling free space tree [ 1330.493152][T18448] BTRFS info (device loop4): force clearing of disk cache [ 1330.498991][T18301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.509589][T18448] BTRFS info (device loop4): enabling auto defrag [ 1330.519675][T18301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.538634][T18301] bridge_slave_0: entered allmulticast mode [ 1330.546731][T18301] bridge_slave_0: entered promiscuous mode [ 1330.581125][T18301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.588342][T18301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.613613][T18301] bridge_slave_1: entered allmulticast mode [ 1330.636344][T18301] bridge_slave_1: entered promiscuous mode [ 1330.708140][ T5816] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1330.791534][T18301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1330.847257][T18301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.894608][T18215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.041306][T18513] loop3: detected capacity change from 0 to 4096 [ 1331.063078][T18301] team0: Port device team_slave_0 added [ 1331.408088][T18301] team0: Port device team_slave_1 added [ 1331.857627][T18532] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1332.493465][T18301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1332.606692][T18301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.105049][T18543] slcan: can't register candev [ 1333.239953][T18301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1333.252907][T18301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1333.259940][T18301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.292928][T18301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1333.548817][T18538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.556582][T18538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.632048][T14382] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1333.786688][T14382] usb 1-1: device descriptor read/64, error -71 [ 1333.847372][T18538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1333.875420][T18537] loop4: detected capacity change from 0 to 32768 [ 1333.891160][T18538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1333.902688][T18537] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3008 (18537) [ 1333.943178][T18537] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1333.965163][T18537] BTRFS info (device loop4): using blake2b checksum algorithm [ 1334.053794][T14382] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1334.068753][T18537] BTRFS info (device loop4): enabling ssd optimizations [ 1334.076426][T18537] BTRFS info (device loop4): turning on async discard [ 1334.083237][T18537] BTRFS info (device loop4): enabling free space tree [ 1334.091077][T18537] BTRFS info (device loop4): use zstd compression, level 3 [ 1334.142018][T18537] Device name cannot be null; rc = [-22] [ 1334.203756][T14382] usb 1-1: device descriptor read/64, error -71 [ 1334.337187][T14382] usb usb1-port1: attempt power cycle [ 1334.372047][ T5816] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1334.487499][ T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.540713][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.749760][T14382] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1334.792336][T14382] usb 1-1: device descriptor read/8, error -71 [ 1334.973111][ T5946] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1334.984907][ T5923] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1335.092278][T14382] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1335.113567][T14382] usb 1-1: device descriptor read/8, error -71 [ 1335.171504][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.193878][ T5946] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1335.202739][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 1335.216733][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.216977][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.237249][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1335.249463][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1335.250588][ T5946] usb 5-1: config 0 descriptor?? [ 1335.262816][ T5923] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1335.274844][T14382] usb usb1-port1: unable to enumerate USB device [ 1335.287271][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1335.303243][ T485] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1335.323454][ T5923] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1335.335125][ T5923] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1335.346333][ T5923] usb 4-1: Manufacturer: syz [ 1335.363328][ T5923] usb 4-1: config 0 descriptor?? [ 1335.370513][ T485] bond0 (unregistering): Released all slaves [ 1335.384643][ T485] bond1 (unregistering): Released all slaves [ 1335.422961][ T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.459899][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.492814][T18215] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.566595][ T485] tipc: Disabling bearer [ 1335.572928][ T485] tipc: Left network mode [ 1335.610985][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.618191][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.646296][ T485] IPVS: stopping backup sync thread 11044 ... [ 1335.648520][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.660028][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.761749][T18301] hsr_slave_0: entered promiscuous mode [ 1335.766885][ T5923] rc_core: IR keymap rc-hauppauge not found [ 1335.769790][ T5946] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 1335.779318][ T5923] Registered IR keymap rc-empty [ 1335.794213][T18301] hsr_slave_1: entered promiscuous mode [ 1335.808735][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1335.818862][T18301] debugfs: 'hsr0' already exists in 'hsr' [ 1335.825124][ T5946] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0020/input/input57 [ 1335.847727][T18301] Cannot create hsr debugfs directory [ 1335.875078][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1335.926790][ T5923] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1335.944714][ T5923] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input56 [ 1336.054892][ T5946] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1336.079451][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1336.136801][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1336.194622][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1336.215456][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1336.246095][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1336.289630][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1336.297980][ T485] hsr_slave_0: left promiscuous mode [ 1336.304597][ T485] hsr_slave_1: left promiscuous mode [ 1336.322608][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1336.349514][ T5885] usb 5-1: USB disconnect, device number 96 [ 1336.374794][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1336.395897][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1336.429736][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1336.466965][ T5923] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1336.478818][ T5923] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1336.498581][ T5923] usb 4-1: USB disconnect, device number 25 [ 1336.722918][ T485] veth1_to_team (unregistering): left allmulticast mode [ 1336.984492][ T485] team0 (unregistering): Port device dummy0 removed [ 1337.782113][T18624] loop4: detected capacity change from 0 to 1024 [ 1337.797085][T18624] EXT4-fs: Ignoring removed i_version option [ 1337.814036][T18624] EXT4-fs: inline encryption not supported [ 1337.876228][T18629] loop0: detected capacity change from 0 to 128 [ 1337.928172][T18624] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1337.988507][ T5923] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1338.161926][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 1338.181609][T18624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1338.289863][ T5923] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1338.429719][ T5923] usb 3-1: config 0 has no interface number 0 [ 1338.617795][ T5923] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1338.801183][ T5923] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1338.929431][ T5923] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1338.985315][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.020897][ T5923] usb 3-1: Product: syz [ 1340.087183][ T5923] usb 3-1: Manufacturer: syz [ 1340.091823][ T5923] usb 3-1: SerialNumber: syz [ 1340.384909][T18648] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 1341.912878][ T5923] usb 3-1: config 0 descriptor?? [ 1342.054275][ T5923] usb 3-1: can't set config #0, error -71 [ 1342.089775][ T5923] usb 3-1: USB disconnect, device number 51 [ 1342.612004][ T5816] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1342.638977][ T5816] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1342.732089][T15145] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.863486][ T5906] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1342.875066][T15145] bond0: (slave syz_tun): Releasing backup interface [ 1342.979580][T18653] loop0: detected capacity change from 0 to 32768 [ 1343.039861][ T5906] usb 3-1: device descriptor read/64, error -71 [ 1343.041863][T18653] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3022 (18653) [ 1343.146861][T18653] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1343.186517][T18653] BTRFS info (device loop0): using crc32c checksum algorithm [ 1343.232232][T18215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.318086][T18653] BTRFS info (device loop0): enabling ssd optimizations [ 1343.335983][T18653] BTRFS info (device loop0): turning on async discard [ 1343.342811][T18653] BTRFS info (device loop0): enabling free space tree [ 1343.357697][ T5906] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1343.515544][ T5906] usb 3-1: device descriptor read/64, error -71 [ 1343.635058][ T5906] usb usb3-port1: attempt power cycle [ 1343.701340][T18653] BTRFS info (device loop0): scrub: started on devid 1 [ 1343.731010][T18653] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 1344.039523][ T5906] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1344.102601][ T5906] usb 3-1: device descriptor read/8, error -71 [ 1344.133712][ T5814] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1344.241715][T18301] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1344.271416][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1344.292857][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1344.318722][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1344.328961][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1344.342601][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1344.360647][T18301] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1344.372634][ T5906] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1344.414792][ T5906] usb 3-1: device descriptor read/8, error -71 [ 1344.477726][ T9584] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1344.525223][T18301] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1344.544558][ T5906] usb usb3-port1: unable to enumerate USB device [ 1344.610242][T18301] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1344.660463][ T9584] usb 4-1: Using ep0 maxpacket: 16 [ 1344.667687][ T9584] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.689361][ T9584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1344.735661][ T9584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1344.787924][ T9584] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1344.809289][ T9584] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1344.843095][ T9584] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1344.870205][ T9584] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1344.884894][ T9584] usb 4-1: Manufacturer: syz [ 1344.901106][T18215] veth0_vlan: entered promiscuous mode [ 1344.913779][ T9584] usb 4-1: config 0 descriptor?? [ 1345.442424][T18215] veth1_vlan: entered promiscuous mode [ 1345.557854][ T9584] rc_core: IR keymap rc-hauppauge not found [ 1345.563802][ T9584] Registered IR keymap rc-empty [ 1345.574732][ T9584] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1345.600853][ T9584] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1345.624239][ T9584] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1345.677732][ T9584] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input58 [ 1345.726865][ T9584] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1345.771474][ T9584] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1345.789519][ T485] bridge_slave_1: left allmulticast mode [ 1345.803445][ T9584] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1345.815848][ T485] bridge_slave_1: left promiscuous mode [ 1345.825450][ T9584] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1345.846236][ T9584] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1345.850961][ T485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.867975][ T9584] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1345.890360][ T9584] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1345.921608][ T9584] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1345.932418][ T485] bridge_slave_0: left allmulticast mode [ 1345.951798][ T485] bridge_slave_0: left promiscuous mode [ 1345.953623][ T9584] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1345.965589][ T485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.833023][T17800] Bluetooth: hci2: command tx timeout [ 1347.888995][ T9584] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1348.447614][ T9584] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1348.474214][ T9584] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1348.524434][ T9584] usb 4-1: USB disconnect, device number 26 [ 1349.136666][T18743] loop2: detected capacity change from 0 to 32768 [ 1349.148109][ T9584] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1349.217124][T18743] JBD2: Ignoring recovery information on journal [ 1349.325833][T18743] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1349.354858][ T9584] usb 4-1: Using ep0 maxpacket: 16 [ 1349.424769][ T9584] usb 4-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 1349.480757][ T31] audit: type=1800 audit(2000000390.688:106): pid=18751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3034" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1349.501738][ T9584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.509735][ T9584] usb 4-1: Product: syz [ 1349.536759][ T485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.551380][ T9584] usb 4-1: Manufacturer: syz [ 1349.567997][ T485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.583165][ T9584] usb 4-1: SerialNumber: syz [ 1349.593768][ T9584] usb 4-1: config 0 descriptor?? [ 1349.599933][ T485] bond0 (unregistering): Released all slaves [ 1349.614292][ T9584] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 1349.805939][T18215] veth0_macvtap: entered promiscuous mode [ 1349.852527][ T485] tipc: Left network mode [ 1349.917525][T18215] veth1_macvtap: entered promiscuous mode [ 1350.057689][T17800] Bluetooth: hci2: command tx timeout [ 1350.201357][T17798] ocfs2: Unmounting device (7,2) on (node local) [ 1350.208878][T18747] bond0: (slave syz_tun): Releasing backup interface [ 1350.518890][T18704] chnl_net:caif_netlink_parms(): no params data found [ 1350.639113][T18215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1350.832180][T18215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1350.929322][ T5885] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1350.950902][ T485] hsr_slave_0: left promiscuous mode [ 1350.965774][ T485] hsr_slave_1: left promiscuous mode [ 1350.981385][ T485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.012247][ T485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.025699][T18772] loop2: detected capacity change from 0 to 512 [ 1351.065549][T18772] EXT4-fs: Ignoring removed nobh option [ 1351.115976][T18772] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1351.140100][ T5885] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.181365][ T5885] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1351.194275][ T5885] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1351.203746][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1351.212139][ T5885] usb 1-1: SerialNumber: syz [ 1351.234272][T18772] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1351.277851][T18772] EXT4-fs (loop2): 1 truncate cleaned up [ 1351.335220][T18772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1351.488893][T17798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.524879][ T5885] usb 1-1: 0:2 : does not exist [ 1351.697261][ T5885] usb 1-1: USB disconnect, device number 76 [ 1351.772850][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1351.783116][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1351.799147][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1351.827811][ T485] team0 (unregistering): Port device team_slave_1 removed [ 1351.858265][ T485] team0 (unregistering): Port device team_slave_0 removed [ 1352.082271][ T485] team0 (unregistering): Port device dummy0 removed [ 1352.208738][T18301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.238127][T17390] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.270943][T17390] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.288892][T17800] Bluetooth: hci2: command tx timeout [ 1352.392435][ T8847] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.416132][ T8847] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.577716][T18704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.607603][T18704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.624577][T18704] bridge_slave_0: entered allmulticast mode [ 1352.644198][T18704] bridge_slave_0: entered promiscuous mode [ 1352.669817][T18704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.687632][T18704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.700952][T18704] bridge_slave_1: entered allmulticast mode [ 1352.804610][ T9584] pwc: send_video_command error -71 [ 1352.810190][ T9584] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1352.818307][T18704] bridge_slave_1: entered promiscuous mode [ 1352.836180][ T9584] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1352.890229][ T9584] usb 4-1: USB disconnect, device number 27 [ 1352.980746][T18301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.031818][T18704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1353.097546][T18704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.119488][T18808] loop0: detected capacity change from 0 to 1024 [ 1353.163761][T17394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.170968][T17394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.792813][T17800] Bluetooth: hci2: command tx timeout [ 1354.859212][T18808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1354.876459][T18808] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.024276][ T8847] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 112: padding at end of block bitmap is not set [ 1355.063295][ T8847] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 1355.079092][T17394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.086274][T17394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.114559][ T8847] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1355.114559][ T8847] [ 1355.161510][ T8847] EXT4-fs (loop0): Total free blocks count 0 [ 1355.174674][ T485] IPVS: stop unused estimator thread 0... [ 1355.178666][ T8847] EXT4-fs (loop0): Free/Dirty block details [ 1355.186318][ T8847] EXT4-fs (loop0): free_blocks=0 [ 1355.201396][ T8847] EXT4-fs (loop0): dirty_blocks=16 [ 1355.213836][ T8847] EXT4-fs (loop0): Block reservation details [ 1355.217997][T18704] team0: Port device team_slave_0 added [ 1355.241534][ T8847] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1355.245487][T18704] team0: Port device team_slave_1 added [ 1355.286986][ T5814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1355.342549][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.372893][T18797] loop2: detected capacity change from 0 to 32768 [ 1355.380823][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.481616][T18797] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1355.517050][T18704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1355.561177][T18704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.671643][T18704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1355.694852][T18797] XFS (loop2): Ending clean mount [ 1355.714234][T18704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1355.722308][T18797] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1355.745523][T18704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.798412][T18704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1355.838352][ T485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.847746][ T485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.136967][T18704] hsr_slave_0: entered promiscuous mode [ 1356.158258][T18704] hsr_slave_1: entered promiscuous mode [ 1356.179687][T18704] debugfs: 'hsr0' already exists in 'hsr' [ 1356.193957][T18704] Cannot create hsr debugfs directory [ 1356.483076][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1356.824706][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1356.851878][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.879234][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1356.924211][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1356.957696][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1356.991974][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1357.074612][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1357.107263][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1357.138357][ T10] usb 4-1: Manufacturer: syz [ 1357.528939][ T9584] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1357.780992][ T10] usb 4-1: config 0 descriptor?? [ 1357.843209][ T9584] usb 3-1: not running at top speed; connect to a high speed hub [ 1358.038003][ T9584] usb 3-1: config 1 has an invalid interface number: 191 but max is 0 [ 1358.161999][ T9584] usb 3-1: config 1 has no interface number 0 [ 1358.168129][ T9584] usb 3-1: config 1 interface 191 has no altsetting 0 [ 1358.221139][ T9584] usb 3-1: New USB device found, idVendor=2040, idProduct=651f, bcdDevice=5b.dd [ 1358.270814][ T9584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.321771][ T9584] usb 3-1: Product: syz [ 1358.325976][ T9584] usb 3-1: Manufacturer: syz [ 1358.352488][ T9584] usb 3-1: SerialNumber: syz [ 1358.357514][ T10] rc_core: IR keymap rc-hauppauge not found [ 1358.374340][ T10] Registered IR keymap rc-empty [ 1358.385256][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1358.439090][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1358.479242][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1358.535558][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input59 [ 1358.647942][T18301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1359.589532][ T9584] usb 3-1: bad CDC descriptors [ 1359.601216][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1359.679200][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1359.687736][ T9584] usb 3-1: USB disconnect, device number 56 [ 1359.728874][T18883] loop8: detected capacity change from 0 to 2048 [ 1359.735915][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1359.796727][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1361.038551][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1361.050272][T18883] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1361.079881][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1361.103963][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1361.131342][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1361.153752][T18890] loop3: detected capacity change from 0 to 1024 [ 1361.154478][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1361.187880][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1361.219818][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1361.230118][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1361.292203][T18890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.364170][ T10] usb 4-1: USB disconnect, device number 28 [ 1361.404190][T18890] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.448250][T18895] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1361.628890][ T149] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 1361.684526][ T149] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1361.710546][T18901] syz_tun: entered allmulticast mode [ 1361.716005][ T149] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1361.716005][ T149] [ 1361.724129][T16790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1363.814756][T18301] veth0_vlan: entered promiscuous mode [ 1363.856104][T18301] veth1_vlan: entered promiscuous mode [ 1364.019513][ T9584] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1364.201314][ T9584] usb 3-1: Using ep0 maxpacket: 8 [ 1364.241677][ T9584] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1364.330943][ T9584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.398181][T18301] veth0_macvtap: entered promiscuous mode [ 1364.475264][ T9584] usb 3-1: Product: syz [ 1364.653216][ T9584] usb 3-1: Manufacturer: syz [ 1364.751971][T18301] veth1_macvtap: entered promiscuous mode [ 1364.758532][ T9584] usb 3-1: SerialNumber: syz [ 1364.792654][ T9584] usb 3-1: config 0 descriptor?? [ 1364.891326][ T9584] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1364.957983][T18301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.054032][T18301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.131843][T18915] loop3: detected capacity change from 0 to 32768 [ 1365.205410][T14507] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.231740][T14507] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.239896][T18915] JBD2: Ignoring recovery information on journal [ 1365.279021][T14507] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.304996][T14507] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.378497][T18704] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1365.570694][T18915] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1366.062832][ T9584] gspca_sq930x: ucbus_write failed -71 [ 1366.085397][T18704] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1366.133358][T18704] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1366.187511][T18704] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1366.202744][T16790] ocfs2: Unmounting device (7,3) on (node local) [ 1366.317922][ T9584] gspca_sq930x: Sensor ov9630 not yet treated [ 1366.324103][ T9584] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 1366.410678][ T9584] usb 3-1: USB disconnect, device number 57 [ 1367.771991][ T8847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.782636][T14382] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1367.803952][ T8847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.943317][ T8847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.951170][ T8847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.964558][T14382] usb 1-1: Using ep0 maxpacket: 16 [ 1367.981797][T14382] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.012939][T18704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.019820][T14382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1368.046844][T14382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1368.064731][T14382] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1368.093046][T14382] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1368.108620][T14382] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1368.119864][T14382] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1368.127005][T18704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.128894][T14382] usb 1-1: Manufacturer: syz [ 1368.175500][T14382] usb 1-1: config 0 descriptor?? [ 1368.184669][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.191861][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.254696][ T485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.261865][ T485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.339459][ T5946] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1369.461195][T14382] rc_core: IR keymap rc-hauppauge not found [ 1369.472885][ T5946] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.493071][T14382] Registered IR keymap rc-empty [ 1369.498080][ T5946] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1369.508136][T14382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1369.530460][ T5946] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1369.554574][T14382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1369.563210][T18704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.597902][ T5946] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1369.616510][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.626092][T14382] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1369.690319][T14382] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input60 [ 1369.723841][ T5946] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1369.780396][T14382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1369.845913][T14382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1369.901217][T14382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1370.024602][T14382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1370.174043][T14382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1370.383918][T14382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1370.472898][ T5946] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1370.513471][T14382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1370.554713][ T5946] usb 4-1: USB disconnect, device number 29 [ 1370.589087][T14382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1370.651138][T19002] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1370.661153][T14382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1370.679454][T19002] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1370.700402][T14382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1370.718388][T19002] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1370.730014][T14382] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1370.751319][T14382] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1370.760582][T19002] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1370.801033][T19002] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1370.836197][T14382] usb 1-1: USB disconnect, device number 77 [ 1370.885124][T19002] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1370.938249][T19002] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1370.977820][T19002] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1371.045370][T19002] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1371.051503][T19002] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1371.081941][T19002] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1371.136157][T18704] veth0_vlan: entered promiscuous mode [ 1371.173042][T19002] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1371.179072][T19002] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1371.195260][T18704] veth1_vlan: entered promiscuous mode [ 1371.235265][T18704] veth0_macvtap: entered promiscuous mode [ 1371.261792][T18704] veth1_macvtap: entered promiscuous mode [ 1371.308306][T19002] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1371.335044][T18704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1371.383410][T18704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.422313][T10999] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.462479][T10999] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.496173][T10999] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.528263][T10999] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.615971][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1371.826552][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1371.979625][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1372.222426][ T10] usb 3-1: config 0 has no interface number 0 [ 1372.284780][ T10] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1372.330648][ T10] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1372.357733][ T10] usb 3-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 1372.387176][T17394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.402796][T18997] loop8: detected capacity change from 0 to 40427 [ 1372.417069][T17394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.418858][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.471626][T19006] loop7: detected capacity change from 0 to 32768 [ 1372.480125][ T10] usb 3-1: Product: syz [ 1372.484296][ T10] usb 3-1: Manufacturer: syz [ 1372.494855][ T10] usb 3-1: SerialNumber: syz [ 1372.512093][T18997] F2FS-fs (loop8): Image doesn't support compression [ 1372.541735][T18997] F2FS-fs (loop8): build fault injection rate: 684 [ 1372.573638][T18997] F2FS-fs (loop8): build fault injection type: 0x35f7 [ 1372.582156][ T10] usb 3-1: config 0 descriptor?? [ 1372.599413][T18997] F2FS-fs (loop8): invalid crc value [ 1372.599480][ T8847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.666597][ T8847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.693747][T19006] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1372.871883][T17800] Bluetooth: hci5: command 0x0406 tx timeout [ 1372.896539][T17800] Bluetooth: hci6: command 0x0c1a tx timeout [ 1374.444249][T17800] Bluetooth: hci4: command 0x0c1a tx timeout [ 1374.450400][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1374.450510][T17800] Bluetooth: hci2: command 0x0c1a tx timeout [ 1374.754475][ T10] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a2) with 1 interfaces [ 1374.764188][ T10] cx231xx 3-1:0.1: Failed to read PCB config [ 1374.774515][ T10] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 1374.802975][ T10] usb 3-1: USB disconnect, device number 58 [ 1374.875928][T19006] XFS (loop7): Ending clean mount [ 1374.893648][T19006] XFS (loop7): Quotacheck needed: Please wait. [ 1374.960247][T18997] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1374.993412][T18997] F2FS-fs (loop8): Start checkpoint disabled! [ 1375.066193][T18997] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 1375.116843][T19050] Bluetooth: hci6: command 0x0c1a tx timeout [ 1375.116891][T10522] Bluetooth: hci5: command 0x0406 tx timeout [ 1375.168472][T19006] XFS (loop7): Quotacheck: Done. [ 1375.328770][T18301] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1375.354832][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1375.490594][ T9584] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1375.536184][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1375.564711][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1375.579672][ T10] usb 3-1: config 0 has no interface number 0 [ 1375.633831][ T10] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1375.685317][ T10] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1375.715642][ T9584] usb 1-1: Using ep0 maxpacket: 16 [ 1375.723236][ T10] usb 3-1: string descriptor 0 read error: -71 [ 1375.742302][ T9584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.763736][ T10] usb 3-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 1375.792205][ T9584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1375.819135][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.837650][ T9584] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1375.863118][ T10] usb 3-1: config 0 descriptor?? [ 1375.875138][ T9584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.892572][ T10] usb 3-1: can't set config #0, error -71 [ 1375.921287][ T10] usb 3-1: USB disconnect, device number 59 [ 1375.930468][ T9584] usb 1-1: config 0 descriptor?? [ 1376.410449][ T9584] hid-multitouch 0003:1FD2:6007.0021: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 1376.422506][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1376.622370][ T5923] usb 1-1: USB disconnect, device number 78 [ 1376.633268][ T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.652708][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1376.656797][T10522] Bluetooth: hci1: command 0x0c1a tx timeout [ 1376.665781][T19050] Bluetooth: hci4: command 0x0c1a tx timeout [ 1376.668721][T10522] Bluetooth: hci2: command 0x0c1a tx timeout [ 1376.680135][ T10] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1376.758580][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1376.770167][ T9584] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1376.796993][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.823957][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1376.961426][ T9584] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.984758][ T9584] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1377.000637][ T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1377.023152][ T9584] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1377.079511][ T9584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1377.348001][T10522] Bluetooth: hci6: command 0x0c1a tx timeout [ 1377.594895][ T9584] usb 6-1: SerialNumber: syz [ 1377.621544][T19102] netlink: 'syz.7.3088': attribute type 3 has an invalid length. [ 1377.629357][T19102] netlink: 'syz.7.3088': attribute type 3 has an invalid length. [ 1377.637089][T19102] netlink: 'syz.7.3088': attribute type 3 has an invalid length. [ 1377.644887][T19102] netlink: 'syz.7.3088': attribute type 3 has an invalid length. [ 1377.652726][T19102] netlink: 'syz.7.3088': attribute type 3 has an invalid length. [ 1377.660487][T19102] netlink: 'syz.7.3088': attribute type 3 has an invalid length. [ 1377.668270][T19102] netlink: 'syz.7.3088': attribute type 3 has an invalid length. [ 1377.677838][T19102] netlink: 'syz.7.3088': attribute type 3 has an invalid length. [ 1377.685658][T19102] netlink: 'syz.7.3088': attribute type 3 has an invalid length. [ 1377.693480][T19102] netlink: 'syz.7.3088': attribute type 3 has an invalid length. [ 1377.726082][T14382] usb 3-1: USB disconnect, device number 60 [ 1377.968680][ T9584] usb 6-1: 0:2 : does not exist [ 1378.603503][ T9584] usb 6-1: USB disconnect, device number 7 [ 1378.727351][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1378.879692][T10522] Bluetooth: hci2: command 0x0c1a tx timeout [ 1378.879985][T19050] Bluetooth: hci4: command 0x0c1a tx timeout [ 1378.886280][T10522] Bluetooth: hci1: command 0x0c1a tx timeout [ 1380.563572][T19123] loop2: detected capacity change from 0 to 262144 [ 1380.590307][T19123] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3093 (19123) [ 1380.665084][T19123] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 1380.675227][T19123] BTRFS info (device loop2): using xxhash64 checksum algorithm [ 1380.942570][T19123] BTRFS info (device loop2): deleted orphan free space tree entries [ 1380.955462][T19123] BTRFS info (device loop2): checking UUID tree [ 1380.955757][T19146] fuse: Unknown parameter 'grou00000000000000000000' [ 1380.976591][T19123] BTRFS info (device loop2): setting nodatasum [ 1380.982797][T19123] BTRFS info (device loop2): enabling free space tree [ 1381.006969][ T31] audit: type=1800 audit(2000000420.181:107): pid=19123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3093" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1381.120124][T17798] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 1383.596619][T19173] loop0: detected capacity change from 0 to 512 [ 1383.635862][ T9584] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1383.698398][T19173] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3103: bg 0: block 255: padding at end of block bitmap is not set [ 1383.713099][T19173] loop0: lost filesystem error report for type 5 error -117 [ 1383.722213][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1383.736037][ C0] EXT4-fs (loop0): initial error at time 2000000422: ext4_validate_block_bitmap:441 [ 1383.745458][ C0] EXT4-fs (loop0): last error at time 2000000422: ext4_validate_block_bitmap:441 [ 1383.755455][T19173] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 1383.764145][T19173] loop0: lost filesystem error report for type 5 error -117 [ 1383.789707][T19173] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3103: invalid indirect mapped block 1 (level 1) [ 1383.852636][T19173] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1383.858045][T19173] EXT4-fs (loop0): 1 truncate cleaned up [ 1384.056264][T19173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1384.073988][ T9584] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1384.084716][ T9584] usb 4-1: not running at top speed; connect to a high speed hub [ 1384.160782][ T9584] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 4 [ 1384.621997][ T9584] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1384.641627][ T9584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.649852][ T9584] usb 4-1: Product: syz [ 1384.858956][ T9584] usb 4-1: Manufacturer: syz [ 1384.871631][ T9584] usb 4-1: SerialNumber: syz [ 1385.542927][ T9584] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1385.553729][ T9584] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1385.651456][ T5814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.778269][T19190] loop7: detected capacity change from 0 to 128 [ 1385.856636][ T9584] usb 4-1: USB disconnect, device number 30 [ 1385.903232][T19194] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3108'. [ 1385.913352][T19190] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3108'. [ 1386.234072][T10999] kworker/u8:19: attempt to access beyond end of device [ 1386.234072][T10999] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1386.265203][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1386.742006][T19202] loop3: detected capacity change from 0 to 32768 [ 1386.750034][T19202] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3112 (19202) [ 1386.768206][T19202] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1386.778318][T19202] BTRFS info (device loop3): using sha256 checksum algorithm [ 1386.804135][T19205] fuse: Unknown parameter 'grou00000000000000000000' [ 1387.044788][T19202] BTRFS info (device loop3): enabling ssd optimizations [ 1387.057326][T19202] BTRFS info (device loop3): turning on async discard [ 1387.064971][T19202] BTRFS info (device loop3): enabling free space tree [ 1387.233227][ T485] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 1387.698139][T16790] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1389.349324][T19239] loop5: detected capacity change from 0 to 7 [ 1389.421434][T19239] Dev loop5: unable to read RDB block 7 [ 1389.455580][T19239] loop5: unable to read partition table [ 1389.497279][T19239] loop5: partition table beyond EOD, truncated [ 1389.526726][T19239] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1393.794445][T19275] fuse: Unknown parameter 'grou00000000000000000000' [ 1395.799214][T19299] No buffer was provided with the request [ 1399.408179][T19316] loop0: detected capacity change from 0 to 32768 [ 1399.443228][T19316] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3137 (19316) [ 1399.496983][T19316] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1399.518481][T19316] BTRFS info (device loop0): using sha256 checksum algorithm [ 1399.526160][ T9442] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1399.721874][ T9442] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.722131][T19316] BTRFS info (device loop0): enabling ssd optimizations [ 1399.794005][T19316] BTRFS info (device loop0): turning on async discard [ 1399.800803][T19316] BTRFS info (device loop0): enabling free space tree [ 1399.854738][ T9442] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1399.913564][ T9442] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1399.958672][ T9442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1399.993423][ T9442] usb 6-1: SerialNumber: syz [ 1400.337974][ T9442] usb 6-1: 0:2 : does not exist [ 1400.431829][T14382] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1400.591010][ T9442] usb 6-1: USB disconnect, device number 8 [ 1400.708714][T14507] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 1400.767661][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1401.198211][T19362] loop3: detected capacity change from 0 to 32768 [ 1401.304998][T19362] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3144 (19362) [ 1401.422323][ T5814] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1401.500157][T19362] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1401.609575][T19362] BTRFS info (device loop3): using crc32c checksum algorithm [ 1402.429814][T19362] BTRFS info (device loop3): enabling ssd optimizations [ 1402.488544][T19362] BTRFS info (device loop3): turning on async discard [ 1402.522374][T19407] fuse: Bad value for 'fd' [ 1402.525008][T19362] BTRFS info (device loop3): enabling free space tree [ 1402.887008][T16790] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1403.888157][T19425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3153'. [ 1404.523248][T19436] loop5: detected capacity change from 0 to 128 [ 1405.690694][T19439] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3157'. [ 1405.703011][T19436] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3157'. [ 1406.079742][T17390] kworker/u8:15: attempt to access beyond end of device [ 1406.079742][T17390] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1410.323815][T19482] fuse: Bad value for 'fd' [ 1411.106460][T19494] loop2: detected capacity change from 0 to 512 [ 1411.327278][T19498] loop3: detected capacity change from 0 to 256 [ 1411.865008][T19494] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.3171: corrupted in-inode xattr: e_value out of bounds [ 1412.074091][T19494] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1412.074629][T19494] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3171: couldn't read orphan inode 15 (err -117) [ 1412.095678][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1412.095701][ C0] EXT4-fs (loop2): initial error at time 2000000449: ext4_iget_extra_inode:5025: inode 15 [ 1412.095730][ C0] EXT4-fs (loop2): last error at time 2000000449: ext4_iget_extra_inode:5025: inode 15 [ 1412.288711][T19494] loop2: lost filesystem error report for type 5 error -117 [ 1412.391164][T19479] loop7: detected capacity change from 0 to 32768 [ 1412.428182][T19494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1412.460194][T19479] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3165 (19479) [ 1412.528919][T19479] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1412.701246][T19479] BTRFS info (device loop7): using crc32c checksum algorithm [ 1412.779398][ T30] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1412.924491][T19512] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1413.432125][T19479] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1413.432602][T19479] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1413.463973][T19479] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1413.543406][T19479] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1413.563481][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 1413.588644][T17798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1413.609175][T19479] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1413.609466][T19479] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1413.847055][ T30] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1413.935649][T19524] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3173'. [ 1414.531471][ T30] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 50128, setting to 1024 [ 1414.571212][T19479] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1414.575556][T19479] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1414.601849][ T30] usb 4-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1414.642222][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.650954][T19479] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1414.651261][T19479] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1414.683376][T19479] BTRFS error (device loop7): open_ctree failed: -12 [ 1414.718642][ T30] usb 4-1: Product: syz [ 1414.735952][ T30] usb 4-1: Manufacturer: syz [ 1414.744259][ T30] usb 4-1: SerialNumber: syz [ 1415.055789][ T30] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1415.099644][ T30] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1415.391521][ T30] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1415.460073][ T30] usb 4-1: USB disconnect, device number 31 [ 1415.756041][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1417.783950][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.793307][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1420.383842][T19580] loop8: detected capacity change from 0 to 512 [ 1420.907576][T19580] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.3186: corrupted in-inode xattr: e_value out of bounds [ 1421.086026][T19580] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1421.096611][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1421.112314][ C1] EXT4-fs (loop8): initial error at time 2000000457: ext4_iget_extra_inode:5025: inode 15 [ 1421.122242][ C1] EXT4-fs (loop8): last error at time 2000000457: ext4_iget_extra_inode:5025: inode 15 [ 1421.133564][ T30] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1421.200670][T19580] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3186: couldn't read orphan inode 15 (err -117) [ 1421.440075][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 1421.441714][T19580] loop8: lost filesystem error report for type 5 error -117 [ 1421.507423][T19580] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.570804][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.603245][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.802301][ T30] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1421.811388][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.827789][ T30] usb 3-1: config 0 descriptor?? [ 1421.924792][T19609] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1422.546957][T18215] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.719942][ T30] corsair 0003:1B1C:1B02.0022: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1422.732494][ T5923] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1422.754156][ T9584] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1422.875068][ T30] corsair 0003:1B1C:1B02.0022: Failed to get K90 initial state (error -71). [ 1422.926579][ T5923] usb 6-1: device descriptor read/64, error -71 [ 1422.945739][ T30] usb 3-1: USB disconnect, device number 61 [ 1422.956839][ T9584] usb 4-1: Using ep0 maxpacket: 32 [ 1422.993311][ T9584] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1423.016044][ T9584] usb 4-1: config 0 has no interface number 0 [ 1423.030171][T19619] fido_id[19619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1423.060302][ T9584] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1423.152094][ T9584] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1423.186795][ T9584] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1423.213433][ T9584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.248828][ T9584] usb 4-1: Product: syz [ 1423.257767][ T5923] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1423.271070][ T9584] usb 4-1: Manufacturer: syz [ 1423.291059][ T9584] usb 4-1: SerialNumber: syz [ 1423.314699][ T9584] usb 4-1: config 0 descriptor?? [ 1423.427633][ T5923] usb 6-1: device descriptor read/64, error -71 [ 1423.568036][ T5923] usb usb6-port1: attempt power cycle [ 1423.599824][ T9584] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1423.641630][ T9584] cx231xx 4-1:0.1: Failed to read PCB config [ 1423.661863][ T9584] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1423.891896][ T9584] usb 4-1: USB disconnect, device number 32 [ 1424.661697][ T5923] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1424.711381][ T5923] usb 6-1: device descriptor read/8, error -71 [ 1425.095601][ T5923] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1425.192031][ T5923] usb 6-1: device descriptor read/8, error -71 [ 1425.201923][ T9584] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1425.331261][ T5923] usb usb6-port1: unable to enumerate USB device [ 1425.408386][ T9584] usb 4-1: Using ep0 maxpacket: 32 [ 1425.444236][ T9584] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1425.464412][ T9584] usb 4-1: config 0 has no interface number 0 [ 1425.491827][ T9584] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1425.523766][ T9584] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1425.541697][ T9584] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1425.559246][ T9584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.576084][ T9584] usb 4-1: Product: syz [ 1425.580592][ T9584] usb 4-1: Manufacturer: syz [ 1425.598624][ T9584] usb 4-1: SerialNumber: syz [ 1425.636972][ T9584] usb 4-1: config 0 descriptor?? [ 1425.902310][ T9584] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1425.912782][T19671] loop5: detected capacity change from 0 to 256 [ 1425.947725][ T9584] cx231xx 4-1:0.1: Failed to read PCB config [ 1425.990280][ T9584] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1426.013770][T19671] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 1426.069225][ T9584] usb 4-1: USB disconnect, device number 33 [ 1426.410128][T19676] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 1431.578020][T19726] loop0: detected capacity change from 0 to 128 [ 1431.606222][ T5923] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1431.630602][T19726] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1431.716414][T19726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1431.734765][ T30] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1431.787419][ T5923] usb 4-1: device descriptor read/64, error -71 [ 1431.915561][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 1431.933627][ T30] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 1431.966981][ T30] usb 6-1: config 0 has no interface number 0 [ 1431.973585][ T30] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1431.996099][ T30] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1432.019163][ T30] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1432.042326][ T30] usb 6-1: config 0 interface 196 has no altsetting 0 [ 1432.052081][ T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1432.065381][ T5923] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1432.079449][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.116729][ T30] usb 6-1: Product: syz [ 1432.140885][ T30] usb 6-1: Manufacturer: syz [ 1432.145544][ T30] usb 6-1: SerialNumber: syz [ 1432.205808][ T30] usb 6-1: config 0 descriptor?? [ 1432.212883][T19723] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1432.247162][ T5923] usb 4-1: device descriptor read/64, error -71 [ 1432.305560][T19735] ------------[ cut here ]------------ [ 1432.311151][T19735] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 1432.311169][T19735] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#1: syz.2.3224/19735 [ 1432.330430][T19735] Modules linked in: [ 1432.334975][T19735] CPU: 1 UID: 0 PID: 19735 Comm: syz.2.3224 Tainted: G L syzkaller #0 PREEMPT(full) [ 1432.346161][T19735] Tainted: [L]=SOFTLOCKUP [ 1432.347019][T10522] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1432.350513][T19735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1432.367158][T19735] RIP: 0010:path_noexec+0x1af/0x200 [ 1432.373425][T19735] Code: 02 31 ff 48 89 de e8 40 b7 81 ff d1 eb eb 07 e8 57 b2 81 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 83 67 cc fe cc e8 42 b2 81 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 1432.393598][T19735] RSP: 0018:ffffc90005a8fbd8 EFLAGS: 00010287 [ 1432.399783][T19735] RAX: ffffffff8243d98e RBX: ffff888026406780 RCX: 0000000000080000 [ 1432.399932][ T5923] usb usb4-port1: attempt power cycle [ 1432.407856][T19735] RDX: ffffc9001d995000 RSI: 0000000000000068 RDI: 0000000000000069 [ 1432.422466][T19735] RBP: 0000000000080000 R08: ffff88806c025ac0 R09: 0000000000000003 [ 1432.430603][T19735] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 1432.438589][T19735] R13: 1ffff92000b51f90 R14: 0000000000000000 R15: dffffc0000000000 [ 1432.446693][T19735] FS: 00007fee960746c0(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 1432.455842][T19735] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1432.462569][T19735] CR2: 000000110c2a592a CR3: 000000005002c000 CR4: 0000000000350ef0 [ 1432.470605][T19735] Call Trace: [ 1432.473961][T19735] [ 1432.476909][T19735] do_mmap+0xa32/0x10c0 [ 1432.481107][T19735] ? __pfx_do_mmap+0x10/0x10 [ 1432.485838][T19735] ? down_write_killable+0x180/0x240 [ 1432.491305][T19735] ? __pfx_down_write_killable+0x10/0x10 [ 1432.497001][T19735] ? apparmor_mmap_file+0x2da/0x3e0 [ 1432.502219][T19735] vm_mmap_pgoff+0x2c9/0x4f0 [ 1432.507251][T19735] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1432.512478][T19735] ? __fget_files+0x2a/0x420 [ 1432.517145][T19735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1432.523056][T19735] ? __fget_files+0x3a0/0x420 [ 1432.527836][T19735] ? __fget_files+0x2a/0x420 [ 1432.532460][T19735] ksys_mmap_pgoff+0x51e/0x760 [ 1432.537309][T19735] do_syscall_64+0x14d/0xf80 [ 1432.541906][T19735] ? trace_irq_disable+0x3b/0x150 [ 1432.547067][T19735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.553157][T19735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.559126][T19735] RIP: 0033:0x7fee9519c799 [ 1432.563552][T19735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1432.583272][T19735] RSP: 002b:00007fee96074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1432.591763][T19735] RAX: ffffffffffffffda RBX: 00007fee95415fa0 RCX: 00007fee9519c799 [ 1432.599973][T19735] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 1432.608000][T19735] RBP: 00007fee95232bd9 R08: 0000000000000005 R09: 0000000000000000 [ 1432.616037][T19735] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1432.624056][T19735] R13: 00007fee95416038 R14: 00007fee95415fa0 R15: 00007ffee57e8938 [ 1432.632402][T19735] [ 1432.635430][T19735] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1432.642696][T19735] CPU: 1 UID: 0 PID: 19735 Comm: syz.2.3224 Tainted: G L syzkaller #0 PREEMPT(full) [ 1432.653623][T19735] Tainted: [L]=SOFTLOCKUP [ 1432.657929][T19735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1432.667966][T19735] Call Trace: [ 1432.671232][T19735] [ 1432.674147][T19735] vpanic+0x56c/0xa60 [ 1432.678134][T19735] ? __pfx__printk+0x10/0x10 [ 1432.682716][T19735] ? __pfx_vpanic+0x10/0x10 [ 1432.687209][T19735] ? is_bpf_text_address+0x292/0x2b0 [ 1432.692479][T19735] ? is_bpf_text_address+0x26/0x2b0 [ 1432.697669][T19735] panic+0xc5/0xd0 [ 1432.701387][T19735] ? __pfx_panic+0x10/0x10 [ 1432.705807][T19735] __warn+0x315/0x4f0 [ 1432.709780][T19735] ? path_noexec+0x1af/0x200 [ 1432.714368][T19735] ? path_noexec+0x1af/0x200 [ 1432.718952][T19735] __report_bug+0x29a/0x540 [ 1432.723453][T19735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1432.729077][T19735] ? path_noexec+0x1af/0x200 [ 1432.733663][T19735] ? __pfx___report_bug+0x10/0x10 [ 1432.738685][T19735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1432.744325][T19735] ? futex_unqueue+0x211/0x240 [ 1432.749085][T19735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1432.754706][T19735] ? arch_get_unmapped_area_topdown+0x264/0xb60 [ 1432.760944][T19735] ? path_noexec+0x1af/0x200 [ 1432.765529][T19735] report_bug+0x16a/0x220 [ 1432.769855][T19735] ? path_noexec+0x1af/0x200 [ 1432.774442][T19735] ? path_noexec+0x1b1/0x200 [ 1432.779038][T19735] handle_bug+0x98/0x200 [ 1432.783270][T19735] exc_invalid_op+0x1a/0x50 [ 1432.787771][T19735] asm_exc_invalid_op+0x1a/0x20 [ 1432.792609][T19735] RIP: 0010:path_noexec+0x1af/0x200 [ 1432.797802][T19735] Code: 02 31 ff 48 89 de e8 40 b7 81 ff d1 eb eb 07 e8 57 b2 81 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 83 67 cc fe cc e8 42 b2 81 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 1432.817395][T19735] RSP: 0018:ffffc90005a8fbd8 EFLAGS: 00010287 [ 1432.823454][T19735] RAX: ffffffff8243d98e RBX: ffff888026406780 RCX: 0000000000080000 [ 1432.831438][T19735] RDX: ffffc9001d995000 RSI: 0000000000000068 RDI: 0000000000000069 [ 1432.839392][T19735] RBP: 0000000000080000 R08: ffff88806c025ac0 R09: 0000000000000003 [ 1432.847351][T19735] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000001 [ 1432.855316][T19735] R13: 1ffff92000b51f90 R14: 0000000000000000 R15: dffffc0000000000 [ 1432.863339][T19735] ? path_noexec+0x1ae/0x200 [ 1432.867943][T19735] ? path_noexec+0x1ae/0x200 [ 1432.872529][T19735] do_mmap+0xa32/0x10c0 [ 1432.876691][T19735] ? __pfx_do_mmap+0x10/0x10 [ 1432.881274][T19735] ? down_write_killable+0x180/0x240 [ 1432.886558][T19735] ? __pfx_down_write_killable+0x10/0x10 [ 1432.892190][T19735] ? apparmor_mmap_file+0x2da/0x3e0 [ 1432.897385][T19735] vm_mmap_pgoff+0x2c9/0x4f0 [ 1432.901978][T19735] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1432.907084][T19735] ? __fget_files+0x2a/0x420 [ 1432.911673][T19735] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1432.917296][T19735] ? __fget_files+0x3a0/0x420 [ 1432.921970][T19735] ? __fget_files+0x2a/0x420 [ 1432.926558][T19735] ksys_mmap_pgoff+0x51e/0x760 [ 1432.931327][T19735] do_syscall_64+0x14d/0xf80 [ 1432.935902][T19735] ? trace_irq_disable+0x3b/0x150 [ 1432.940918][T19735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.946975][T19735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.952857][T19735] RIP: 0033:0x7fee9519c799 [ 1432.957263][T19735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1432.976876][T19735] RSP: 002b:00007fee96074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1432.985287][T19735] RAX: ffffffffffffffda RBX: 00007fee95415fa0 RCX: 00007fee9519c799 [ 1432.993254][T19735] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 1433.001215][T19735] RBP: 00007fee95232bd9 R08: 0000000000000005 R09: 0000000000000000 [ 1433.009172][T19735] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1433.017137][T19735] R13: 00007fee95416038 R14: 00007fee95415fa0 R15: 00007ffee57e8938 [ 1433.025118][T19735] [ 1433.028440][T19735] Kernel Offset: disabled [ 1433.032757][T19735] Rebooting in 86400 seconds..