last executing test programs: 5m5.395781814s ago: executing program 1 (id=41): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) 5m5.106678548s ago: executing program 1 (id=44): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6879ce3c39314ddc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x40}]}}]}, 0x48}}, 0x0) 5m4.766696595s ago: executing program 1 (id=48): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 5m2.804623212s ago: executing program 1 (id=59): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 5m2.08085064s ago: executing program 1 (id=64): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)={0x14, r1, 0x1, 0x0, 0x0, {0x23}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m1.488835538s ago: executing program 1 (id=67): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000011c0)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYRESDEC, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673747261736d7574653d001c0b235ffdce27803854a81c498e5bc58fdfc2e25738bee597df2c00"/55], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5m0.810980373s ago: executing program 32 (id=67): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000011c0)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYRESDEC, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673747261736d7574653d001c0b235ffdce27803854a81c498e5bc58fdfc2e25738bee597df2c00"/55], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m35.344923303s ago: executing program 2 (id=1833): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r0, 0x1}, 0x20) 1m35.13879246s ago: executing program 2 (id=1845): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m34.310936736s ago: executing program 2 (id=1849): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x100f8, 0x0, 0x601}) fstat(r0, 0x0) 1m34.176866117s ago: executing program 2 (id=1851): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x0, {0x2, 0x0, 0x1}}, 0x18) 1m34.032913498s ago: executing program 2 (id=1852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000002100)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0xa1, 0x0, @void}}}}}}}, 0x0) 1m33.977822683s ago: executing program 2 (id=1853): bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x11080, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1m33.844893254s ago: executing program 33 (id=1853): bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x11080, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1m1.096723594s ago: executing program 3 (id=2190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xbf, 0x0}}], 0x73d, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 1m0.982555043s ago: executing program 3 (id=2192): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xf, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 1m0.828798975s ago: executing program 3 (id=2193): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x22020400) r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 1m0.76471306s ago: executing program 3 (id=2196): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x1, r1, 0x0, 0x4000000008, 0x8}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000040)={0x20, r1, 0x0, 0x0, 0x0}) 1m0.623034741s ago: executing program 3 (id=2199): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x4000, 0xffff4a9c0080ffff, 0x0) 1m0.403243349s ago: executing program 3 (id=2203): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 45.167159323s ago: executing program 34 (id=2203): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 19.524870053s ago: executing program 6 (id=2470): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x1210081, &(0x7f00000001c0)={[{@uid}, {@codepage={'codepage', 0x3d, 'cp860'}}, {@part={'part', 0x3d, 0x4}}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@part={'part', 0x3d, 0x800}}, {@creator={'creator', 0x3d, "5863953a"}}]}, 0x11, 0x323, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESOCT, @ANYBLOB="b1f1563f8cf9b3df43707e277e3870d9bbeca08c7c9e5ebdd62801631c9f6ff697c8ea4da0047f1529a0c7", @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000040)='./file0\x00', 0x34) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 19.391639773s ago: executing program 6 (id=2473): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000100)={[{}, {@errors_continue}, {}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000000f80)="$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") syz_mount_image$udf(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x548, &(0x7f0000000640)="$eJzs3d1vFGUbx/HftbPbTpfnoct7VTRNDKG8VdotUoIHArXUhGgC1AMTTArdwkrf0hYDiMCxxyae6CEJJxo9hMR/AI0xHCgx0UQPPDOpB8Z4guaezuzMLgu7tS9L2++H0JmdvXZ3ZtLrnuu+Z2cqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHX3tyP4ua/RaAACA5fTGqZP78xz/AQBYU07T/wcAAADWCpOnn2Xa8cms7Qwez/FPFMcvXR7s66/+shaTKSUviHf//a7ufM+Blw/2RtMnv36xPaM3T50+0n5sYmxyqjA9XRhuHxwvnpsYLtT9Dgt9faXdwQ5oH7t4aXhkZLq9uzNf9vTl3G/N67bmDvf2dLZEsYN9/f2nEjHpzH/+9EfQw0M1TfI0INNPH35uHZJSWngu1Gg7llqL0i7/go0Y7OsPNmS0ODQ+4560VBiVLs+JpihHliEXF6RD2ufWtYmMxsJl5OlPmT4+PGu7JHlRHuwJTgzWfoP0MqxkFW49D0oa0ArIWeAp1SxPd2Qaa/W1u3HpDKAB0vL0kUwTNmt7gnrAHU9d2XzirfbXx0cmErGWCo+oK71/sJyoTfAU8+VpV1Dxz9reRq8MgGXVIk9nZfru1/eCcSUF49Kth3vfOf18coRpW433cbGdkl6qs0+eCccaLeX+Lf52AQAAAAAAAAAAAAAAAACwmvnm6TOZPnjODx4PxF+Qf/iP09jVA7CUzNM9mcZGZs0q7kvhJe7vUbLSr/1Z2vVv8Y9NTF6ZKp6/MFP1+ax/5Oz0zNTQuepPq0V+eA1WpNZ9DCqlw3s4AHXImKcfZLpbvB3/3uTMzf+/MvbWtbgt6Ain0eNku/G4+ap3rJjH9XF++LlcowwAwMKYefpapuNn24LjqikbHGipIYHVz9X/G2S6+ePtuN85V/8/UmbfeiVuF/ywmC/V9EGdv37ufpala4hf2JGcX4z6331u84K2GAAAuPq/WaYH2bbguBrV/5WHXxe3TqbuL7aHcakmVyH44fO54Kc/Uhwt7Hexx2XKrY9iFcRGA4qb4tguF3tdpt8vlMeuD2M3x7HdLvaMTHferx67JY7Nu9h3ZdqXa49isy62LYzdGsd2npsYHV6yHQw8xbLm6aFMv3w1YFEuz40DRPW/V4pNjv/frJiWRPX+mbd3VO0HVCyv+y7WNfoJucSym2F79YdMf99vC9qooF1LV2/XWmXa9u32MG6uTYluErgh+Bm3a70yfd9bHvu/MHZjHNtV72YBjeTy/xuZNt57UPqdD/M/TJU4Q5P5/2y6fBqfO6yS50+YX6z835BYlgvXKzvPfQGsNdNXrl4cGh0tTDHDDDPMlGYa3TIBWGqu/m+T6cY1s6gfG9b/4cO4///X9bj+P1QxLXnMub95nROspkb9vzGx7FDYa8mkJX9mbDKzRfKnr1zdVxwbOl84Xxg/kM/nu3p6ujJNUdc+nqt7zwErn8v/PpnSJ++XxufL+//Vx/+yFdOSBuX/puQ2lfVr6t4VwJrj8v9LmVJ3H5TOoz1p/C8a5+t4sXxa+qM6Dcr/zYlluXC9Wue5LwAAAAAAAAAAAAAAAAAAWCmy5ulTmZqP7rXo3hj1fP93uGJa0qDv/21NLBtepusa697JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICaUvI0KdPdV2fthlvQJu1MTgGsWv8GAAD//1llRoM=") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000080)={0x10000, 0xffe, 0xf, 0xff, 0x0, 0xfffc, 0x2401}) 18.973855467s ago: executing program 6 (id=2479): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000300)="062586c0", 0x4}], 0x1) 18.798251801s ago: executing program 6 (id=2481): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000004c0)={[], [{@uid_lt={'uid<', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '+'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}, 0x7, 0x4ad, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5) 18.56046171s ago: executing program 6 (id=2483): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="3303120081fd140000007ef588a8", 0xe, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0xcf, 0x6, @local}, 0x14) 18.138500694s ago: executing program 6 (id=2490): r0 = memfd_create(&(0x7f00000001c0)='i\xeby>\\\xd1\x05\x00\x90\xbf\xe8\xadD4\x92\xd7\xac0>^\xf3\xf6\x98Zj\xf7\x9e\"\xa6\x94cX\xab\a\xdc4\x8dY\v\xc8\xcc\f\xa8DI\xc8W\x83\xfe#\x1f\x86\xde\xf7\xbb\x81\xa3\x85,M\xe9v\x83\x1cK3\x82\xf6\xf8\xc1\xe5@\xd4AQwO\xfb\xba\xce\xb4\xd7\xc0%\xf2n\x9bj\x03\f\xf4\x19\x9f\xa7\xe5\x96\\\xef\xb1\xc6\x17\a2\xfa-4\xa2\xd2\xd7\xb3\xc9\xce\\\xb7\x05\x05\xb7\x19\xf2.\xdd\x8f\xf5\xc9^\xd4\xa1\x8cp(_^\xb2\xf1\xb5\xach\xfbfB\a\xda|\xa9&\xa9\xfe\x8cy\x94\xe3\x9d3\xb4\xa4\xc9\x1fk\xa8\\\xa1\xe4\xecwj\xa1\xaab\xc2\xf5\x0f\x05\x00\x00\x00\xf2\xb6R\x94\xf8\xa0\x05W\xbd\xc2&r\x04y\x00\x00', 0xa) writev(r0, &(0x7f0000000100)=[{&(0x7f0000001900)="0a703c7c0b8e4a41a671f173e7", 0xd}], 0x1) fcntl$addseals(r0, 0x409, 0xa) ftruncate(r0, 0xc) 17.833655508s ago: executing program 35 (id=2490): r0 = memfd_create(&(0x7f00000001c0)='i\xeby>\\\xd1\x05\x00\x90\xbf\xe8\xadD4\x92\xd7\xac0>^\xf3\xf6\x98Zj\xf7\x9e\"\xa6\x94cX\xab\a\xdc4\x8dY\v\xc8\xcc\f\xa8DI\xc8W\x83\xfe#\x1f\x86\xde\xf7\xbb\x81\xa3\x85,M\xe9v\x83\x1cK3\x82\xf6\xf8\xc1\xe5@\xd4AQwO\xfb\xba\xce\xb4\xd7\xc0%\xf2n\x9bj\x03\f\xf4\x19\x9f\xa7\xe5\x96\\\xef\xb1\xc6\x17\a2\xfa-4\xa2\xd2\xd7\xb3\xc9\xce\\\xb7\x05\x05\xb7\x19\xf2.\xdd\x8f\xf5\xc9^\xd4\xa1\x8cp(_^\xb2\xf1\xb5\xach\xfbfB\a\xda|\xa9&\xa9\xfe\x8cy\x94\xe3\x9d3\xb4\xa4\xc9\x1fk\xa8\\\xa1\xe4\xecwj\xa1\xaab\xc2\xf5\x0f\x05\x00\x00\x00\xf2\xb6R\x94\xf8\xa0\x05W\xbd\xc2&r\x04y\x00\x00', 0xa) writev(r0, &(0x7f0000000100)=[{&(0x7f0000001900)="0a703c7c0b8e4a41a671f173e7", 0xd}], 0x1) fcntl$addseals(r0, 0x409, 0xa) ftruncate(r0, 0xc) 4.048145805s ago: executing program 7 (id=2601): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 3.698447263s ago: executing program 7 (id=2607): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_dellink={0x34, 0x13, 0x5, 0x70bd29, 0x0, {0x7, 0x0, 0x0, r2, 0x44000, 0x18d40}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x2, 0x0, 0x1, [{0x8, 0x17, 0x0, 0x0, 0xfffffffa}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x2001c004) 3.511854508s ago: executing program 7 (id=2610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(r0) 3.36303844s ago: executing program 7 (id=2612): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x3, 0x5eb, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 2.845852532s ago: executing program 7 (id=2619): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x24e, 0xfffffffffffffcb7, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 2.225482152s ago: executing program 5 (id=2628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000100, 0x0, 0x7}]}) 2.094418152s ago: executing program 7 (id=2629): r0 = socket(0xa, 0x1, 0x0) listen(r0, 0x80000001) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$packet(r0, 0x0, 0x0, 0x800) 1.811369105s ago: executing program 36 (id=2629): r0 = socket(0xa, 0x1, 0x0) listen(r0, 0x80000001) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$packet(r0, 0x0, 0x0, 0x800) 1.801882095s ago: executing program 5 (id=2632): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000000001f1000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000891}, 0x0) 1.607406361s ago: executing program 5 (id=2633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0x0, 0x0, @default_ap_ssid}, {0x18, 0x0, @default_ap_ssid}]}]}, 0x38}}, 0x0) 1.426335346s ago: executing program 4 (id=2636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x18) 1.393262809s ago: executing program 5 (id=2637): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1cc0a, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRESDEC], 0x51, 0x5ff1, &(0x7f000000f080)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIi4RUQD4Alm1UkCIVq+hy7ptzjHseeru45v580rvr6dE1/5f/UdPdUVVcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPG97/74ZC8iLv463XAw4jMxiOhHrNb1kahnzuf7DyPiUGwNx3MRMViOqJff+ueZiDMR8dGBiDt3b6zXN5/aZR9nT1y/+sn3v/OP3/3p1qGfvvmTD9rjP/rs6Q9/fzPi4A9f+/CTm09m3QEAAKAUVVVVvfQ2/3B6f9/vuikAYCby83+V5NvVarVa/UTrP/bnq5/d1ysxX/2oH6tuqia72SwiYrO5TP2awe54AFgwm/Fx1y3QIfkXbRgRT3XdBDDXel03wJ64c/fGei/l22s+HxwZj+e/U27Lf7N37/yOnabTtI8xmdXP160YxLM79LM6ox7mSc6/387/4nh8lO631/nPyk75j8anPhUn5z9o59+yLf8/R8TC5t+fmH+pcv7DR8l/c7DA27/8AQAAAADY//Lf/w92vP93+fFXZVcetv/3yIx6AAAAAAAAAIAn7XGv/3eP6/8BAADA3Krfq9f+cuD+bc1j/dvzF3oRT7fuDxQmnSyz1nUfAAAAAAAAAAAAAFCS4fgY3gu9iKWIeHptraqq+qupXT+qx11+0ZW+/lCyrn/JAwDA2EcHWufy9yJWIuJC+qy/pbW1tapaWV2r1qrV5fx6drS8Uq023tfmaX3b8mgXL4iHo6r+ZiuN5ZqmvV+eNt7+fvVjjarBLhqbjQ4DB4CIGD8b3fGMtM9U1TPR9ascFoPtf/+x/bMbXf+cAgAAAHuvqqqqlz7O+3Da59/vuikAYBZW8vN/e7+AWq1Wq9Xq/Vc3VZPdbBYRsdlcpn7N4HL8ALBgNuPjrlugQ/Iv2jAiDnXdBDDXel03wJ64c/fGei/l22s+H6Tru+djQbblv9nbWi4vP2k6TfsYk1n9fN2KQTy7Qz/PzaiHeZLz77fzvzgeH6X77XX+s7JT/vV6Huygn67l/Aft/Fv2T/79ifmXKuc/fKT8B/IHAAAAAIA5lv/+f9D+37zKAAAAAAAAALBw7ty9sZ7Pe837/z8/4X695pzzP/eNnH9v1/k7/3c/yfn32/m3DsgZNOZvv3E//3/fvbH+wfV/fS5P5z7/pcGofuylXn8wTMf8VEtvxeW4Ehtx4oH7D7eNn3xgfGnb+Kkp46cfGB/V46t5/Fisxy/iSrx5b3x5yoFRK1PGqynjOf+B7b9IOf9h46vOfy2N91rT2u33+w9s983ppMc5/7f/vvjg1jV7t2Jwb92a6vU72kE/W/8nT43iV9c2rh77zaXr16+ejDTZduupSJMnLOe/lL5y/i+9MB7Pv/eb2+vt90ePnP+8uBXDHfN/oTFfr+/LM+6tCzn/UfrK+ednoMnb/yLnv/P2/0oH/QAAAAAAAAAAAAAAAMDDVFW1dYro+Yg4l87/6ercTABgpv7wgzRTJaEe172Yr37UarVarX4CdVM12evNIla2L3MuIn476ZsBAPPsfxHxz66boDPyL1j+vL96+oWumwFm6tq77/3s0pUrG1evdd0JAAAAAAAAAPBp5et/Hmlc/3nrOKDWdaO3Xf/1jTiysNf/7I8GW9c6Tyv0fDz8+t9H4+HX/x5OebylKeOjKePLU8ZXpoxPPNGjIef/fMo45384rVhJ1399qYN+upbzP5qu9Zzz/1Lrfs38q78ucv79bfkfv/7OL49fe/e9Vy+/c+ntjbc3fn7yxLkzp8+eOX327PG3Ll/ZODH+t8OO91bOP1/72nGgZcn558zlX5ac/xdTLf+y5PxfTLX8y5Lzz6/35F+WnH9+7yP/suT8X061/MuS8/9yquVflpz/K6mWf1ly/l9JtfzLkvN/NdXyL0vO/1iq5V+WnP/xVMu/LDn/vIdL/mXJ+ecjG+Rflpz/qVTLvyw5/9Opln9Zcv5nUi3/suT8z6Za/mXJ+Z9LtfzLkvP/aqrlX5ac/9dSLf+y5PxfS7X8y5Lz/3qq5V+WnP83Ui3/suT8v5lq+Zcl5/+tVMu/LDn/b6da/mXJ+b+eavmX5f7n/5uZ8cx//h4xB22YMTNppuvfTAAAAAAAAAAAAABA2ywOJ+56HQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/swMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7N1djFxnfT/ws69eO4H4T0IIwZC14wRDNt5dvyUmGMzrPw0tTQOhpYU6xl6/gN/qXUOCULM0tAWB1KjtBb0oBUQRUlslQkilUooiFam9a65AuUGtFKmWmlQmgkq0JFudOc/z7Mzs7Myu7c2eOefzieKfd+fMzDNnzszOd63vDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzba+Z+aPB7Isy/9v/LE5y67N/74xO5h/Ob9vvVcIAAAAXKmXGn/+7XXpGwdXcKambf75Tf/6vYWFhYXsEy9efPnPFhbSCeNZNrQhyxqnRf/yi58vNG8TPJaNDQw2fT3Y4+qHepw+3OP0kR6nj/Y4fUOP08d6nL5kByyxsfh9TOPCtjf+urnYpdkN2UjjtO0dzvXYwIbBwfi7nIaBxnkWRo5lJ7NT2Uw2teQ8A43/suyprfl13ZvF6xpsuq4tWZZd+unnjsQ1DIR9vD1rubKG5vvuhXdl4y/+9HNHvj33/Os7zZ67YclKs2zHtnydX8iyxV9XZQPZhrRP4joHm9a5pcM6h1rWOdA4X/739nVeWuE64+0eC+t8pss6t4TvPXxrlmXz2bLbtHssG8w2tV1r2t9jxRGRX0Z+V74mG17VcbJ1BcdJfp7nbm09TtqPybj/t4Z9MrzMGprvjhc+P7pkv1/ucZLf6jIcq/ll359f6dhY869WW47VfJvP3bb8MdDxvutwDKRjuekY2NbrGBgcHWocA4OLa97WcgxMLznPYDbQuK6Lt3U/BibnTp+bnH3ks3eePH34+MzxmTPTU/v27N67Z/fevZPHTp6amSr+XN0u7SObssF0DG4LzzXxGHxz27bNh+TCN67e42CsJI+D/LZ/+PZ8QdcOZssc4/k2X9hx5Y+D9HO/6XEw3PQ46Pic2uFxMLyCx0G+zaUdK/uZOdz0f6c1rNVz4eamY2A9fx7m1/mxtyz/XLglrOuLb13tz8OhJcdAvFkD4bGXfye93hu7O+yXpcfFzfkJ14w2XtvtfPjw3Nz56SyMV8T1TfdV+/Gyqek2ZUuOl8FVHy8H/+aXt9/c4fubw74au6P7fZVvs2ei+33VeHa/ZjS7MDtzPuzP0azYny3f3ZWFcZW90vuz00+zfH+mLNFlf+bbfOHOK38tmHJJ0/PfSK/nv6GR4eL5byjtjZGW57+ld81QY2VZdunOlT3/jYT/X+nnvxtK8vyX76uP7ex+DOTbfHFytcfAcNfnv1vDHAjreUtIDGNNuf/lxunzxWHadF/2PG6Gh0fCcTMcr7H1uNm95Dz5peXXvWPq8o6bHbe23lctr1tWftz0+vVBaY6bfF/9+VT34ybf5unpK3/u2Bj/2vTcMdrrGBgZGs3XO5IOguL5bmFjPAZ2Zkeys9mp7Gg6T34v59c1sWtlx8Bo+P+Vfu64qSTHQL6vvrqr+zGQb/PD3Vf3tdOO8J20TdNrp/bfLyyX+W8eXry89t12tTN/vs73/uiD6XudMkS+zfN7Vpszuu+nO8J3rumwn9ofP8sd00ezV2Y/3RTWeWpv999N5dvcsG+Fx9PBLMuenX628fuu8Pvd71740fdafu/b6XfKz04/e9/kAz9ezfoBALh8Lzf+nB8tXms2/Yv1Sv79HwAAAOgLMfcPhpnI/wAAAFAZMfcPhZnI/wAAAFAZMfcPh5nUJP+fuHv/Ey89mqV3A1wI4ulxN9z/jmK72PGeD1+PLyzKv//ub4088aVHV3bdg1mW/fK+N3Tc/sQ74roK5+I639b6/SVuumVF1//Qg4vbNb9/wqX9xeXH27PSwyB2lZ+a3NW43PFHphvz6fuyxnxg/ouPFZdffB23v7i72P4vw5uWHDw20HL+HWE928McD+8pc//Bxf2Qz3i+J7a86Z+u/8ji9cXzDWx7deNmfvX3i8uN7xH1+PXF9vF2L7f+f/zyd57It3/4ts7rf3Sw8/ovhst9LsxfHCi2b97nX2pa/x+G9cfri+fb+c0fdFz/k68rtn8yHBdfD7N9/e/6kze+1On+itdz8J7ifPH6p/57T+N88fLi5bevf+zR6Zb90X75T79YXM6BT/9sqHn7+P14PdFD97Qe3wPh/m3pkWdZ9p0/ylr2c/b24nz/0Lb+eHnn7um8/jva1nlu4JbG+Rdvz+aW2/W1v97V8fbG9Rz8u80tt+fx94X99+LkD/PLvfhAOB7D6f/zTHF57W9G8uT7Wp9v4vZf31w8buPlTbat//G29c/fku+73uu/98Vi/U++c0PL+g++PxxP9xaz1/qP/9V1Lef/xreL++P8ZybOnJ29cPJo015tfhxvGNu46ZprX/Xq68JzafvXh87OnZg5Pz41PpVl4334loFrvf5vhvlfxZi/+tdQ+PHPiuPuKx8ofm69+efF14+H7z8U7s/48/FrfzHScry23+/z7yzmla7/rWEdK/W6L//7LSva8OLHn7rw93/wfPvrgnh7zr12rHH7vrr1xsZpA08Xp7c/X/Xyb69tfVz/ZHiqMb8f9utCeGfmbTcW19d++fG9Sb7yoeLxG1/JxfNnbe8nsnmo9XZc6fp/El7H/OCm1ue/eHx8/9G2d3PenA3kS5gPzw/ZfHF63Cru769curHj9cX34cnmX7+aZS5r9pHZyVMnz1x4eHJuZnZucvaRzx46ffbCmblDjfcuPfTJXudffHxvajy+j87s25M1Hu1ni7HG1nv95x48cvSuqduPzhw7fOHY3IPnZs4fPzI7e2Tm6Ozth48dm/lMr/OfPHpgetf+3Xftmjh+8uiBu/fv371/4uSZs/kyikX1sG/qUxNnzh9qnGX2wJ7903v37pmaOH326MyBu6amJi70On/jZ9NEfu5PT5yfOXV47uTpmYnZk5+dOTC9f9++XT3f/fH0uWOz45PnL5yZvDA7c36yuC3jc41v5z/7ep2fepg9G57v2gyEV+cfvWNfen/c3Lc+v+xFFZu0vjzNXgjvBRV/vvX6Oub+kTCTmuR/AAAAqIOY+8Mb/y+eIP8DAABAZcTcvyHMRP4HAACAyoi5v0j+Y+nj3+uS/69W///z+v8N+v/6/5n+f6L/r/+f6f/r//eg/1+K/v8J/X/9f/1/1krZ+v8h92cbs8y//wMAAEBFxdy/KcxE/gcAAIDKiLn/mjAT+R8AAAAqI+b+a8NMapL/ff6//r/+f7f+f9xW/z/T/y9D/3/7f+r/L6H/r/+f6f9ftvXuz/f7+kvY/9+o/0/ZlK3/H3P/q8JMapL/AQAAoA5i7n91mIn8DwAAAKW2YRXbxtx/XZiJ/A8AAACVEXP/5jCTmuT/9ev/j+r/6/83lLv/7/P/m+n/r3v/3+f/d6D/r/+f1ab/X7xY0P8vz/rXvv//p13P7/P/6Qdl6//H3P//wkxqkv8BAACgDmLuf02YifwPAAAAlRFz//VhJvI/AAAAVEbM/TeEmdQk/9fz8/+fy7JM/z/T/9f/b1un/r/+/1rQ/9f/72Z9+//5a59+6v/7/P+yrb+En/+v/0/plK3/H3P/a8NMapL/AQAAoA5i7r8xzET+BwAAgMqIuf91YSbyPwAAAFRGzP03hZnUJP/Xs//v8//1/wtr0P8fGNb/T/T/9f8z/X/9/x58/r/+fz+vX/9f/5/eytb/j7n/9WEmNcn/AAAAUAcx998cZiL/AwAAQGXE3P+GMBP5HwAAACoj5v4tYSY1yf/6//r/+v8+/1//X/9/LfVX/39w2VP0/wv6/62uXv9/fnEB+v99s379f/1/eitb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+W8JM5H8AAACojJj7x8NMapL/9f/1//X/9f/1//X/11J/9f+Xp/9f0P9v5fP/9f/1//X/6a5s/f+Y+7eGmdQk/wMAAEAdxNy/LcxE/gcAAIDKiLn/1jAT+R8AAAAqI+b+7WEmNcn/+v/6//r/+v/6//r/a0n/X/+/G/1//f9+Xr/+v/4/vZWt/x9z/21hJjXJ/wAAAFAHMfffHmYi/wMAAEBlxNz/5jAT+R8AAAAqI+b+HWEmNcn/+v/6//r/fdz/H9L/z/T/S69Y/8ZsmfX/b9uPnVXT/9f/z/T/L9t69+f7ff36//r/9Fa2/n/M/W8JM6lJ/gcAAIA6iLn/rWEm8j8AAABURsz9d4SZyP8AAABQGTH3T4SZ1CT/V7z///x/LLOZ/n9B/7/P+/8+/79l/fr/5VTvz/9fPLr1/zvT/9f/7+f16//r/9Nb2fr/MfffGWZSk/wPAAAAdRBz/84wE/kfAAAAKiPm/skwE/kfAAAAKiPm/qkwk5rk/4r3/5el/1/Q/9f/z/T/9f/XWL37/z7/vxf9f/3/fl6//r/+P72Vrf8fc/90mElN8j8AAADUQcz9u8JM5H8AAACojJj7d4eZyP8AAABQGTH37wkzqUn+75P+/85UgNL/1//X/9f/1//vK/r/Fe3/508k+v/6/2fn0g7W/9f/1/9nsMP3ytb/j7l/b5hJTfI/AAAA1EHM/fvCTOR/AAAAqIyY++8KM5H/AQAAoDJi7r87zKQm+b9P+v8+/1//X/+/if6//n8/We/+//BVuh79/4LP/2+l/+/z//X/9f/prmz9/5j794eZ1CT/AwAAQB3E3P+2MBP5HwAAACoj5v57wkzkfwAAAOgrnT6HMIq5/+1hJjXJ//r/Ve//L2zQ/9f/1//vvn79/7W13v3/q0X/v6D/30r/X/9f/1//n+7K1v+Puf9AmElN8j8AAADUQcz97wgzkf8BAACgMmLuf2eYifwPAAAAlRFz/8Ewk5rkf/3/qvf/ff6//r/+f6/16/+vLf1//f9uKtn/31D9/n942aL/X6L+f34M6f9TRmXr/8fc/64wk5rkfwAAAKiDmPvfHWYi/wMAAEBlxNz/njAT+R8AAAAqI+b+94aZ1CT/6//r/+v/6//r/+v/ryX9/zXr/zeeCvX/C6Xq//v8f/1/n/+v/09Stv5/zP3vCzOpSf4HAACAOoi5//1hJvI/AAAAVEbM/f8/zET+BwAAgMqIuf/eMJOa5H/9f/1//X/9f/1//f+1pP/v8/+70f/X/+/n9ev/6//TW9n6/zH3/0qYSU3yPwAAANRBzP33hZnI/wAAAFAZMfd/IMxE/gcAAIA+M7rsKTH3/2qYSU3yf//1/8f7sv8/mC5f/1//X/9f/1///2rS/9f/z/T/L9t69+f7ff36//r/9Fa2/n/M/b8WZlKT/A8AAAB1EHP/B8NM5H8AAACojJj7fz3MRP4HAACAyoi5//4wk5rk/6vd/28/fzc+/1//P9P/1//X/9f/v0L6//r/mf7/ZVvv/ny/r1//X/+f3srW/4+5/zfCTGqS/wEAAKAOYu5/IMxE/gcAAICSOrHqc8Tc/6EwE/kfAAAAKiPm/g+HmdQk//ff5//r/+v/6//r/+v/9xP9f/3/bvT/9f/7ef36//r/9Fa2/n/M/Q+GmdQk/wMAAEAdxNz/kTAT+R8AAAAqI+b+3wwzkf8BAACgMmLu/60wk5rkf/1//X/9f/1//X/9/7Wk/7+0/58/h+n/F/T/9f/7ef36//r/9Fa2/n/M/R8NM6lJ/gcAAIA6iLn/t8NM5H8AAACojJj7fyfMRP4HAACAyoi5/2NhJjXJ//r/+v/6//r/+v/6/2tJ/9/n/3ej/6//38/r1//X/6e3svX/Y+7/eJhJTfI/AAAA1EHM/b8bZiL/AwAAQGXE3H8ozET+BwAAgMqIuf+hMJOa5H/9f/1//X/9f/1//f+1pP+v/9+N/r/+fz+vX/9f/5/eytb/j7n/cJjJwdarAQAAAPpXzP2fCDOpyb//AwAAQB3E3H8kzET+BwAAgMqIuf9omElN8r/+v/6//r/+v/6//v9a0v/X/+9G/1//v5/Xr/+v/09vZev/x9w/E2ZSk/wPAAAAdRBz/7EwE/kfAAAAKiPm/uNhJvI/AAAAVEbM/SfCTGqS//X/9f/1/2vb/3/mu23r1P/X/18L+v/6/93o/+v/9/P69f/1/+mtbP3/mPtPhpnUJP8DAABAHcTc/8kwE/kfAAAAKiPm/k+Fmcj/AAAAUBkx958KM6lJ/tf/1//X/69t/39ln/+/cfF69f/1/y+H/r/+fzf6//r//bx+/X/9f3orW/8/5v7TYSY1yf8AAABQBzH3nwkzkf8BAACgMmLuPxtmIv8DAABAZcTcfy7MpCb5X/9/df3/gWW6gfr/ndev/1+B/n8T/X/9/8uh/6//343+v/5/P69f/1//n97K1v+Puf/3wkxqkv8BAACgDmLuPx9mIv8DAABAZcTcPxtmIv8DAPwfe/edbFlZ9XH8vA3dbyM6B6bgCByCY7DKIZgjGMGsmHPCnDAr5pxzzjmjmGOVFrfXWtCXe/e+3X1On72f9fn8wZILFhvBsn6F33oAYBi5++8XtzTZ//p/7//r//X/+n/9/y7p//X/U/T/g/T/m43+X/+v/+dIS+v/c/ffP25psv8BAACgg9z9D4hb7H8AAAAYRu7+B8Yt9j8AAAAMI3f/g+KWJvtf/6//1//r//X/+v9d0v+vtP/fbPT/J6D/9/6//l//z7Sl9f+5+x8ctzTZ/wAAANBB7v6HxC32PwAAAAwjd/9D4xb7HwAAAIaRu/9hcUuT/a//1//r//X/+n/9/y7p/1fa/3v//0T0//p//b/+n2lL6/9z9z88bmmy/wEAAKCD3P2PiFvsfwAAABhG7v5Hxi32PwAAAAwjd/+1cUuT/a//1//r/1fY/1+p/9f/r4f+X/8/Rf+v/1/z9+v/9f/MW1r/n7v/urilyf4HAACADnL3Pypusf8BAABgGLn7Hx232P8AAAAwjNz9j4lbmux//b/+X/+/wv7f+//6/xXR/+v/p+j/9f9r/n79v/6feUvr/3P3PzZuabL/AQAAoIPc/Y+LW+x/AAAAGEbu/sfHLfY/AAAADCN3//VxS5P9r//X/+v/9f/6f/3/Lun/9f9T9P/6/zV/v/5f/8+8nff/977h4J60/8/df0Pc0mT/AwAAQAe5+58Qt9j/AAAAMIzc/U+MW+x/AAAAGEbu/ifFLU32v/5f/39H///f/9P/6//1/3f8XP+/Hfp//f8U/b/+f83fr//X/zNv5/3/TO9/+Ndz9z85bmmy/wEAAKCD3P1PiVvsfwAAAFibux/3G3L3PzVusf8BAABg8c6e8PfL3f+0w/+uJvtf/6//9/6//l//r//fJf3/Yvv/w//VO9/u+v8zd/4V/b/+f83fP9X/3+sE36//p4Ol9f+5+58etzTZ/wAAANBB7v5nxC32PwAAAAwjd/+NcYv9DwAAAMPI3f/MuKXJ/t9N/3+4rj2a/l//v9H/L7D/P9Wy/7/9Z/r/3dD/L7b/n+b9/xPR/+v/vf+v/2fa0vr/3P3Pilua7H8AAADoIHf/s+MW+x8AAACGkbv/OXGL/Q8AAADDyN3/3LjlYP+f2dNXXT7e/9f/6//1/5f0/v8VY/T/3v/fHf2//n+K/l//v+bv1//r/5m3tP4/d//z4hb//B8AAADGcGpTu//5cYv9DwAAAMPI3f+CuMX+BwAAgGHk7n9h3NJk/+v/9f/6f/3/JfX/g7z/r//fHf2//n/KSfv/jf6//lz22/+fPu/X9P/6f/0/c5bW/+fuf1Hc0mT/AwAAwHiuv8tPcve/OG6x/wEAAGAYuftfErfY/wAAADCM3P0vjVua7H/9v/5f/6//1//r/3dJ/6//n+L9/7X1/+fT/+v/9f/MWVr/n7v/ZXFLk/0PAAAAHeTuf3ncYv8DAADAMHL3vyJusf8BAABgGLn7Xxm3HN7/py7nV10+e+3/s93Q/+v/9f8H9P/x11X/r/+/APp//f9mwP7/7DF/PP3/sr5f/6//Z97S+v/c/TfFLf75PwAAAAwjd/+r4hb7HwAAAIaRu//VcYv9DwAAAMPI3f+auKXJ/j+u/7/t6nO/3fv/J6P/P/r79f/6f/2//l//v73+/6j/edP/nzNa/+/9/3V8v/5f/8+8pfX/uftfG7c02f8AAADQQe7+18Ut9j8AAAAMI3f/6+MW+x8AAACGkbv/DXFLk/2//ff/r9lH/39HXKf/1//r//X/8fPj+v/D9P+7pf/3/v8U/b/+f83fr//X/zNvaf1/7v43xi1N9j8AAAB0kLv/TXGL/Q8AAADDyN3/5rjF/gcAAIBh5O5/S9zSZP9vv//3/r/+/wL7/1P6/6T/j7+u3v/X/18A/b/+f6P/v2j77ufX/v36f/0/85bW/+fuv/lg6vXb/wAAANDBzQe/PLt5a9xi/wMAAMAwcve/LW6x/wEAAGAYufvfHrc02f/6f/3/3vt/7/8X/X/8ddX/6/8vgP5f/7/R/1+0fffza/9+/b/+n3lL6/9z978jbmmy/wEAAKCD3P3vjFvsfwAAABhG7P5z/+d3+x8AAACG9K6DX57dvDtuabL/G/f/11xq/3/Vnf61/v/o79f/b6X/v/nw33v6/+b9/5WbVdH/6/+n6P/1/2v+/i30/3fbbKX/jx9cq/9neZbW/+fuf0/c0mT/AwAAQAe5+98bt9j/AAAAMIzc/bfELfY/AAAADCN3//vilib7v3H/P8j7//e5Nb5A/z9u/+/9/7j6f+//H0X/r//f6P8v2r77+bV/v/f/9f/MW1r/n7v//XFLk/0PAAAAHeTu/0DcYv8DAADAMHL3fzBusf8BAABgGLn7PxS3NNn/+v+19//e/9f/6//1/8um/9f/T9H/6//X/P36f/0/85bW/+fu/3Dc0mT/AwAAQAe5+z8St9j/AAAAMIzc/R+NW+x/AAAAGEbu/o/FLU32v/5f/7+r/v/2P4j+v0n/f53+f6P/P5b+X/8/Rf+v/1/z9+v/9f/MW1r/n7v/43FLk/0PAAAAHeTu/0TcYv8DAADAMHL3fzJusf8BAABgGLn7PxU33PMe+/uk7Tp9zM+jN9f/6/+9/6//9/6//n+X9P/6/yn6f/3/mr9f/6//Z97S+v/c/Z+OW/zzfwAAABhG7v7PxC32PwAAAAwjd/9n4xb7HwAAAIaRu/9zcUuT/a//1//r/1fb/1+l/z//+/X/y6T/1/9P0f/r/9f8/fp//T/zltb/5+7/fNzSZP8DAABAB7n7vxC32P8AAAAwjNz9X4xb7H8AAAAYRu7+L8UtTfa//l//r/9fbf/v/f9D36//Xyb9v/5/iv5f/7/m79f/6/+Zt7T+P3f/l+OWJvsfAAAAOsjd/5W4xf4HAACAYeTu/2rcYv8DAADAMHL3fy1uabL/9f/6f/2//l//r//fpcve/5/a/h9jo//X/x9D/6//1//r/5m2tP4/d//X45Ym+x8AAAA6yN3/jbjF/gcAAIBh5O7/Ztxi/wMAAMAwcvd/K25psv9H7v+nfjf9/zn6f/3/Rv9/uP8/kz/X/2+H9//1/1P0/wP3/2e28on7+379v/6frVha/5+7/9txS5P9DwAAAB3k7v9O3GL/AwAAwDBy9383brH/AQAAYBi5+78XtzTZ/yP3/1P0/+fo//X/G/2/9/93TP+v/5+i/x+4//f+v/4f9tf/n94c0//n7v9+3NJk/wMAAEAHuft/ELfY/wAAADCM3P0/jFvsfwAAABhG7v4fxS3j7P/73jLxG/X/W+//D/4m0v/r/zf6f/2//v+A/l//P0X/r/9f8/fr//X/zFva+/+5+38ct4yz/wEAAKC93P0/iVvsfwAAABhG7v6fxi32PwAAAAwjd//P4pYm+1//7/1//X+r/v+KzYn6//xPWP+v/790+n/9/xT9v/5/zd+v/9f/M29p/X/u/p/HLU32PwAAAHSQu/8XcYv9DwAAAMPI3f/LuMX+BwAAgGHk7v9V3NJk/+v/9f/6/1b9v/f/9f+Xnf5f/z9F/6//X/P3Z/+ff9/p//X/3NXS+v/c/b+OW5rsfwAAAOggd/9v4hb7HwAAAIaRu/+3cYv9DwAAAMPI3f+7uKXJ/tf/6//1//p//b/+f5f0//r/Kfp//f+av9/7//p/5i2t/8/df2vc0mT/AwAAQAe5+38ft9j/AAAAMIzc/X+IW+x/AAAAGEbu/tvilib7X/+v/x+y//9//b/+X/+/FPp//f8U/b/+f83fr//X/zNvaf1/7v4/xi1N9j8AAAB0kLv/T3GL/Q8AAADDyN3/57jF/gcAAIBh5O7/S9zSZP/r//X/F97/n64/78X2/97/1//r/xdj3P7/jP5f/3/J/f+NN537cYv+/+qtfPL+vv8I+n/9P/OW1v/n7v9r3NJk/wMAAEAHufv/FrfY/wAAADCM3P1/j1vsfwAAABhG7v5/xC1N9r/+X/8/5Pv/+n/9v/5/Mcbt/73/r//3/r/3//X/+n/mLK3/z93/z7ilyf4HAACADnL3/ytusf8BAABgGLn7/x232P8AAAAwjNz9/4lbmux//b/+X/+v/9f/6/93Sf+v/5+i/9f/r/n79f/6f+Ytrf/P3f+/AAAA//+I2SzA") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) 1.186564105s ago: executing program 0 (id=2638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0xaeff, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) 1.115671971s ago: executing program 4 (id=2639): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 954.644294ms ago: executing program 0 (id=2641): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) setresuid(0xee01, 0xee00, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 912.051777ms ago: executing program 4 (id=2642): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) 817.917055ms ago: executing program 4 (id=2643): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_dellink={0x34, 0x13, 0x5, 0x70bd29, 0x0, {0x7, 0x0, 0x0, r2, 0x44000, 0x18d40}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x2, 0x0, 0x1, [{0x8, 0x17, 0x0, 0x0, 0xfffffffa}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x2001c004) 740.821361ms ago: executing program 0 (id=2644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(r1, 0x80044325, &(0x7f0000000080)) 422.799856ms ago: executing program 5 (id=2645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x2, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 421.905956ms ago: executing program 0 (id=2652): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x18, 0x0, r2, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 421.411626ms ago: executing program 4 (id=2646): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 244.870101ms ago: executing program 0 (id=2647): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b8, &(0x7f0000000800)="$eJzs3NFLU38Yx/Hn5/y5OdEtiKCgeqibuhm6/oAaoRANCnNSXQTHPKux0ybnDGMRuZvotr9DuuwuqP4Bb6Kb7ruTIOjGi+gbnrPpmU6durml7xfIeXae74fzdZvybLCt3n/7rJj3UnmrIgMxlQGRmqyJJNeruv/qxwG/HpKwmlwd+fXt/L0HD29nstnJadWpzMy1tKqOXfz4/OW7S58rI7Pvxz5EZSX5aPVn+vvK0MrZ1T8zTwueFjwtlStq6Vy5XLHmHFvnC14xpXrXsS3P1kLJs92mft4pLyxU1SrNj8YXXNvz1CpVtWhXtVLWiltV64lVKGkqldLRuJxsg22syS1PT1uZHdsm0tEdoeuGW5103UytdTO3fAR7AgAAfWb3+T+Y9Xee/7OzwXE/8/+Zved/Eeb/Lqk13dpj/sex4LoZK17/+23G/A8AAAAAAAAAAAAAAAAAAAAAwL9gzZiEMSaxfqyf8m9HRSQmIqbe7/E20SXhx9+EfvZ4/K/3aLvosNAH92IizpvF3GIuOAb9TF4K4ogt45KQ3/7zoS6op25lJ8fVl5RPzlI9v7SYi0i0kW9ItspfODUR5LU5/7/Ew9dPS0JOt75+umV+SK5cDuVTkpAvj6Usjsz7z+vN/KsJ1Zt3slvyw/46AAAAAACOg5Ru2Pb63e/7C2KyvR/kQ+8PGGOWdnt/YMvr60E5185XVAIAAAAAgEPzqi+KluPY7gGKqIgcIt75whiR3m8jIv1xbzQXN0SkD7ZxVEVMRIIzepD4j414WynTxppBEen53bKPotf/mQAAAAB02ubQv4/Q19dd3BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPu98H1li/rdVo7BIPXS5y5L8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ef+BgAA//+4IRyf") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = open(&(0x7f0000000000)='.\x00', 0x30080, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 165.767147ms ago: executing program 4 (id=2648): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbc0cfb91c82f4a9164dda5e67a46d8e841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d72166cb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d090014b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd8f200000017587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eb00ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbb1d44925ce66ea1a94e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 122.755681ms ago: executing program 0 (id=2649): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88], [0x4, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000f00)={'syz1\x00', {0x8, 0x4, 0xfffa, 0x8}, 0x20, [0x3, 0xc000000, 0xfffff001, 0x9, 0x14bc36d9, 0x2, 0x8, 0x3, 0x40, 0xd, 0x7, 0x7, 0xd0, 0x8, 0xd, 0x1, 0x3, 0x4f171e66, 0x7, 0x7, 0x400, 0x7, 0x8d, 0x3, 0x87, 0x7fff, 0x5, 0x2b, 0x9fa, 0x0, 0x7, 0x4, 0x5, 0x80, 0xe, 0x4, 0xffff2595, 0x5, 0x1, 0x400, 0x4, 0x5, 0xffff, 0x2, 0xc, 0x837f, 0x0, 0x5, 0x6, 0xff, 0x3, 0x4, 0xffffffff, 0x6, 0x400, 0x3, 0x9729, 0x8000, 0xffff, 0x10000, 0x80000000, 0x38f1, 0x1000000, 0x1ff], [0x2, 0x1, 0xf7be, 0xffff, 0x7, 0x2, 0x9, 0x0, 0x2, 0xf, 0x10, 0x3, 0x7, 0x9, 0x6, 0x5, 0x9, 0xffffffff, 0x2a067093, 0x1, 0x81, 0xb, 0x9, 0x5, 0x200, 0x2, 0x0, 0xd, 0x8, 0x3, 0x7f, 0x1, 0xffff2646, 0x6, 0x15e, 0x2, 0x7, 0x4, 0x3, 0x7, 0xe6b, 0x81, 0x1, 0x7, 0x8, 0x7, 0x10000, 0xfffffffd, 0x8, 0x800, 0x9, 0x4, 0x7, 0xb4f1, 0xfffffffb, 0x5, 0xd, 0xc, 0x8, 0x1, 0x7fffffff, 0x1ff, 0x4, 0x8], [0x0, 0x5, 0xf, 0x2, 0x2, 0x19, 0x0, 0xffffff7f, 0x6, 0x9, 0x1, 0xfffffffa, 0x2, 0x3, 0x120, 0x2, 0x9, 0xe12, 0x1, 0x0, 0x9, 0x3, 0x2, 0x7, 0xa4, 0x1, 0x10001, 0x6, 0x8, 0x79, 0x10001, 0xa23, 0x7, 0x101, 0x6, 0x1ff, 0x200, 0x2, 0xfffffff2, 0xffff0001, 0x3, 0x2197, 0x5, 0x401, 0x3ff, 0x7fff, 0x6, 0x5, 0x0, 0x3, 0xfffffffd, 0x100, 0x4, 0xe4, 0x7f, 0x80000000, 0x8000, 0x1000, 0x9, 0xf, 0x6, 0x4, 0x9, 0x10], [0xbe, 0x5, 0x800, 0x5, 0x0, 0xc, 0x6, 0x4, 0x401, 0x2, 0x6, 0x2, 0x9, 0x6286, 0x1, 0x2, 0x8, 0x5, 0x392, 0x8, 0x6, 0x3ff, 0x9, 0xffffff34, 0xffffff00, 0xf, 0x1ff, 0x80, 0x7, 0x4, 0x4, 0xa, 0x0, 0x2c140000, 0xffffffff, 0x5, 0x8b, 0x2, 0x3, 0x4, 0x1, 0x80, 0x2, 0x8, 0x72, 0x9, 0x6, 0x0, 0x6, 0x10000, 0x2, 0x3, 0xacb, 0xb788, 0x2c3b, 0x7fffffff, 0x100, 0x9, 0x7, 0xfa, 0x6, 0x1fa9, 0x3, 0x2f]}, 0x45c) 0s ago: executing program 5 (id=2650): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@bridge_setlink={0x24, 0x13, 0xa29, 0x70bd2d, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0xc408}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 6571][ T112] blkno = 8ed2c, nblocks = 4 [ 231.122001][ T112] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 231.122001][ T112] [ 231.136950][ T112] blkno = 8ef00, nblocks = 141 [ 231.142792][ T112] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 231.142792][ T112] [ 231.170269][ T9226] loop4: detected capacity change from 0 to 128 [ 231.199950][ T9226] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.217768][ T9226] ext4 filesystem being mounted at /280/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.511509][ T5793] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 231.691449][ T5793] usb 5-1: Using ep0 maxpacket: 8 [ 231.700854][ T5793] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 231.725640][ T5793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.739766][ T5793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.759698][ T5793] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 231.777935][ T5793] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 231.787229][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 231.801301][ T5793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.823512][ T5793] usb 5-1: config 0 descriptor?? [ 231.987810][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 232.249109][ T5793] hid (null): unknown global tag 0xe [ 232.268450][ T5793] hid (null): invalid report_size 23577 [ 232.278735][ T5793] hid (null): invalid report_size 64626 [ 232.279662][ T23] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 232.293471][ T23] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 232.295729][ T5793] redragon 0003:0C45:760B.0008: unknown main item tag 0x6 [ 232.311457][ T23] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 232.314331][ T5793] redragon 0003:0C45:760B.0008: unknown global tag 0xe [ 232.336862][ T23] usb 3-1: config 220 has no interface number 2 [ 232.341444][ T5793] redragon 0003:0C45:760B.0008: item 0 0 1 14 parsing failed [ 232.355088][ T5793] redragon: probe of 0003:0C45:760B.0008 failed with error -22 [ 232.358752][ T23] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 232.404079][ T23] usb 3-1: config 220 interface 0 has no altsetting 0 [ 232.410936][ T23] usb 3-1: config 220 interface 76 has no altsetting 0 [ 232.428303][ T23] usb 3-1: config 220 interface 1 has no altsetting 0 [ 232.438788][ T23] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 232.449348][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.457831][ T23] usb 3-1: Product: syz [ 232.462314][ T23] usb 3-1: Manufacturer: syz [ 232.467046][ T23] usb 3-1: SerialNumber: syz [ 232.551677][ T5793] usb 5-1: USB disconnect, device number 7 [ 232.718073][ T23] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 232.730311][ T23] usb 3-1: No valid video chain found. [ 232.736156][ T23] usb 3-1: selecting invalid altsetting 0 [ 232.765905][ T23] usb 3-1: selecting invalid altsetting 0 [ 232.777994][ T23] usbtest: probe of 3-1:220.1 failed with error -22 [ 232.790645][ T23] usb 3-1: USB disconnect, device number 12 [ 233.112785][ T6089] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.453373][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1198'. [ 234.089870][ T9257] loop4: detected capacity change from 0 to 32768 [ 234.174113][ T27] audit: type=1800 audit(1755710741.586:46): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1192" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 234.210554][ T9257] syz.4.1192: attempt to access beyond end of device [ 234.210554][ T9257] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 234.247241][ T9257] metapage_write_end_io: I/O error [ 234.261531][ T9257] ERROR: (device loop4): diWrite: ixpxd invalid [ 234.261531][ T9257] [ 234.295275][ T9257] ERROR: (device loop4): remounting filesystem as read-only [ 234.311427][ T9257] ERROR: (device loop4): txCommit: [ 234.311427][ T9257] [ 234.322399][ T9257] blkno = 8ed2c, nblocks = 1 [ 234.327168][ T9257] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 234.327168][ T9257] [ 234.380117][ T9257] ERROR: (device loop4): dbAllocBits: leaf page corrupt [ 234.380117][ T9257] [ 234.400711][ T9257] syz.4.1192: attempt to access beyond end of device [ 234.400711][ T9257] loop4: rw=34817, sector=4683776, nr_sectors = 4 limit=32768 [ 234.445075][ T9257] syz.4.1192: attempt to access beyond end of device [ 234.445075][ T9257] loop4: rw=34817, sector=4683780, nr_sectors = 2048 limit=32768 [ 234.490267][ T9257] syz.4.1192: attempt to access beyond end of device [ 234.490267][ T9257] loop4: rw=34817, sector=4685828, nr_sectors = 516 limit=32768 [ 234.528218][ T111] blkno = 8ed2c, nblocks = 4 [ 234.538176][ T111] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 234.538176][ T111] [ 234.561819][ T111] blkno = 8ef00, nblocks = 141 [ 234.566979][ T111] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 234.566979][ T111] [ 234.961602][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 235.115724][ T9309] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 235.163601][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 235.194653][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 235.227185][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 235.248964][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 235.271440][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 235.299539][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 235.319733][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 235.329280][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 235.349506][ T9] usb 5-1: Product: syz [ 235.358475][ T9] usb 5-1: Manufacturer: syz [ 235.373615][ T9] usb 5-1: SerialNumber: syz [ 235.394221][ T9] usb 5-1: config 0 descriptor?? [ 235.400150][ T9298] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 235.416106][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 235.450217][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 235.692832][ T5793] usb 5-1: USB disconnect, device number 8 [ 235.701631][ T5793] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 235.901416][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 236.081894][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 236.103727][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 236.113403][ T9] usb 4-1: config 179 has no interface number 0 [ 236.119808][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 236.138437][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 236.171838][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 236.193855][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 236.205626][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 236.219192][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 236.228680][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.272186][ T9323] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 236.593046][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input15 [ 236.814211][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 236.814219][ T5790] usb 4-1: USB disconnect, device number 11 [ 236.830213][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 236.845355][ T5790] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 237.414107][ T9356] misc userio: Begin command sent, but we're already running [ 237.480780][ T27] audit: type=1326 audit(1755710744.886:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.4.1239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bb4d8ebe9 code=0x0 [ 238.042738][ T9371] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1252'. [ 238.574060][ T9390] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 238.596838][ T9390] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.607174][ T9390] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.781901][ T5790] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 238.981592][ T5790] usb 5-1: Using ep0 maxpacket: 16 [ 238.988748][ T5790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.998980][ T5790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.010545][ T5790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.020516][ T5790] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.030771][ T5790] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.044928][ T5790] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.054156][ T5790] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.062358][ T5790] usb 5-1: Manufacturer: syz [ 239.068202][ T5790] usb 5-1: config 0 descriptor?? [ 239.331524][ T5790] rc_core: IR keymap rc-hauppauge not found [ 239.337467][ T5790] Registered IR keymap rc-empty [ 239.346880][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.381586][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.415615][ T5790] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 239.429921][ T5790] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 239.446613][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.481573][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.511442][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.541541][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.572885][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.601558][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.631608][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.661645][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.691432][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.721544][ T5790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 239.752479][ T5790] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 239.761820][ T5790] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 239.772840][ T5790] usb 5-1: USB disconnect, device number 9 [ 240.775110][ T9418] netlink: 'syz.3.1264': attribute type 9 has an invalid length. [ 240.792657][ T9418] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.1264'. [ 240.942087][ T1094] kworker/u4:7: attempt to access beyond end of device [ 240.942087][ T1094] loop3: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 240.984316][ T1094] metapage_write_end_io: I/O error [ 240.989762][ T1094] JFS: metapage_get_blocks failed [ 241.017469][ T1094] JFS: metapage_get_blocks failed [ 241.301474][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 241.511546][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 241.520296][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.547915][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.565409][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 241.581003][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 241.596594][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.614334][ T9] usb 3-1: config 0 descriptor?? [ 241.649411][ T9453] mmap: syz.3.1280 (9453) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 242.064452][ T9] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 242.101970][ T9] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 242.127743][ T9] microsoft 0003:045E:07DA.0009: no inputs found [ 242.145021][ T9] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 242.256120][ T9] usb 3-1: USB disconnect, device number 13 [ 242.551636][ T9480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1292'. [ 245.701768][ T9562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1327'. [ 245.811530][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 246.001572][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 246.009319][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.027254][ T9] usb 1-1: config 0 has no interface number 0 [ 246.041474][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.051748][ T1326] JFS: metapage_get_blocks failed [ 246.063290][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.091275][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 246.110937][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.113693][ T9] usb 1-1: config 0 descriptor?? [ 246.528073][ T9578] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1334'. [ 246.739499][ T9] uclogic 0003:28BD:0094.000A: pen parameters not found [ 246.747081][ T9] uclogic 0003:28BD:0094.000A: interface is invalid, ignoring [ 246.921504][ T5852] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 246.949203][ T23] usb 1-1: USB disconnect, device number 13 [ 247.091524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 247.123717][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.123776][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 247.123807][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 247.123834][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 247.125203][ T5852] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 247.125232][ T5852] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 247.125254][ T5852] usb 3-1: Manufacturer: syz [ 247.129526][ T5852] usb 3-1: config 0 descriptor?? [ 247.442192][ T5852] rc_core: IR keymap rc-hauppauge not found [ 247.458550][ T5852] Registered IR keymap rc-empty [ 247.465340][ T5852] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 247.524138][ T5852] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 247.563312][ T5852] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 247.606380][ T5852] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 247.659515][ T5852] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 247.712670][ T5852] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 247.772353][ T5852] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 247.823415][ T5852] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 247.882146][ T5852] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 247.942775][ T5852] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 247.991555][ T5852] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 248.030897][ T5852] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 248.076762][ T5852] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 248.121912][ T5852] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 248.190739][ T5852] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 248.212948][ T5852] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 248.235357][ T5852] usb 3-1: USB disconnect, device number 14 [ 249.025342][ T9637] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 249.025342][ T9637] The task syz.0.1361 (9637) triggered the difference, watch for misbehavior. [ 250.008426][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 250.399918][ T9664] capability: warning: `syz.3.1373' uses 32-bit capabilities (legacy support in use) [ 250.969625][ T9683] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 250.985770][ T9683] syzkaller0: linktype set to 778 [ 251.109860][ T1094] JFS: metapage_get_blocks failed [ 251.616114][ T9713] netlink: 'syz.4.1396': attribute type 21 has an invalid length. [ 251.624341][ T9713] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1396'. [ 251.635686][ T9713] netlink: 'syz.4.1396': attribute type 21 has an invalid length. [ 251.643900][ T9713] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1396'. [ 251.861704][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 252.020823][ T9723] kernel read not supported for file /file1 (pid: 9723 comm: syz.2.1401) [ 252.046609][ T27] audit: type=1800 audit(1755710759.456:48): pid=9723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1401" name="file1" dev="mqueue" ino=20156 res=0 errno=0 [ 252.073100][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 252.093027][ T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 252.109710][ T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 252.132547][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 252.152648][ T9] usb 4-1: config 1 has no interface number 0 [ 252.159699][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.172616][ T9] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 252.197209][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 252.216909][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.242644][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 252.484848][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 252.923609][ T9] usb 4-1: USB disconnect, device number 12 [ 252.931014][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 254.592933][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1433'. [ 254.596538][ T9795] 9p: Unknown access argument 18446744073709551615: -34 [ 255.321742][ T5793] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 255.512583][ T5793] usb 4-1: Using ep0 maxpacket: 8 [ 255.541965][ T5793] usb 4-1: unable to get BOS descriptor or descriptor too short [ 255.570157][ T5793] usb 4-1: too many configurations: 73, using maximum allowed: 8 [ 255.591991][ T5793] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 255.599638][ T5793] usb 4-1: can't read configurations, error -71 [ 255.734327][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.742171][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.892908][ T9844] Non-string source [ 256.168096][ T5852] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 256.371516][ T5852] usb 5-1: Using ep0 maxpacket: 32 [ 256.397340][ T5852] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.412881][ T5852] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.434216][ T5852] usb 5-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec [ 256.454674][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.471407][ T5852] usb 5-1: Product: syz [ 256.475685][ T5852] usb 5-1: Manufacturer: syz [ 256.480309][ T5852] usb 5-1: SerialNumber: syz [ 256.502386][ T5852] usb 5-1: config 0 descriptor?? [ 256.636815][ T27] audit: type=1326 audit(1755710764.046:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc143185ba7 code=0x7ffc0000 [ 256.669218][ T27] audit: type=1326 audit(1755710764.046:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc14312add9 code=0x7ffc0000 [ 256.723883][ T5852] usb 5-1: USB disconnect, device number 10 [ 256.744708][ T27] audit: type=1326 audit(1755710764.046:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc143185ba7 code=0x7ffc0000 [ 256.787373][ T27] audit: type=1326 audit(1755710764.046:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc14312add9 code=0x7ffc0000 [ 256.820079][ T27] audit: type=1326 audit(1755710764.046:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc143185ba7 code=0x7ffc0000 [ 256.845599][ T27] audit: type=1326 audit(1755710764.046:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc14312add9 code=0x7ffc0000 [ 256.868366][ T27] audit: type=1326 audit(1755710764.046:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc143185ba7 code=0x7ffc0000 [ 256.915316][ T27] audit: type=1326 audit(1755710764.046:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc14312add9 code=0x7ffc0000 [ 256.967593][ T27] audit: type=1326 audit(1755710764.046:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc143185ba7 code=0x7ffc0000 [ 259.855869][ T9937] vxcan1: tx address claim with dest, not broadcast [ 259.971472][ T786] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 260.162836][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 260.174911][ T786] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 260.191571][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.218356][ T786] pvrusb2: Hardware description: Terratec Grabster AV400 [ 260.234972][ T786] pvrusb2: ********** [ 260.239036][ T786] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 260.271453][ T786] pvrusb2: Important functionality might not be entirely working. [ 260.279335][ T786] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 260.301815][ T786] pvrusb2: ********** [ 260.439350][ T2317] pvrusb2: Invalid write control endpoint [ 260.451584][ T5793] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 260.524333][ T2317] pvrusb2: Invalid write control endpoint [ 260.532749][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 260.542332][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 260.550151][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 260.567536][ T2317] pvrusb2: Device being rendered inoperable [ 260.573809][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 260.581142][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 260.589939][ T2317] pvrusb2: Attached sub-driver cx25840 [ 260.595633][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 260.606003][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 260.649872][ T9933] pvrusb2: Attempted to execute control transfer when device not ok [ 260.661585][ T786] usb 3-1: USB disconnect, device number 15 [ 260.663066][ T5793] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 260.682665][ T23] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 260.688184][ T5793] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 260.720998][ T5793] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 260.734162][ T5793] usb 1-1: config 220 has no interface number 2 [ 260.740523][ T5793] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 260.754420][ T5793] usb 1-1: config 220 interface 0 has no altsetting 0 [ 260.761248][ T5793] usb 1-1: config 220 interface 76 has no altsetting 0 [ 260.768310][ T5793] usb 1-1: config 220 interface 1 has no altsetting 0 [ 260.774560][ T9957] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 260.778511][ T5793] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 260.794382][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.802526][ T5793] usb 1-1: Product: syz [ 260.806880][ T5793] usb 1-1: Manufacturer: syz [ 260.813981][ T5793] usb 1-1: SerialNumber: syz [ 260.886032][ T23] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 260.897680][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.922583][ T23] usb 4-1: config 0 descriptor?? [ 260.955014][ T23] pwc: Samsung MPC-C10 USB webcam detected. [ 261.037799][ T5793] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 261.051555][ T5793] usb 1-1: No valid video chain found. [ 261.063723][ T5793] usb 1-1: selecting invalid altsetting 0 [ 261.112342][ T5793] usb 1-1: selecting invalid altsetting 0 [ 261.133388][ T5793] usbtest: probe of 1-1:220.1 failed with error -22 [ 261.151591][ T23] pwc: send_video_command error -71 [ 261.156865][ T23] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 261.160430][ T5793] usb 1-1: USB disconnect, device number 14 [ 261.176926][ T23] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 261.196356][ T9963] program syz.4.1512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.215250][ T23] usb 4-1: USB disconnect, device number 15 [ 261.731702][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 261.939200][ T23] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 261.949378][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.982644][ T23] usb 4-1: config 0 descriptor?? [ 261.993987][ T23] pwc: Samsung MPC-C10 USB webcam detected. [ 262.391038][ T23] pwc: recv_control_msg error -71 req 02 val 2b00 [ 262.402408][ T23] pwc: recv_control_msg error -71 req 02 val 2700 [ 262.419579][ T23] pwc: recv_control_msg error -71 req 04 val 1700 [ 262.441463][ T23] pwc: recv_control_msg error -71 req 02 val 2c00 [ 262.458216][ T23] pwc: recv_control_msg error -71 req 04 val 1000 [ 262.475474][ T23] pwc: recv_control_msg error -71 req 04 val 1300 [ 262.496228][ T23] pwc: recv_control_msg error -71 req 04 val 1400 [ 262.516144][ T23] pwc: recv_control_msg error -71 req 02 val 2000 [ 262.523839][ T23] pwc: recv_control_msg error -71 req 02 val 2100 [ 262.531689][ T23] pwc: recv_control_msg error -71 req 02 val 2200 [ 262.546714][ T23] pwc: recv_control_msg error -71 req 06 val 0600 [ 262.561288][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 262.576043][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 262.586555][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 262.612206][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 262.630982][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 262.638202][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 262.657136][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 262.675032][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 262.696743][ T23] pwc: Registered as video103. [ 262.710014][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 262.745341][ T23] usb 4-1: USB disconnect, device number 16 [ 262.942086][ T1094] kworker/u4:7: attempt to access beyond end of device [ 262.942086][ T1094] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 262.971413][ T1094] metapage_write_end_io: I/O error [ 262.991648][ T1094] JFS: metapage_get_blocks failed [ 263.003207][ T1094] JFS: metapage_get_blocks failed [ 263.393953][T10024] macsec3: entered allmulticast mode [ 263.409763][T10024] macvlan0: entered allmulticast mode [ 263.425956][T10024] veth1_vlan: entered allmulticast mode [ 263.447506][T10024] macvlan0: left allmulticast mode [ 263.461758][T10024] veth1_vlan: left allmulticast mode [ 266.010715][T10102] /dev/loop0: Can't open blockdev [ 266.181146][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 266.181163][ T27] audit: type=1326 audit(1755710773.586:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14318ebe9 code=0x7ffc0000 [ 266.229669][ T27] audit: type=1326 audit(1755710773.626:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14318ebe9 code=0x7ffc0000 [ 266.276306][ T27] audit: type=1326 audit(1755710773.626:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc14318ebe9 code=0x7ffc0000 [ 266.298856][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.305481][ T27] audit: type=1326 audit(1755710773.626:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc14318ec23 code=0x7ffc0000 [ 266.327658][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.389015][ T27] audit: type=1326 audit(1755710773.736:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc14318d69f code=0x7ffc0000 [ 266.411519][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.461690][ T27] audit: type=1326 audit(1755710773.796:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc14318ec77 code=0x7ffc0000 [ 266.489144][ T27] audit: type=1326 audit(1755710773.806:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc14318d550 code=0x7ffc0000 [ 266.511613][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.541708][ T27] audit: type=1326 audit(1755710773.806:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc14318e7eb code=0x7ffc0000 [ 266.564117][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.616912][ T27] audit: type=1326 audit(1755710773.806:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc14318e7eb code=0x7ffc0000 [ 266.665291][ T27] audit: type=1326 audit(1755710773.806:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.2.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc1431c14a5 code=0x7ffc0000 [ 267.321568][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 267.403405][T10140] input: syz0 as /devices/virtual/input/input21 [ 267.501431][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 267.516491][ T23] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 267.531155][ T23] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 267.550987][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.569601][ T23] usb 1-1: Product: syz [ 267.580117][ T23] usb 1-1: Manufacturer: syz [ 267.599986][ T23] usb 1-1: SerialNumber: syz [ 267.616648][ T23] usb 1-1: config 0 descriptor?? [ 267.637801][ T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 267.656456][ T23] usb 1-1: setting power ON [ 267.664683][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 267.690810][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.701057][ T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 267.723035][ T23] usb 1-1: media controller created [ 267.766588][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.804105][ T23] usb 1-1: selecting invalid altsetting 6 [ 267.818342][ T23] usb 1-1: digital interface selection failed (-22) [ 267.840953][ T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 267.873023][T10134] dvb-usb: bulk message failed: -22 (3/0) [ 267.879948][T10134] dvb-usb: bulk message failed: -22 (37/0) [ 267.887876][ T23] usb 1-1: setting power OFF [ 267.907228][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 267.921437][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 267.931053][T10134] dvb-usb: bulk message failed: -22 (3/0) [ 267.937137][T10134] dvb-usb: bulk message failed: -22 (3/0) [ 267.943095][ T23] (NULL device *): no alternate interface [ 267.986944][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 268.013547][ T23] usb 1-1: USB disconnect, device number 15 [ 268.051627][ T48] JFS: metapage_get_blocks failed [ 268.452256][ T42] kworker/u4:2: attempt to access beyond end of device [ 268.452256][ T42] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 268.471378][ T42] metapage_write_end_io: I/O error [ 268.477100][ T42] JFS: metapage_get_blocks failed [ 268.488076][ T42] JFS: metapage_get_blocks failed [ 269.633291][T10193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1619'. [ 269.902501][T10207] netlink: 'syz.2.1625': attribute type 9 has an invalid length. [ 269.910470][T10207] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.1625'. [ 270.522256][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 270.570064][T10227] netlink: 'syz.3.1632': attribute type 2 has an invalid length. [ 271.241629][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 271.432553][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 271.455568][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 271.475495][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.492523][ T9] usb 1-1: Product: syz [ 271.507091][ T9] usb 1-1: Manufacturer: syz [ 271.514849][ T9] usb 1-1: SerialNumber: syz [ 271.552660][ T9] usb 1-1: config 0 descriptor?? [ 271.561752][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 271.772917][ T9] gspca_sn9c2028: read1 error -32 [ 271.778975][ T9] gspca_sn9c2028: read1 error -32 [ 271.892519][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'. [ 271.990530][ T9] usb 1-1: USB disconnect, device number 16 [ 272.925030][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 272.925046][ T27] audit: type=1326 audit(1755710780.336:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a238ebe9 code=0x7ffc0000 [ 272.981430][ T27] audit: type=1326 audit(1755710780.366:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a238ebe9 code=0x7ffc0000 [ 273.005074][ T27] audit: type=1326 audit(1755710780.366:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f23a238ebe9 code=0x7ffc0000 [ 273.042256][ T27] audit: type=1326 audit(1755710780.366:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f23a238ec23 code=0x7ffc0000 [ 273.068945][ T27] audit: type=1326 audit(1755710780.416:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f23a238d69f code=0x7ffc0000 [ 273.091418][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.098146][ T27] audit: type=1326 audit(1755710780.476:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f23a238ec77 code=0x7ffc0000 [ 273.098921][ T1094] JFS: metapage_get_blocks failed [ 273.147953][ T27] audit: type=1326 audit(1755710780.556:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23a238d550 code=0x7ffc0000 [ 273.201442][ T27] audit: type=1326 audit(1755710780.576:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23a238e7eb code=0x7ffc0000 [ 273.224422][ T27] audit: type=1326 audit(1755710780.576:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23a238e7eb code=0x7ffc0000 [ 273.297209][ T27] audit: type=1326 audit(1755710780.586:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10306 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f23a23c14a5 code=0x7ffc0000 [ 273.577309][ T1094] JFS: metapage_get_blocks failed [ 274.862300][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'. [ 275.812256][T10361] sctp: [Deprecated]: syz.3.1694 (pid 10361) Use of int in max_burst socket option. [ 275.812256][T10361] Use struct sctp_assoc_value instead [ 275.842058][T10363] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1695'. [ 277.261656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 277.298707][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 277.346212][T10411] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1716'. [ 278.054234][T10435] kernel read not supported for file /file1 (pid: 10435 comm: syz.3.1723) [ 278.068264][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 278.068282][ T27] audit: type=1800 audit(1755710785.476:150): pid=10435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1723" name="file1" dev="mqueue" ino=23662 res=0 errno=0 [ 278.616738][ T1094] JFS: metapage_get_blocks failed [ 278.921394][T10453] kvm: user requested TSC rate below hardware speed [ 279.205852][T10464] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 279.396017][T10467] netlink: 'syz.2.1740': attribute type 1 has an invalid length. [ 280.538643][T10508] 9p: Unknown access argument 18446744073709551615: -34 [ 281.549392][T10529] kernel read not supported for file /file1 (pid: 10529 comm: syz.4.1766) [ 281.568533][ T27] audit: type=1800 audit(1755710788.976:151): pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1766" name="file1" dev="mqueue" ino=23917 res=0 errno=0 [ 281.588646][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.976722][ T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 282.161492][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 282.174290][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 282.182524][ T23] usb 3-1: too many configurations: 73, using maximum allowed: 8 [ 282.191076][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 282.198977][ T23] usb 3-1: can't read configurations, error -71 [ 283.891500][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 288.099264][T10705] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 288.118671][T10706] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1840'. [ 289.091698][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 289.281556][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 289.299641][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 289.319045][ T23] usb 5-1: config 1 has an invalid interface number: 160 but max is 0 [ 289.334140][ T23] usb 5-1: config 1 has no interface number 0 [ 289.346970][ T23] usb 5-1: config 1 interface 160 has no altsetting 0 [ 289.359168][ T23] usb 5-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 289.381653][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.395700][ T23] usb 5-1: Product: syz [ 289.400790][ T23] usb 5-1: Manufacturer: syz [ 289.409223][ T23] usb 5-1: SerialNumber: syz [ 289.674947][ T23] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 289.691809][ T23] visor 5-1:1.160: Handspring Visor / Palm OS converter detected [ 289.722631][ T23] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 289.750347][ T23] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 289.777519][ T23] usb 5-1: USB disconnect, device number 11 [ 289.800397][ T23] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 289.804116][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.843833][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.860375][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.863149][ T23] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 289.889788][ T23] visor 5-1:1.160: device disconnected [ 289.890825][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.931568][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 289.946292][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.203273][ T2969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.426065][ T2969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.668669][ T2969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.834039][ T2969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.891025][T10749] chnl_net:caif_netlink_parms(): no params data found [ 291.228634][T10749] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.261525][T10749] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.268914][T10749] bridge_slave_0: entered allmulticast mode [ 291.293001][T10749] bridge_slave_0: entered promiscuous mode [ 291.315032][T10749] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.322846][T10749] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.341093][T10749] bridge_slave_1: entered allmulticast mode [ 291.356915][T10749] bridge_slave_1: entered promiscuous mode [ 291.416950][ T2969] tipc: Disabling bearer [ 291.440824][ T2969] tipc: Left network mode [ 291.496311][T10749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.514665][T10749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.657296][T10749] team0: Port device team_slave_0 added [ 291.692020][T10749] team0: Port device team_slave_1 added [ 291.850954][T10749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.870698][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.896747][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.950754][T10749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.974203][T10749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.981260][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.013651][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.020884][T10749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.052537][ T5794] Bluetooth: hci4: command tx timeout [ 292.469917][T10749] hsr_slave_0: entered promiscuous mode [ 292.488054][T10749] hsr_slave_1: entered promiscuous mode [ 292.507874][T10749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.531744][T10749] Cannot create hsr debugfs directory [ 293.277199][ T2969] hsr_slave_0: left promiscuous mode [ 293.291056][ T2969] hsr_slave_1: left promiscuous mode [ 293.319382][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.341404][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.368073][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.401464][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.422188][ T2969] bridge_slave_1: left allmulticast mode [ 293.428044][ T2969] bridge_slave_1: left promiscuous mode [ 293.444890][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.468049][ T2969] bridge_slave_0: left allmulticast mode [ 293.481565][ T2969] bridge_slave_0: left promiscuous mode [ 293.497970][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.575807][ T2969] bridge0: left promiscuous mode [ 293.604345][ T2969] veth1_macvtap: left promiscuous mode [ 293.610026][ T2969] veth0_macvtap: left promiscuous mode [ 293.626898][ T2969] veth1_vlan: left promiscuous mode [ 293.635280][ T2969] veth0_vlan: left promiscuous mode [ 294.131898][ T5794] Bluetooth: hci4: command tx timeout [ 294.262374][ T2969] bond0 (unregistering): (slave bond1): Releasing backup interface [ 294.281901][ T2969] bond1 (unregistering): Released all slaves [ 295.208637][ T2969] team0 (unregistering): Port device team_slave_1 removed [ 295.293308][ T2969] team0 (unregistering): Port device team_slave_0 removed [ 295.369412][ T2969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.456825][ T2969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.136930][ T2969] bond0 (unregistering): Released all slaves [ 296.211559][ T5794] Bluetooth: hci4: command tx timeout [ 296.450409][T10749] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 296.492342][T10749] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 296.522175][T10749] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 296.558016][T10749] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 296.571172][T10852] netlink: 'syz.3.1901': attribute type 9 has an invalid length. [ 296.581353][T10852] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1901'. [ 296.781639][ T786] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 296.794269][T10749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.854433][T10749] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.880274][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.887546][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.905834][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.913101][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.976469][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 296.980548][T10749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.005405][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.020215][ T786] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 297.044975][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.074808][ T786] usb 1-1: config 0 descriptor?? [ 297.293940][T10749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.515769][ T786] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 297.824757][T10749] veth0_vlan: entered promiscuous mode [ 297.839376][T10749] veth1_vlan: entered promiscuous mode [ 297.899068][T10749] veth0_macvtap: entered promiscuous mode [ 297.918551][T10749] veth1_macvtap: entered promiscuous mode [ 297.925816][ T5793] usb 1-1: USB disconnect, device number 17 [ 297.969231][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.981478][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.991994][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.002523][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.012934][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.023932][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.035855][T10749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.065485][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.077134][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.101395][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.121510][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.141365][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.158899][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.171836][T10749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.202197][T10749] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.210983][T10749] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.227358][T10749] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.239278][T10749] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.293748][ T5794] Bluetooth: hci4: command tx timeout [ 298.402280][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.410260][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.446916][T10907] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 298.485709][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.501445][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.151683][ T786] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 299.220270][T10919] loop5: detected capacity change from 0 to 32768 [ 299.280939][ T27] audit: type=1800 audit(1755711318.685:152): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1923" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 299.285286][T10919] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 299.285286][T10919] [ 299.338912][T10919] ERROR: (device loop5): remounting filesystem as read-only [ 299.341475][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 299.353673][T10919] xtLookup: xtSearch returned -5 [ 299.361036][T10919] ERROR: (device loop5): xtTruncate: XT_GETPAGE: xtree page corrupt [ 299.361036][T10919] [ 299.363061][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.411611][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.423727][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 299.441509][ T786] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 299.451221][ T786] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.482900][ T786] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 299.493055][ T786] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 299.501111][ T786] usb 1-1: Manufacturer: syz [ 299.529269][ T786] usb 1-1: config 0 descriptor?? [ 299.953181][ T786] rc_core: IR keymap rc-hauppauge not found [ 299.959501][ T786] Registered IR keymap rc-empty [ 299.981628][ T786] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 300.019071][ T786] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 300.062484][ T786] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 300.083113][ T786] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22 [ 300.104347][ T786] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 300.141660][ T786] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 300.172425][ T786] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 300.203716][ T786] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 300.241733][ T786] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 300.287668][ T786] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 300.333864][ T786] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 300.372617][ T786] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 300.413094][ T786] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 300.445014][ T786] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 300.478410][T10958] loop5: detected capacity change from 0 to 1024 [ 300.493318][ T786] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 300.512205][ T786] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 300.537149][ T786] usb 1-1: USB disconnect, device number 18 [ 300.687913][ T2978] hfsplus: b-tree write err: -5, ino 4 [ 300.807162][T10965] process 'syz.5.1940' launched './file0' with NULL argv: empty string added [ 301.586362][ T54] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 301.702070][T10990] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1949'. [ 301.784632][ T54] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 301.795020][ T54] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 301.822567][ T54] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 301.851424][ T54] usb 5-1: config 220 has no interface number 2 [ 301.863684][ T54] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 301.907537][ T54] usb 5-1: config 220 interface 0 has no altsetting 0 [ 301.921411][ T54] usb 5-1: config 220 interface 76 has no altsetting 0 [ 301.938785][ T54] usb 5-1: config 220 interface 1 has no altsetting 0 [ 301.954708][ T54] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 301.965163][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.988978][ T54] usb 5-1: Product: syz [ 302.005952][ T54] usb 5-1: Manufacturer: syz [ 302.010628][ T54] usb 5-1: SerialNumber: syz [ 302.259568][ T54] usb 5-1: selecting invalid altsetting 0 [ 302.275162][ T54] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 302.290517][ T54] usb 5-1: No valid video chain found. [ 302.323948][ T54] usb 5-1: selecting invalid altsetting 0 [ 302.330609][ T54] usbtest: probe of 5-1:220.1 failed with error -22 [ 302.346111][ T54] usb 5-1: USB disconnect, device number 12 [ 303.102599][T11003] loop5: detected capacity change from 0 to 32768 [ 303.151633][T11003] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 303.344443][T11003] XFS (loop5): Ending clean mount [ 303.469688][T11003] XFS (loop5): User initiated shutdown received. [ 303.481713][T11003] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 303.511543][T11003] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 303.587744][T10749] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 304.118290][T11067] sctp: [Deprecated]: syz.5.1976 (pid 11067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.118290][T11067] Use struct sctp_sack_info instead [ 305.672763][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 305.885026][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 305.916685][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 305.936072][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.954274][ T9] usb 1-1: config 0 descriptor?? [ 305.967329][T11108] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 306.392621][ T9] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 306.592410][ T9] usb 1-1: USB disconnect, device number 19 [ 306.894994][ T28] hid-generic 0005:0B57:FFF9.000D: item fetching failed at offset 0/1 [ 306.908894][ T28] hid-generic: probe of 0005:0B57:FFF9.000D failed with error -22 [ 307.091605][ T5789] Bluetooth: hci3: command 0x1003 tx timeout [ 307.091662][ T5794] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 307.681517][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 307.882008][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 307.898801][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 307.921713][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.965465][ T9] usb 1-1: config 0 descriptor?? [ 308.147493][T11164] loop5: detected capacity change from 0 to 32768 [ 308.167753][T11164] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 308.186636][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 308.198260][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 308.207701][T11164] XFS (loop5): Ending clean mount [ 308.232571][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 308.244421][ T9] usb 1-1: media controller created [ 308.297678][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.339377][T10749] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 308.394855][ T9] az6027: usb out operation failed. (-71) [ 308.428833][ T9] az6027: usb out operation failed. (-71) [ 308.442108][ T9] stb0899_attach: Driver disabled by Kconfig [ 308.448176][ T9] az6027: no front-end attached [ 308.448176][ T9] [ 308.471029][ T9] az6027: usb out operation failed. (-71) [ 308.504097][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 308.513148][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 308.534866][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 308.576239][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 308.631901][ T9] usb 1-1: USB disconnect, device number 20 [ 308.743410][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 308.932988][T11184] block nbd0: server does not support multiple connections per device. [ 308.945327][T11184] block nbd0: shutting down sockets [ 311.404130][T11262] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2066'. [ 311.483187][ T27] audit: type=1326 audit(1755711330.895:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddf38ebe9 code=0x7ffc0000 [ 311.511696][ T9] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 311.521994][ T27] audit: type=1326 audit(1755711330.915:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddf38ebe9 code=0x7ffc0000 [ 311.547494][ T27] audit: type=1326 audit(1755711330.925:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efddf38ebe9 code=0x7ffc0000 [ 311.570451][ T27] audit: type=1326 audit(1755711330.925:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddf38ebe9 code=0x7ffc0000 [ 311.593073][ T27] audit: type=1326 audit(1755711330.925:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efddf38ebe9 code=0x7ffc0000 [ 311.618127][ T27] audit: type=1326 audit(1755711330.925:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddf38ebe9 code=0x7ffc0000 [ 311.641507][ T27] audit: type=1326 audit(1755711330.925:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efddf385ba7 code=0x7ffc0000 [ 311.668303][ T27] audit: type=1326 audit(1755711330.925:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efddf32add9 code=0x7ffc0000 [ 311.691625][ T27] audit: type=1326 audit(1755711330.925:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efddf385ba7 code=0x7ffc0000 [ 311.715540][ T27] audit: type=1326 audit(1755711330.925:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11265 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efddf32add9 code=0x7ffc0000 [ 311.756487][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.766903][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.780923][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.791087][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.799173][ T9] usb 5-1: Product: syz [ 311.803568][ T9] usb 5-1: Manufacturer: syz [ 311.809054][ T9] usb 5-1: SerialNumber: syz [ 312.240618][ T9] usb 5-1: cannot find UAC_HEADER [ 312.293052][ T9] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 312.541433][ T9] usb 5-1: USB disconnect, device number 13 [ 312.701869][ T54] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 312.891506][ T54] usb 4-1: Using ep0 maxpacket: 16 [ 312.902953][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.930484][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.947597][ T54] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 312.966381][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.986673][ T54] usb 4-1: config 0 descriptor?? [ 313.023519][T11303] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2086'. [ 313.115495][T11307] loop5: detected capacity change from 0 to 512 [ 313.142917][T11307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 313.238305][T11307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 313.252856][T11307] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.279046][T11314] tap0: tun_chr_ioctl cmd 2147767517 [ 313.339545][T10749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 313.649421][ T54] usb 4-1: string descriptor 0 read error: -71 [ 313.695347][ T54] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 313.710168][ T54] letsketch: probe of 0003:6161:4D15.000E failed with error -32 [ 313.734861][ T54] usb 4-1: USB disconnect, device number 17 [ 314.111398][ T28] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 314.299551][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.328748][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.358188][ T28] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 314.371788][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.393091][ T28] usb 1-1: config 0 descriptor?? [ 314.840912][ T28] playstation 0003:054C:0BA0.000F: unknown main item tag 0x0 [ 314.874179][ T28] playstation 0003:054C:0BA0.000F: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 315.049919][ T28] playstation 0003:054C:0BA0.000F: Invalid reportID received, expected 18 got 146 [ 315.071549][ T28] playstation 0003:054C:0BA0.000F: Failed to retrieve DualShock4 pairing info: -22 [ 315.080973][ T28] playstation 0003:054C:0BA0.000F: Failed to get MAC address from DualShock4 [ 315.127335][ T28] playstation 0003:054C:0BA0.000F: Failed to create dualshock4. [ 315.147107][ T28] playstation: probe of 0003:054C:0BA0.000F failed with error -22 [ 315.161449][ T5852] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 315.308232][ T28] usb 1-1: USB disconnect, device number 21 [ 315.361964][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 315.370959][ T5852] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 315.386055][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.417748][ T5852] usb 4-1: config 0 descriptor?? [ 315.639762][ T5852] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 315.651947][ T5852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 315.669588][ T5852] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 315.678191][ T5852] usb 4-1: media controller created [ 315.682773][T11368] overlayfs: failed to resolve './file1': -2 [ 315.715025][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.848582][ T5852] az6027: usb out operation failed. (-71) [ 315.860941][ T5852] az6027: usb out operation failed. (-71) [ 315.866863][ T5852] stb0899_attach: Driver disabled by Kconfig [ 315.875126][ T5852] az6027: no front-end attached [ 315.875126][ T5852] [ 315.887006][ T5852] az6027: usb out operation failed. (-71) [ 315.901335][ T5852] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 315.921552][ T5852] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 315.945149][ T5852] dvb-usb: schedule remote query interval to 400 msecs. [ 315.953547][ T5852] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 315.974065][ T5852] usb 4-1: USB disconnect, device number 18 [ 316.034431][ T5852] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 317.035824][T11401] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 317.057442][T11401] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 317.179597][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.195718][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.221257][T11430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2144'. [ 319.138502][T11434] loop5: detected capacity change from 0 to 32768 [ 319.165506][T11434] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 319.293371][T11434] XFS (loop5): Ending clean mount [ 319.316154][T11434] XFS (loop5): Quotacheck needed: Please wait. [ 319.399267][T11434] XFS (loop5): Quotacheck: Done. [ 319.511860][T10749] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 319.761430][ T5852] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 319.951515][ T5852] usb 5-1: Using ep0 maxpacket: 8 [ 319.961172][ T5852] usb 5-1: config 0 has no interfaces? [ 319.983706][ T5852] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 320.001868][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.020400][ T5852] usb 5-1: Product: syz [ 320.024771][ T5852] usb 5-1: Manufacturer: syz [ 320.029504][ T5852] usb 5-1: SerialNumber: syz [ 320.047710][ T5852] usb 5-1: config 0 descriptor?? [ 320.272779][ T5852] usb 5-1: USB disconnect, device number 14 [ 320.548849][T11476] loop5: detected capacity change from 0 to 32768 [ 320.570557][T11476] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 320.658500][T11476] XFS (loop5): Ending clean mount [ 320.715851][T11476] XFS (loop5): User initiated shutdown received. [ 320.736739][T11476] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 320.757763][T11476] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 320.824537][T10749] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 321.297880][ T23] hid-generic 0005:15C2:3010.0010: item fetching failed at offset 0/1 [ 321.318202][ T23] hid-generic: probe of 0005:15C2:3010.0010 failed with error -22 [ 321.446428][T11523] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2183'. [ 321.468132][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2181'. [ 321.612677][T11528] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2184'. [ 321.976140][T11544] bond0: entered allmulticast mode [ 321.991508][T11544] bond_slave_0: entered allmulticast mode [ 321.997404][T11544] bond_slave_1: entered allmulticast mode [ 323.311600][ T5852] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 323.501448][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 323.523192][ T5852] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.551546][ T5852] usb 1-1: config 0 interface 0 has no altsetting 0 [ 323.570885][ T5852] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 323.608414][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.629465][ T5852] usb 1-1: config 0 descriptor?? [ 324.071920][ T5852] stadia 0003:18D1:9400.0011: unknown main item tag 0x0 [ 324.079159][ T5852] stadia 0003:18D1:9400.0011: unknown main item tag 0x0 [ 324.119535][ T5852] stadia 0003:18D1:9400.0011: item fetching failed at offset 2/5 [ 324.147732][ T5852] stadia 0003:18D1:9400.0011: parse failed [ 324.164113][ T5852] stadia: probe of 0003:18D1:9400.0011 failed with error -22 [ 324.279459][ T5852] usb 1-1: USB disconnect, device number 22 [ 325.233421][ T5794] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 325.901781][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 326.125403][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 326.158203][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.205772][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 326.236848][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2214'. [ 326.256748][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.283797][ T9] usb 1-1: config 0 descriptor?? [ 326.762722][ T9] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 327.164841][ T9] usb 1-1: USB disconnect, device number 23 [ 327.383658][T11590] loop5: detected capacity change from 0 to 32768 [ 327.400803][T11590] [ 327.400803][T11590] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.400803][T11590] [ 327.486793][ T2969] read_mapping_page failed! [ 327.496915][ T2969] ERROR: (device loop5): txCommit: [ 327.496915][ T2969] [ 327.515850][ T2969] jfs_write_inode: jfs_commit_inode failed! [ 327.530157][T10749] [ 327.530157][T10749] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.530157][T10749] [ 327.541548][T10749] [ 327.541548][T10749] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 327.541548][T10749] [ 327.888185][T11599] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2217'. [ 328.152992][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2221'. [ 328.298532][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2221'. [ 328.536759][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2221'. [ 328.873372][T11622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.881749][T11622] IPv6: NLM_F_CREATE should be set when creating new route [ 328.889146][T11622] IPv6: NLM_F_CREATE should be set when creating new route [ 328.896565][T11622] IPv6: NLM_F_CREATE should be set when creating new route [ 328.928051][T11622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.251542][ T5794] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 329.260743][ T5794] Bluetooth: hci2: Injecting HCI hardware error event [ 329.271111][ T5789] Bluetooth: hci2: hardware error 0x00 [ 330.261539][ T23] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 330.451572][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 330.470427][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.491758][ T23] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 330.519228][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.544176][ T23] usb 5-1: config 0 descriptor?? [ 330.972812][ T23] pantherlord 0003:0E8F:0003.0013: item fetching failed at offset 3/5 [ 330.992451][ T23] pantherlord 0003:0E8F:0003.0013: parse failed [ 330.999167][ T23] pantherlord: probe of 0003:0E8F:0003.0013 failed with error -22 [ 331.148166][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2238'. [ 331.173498][ T23] usb 5-1: USB disconnect, device number 15 [ 331.735164][ T5789] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 332.161655][ T786] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 332.269972][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 332.269989][ T27] audit: type=1326 audit(1755711351.675:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.0.2243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efddf38ebe9 code=0x0 [ 332.361687][ T786] usb 5-1: Using ep0 maxpacket: 32 [ 332.369967][ T786] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 332.383020][ T786] usb 5-1: config 0 has no interface number 0 [ 332.393095][ T786] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 332.403017][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.411199][ T786] usb 5-1: Product: syz [ 332.415963][ T786] usb 5-1: Manufacturer: syz [ 332.420765][ T786] usb 5-1: SerialNumber: syz [ 332.430162][ T786] usb 5-1: config 0 descriptor?? [ 332.439430][ T786] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 332.665973][ T786] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 332.682386][ T786] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 332.934697][T11650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.953394][T11650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.180576][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 333.181483][ T5852] usb 5-1: USB disconnect, device number 16 [ 333.212499][ T5852] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 333.244350][ T5852] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 333.273162][ T5852] quatech2 5-1:0.51: device disconnected [ 333.312012][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 334.651957][T11677] Falling back ldisc for ptm0. [ 336.989009][T11708] bond0: entered allmulticast mode [ 336.997215][T11708] bond_slave_0: entered allmulticast mode [ 337.007202][T11708] bond_slave_1: entered allmulticast mode [ 337.391530][ T23] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 337.581472][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 337.594135][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.614833][ T23] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 337.632009][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.672487][ T23] usb 5-1: config 0 descriptor?? [ 338.001704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 338.149952][ T23] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 338.734554][ T23] usb 5-1: USB disconnect, device number 17 [ 338.843081][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.857462][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.882863][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.901631][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.922151][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.963060][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.370013][T11733] bond0: entered allmulticast mode [ 339.375648][T11733] bond_slave_0: entered allmulticast mode [ 339.381515][T11733] bond_slave_1: entered allmulticast mode [ 339.394261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 339.615552][ T2978] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.849220][ T2978] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.006851][T11722] chnl_net:caif_netlink_parms(): no params data found [ 340.084243][ T2978] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.155145][T11737] loop5: detected capacity change from 0 to 32768 [ 340.234882][ T2978] team0: Port device netdevsim0 removed [ 340.244996][ T2978] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.356935][T11722] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.381685][T11722] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.391577][T11722] bridge_slave_0: entered allmulticast mode [ 340.399168][T11722] bridge_slave_0: entered promiscuous mode [ 340.475984][T11722] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.485042][T11722] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.494912][T11722] bridge_slave_1: entered allmulticast mode [ 340.506362][T11722] bridge_slave_1: entered promiscuous mode [ 340.598780][T11722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.625122][T11722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.732572][ T5793] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 340.750554][T11722] team0: Port device team_slave_0 added [ 340.859011][T11722] team0: Port device team_slave_1 added [ 340.966674][ T5793] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 340.991609][T11722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.991628][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.011894][ T5789] Bluetooth: hci3: command tx timeout [ 341.029250][T11722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.041673][ T5793] usb 1-1: Product: syz [ 341.099011][ T5793] usb 1-1: Manufacturer: syz [ 341.104066][T11722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.115086][ T5793] usb 1-1: SerialNumber: syz [ 341.127051][T11722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.134804][T11722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.163983][ T5793] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 341.191528][T11722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.295574][ T54] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 341.436410][T11722] hsr_slave_0: entered promiscuous mode [ 341.450247][T11722] hsr_slave_1: entered promiscuous mode [ 341.457696][T11722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.477558][T11722] Cannot create hsr debugfs directory [ 341.754156][T11775] loop5: detected capacity change from 0 to 2048 [ 341.773087][T11775] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 341.834776][T11775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.266666][T11722] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 342.279368][T11722] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.309827][ T9] usb 1-1: USB disconnect, device number 24 [ 342.321854][T11722] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 342.372222][T11722] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 342.430868][ T2978] hsr_slave_0: left promiscuous mode [ 342.436756][ T2978] hsr_slave_1: left promiscuous mode [ 342.443077][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.450573][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.458986][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.470141][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.477785][ T2978] bridge_slave_1: left allmulticast mode [ 342.483870][ T2978] bridge_slave_1: left promiscuous mode [ 342.489582][ T2978] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.499541][ T2978] bridge_slave_0: left allmulticast mode [ 342.505556][ T2978] bridge_slave_0: left promiscuous mode [ 342.511484][ T2978] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.536594][ T2978] veth1_macvtap: left promiscuous mode [ 342.542383][ T2978] veth0_macvtap: left promiscuous mode [ 342.547943][ T2978] veth1_vlan: left promiscuous mode [ 342.553364][ T2978] veth0_vlan: left promiscuous mode [ 342.945611][ T54] usb 1-1: Service connection timeout for: 257 [ 342.952013][ T54] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 342.972391][ T54] ath9k_htc: Failed to initialize the device [ 342.981591][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 343.099326][ T5789] Bluetooth: hci3: command tx timeout [ 343.344375][ T2978] team0 (unregistering): Port device team_slave_1 removed [ 343.408401][ T2978] team0 (unregistering): Port device team_slave_0 removed [ 343.471936][ T2978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.537460][ T2978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.271637][ T2978] bond0 (unregistering): Released all slaves [ 344.403861][T11722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.429023][T11722] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.460262][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.467472][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.513394][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.520552][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.760484][ T2978] IPVS: stop unused estimator thread 0... [ 344.832234][T11722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.020312][T11722] veth0_vlan: entered promiscuous mode [ 345.036390][T11722] veth1_vlan: entered promiscuous mode [ 345.066131][T11722] veth0_macvtap: entered promiscuous mode [ 345.075067][T11722] veth1_macvtap: entered promiscuous mode [ 345.094746][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.105292][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.115653][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.126969][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.137129][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.147631][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.158952][T11722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.171777][ T5789] Bluetooth: hci3: command tx timeout [ 345.178752][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.189269][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.199647][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.210234][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.220469][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.231097][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.244195][T11722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.261004][T11722] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.270065][T11722] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.278783][T11722] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.287565][T11722] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.368271][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.384708][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.408916][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.418655][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.970852][T11808] sp0: Synchronizing with TNC [ 346.331602][ T54] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 346.449205][T11805] loop6: detected capacity change from 0 to 32768 [ 346.500314][T11826] vivid-000: ================= START STATUS ================= [ 346.511459][T11826] vivid-000: Test Pattern: 75% Colorbar [ 346.518014][T11826] vivid-000: Fill Percentage of Frame: 100 [ 346.527049][T11826] vivid-000: Horizontal Movement: No Movement [ 346.542058][ T54] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 346.556851][T11826] vivid-000: Vertical Movement: No Movement [ 346.565891][ T54] usb 5-1: config 0 interface 0 has no altsetting 0 [ 346.573344][T11826] vivid-000: OSD Text Mode: All [ 346.579259][T11826] vivid-000: Show Border: false [ 346.587428][ T54] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 346.599188][T11826] vivid-000: Show Square: false [ 346.599565][ T54] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 346.613006][T11826] vivid-000: Sensor Flipped Horizontally: false [ 346.613093][T11826] vivid-000: Sensor Flipped Vertically: false [ 346.613116][T11826] vivid-000: Insert SAV Code in Image: false [ 346.613139][T11826] vivid-000: Insert EAV Code in Image: false [ 346.623329][ T54] usb 5-1: Product: syz [ 346.632310][T11826] [ 346.632323][T11826] vivid-000: Insert Video Guard Band: false [ 346.632351][T11826] vivid-000: Reduced Framerate: false [ 346.632374][T11826] vivid-000: Enable Capture Cropping: true [ 346.638760][ T54] usb 5-1: Manufacturer: syz [ 346.647438][T11826] grabbed [ 346.651235][ T54] usb 5-1: SerialNumber: syz [ 346.659457][T11826] [ 346.665202][ T54] usb 5-1: config 0 descriptor?? [ 346.667099][T11826] vivid-000: Enable Capture Composing: true grabbed [ 346.667138][T11826] vivid-000: Enable Capture Scaler: true [ 346.675791][ T54] usb 5-1: selecting invalid altsetting 0 [ 346.681858][T11826] grabbed [ 346.718121][T11826] vivid-000: Timestamp Source: End of Frame [ 346.730672][T11826] vivid-000: Colorspace: sRGB [ 346.743312][T11826] vivid-000: Transfer Function: Default [ 346.759770][T11826] vivid-000: Y'CbCr Encoding: Default [ 346.774993][T11826] vivid-000: HSV Encoding: Hue 0-179 [ 346.780424][T11826] vivid-000: Quantization: Default [ 346.790613][T11826] vivid-000: Apply Alpha To Red Only: false [ 346.796906][T11826] vivid-000: Standard Aspect Ratio: 4x3 [ 346.807439][T11826] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 346.817499][T11826] vivid-000: DV Timings: 640x480p59 inactive [ 346.824674][T11826] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 346.832798][T11826] vivid-000: Maximum EDID Blocks: 2 [ 346.838059][T11826] vivid-000: Limited RGB Range (16-235): false [ 346.849123][T11826] vivid-000: Rx RGB Quantization Range: Automatic [ 346.860669][T11826] vivid-000: Power Present: 0x00000001 [ 346.881966][T11826] tpg source WxH: 640x360 (Y'CbCr) [ 346.888047][T11826] tpg field: 1 [ 346.912089][T11826] tpg crop: 640x360@0x0 [ 346.916349][T11826] tpg compose: 640x360@0x0 [ 346.920811][T11826] tpg colorspace: 8 [ 346.951570][T11826] tpg transfer function: 0/2 [ 346.956390][T11826] tpg Y'CbCr encoding: 0/1 [ 346.960881][T11826] tpg quantization: 0/2 [ 346.991525][T11826] tpg RGB range: 0/2 [ 346.995497][T11826] vivid-000: ================== END STATUS ================== [ 347.110829][ T54] usb 5-1: USB disconnect, device number 18 [ 347.252542][ T5789] Bluetooth: hci3: command tx timeout [ 347.526510][T11835] loop6: detected capacity change from 0 to 32768 [ 347.534959][T11835] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 scanned by syz.6.2315 (11835) [ 347.549653][T11835] BTRFS info (device loop6): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 347.560528][T11835] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 347.569558][T11835] BTRFS info (device loop6): using free space tree [ 347.629981][T11835] BTRFS info (device loop6): enabling ssd optimizations [ 347.637419][T11835] BTRFS info (device loop6): auto enabling async discard [ 347.707986][ T27] audit: type=1800 audit(1755711367.115:199): pid=11835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2315" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 347.793113][T11722] BTRFS info (device loop6): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 348.247029][T11870] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2321'. [ 348.419240][T11878] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2337'. [ 348.837914][ T54] kernel read not supported for file /dsp (pid: 54 comm: kworker/0:2) [ 349.858781][T11917] loop6: detected capacity change from 0 to 1024 [ 349.866010][T11917] EXT4-fs: inline encryption not supported [ 349.872026][T11917] EXT4-fs: Ignoring removed bh option [ 349.878205][T11917] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 349.896839][T11917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.937805][T11722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.176080][T11922] loop6: detected capacity change from 0 to 32768 [ 350.197899][T11922] non-latin1 character 0x173 found in JFS file name [ 350.206643][T11922] mount with iocharset=utf8 to access [ 350.518794][ T5776] hid-generic 0005:0B57:FFF9.0015: item fetching failed at offset 0/1 [ 350.559994][T11933] loop5: detected capacity change from 0 to 512 [ 350.560193][ T5776] hid-generic: probe of 0005:0B57:FFF9.0015 failed with error -22 [ 350.663588][T11933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.712519][T11933] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.763754][T11933] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #4: comm syz.5.2352: corrupted inode contents [ 350.793144][T11933] EXT4-fs error (device loop5): ext4_dirty_inode:6106: inode #4: comm syz.5.2352: mark_inode_dirty error [ 350.796567][T11945] loop6: detected capacity change from 0 to 256 [ 350.815913][T11933] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #4: comm syz.5.2352: corrupted inode contents [ 350.834614][T11933] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #4: comm syz.5.2352: mark_inode_dirty error [ 350.848623][T11933] Quota error (device loop5): write_blk: dquota write failed [ 350.859135][T11933] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 350.869584][T11945] FAT-fs (loop6): Directory bread(block 64) failed [ 350.869671][T11933] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2352: Failed to acquire dquot type 1 [ 350.876604][T11945] FAT-fs (loop6): Directory bread(block 65) failed [ 350.894704][T11945] FAT-fs (loop6): Directory bread(block 66) failed [ 350.901319][T11945] FAT-fs (loop6): Directory bread(block 67) failed [ 350.910588][T11945] FAT-fs (loop6): Directory bread(block 68) failed [ 350.917574][T11945] FAT-fs (loop6): Directory bread(block 69) failed [ 350.924764][T11945] FAT-fs (loop6): Directory bread(block 70) failed [ 350.932331][T11945] FAT-fs (loop6): Directory bread(block 71) failed [ 350.939743][T11945] FAT-fs (loop6): Directory bread(block 72) failed [ 350.947777][T11945] FAT-fs (loop6): Directory bread(block 73) failed [ 350.993515][T10749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.301418][ T54] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 351.473607][ T5869] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 351.495402][ T5793] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 351.508318][ T54] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 351.517648][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.525702][ T54] usb 5-1: Product: syz [ 351.529862][ T54] usb 5-1: Manufacturer: syz [ 351.534606][ T54] usb 5-1: SerialNumber: syz [ 351.544595][ T54] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 351.564796][ T5852] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 351.661395][ T5869] usb 7-1: Using ep0 maxpacket: 16 [ 351.668648][ T5869] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.679041][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.690283][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 351.700079][ T5869] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 351.710132][ T5869] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.725156][ T5793] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 351.737149][ T5869] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 351.752913][ T5869] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 351.761059][ T5869] usb 7-1: Manufacturer: syz [ 351.765835][ T5793] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 351.775959][ T5793] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 351.787727][ T5793] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 351.796957][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.806597][ T5869] usb 7-1: config 0 descriptor?? [ 351.828359][ T5793] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 351.876814][ T5793] snd-usb-audio: probe of 1-1:27.0 failed with error -12 [ 352.141562][ T5869] rc_core: IR keymap rc-hauppauge not found [ 352.157873][ T5869] Registered IR keymap rc-empty [ 352.172661][ T5869] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 352.176903][ T5776] usb 1-1: USB disconnect, device number 25 [ 352.221443][ T5869] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 352.253042][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 352.276978][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input28 [ 352.299194][ T5869] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 352.348401][ T5869] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 352.393120][ T5869] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 352.431501][ T5869] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 352.445267][ T5776] usb 5-1: USB disconnect, device number 19 [ 352.461893][ T5869] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 352.501576][ T5869] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 352.541560][ T5869] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 352.572074][ T5869] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 352.600375][T11967] loop5: detected capacity change from 0 to 32768 [ 352.609498][T11967] (syz.5.2366,11967,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 352.625180][T11967] (syz.5.2366,11967,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 352.631731][ T5869] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 352.660649][T11967] JBD2: Ignoring recovery information on journal [ 352.671485][ T5869] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 352.698654][T11967] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 352.709645][ T5869] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 352.717985][ T5869] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 352.730674][ T5869] usb 7-1: USB disconnect, device number 2 [ 352.934448][T10749] ocfs2: Unmounting device (7,5) on (node local) [ 353.091834][ T5852] usb 5-1: Service connection timeout for: 257 [ 353.106523][ T5852] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 353.135241][ T5852] ath9k_htc: Failed to initialize the device [ 353.151154][ T5776] usb 5-1: ath9k_htc: USB layer deinitialized [ 353.210140][T11978] loop5: detected capacity change from 0 to 256 [ 353.271641][T11978] FAT-fs (loop5): Directory bread(block 64) failed [ 353.279231][T11978] FAT-fs (loop5): Directory bread(block 65) failed [ 353.289636][T11978] FAT-fs (loop5): Directory bread(block 66) failed [ 353.296134][T11980] loop6: detected capacity change from 0 to 1024 [ 353.296578][T11978] FAT-fs (loop5): Directory bread(block 67) failed [ 353.323830][T11978] FAT-fs (loop5): Directory bread(block 68) failed [ 353.330444][T11978] FAT-fs (loop5): Directory bread(block 69) failed [ 353.351581][T11978] FAT-fs (loop5): Directory bread(block 70) failed [ 353.358285][T11978] FAT-fs (loop5): Directory bread(block 71) failed [ 353.373626][T11978] FAT-fs (loop5): Directory bread(block 72) failed [ 353.380252][T11978] FAT-fs (loop5): Directory bread(block 73) failed [ 353.511516][ T5776] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 353.579901][T11991] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2375'. [ 353.709993][ T5776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 353.726105][ T5776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.736854][ T5776] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 353.746368][ T5776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.765157][ T5776] usb 5-1: config 0 descriptor?? [ 353.773077][ T5776] hub 5-1:0.0: USB hub found [ 353.939834][T11995] loop5: detected capacity change from 0 to 32768 [ 353.953892][T11995] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 353.986251][ T5776] hub 5-1:0.0: 1 port detected [ 354.026214][T11995] XFS (loop5): Ending clean mount [ 354.088133][T10749] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 354.206945][ T5776] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 354.214758][ T5776] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 354.269383][ T5776] usbhid 5-1:0.0: can't add hid device: -71 [ 354.275747][ T5776] usbhid: probe of 5-1:0.0 failed with error -71 [ 354.320896][ T5776] usb 5-1: USB disconnect, device number 20 [ 354.404186][T12009] loop5: detected capacity change from 0 to 64 [ 354.460599][T12005] block nbd0: server does not support multiple connections per device. [ 354.470111][T12005] block nbd0: shutting down sockets [ 354.661551][ T5852] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 354.868945][ T5852] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.887750][ T5852] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 354.908312][ T5852] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 354.919157][ T5852] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 354.928683][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.946063][ T5852] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 355.005954][ T5852] snd-usb-audio: probe of 7-1:27.0 failed with error -12 [ 355.296495][ T5852] usb 7-1: USB disconnect, device number 3 [ 356.714838][T12054] loop6: detected capacity change from 0 to 40427 [ 356.731420][T12054] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 356.740200][T12054] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 356.764708][T12054] F2FS-fs (loop6): invalid crc value [ 356.801477][T12054] F2FS-fs (loop6): Found nat_bits in checkpoint [ 356.859671][T12054] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 356.878782][T12054] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 357.376674][ T5852] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 357.563781][ T5852] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.589280][ T5852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.607859][ T5852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.631537][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.649816][ T5852] usb 1-1: Product: syz [ 357.655888][ T5852] usb 1-1: Manufacturer: syz [ 357.670861][ T5852] usb 1-1: SerialNumber: syz [ 357.950296][T12070] loop5: detected capacity change from 0 to 32768 [ 357.965332][T12070] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 358.004789][T12070] XFS (loop5): Ending clean mount [ 358.085030][T10749] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 358.108591][ T5852] usb 1-1: cannot find UAC_HEADER [ 358.193238][ T5852] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 358.389977][ T5793] usb 1-1: USB disconnect, device number 26 [ 358.718818][T12099] loop5: detected capacity change from 0 to 4096 [ 358.741711][T12099] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 359.090440][T12110] loop5: detected capacity change from 0 to 2048 [ 359.108952][T12110] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.584997][T12125] tap0: tun_chr_ioctl cmd 1074025681 [ 359.853042][T12131] netlink: 'syz.5.2432': attribute type 9 has an invalid length. [ 359.898715][T12131] macvlan2: entered promiscuous mode [ 359.910913][T12131] bond0: entered promiscuous mode [ 359.932957][T12131] bond_slave_0: entered promiscuous mode [ 359.939768][T12131] bond_slave_1: entered promiscuous mode [ 359.963125][T12131] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 360.221516][ T5776] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 360.420457][ T5776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 360.437908][ T5776] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 360.460073][ T5776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.487047][ T5776] usb 7-1: config 0 descriptor?? [ 360.504071][T12133] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 360.663591][T12142] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2436'. [ 360.958311][ T5776] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 361.200900][ T5790] usb 7-1: USB disconnect, device number 4 [ 361.333949][T12158] loop5: detected capacity change from 0 to 4096 [ 362.001611][T12176] netlink: 'syz.0.2452': attribute type 9 has an invalid length. [ 362.037374][T12176] macvlan3: entered promiscuous mode [ 362.065308][T12176] bond0: entered promiscuous mode [ 362.070429][T12176] bond_slave_0: entered promiscuous mode [ 362.091132][T12176] bond_slave_1: entered promiscuous mode [ 362.113938][T12176] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 362.647709][T12188] tap0: tun_chr_ioctl cmd 1074025681 [ 362.752225][T12191] loop6: detected capacity change from 0 to 4096 [ 362.882969][T12191] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 362.971423][ T27] audit: type=1800 audit(1755711382.375:200): pid=12191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2459" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 363.301533][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2466'. [ 363.356876][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 363.468894][T12218] loop6: detected capacity change from 0 to 64 [ 363.809768][T12227] loop6: detected capacity change from 0 to 4096 [ 363.857535][T12237] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 364.245915][T12245] loop6: detected capacity change from 0 to 512 [ 364.262379][T12245] ext4: Unknown parameter 'uid<00000000000000060929' [ 364.928805][ T1326] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.116458][ T1326] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.255959][ T1326] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.405030][ T1326] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.617243][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.630218][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.646538][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.677268][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.685342][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 365.707592][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.504390][T12268] chnl_net:caif_netlink_parms(): no params data found [ 366.895129][T12268] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.911145][T12290] loop5: detected capacity change from 0 to 512 [ 366.911600][T12268] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.926427][T12290] EXT4-fs: Ignoring removed i_version option [ 366.945046][T12290] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 366.951582][T12268] bridge_slave_0: entered allmulticast mode [ 366.973154][T12268] bridge_slave_0: entered promiscuous mode [ 366.983259][T12268] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.983537][T12290] EXT4-fs (loop5): 1 truncate cleaned up [ 366.991688][T12268] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.004307][T12268] bridge_slave_1: entered allmulticast mode [ 367.012682][T12268] bridge_slave_1: entered promiscuous mode [ 367.022181][T12290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.068193][T12290] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.2500: corrupted in-inode xattr: overlapping e_value [ 367.101181][T12290] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1781: inode #15: comm syz.5.2500: unable to update i_inline_off [ 367.134448][T12290] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.2500: corrupted in-inode xattr: overlapping e_value [ 367.153112][T12268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.168332][T12295] EXT4-fs error (device loop5): ext4_xattr_ibody_list:797: inode #15: comm syz.5.2500: corrupted in-inode xattr: overlapping e_value [ 367.245015][T12268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.259937][T10749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.515730][T12268] team0: Port device team_slave_0 added [ 367.566417][T12305] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2505'. [ 367.603841][T12268] team0: Port device team_slave_1 added [ 367.761246][T12311] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2508'. [ 367.771773][T12268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.778779][T12268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.805867][T12268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.822052][ T5789] Bluetooth: hci1: command tx timeout [ 367.838388][T12268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.858507][T12268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.901715][ T5793] hid-generic 0005:15C2:3010.0017: item fetching failed at offset 0/1 [ 367.910819][ T5793] hid-generic: probe of 0005:15C2:3010.0017 failed with error -22 [ 367.956656][T12268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.073804][T12268] hsr_slave_0: entered promiscuous mode [ 368.080477][T12268] hsr_slave_1: entered promiscuous mode [ 368.087254][T12268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.095012][T12268] Cannot create hsr debugfs directory [ 368.200145][ T1326] hsr_slave_0: left promiscuous mode [ 368.207139][ T1326] hsr_slave_1: left promiscuous mode [ 368.213283][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.220687][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.228363][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.236096][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.244368][ T1326] bridge_slave_1: left allmulticast mode [ 368.249996][ T1326] bridge_slave_1: left promiscuous mode [ 368.257581][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.266023][ T1326] bridge_slave_0: left allmulticast mode [ 368.272067][ T1326] bridge_slave_0: left promiscuous mode [ 368.277857][ T1326] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.305362][ T1326] veth1_macvtap: left promiscuous mode [ 368.311088][ T1326] veth0_macvtap: left promiscuous mode [ 368.316787][ T1326] veth1_vlan: left promiscuous mode [ 368.324302][ T1326] veth0_vlan: left promiscuous mode [ 369.033500][ T1326] team0 (unregistering): Port device team_slave_1 removed [ 369.094921][ T1326] team0 (unregistering): Port device team_slave_0 removed [ 369.149148][ T1326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.215226][ T1326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.760995][ T1326] bond0 (unregistering): Released all slaves [ 369.891578][ T5789] Bluetooth: hci1: command tx timeout [ 369.974653][T12268] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 369.997003][T12268] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 370.037698][T12268] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 370.050021][T12268] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 370.141025][T12268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.179861][T12268] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.195625][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.202749][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.224838][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.232227][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.407000][T12268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.602617][T12268] veth0_vlan: entered promiscuous mode [ 370.616351][T12268] veth1_vlan: entered promiscuous mode [ 370.644520][T12268] veth0_macvtap: entered promiscuous mode [ 370.657290][T12268] veth1_macvtap: entered promiscuous mode [ 370.671151][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.684386][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.695980][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.706486][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.716586][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.727250][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.738833][T12268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.755957][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.766726][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.776870][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.787679][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.798141][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.808645][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.819835][T12268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.832878][T12268] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.841876][T12268] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.850754][T12268] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.859966][T12268] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.946911][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.959439][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.986667][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.995172][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.708483][T12360] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2519'. [ 371.819271][T12344] loop7: detected capacity change from 0 to 32768 [ 371.899014][T12344] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 371.983057][ T5789] Bluetooth: hci1: command tx timeout [ 372.089795][T12344] XFS (loop7): Ending clean mount [ 372.110082][T12344] XFS (loop7): Quotacheck needed: Please wait. [ 372.250292][T12344] XFS (loop7): Quotacheck: Done. [ 372.486694][T12268] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 372.720143][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'. [ 373.889974][ T27] audit: type=1326 audit(1755711393.295:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12425 comm="syz.5.2548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7381f8ebe9 code=0x0 [ 374.052070][ T5789] Bluetooth: hci1: command tx timeout [ 374.294978][T12439] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 374.855349][T12461] loop5: detected capacity change from 0 to 4096 [ 374.874593][T12461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.930857][T10749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.069251][T12469] input: syz1 as /devices/virtual/input/input34 [ 376.007227][T12490] loop5: detected capacity change from 0 to 128 [ 376.066057][ T27] audit: type=1800 audit(1755711395.475:202): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2578" name="file1" dev="loop5" ino=1048673 res=0 errno=0 [ 376.461445][ T5851] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 376.653449][ T5851] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 376.685678][ T5851] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 376.706601][ T5851] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 376.716041][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.733584][T12498] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 376.741041][T12498] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 376.759324][ T5851] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 376.884265][T12518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2600'. [ 377.025771][ T28] usb 5-1: USB disconnect, device number 21 [ 378.076749][T12526] loop7: detected capacity change from 0 to 32768 [ 378.086481][T12526] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.2594 (12526) [ 378.110569][T12526] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 378.130246][T12526] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 378.151482][T12526] BTRFS info (device loop7): setting nodatacow, compression disabled [ 378.159811][T12526] BTRFS info (device loop7): setting datacow [ 378.168152][T12526] BTRFS info (device loop7): doing ref verification [ 378.175120][T12526] BTRFS info (device loop7): force clearing of disk cache [ 378.182689][T12526] BTRFS info (device loop7): turning off barriers [ 378.189326][T12526] BTRFS info (device loop7): enabling ssd optimizations [ 378.196610][T12526] BTRFS info (device loop7): using spread ssd allocation scheme [ 378.204738][T12526] BTRFS info (device loop7): using free space tree [ 378.278717][T12526] BTRFS info (device loop7): rebuilding free space tree [ 378.408556][T12268] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 378.625168][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.635278][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.838149][T12571] loop7: detected capacity change from 0 to 16 [ 378.857450][T12571] erofs: (device loop7): mounted with root inode @ nid 36. [ 378.876832][ T27] audit: type=1800 audit(1755711398.285:203): pid=12571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2599" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 379.673247][T12604] loop7: detected capacity change from 0 to 1024 [ 379.697675][T12604] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.890005][T12613] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2244: inode #15: comm syz.7.2612: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 380.186903][T12268] EXT4-fs warning (device loop7): empty_inline_dir:1838: bad inline directory (dir #12) - no `..' [ 380.206165][T12268] EXT4-fs warning (device loop7): empty_inline_dir:1838: bad inline directory (dir #12) - no `..' [ 380.220789][T12268] EXT4-fs warning (device loop7): empty_inline_dir:1838: bad inline directory (dir #12) - no `..' [ 380.237399][T12268] EXT4-fs warning (device loop7): empty_inline_dir:1838: bad inline directory (dir #12) - no `..' [ 380.249587][T12268] EXT4-fs warning (device loop7): empty_inline_dir:1838: bad inline directory (dir #12) - no `..' [ 380.277296][T12268] EXT4-fs warning (device loop7): empty_inline_dir:1838: bad inline directory (dir #12) - no `..' [ 380.297619][T12268] EXT4-fs warning (device loop7): empty_inline_dir:1838: bad inline directory (dir #12) - no `..' [ 380.322038][T12268] EXT4-fs warning (device loop7): empty_inline_dir:1838: bad inline directory (dir #12) - no `..' [ 380.342286][T12268] EXT4-fs warning (device loop7): empty_inline_dir:1838: bad inline directory (dir #12) - no `..' [ 380.361025][ T27] audit: type=1326 audit(1755711399.755:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.0.2620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efddf38ebe9 code=0x0 [ 380.387772][T12268] EXT4-fs warning (device loop7): empty_inline_dir:1838: bad inline directory (dir #12) - no `..' [ 380.536363][T12633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2624'. [ 380.802048][T12268] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.916884][ T2978] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.078503][ T2978] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.248096][ T2978] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.413771][ T2978] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.926563][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.968790][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.983619][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.043306][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.078259][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 382.088137][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.449505][T12658] loop5: detected capacity change from 0 to 32768 [ 382.586381][T12678] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 382.808435][T12661] chnl_net:caif_netlink_parms(): no params data found [ 382.931651][ T42] wlan1: Trigger new scan to find an IBSS to join [ 382.960514][T12688] input: syz1 as /devices/virtual/input/input35 [ 382.996670][ T42] ------------[ cut here ]------------ [ 383.003036][ T42] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 383.014196][ T42] WARNING: CPU: 1 PID: 42 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 383.024104][ T42] Modules linked in: [ 383.028037][ T42] CPU: 1 PID: 42 Comm: kworker/u4:2 Not tainted 6.6.102-syzkaller #0 [ 383.036207][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.046560][ T42] Workqueue: events_unbound cfg80211_wiphy_work [ 383.052942][ T42] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 383.059362][ T42] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 40 87 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 3b c8 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 383.079614][ T42] RSP: 0018:ffffc90000b2f380 EFLAGS: 00010246 [ 383.085809][ T42] RAX: a663422004860200 RBX: 000000000000000c RCX: ffff88801e249e00 [ 383.093998][ T42] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 383.102373][ T42] RBP: 0000000000000084 R08: ffffc90000b2ef87 R09: 1ffff92000165df0 [ 383.110483][ T42] R10: dffffc0000000000 R11: fffff52000165df1 R12: 0000000000000020 [ 383.118511][ T42] R13: dffffc0000000000 R14: ffff88807de0b358 R15: ffff888066408ca8 [ 383.126588][ T42] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 383.135726][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.142344][ T42] CR2: 00007f7382ce56c0 CR3: 0000000061c04000 CR4: 00000000003506e0 [ 383.150409][ T42] Call Trace: [ 383.153799][ T42] [ 383.156822][ T42] rate_control_send_low+0x194/0x790 [ 383.162421][ T42] rate_control_get_rate+0x20b/0x5c0 [ 383.167716][ T42] ieee80211_tx_h_rate_ctrl+0xb2d/0x1770 [ 383.173387][ T42] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 383.179371][ T42] ? __lock_acquire+0x1260/0x7c80 [ 383.184464][ T42] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 383.190548][ T42] invoke_tx_handlers_late+0xb6/0x1810 [ 383.196040][ T42] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 383.201891][ T42] ieee80211_tx+0x2ad/0x420 [ 383.206417][ T42] ? ieee80211_skb_resize+0x630/0x630 [ 383.211999][ T42] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 383.217469][ T42] ? __bpf_trace_tasklet+0x140/0x140 [ 383.222789][ T42] ? ieee80211_xmit+0x310/0x3f0 [ 383.227644][ T42] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 383.233815][ T42] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 383.239635][ T42] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 383.245979][ T42] ieee80211_scan_state_send_probe+0x560/0x930 [ 383.252212][ T42] ieee80211_scan_work+0x4e8/0x1c30 [ 383.257445][ T42] cfg80211_wiphy_work+0x225/0x260 [ 383.262596][ T42] ? process_scheduled_works+0x957/0x15b0 [ 383.268336][ T42] process_scheduled_works+0xa45/0x15b0 [ 383.273962][ T42] ? assign_work+0x400/0x400 [ 383.278581][ T42] ? assign_work+0x39e/0x400 [ 383.283253][ T42] worker_thread+0xa55/0xfc0 [ 383.287896][ T42] kthread+0x2fa/0x390 [ 383.292123][ T42] ? pr_cont_work+0x560/0x560 [ 383.296795][ T42] ? kthread_blkcg+0xd0/0xd0 [ 383.301417][ T42] ret_from_fork+0x48/0x80 [ 383.305849][ T42] ? kthread_blkcg+0xd0/0xd0 [ 383.310429][ T42] ret_from_fork_asm+0x11/0x20 [ 383.315238][ T42] [ 383.318263][ T42] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 383.325547][ T42] CPU: 1 PID: 42 Comm: kworker/u4:2 Not tainted 6.6.102-syzkaller #0 [ 383.333704][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.343757][ T42] Workqueue: events_unbound cfg80211_wiphy_work [ 383.350075][ T42] Call Trace: [ 383.353351][ T42] [ 383.356284][ T42] dump_stack_lvl+0x16c/0x230 [ 383.360966][ T42] ? show_regs_print_info+0x20/0x20 [ 383.366177][ T42] ? load_image+0x3b0/0x3b0 [ 383.370698][ T42] panic+0x2c0/0x710 [ 383.374591][ T42] ? bpf_jit_dump+0xd0/0xd0 [ 383.379097][ T42] ? ret_from_fork_asm+0x11/0x20 [ 383.384201][ T42] __warn+0x2e0/0x470 [ 383.388224][ T42] ? __rate_control_send_low+0x635/0x880 [ 383.393862][ T42] ? __rate_control_send_low+0x635/0x880 [ 383.399508][ T42] report_bug+0x2be/0x4f0 [ 383.403867][ T42] ? __rate_control_send_low+0x635/0x880 [ 383.409679][ T42] ? __rate_control_send_low+0x635/0x880 [ 383.415568][ T42] ? __rate_control_send_low+0x637/0x880 [ 383.421189][ T42] handle_bug+0xcf/0x120 [ 383.425443][ T42] exc_invalid_op+0x1a/0x50 [ 383.430041][ T42] asm_exc_invalid_op+0x1a/0x20 [ 383.434881][ T42] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 383.441238][ T42] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 40 87 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 3b c8 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 383.461058][ T42] RSP: 0018:ffffc90000b2f380 EFLAGS: 00010246 [ 383.467116][ T42] RAX: a663422004860200 RBX: 000000000000000c RCX: ffff88801e249e00 [ 383.475184][ T42] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 383.483341][ T42] RBP: 0000000000000084 R08: ffffc90000b2ef87 R09: 1ffff92000165df0 [ 383.491320][ T42] R10: dffffc0000000000 R11: fffff52000165df1 R12: 0000000000000020 [ 383.499342][ T42] R13: dffffc0000000000 R14: ffff88807de0b358 R15: ffff888066408ca8 [ 383.507329][ T42] rate_control_send_low+0x194/0x790 [ 383.512615][ T42] rate_control_get_rate+0x20b/0x5c0 [ 383.517891][ T42] ieee80211_tx_h_rate_ctrl+0xb2d/0x1770 [ 383.523610][ T42] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 383.529594][ T42] ? __lock_acquire+0x1260/0x7c80 [ 383.534615][ T42] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 383.540674][ T42] invoke_tx_handlers_late+0xb6/0x1810 [ 383.546127][ T42] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 383.551924][ T42] ieee80211_tx+0x2ad/0x420 [ 383.556473][ T42] ? ieee80211_skb_resize+0x630/0x630 [ 383.562229][ T42] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 383.567740][ T42] ? __bpf_trace_tasklet+0x140/0x140 [ 383.573134][ T42] ? ieee80211_xmit+0x310/0x3f0 [ 383.578080][ T42] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 383.584144][ T42] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 383.589946][ T42] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 383.596353][ T42] ieee80211_scan_state_send_probe+0x560/0x930 [ 383.602507][ T42] ieee80211_scan_work+0x4e8/0x1c30 [ 383.607720][ T42] cfg80211_wiphy_work+0x225/0x260 [ 383.612822][ T42] ? process_scheduled_works+0x957/0x15b0 [ 383.618802][ T42] process_scheduled_works+0xa45/0x15b0 [ 383.624373][ T42] ? assign_work+0x400/0x400 [ 383.628954][ T42] ? assign_work+0x39e/0x400 [ 383.633533][ T42] worker_thread+0xa55/0xfc0 [ 383.638120][ T42] kthread+0x2fa/0x390 [ 383.642171][ T42] ? pr_cont_work+0x560/0x560 [ 383.646833][ T42] ? kthread_blkcg+0xd0/0xd0 [ 383.651408][ T42] ret_from_fork+0x48/0x80 [ 383.655811][ T42] ? kthread_blkcg+0xd0/0xd0 [ 383.660482][ T42] ret_from_fork_asm+0x11/0x20 [ 383.665334][ T42] [ 383.668603][ T42] Kernel Offset: disabled [ 383.673042][ T42] Rebooting in 86400 seconds..