last executing test programs: 5m12.935647501s ago: executing program 1 (id=454): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x40002, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2f) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) 5m10.271694625s ago: executing program 1 (id=460): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r0, 0x81, 0x3e, &(0x7f0000000300)="a001000000112233445500"/62) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 5m7.546673181s ago: executing program 1 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) unshare(0x20040600) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x26) keyctl$invalidate(0x15, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x200000e, 0x11, 0xffffffffffffffff, 0x100000000) 5m2.093677642s ago: executing program 1 (id=467): r0 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) 5m1.865545558s ago: executing program 1 (id=468): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r4, 0x7800, 0x20, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x4}]}}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0x3d13, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m0.762143274s ago: executing program 1 (id=473): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000840)='./file0\x00', 0x1200000, &(0x7f0000000240)=ANY=[], 0xa1, 0x1fd, &(0x7f0000000340)="$eJzs281O1FAYxvGnHaYF/P7auDJxoRunOkyi7OQCvAFXGqiEWD8ibiAkDhvvwAtw7w14Na7cQSJXUNPTwliY9jDtdIrw/yXAO50+876TcMqZCSMAF9Z1892Ro66p4jj+ck/SyxeS5kqj3kwGBNCY2EkXfU53VHrH70vNj0kB+O90/ow/7hcu8J+HhWu/CvyuPhiAhu2vdI428r8Odlb3Dnac9NbwVPuH/RVX6mQ30rz58qT5U+V303Z3h/m8r/wDOAXjxN/T/ANJe//kF2yNL+f7Lx7LL9ryyUumxK5rfjy8n89fylpckXRV0rXstdYNSTfHPP810/+bpDR/x9YfmILkt6+XO1K6bE+8I2DyvZKEX94/WT1vNqLwsW3QAt0s/6Ri3svy/Zr5pYp5P8v3Vj9Ea4VnPS+6w63YFjDcE+t/Mtb1X2j09mGd9T83wfrvVuwBnFebW9tvX0dR+Gnywq2UshTJ9aTu4/xoYrBpFo7OxBgNF4cbyeRIcpm2p762PvP0Ckcalp2z0PqElqLlCxOAxgWf330MNre2H23o1Xq4Hr7vD5afDZb6g6fLgdmXB3V25wDOstEf/aNDcdn55f8SBAAAAAAAAAAAAAAA2nBL0u22hwAAAAAwE7P4OFHbzxEAAAAAAAAAAAAAAAAAAAA4L/4GAAD///eWMhs=") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d5, 0x32}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81}}, 0xe8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 4m45.565041021s ago: executing program 32 (id=473): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000840)='./file0\x00', 0x1200000, &(0x7f0000000240)=ANY=[], 0xa1, 0x1fd, &(0x7f0000000340)="$eJzs281O1FAYxvGnHaYF/P7auDJxoRunOkyi7OQCvAFXGqiEWD8ibiAkDhvvwAtw7w14Na7cQSJXUNPTwliY9jDtdIrw/yXAO50+876TcMqZCSMAF9Z1892Ro66p4jj+ck/SyxeS5kqj3kwGBNCY2EkXfU53VHrH70vNj0kB+O90/ow/7hcu8J+HhWu/CvyuPhiAhu2vdI428r8Odlb3Dnac9NbwVPuH/RVX6mQ30rz58qT5U+V303Z3h/m8r/wDOAXjxN/T/ANJe//kF2yNL+f7Lx7LL9ryyUumxK5rfjy8n89fylpckXRV0rXstdYNSTfHPP810/+bpDR/x9YfmILkt6+XO1K6bE+8I2DyvZKEX94/WT1vNqLwsW3QAt0s/6Ri3svy/Zr5pYp5P8v3Vj9Ea4VnPS+6w63YFjDcE+t/Mtb1X2j09mGd9T83wfrvVuwBnFebW9tvX0dR+Gnywq2UshTJ9aTu4/xoYrBpFo7OxBgNF4cbyeRIcpm2p762PvP0Ckcalp2z0PqElqLlCxOAxgWf330MNre2H23o1Xq4Hr7vD5afDZb6g6fLgdmXB3V25wDOstEf/aNDcdn55f8SBAAAAAAAAAAAAAAA2nBL0u22hwAAAAAwE7P4OFHbzxEAAAAAAAAAAAAAAAAAAAA4L/4GAAD///eWMhs=") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d5, 0x32}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81}}, 0xe8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 4m3.358973979s ago: executing program 0 (id=558): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r4, 0x7800, 0x20, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x4}]}}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4m1.385000167s ago: executing program 0 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) flock(0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 4m1.25646877s ago: executing program 0 (id=565): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3m56.71153917s ago: executing program 0 (id=578): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r6 = fsopen(0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_int(r7, 0x0, 0x2, 0x0) 3m54.748980927s ago: executing program 0 (id=582): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000840)='./file0\x00', 0x1200000, &(0x7f0000000240)=ANY=[], 0xa1, 0x1fd, &(0x7f0000000340)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) 3m50.278045065s ago: executing program 0 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) waitid(0x2, 0x0, &(0x7f0000000380), 0xe, 0x0) 3m34.084056416s ago: executing program 33 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) waitid(0x2, 0x0, &(0x7f0000000380), 0xe, 0x0) 17.389714148s ago: executing program 3 (id=978): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x842, &(0x7f0000000000)=ANY=[], 0x3, 0x1af, &(0x7f0000000280)="$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") socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) shutdown(r5, 0x1) 17.271441191s ago: executing program 2 (id=979): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/tracing/trace_pipe\x00', 0x8000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) close(r1) 15.65466361s ago: executing program 3 (id=981): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_setup(0xea, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) unshare(0x1e060c80) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8) writev(r4, &(0x7f0000002240)=[{0x0}], 0x1) 15.379127787s ago: executing program 2 (id=983): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 15.284250309s ago: executing program 2 (id=984): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local, 0x4}}}, 0x108) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 15.160983732s ago: executing program 2 (id=985): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r4, 0x7800, 0x20, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x4}]}}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0x3d13, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 13.512440942s ago: executing program 3 (id=987): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x86, 0x0, 0xe, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 11.439066313s ago: executing program 3 (id=990): socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000004008500000033"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r2], 0x20) 10.996065113s ago: executing program 5 (id=991): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r6 = fsopen(0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_int(r7, 0x0, 0x2, 0x0) 8.029810275s ago: executing program 4 (id=992): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/tracing/trace_pipe\x00', 0x8000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) close(r1) 8.029645955s ago: executing program 3 (id=993): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 7.866240959s ago: executing program 2 (id=994): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x4f3, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x8, 0x3ff, 0x8, 0x0, "91b12b949d7950895eea22bced3dd6bfcdd10b7bdd41fabe4fa0b935ca76101ae3dc63d753695d30467e70a084e46bb668a0e330141d490f08078ea29f67b3169e5b436ed3a93b1b980aed36876a343c3e39ff0ea33380358c1d8f46b9cca39e70908e76d855b4a3884375b13bfe4f3e911c7e9e72c6852e3f5635bc2994f969"}) 7.784909621s ago: executing program 3 (id=995): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0xc03, &(0x7f0000008040)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES32], 0x2, 0x5fbf, &(0x7f0000002080)="$eJzs3VtvHGf9B/DfHrw+9N/U6kWVf8QhTTm0lCaNkzYtp6ZC4gIEVKpyn8i4VYQLKAkVrSzsKhL3SFyj8iK4BqHeIBWJl8AbiGT3hghEBo39PM54vPbaJN5Zez4fyZn97TPjfSZfj2fXc3gCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvf+/ti52IuP5+emI+4v+iF9GNmC3rs/HXiNX7ef5+RJyOzeZ4JiJOTUeUy2/+81TE5Yj49FTE+sbKYvn0wgH78cpb9/72w7d/tPbbL/7l7//+5Pd/qre/9cl3f/DH1Yj507/53X9WH8+6AwAAQFsURVF0Nj/mR5xJn++7TXcKABiLvP8vkvy8Wv0odT92aro/arVard6tGG61WkTEWnWZ8j2Dw/EAcMysxf2mu0CD5N9q/Yh4oulOABOt03QHOBLrGyuLnZRvp7o/OLvVns8F2ZH/Wmf7+o69pqPUzzEZ18/X3ejF03v0Z3ZMfZgkOf9uPf/rW+2DNN9R5z8ue+U/2Lr0qXVy/r16/jUnJ//u0PzbKuffP1T+PfkDAAAAAMAEy3//n2/4+O/0o6/Kgex3/PfsmPoAAAAAAAAAAI/bAcb/Kx9czfPXx//bZvw/AAAAmFjlZ/XSx6cePrfXvdjK5691Ip6szQ+0TLpYZq7pfgAAAAAAAAAAAABAm/S3zuG91omYiogn5+aKoii/qur1YT3q8sdd29cf2qzpX/IAALDl01O1a/k7ETMRcS3d629qbm6uKGZm54q5YnY6v58dTM8Us5XPtXlaPjc9OMAb4v6gKL/ZTGW5qlGfl0e1179f+VqDoneAjo1Hg4EDQERs7Y3W7ZFOmKJ4Kpp+l8PxYPs/eWz/HETTP6cAAADA0SuKouik23mfScf8u013CgAYi7z/rx8XUKvVarVaffLqqmK41WoREWvVZcr3DIbjB4BjZi3uN90FGiT/VutHxOmmOwFMtE7THeBIrG+sLHZSvp3q/iCN757PBdmR/1pnc7m8/LDpKPVzTMb183U3evH0Hv15Zkx9mCQ5/249/+tb7YM031HnPy575V+u53wD/Wlazr9Xz7/m5OTfHZp/W+X8+4fKvyd/AAAAAACYYPnv//OO/+ZVBgAAAAAAAIBjZ31jZTFf95qP/39uyHyu/zyZcv4d+bdSzr9bz792Qk6v8vjemw/z/2xjZfHj/7/yhTyd+PyneoPytac63V5/65yff+Zbmy7Fy7vmL+cppt6Jm7EcS3FxV/vUjvaFEe2XdrUPyvbZ3H4+FuPnsRw/2W6fHnFi1MyI9mJEe86/Z/tvpZx/v/JV5j+X2ju1aeneR91d2311Oux1rv74wZXdW9f43Y3e9rpVlet3roH+bP6fPDGIX95eunX+Vzfu3Ll1MdJkx7MLkSaPWc5/Kn3l/J9/bqs9/96vbq/3PhocOv9JcTf6e+b/XOVxub4vjLlvTcj5D9JXzj/vgYZv/8c5/723/xcb6A8AAAAAAAAAAAAAAADspyiKzUtEr0bEq+n6n6auzQQAxivv/4t8M4xErVar1Wr1yauriuHeqBYR8efqMuV7hl8P+2YAwCR7EBH/aLoTNEb+LZbv91dOv9R0Z4Cxuv3Bhz+9sby8dOv2/7J00Xv8PQIAAAAAAAAADiuP/3m2Mv7z5nlAtXGjd4z/+mac/WxjZfH9+X99/tiN/9kd9DbHOk8r9GxUx+fePULxudh//O/+iNebGtE+GNE+PaJ9ZkT70As9KnL+z6aMc/5n0ortN/5rzr8+HfGSjdpv/NfnG+hP03L+59JYzzn/r9bmq+Zf/OE4j//b3ZH/hTvv/eLC7Q8+fOnmezfeXXp36WeXLi+8fnHhyuXXXr7wzs3lpfRvgz0+Wjn/PPa180DbJeefM5d/u+T8v5xq+bdLzv8rqZZ/u+T88/s9+bdLzj9/9tnO/0Gz/WI8cv4vpNr23y45/6+lWv7tkvN/MdXyb5ec/9dTLf92yfm/lGr5t0vO/3yq5d8uOf8LqZZ/u+T88xEu+bdLzj+f2SD/dsn5L6Ra/u2S87+Uavm3S87/cqrl3y45/1dSLf92yfm/mupD5O/eXydAzv9Kqm3/7ZLzfy3V8m+XnP/rqZZ/u+T8v5Fq+bdLzv+bqZZ/u+T8v5Vq+bdLzv/bqZZ/u+T8vxMPLyaVf3vk/N9Ite2/XR7e/98DDzzwID9o+jcTAAAAAAAAAAAAAFA3jtOJm15HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe3cXI1d53w/87Ju9NsTeJIbwYmBtDBhYvOsX/PL/18FASCm0DSGBvpEa116bTfxWr00AIbERNEUCqVxwQSslBYSqXKQKahM1SDSiUqU2vWmv2psqrdSoQlGonKg3jQquzpzneTwzOzuz6921Z875fBD+eWfOzDx75szsfsf6zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQb8O9k3/Yl2VZ/n/tj5Esuzz/+6psX/7lzM5LvUIAAABgsT6s/fnttemEffO4UN02f3f9P3733Llz57LsT9Z96tV8BqNZtmZllhXnBcM/OdmwTfB8NtzXX/d1f4ebH+hw/mCH84c6nL+iw/krO5w/3OH8WTtgllXF6zG1K9tU++tIsUuzddlQ7bxNLS71fN/K/v74Wk5NX+0y54YOZ1PZ0Wwym5h1mb7af1n27ob8tu7P4m31193W+izLzv7s2YNxDX1hH2/KGm6spv6+++DubPTnP3v24JMjv7iu1ey4G2atNMs2b8zX+UKWnX+5KuvLVqZ9EtfZX7fO9S3WOdCwzr7a5fK/N6/z7DzXGb/v4bDOf2qzzvXhtKduzLJsJptzm2bPZ/3Z6qZbTft7uDgi8uvI78pPZIMLOk42zOM4yS/z4xsbj5PmYzLu/w1hnwzOsYb6u+ODr62Ytd8v9DjJv+tuOFbz634ov9Hh4fqXVhuO1XybZ2+a+xhoed+1OAbSsVx3DGzsdAz0rxioHQP959e8seEY2DrrMv1ZX+223r+p/TEwfvrYyfHpp5+5Y+rYgSOTRyaPb9+xbc/Wbbt27J4YPzx1dDL8ubBd2kNWZ/3pGNwYnmviMXhL07b1h+S5N4rHwetX77q+1VzIGoaX6HGwmDVk4Xj54s35gi7vz+Y4xvNtXti8+MdB+rlf9zgYrHsctHxObfE4GJzH4yDf5uzm+f3MHKz7v9UaWj0XLsUxMFJ3DCzm52H9Gi7k52F+m4/dOvdz4fqwrhdvW+jPw4FZx0D8tvrCYy8/Jf2+N7w77JfZx8U1+RmXrcjOTE+e2vLUgdOnT23NwrgoPll3XzUfL6vrvqds1vHSv+DjZd/nPtp1TYvTR8K+Gr69/X2Vb7NjrP19VXt2b70/G07dloWxxC72/mz10yzfnylLtNmf+TYv3LH43wVTLql7/hvq9Pw3MDRYPP8NpL0x1PD8N/uuGaitLMvO3jG/57+h8P/Ffv5b1yXPf/m+emxL+2Mg3+bF8YUeA4Ntn/9uDLMvrOfWkBiG63L/R7XzZ4rDtO6+7HjcDA4OheNmMN5i43GzfdZl8mvLb3vzxIUdN5tvbLyvGn5vKeFxk++rVyfaHzf5Nu9tXfxzx6r417rnjhWdjoGhgRX5eofSQVA8351bFY+BLdnB7ER2NDuULpPfy/ltjW2b3zGwIvx/sZ87ruqSYyDfV69ta38M5Nv87fal/d1pczglbVP3u1Pz6wtzZf5rBs9fX/NuW+rMn6/zMzvavzaUb/PTHQvNGe330+3hlMta7Kfmx89cx/ShrPN+WqpjOl/n0TvbvzaVb7Nu5zyPp31Zlr3z0lvF613F67t/ceafv9vwum+r15Tfeemtz1/9wx8uZP0AAFy4j2p/zqwoftes+xfr+fz7PwAAANATYu7vDzOR/wEAAKA0Yu4fCDOR/wEAAKA0Yu4fDDPZ1+nd8crhib6vv/rhc1l6N8BzQTw/vgzy0Mpiu9jxnglfj547Lz/9nreGHvzec/O77f4sy/73gWtbbv/Eyriuwsm4zoHG02e56oZ53f7jj5zfrv79E872F9cfv5/5vgwUu8rv/ts9tesdvbWY7z2Q1ebDMy8+X7v+PcXXcfv3/6PY7hvhTUv2He5ruPzmsJ5NYY6G95R5aNX5/ZDPeLnvvHvk7z/96Pnbi5fr27im9m2+tqW43vgeUa/8ZbF9/L7nWv9fv/St7+TbP3VT6/U/1996/e+H6/1xmP/zQXF6/T7/Xt36/yCsP95evNyWN3/Qcv1v/1Wx/dvhuHg9zOb13/1H133Y6v6Kt7NvsLhcvP2JP7uvdrl4ffH6m9c/PH5Pw/5ovv733iyuZ++T/z1Qv308Pd5O9Phg4/HdF+7fhh55lmXf+nrWsJ+zoeJy7zStP17fycHW67+9aZ0n33iidvnm7yf65iP3tvx+43r2/flIw/fzypqw//pX/UN+ve9fG47HcP4vZorra34v07fXND7fxO1fHyket/H6xpvW/0rT+mduyPdd5/Xf//Ni/W/ftbJh/fvWhuPp48XstP4jf7q24fJvfLZYz6mvjh0/MX1mKr7HwUjT43jl8KrVl13+sTVrw3Np89f7T5x+YvLU6MToRJaN9uBbBi73+t8M87+KMbP0t1D4l8HiuHv5weLn1i1DxdevhNMfD/dn/Pn4zT8eajhem+/3meFiLnb9t4V1zNf6TT/ZPa8N/3PH26/+68Nfav69IH4/J68Yrn1/r224snZe33vF+c3PV538+xWNj+sfrSvm98N+PRfemXnjlcXtNV9/fG+Sl79QPH7jb3Lx8lnT+4mMDDR+H4td/4/C7zE/uKrx+S8eH99/rundnEeyvnwJM+H5IZspzo9bxf398tkrW95efB+ebObqhSxzTtNPT48fnTp+5qnx05PTp8enn35m/7ETZ46f3l9779L9X+50+fOP79W1x/ehyZ07stqj/UQxltmlXv/JRw4e2jVx86HJwwfOHD79yMnJU0cOTk8fnDw0ffOBw4cnv9rp8lOH9m7dtmf7rm1jR6YO7d29Z8/2PWNTx0/kyygW1cHOia+MHT+1v3aR6b079my9884dE2PHThya3LtrYmLsTKfL1342jeWXfnLs1OTRA6enjk2OTU89M7l3656dO7d1fPfHYycPT4+OnzpzfPzM9OSp8eJ7GT1dOzn/2dfp8lTD9NrwfNekL/x2ft/tO9P74+be+tqcV1VsMtJ44k/De0F9Y3j77vl8HXP/UJiJf/8HAACA0oi5P3w+xfnX3eV/AAAAKI3wgX/hMyP9+z8AAACUUcz9w2EmFcn/+v/6/xfQ/091bf1//f9M/1//vwP9f/3/dvT/9f97ef36//r/dNZt/f+Y+1dlWSXzPwAAAFRBzP2rw0zkfwAAACiNmPsvCzOR/wEAAKA0Yu6/PMykIvlf/1//3+f/l6//35dlM/r/+v/dQv9f/78d/X/9/15ev/6//j+ddVv/P+b+j4WZVCT/AwAAQBXE3L8mzET+BwAAgNKIuX9tmIn8DwAAAKURc/9ImEmZ8v9dc5+l/1/1/v+A/n8J+/8+/7+g/98d9P/1/9vR/9f/7+X16//r/9NZt/X/Y+7/eJhJmfI/AAAAVFzM/Z8IM5H/AQAAoDRi7v9kmIn8DwAAAKURc/+6MJOK5H/9/6r3/33+f6b/v4z9/7il/r/+v/5/r/f/V4WT9f8b6f/r/+v/6//TXrf1/2PuvyLMpCL5HwAAAKog5v4rw0zkfwAAACiNmPs/FWYi/wMAAEBpxNx/VZhJRfK//r/+v/6//r/P/9f/X076/+Xo/8eT9f8b6f/r/+v/6//TXrf1/2PuvzrMpCL5HwAAAKog5v5rwkzkfwAAACiNmPuvDTOR/wEAAKA0Yu5fH2ZSkfyv/6//r/+v/6//r/+/nPT/9f/b0f/X/+/l9ev/6//TWbf1/2Puvy7MpCL5HwAAAKog5v7rw0zkfwAAACiNmPtvCDOR/wEAAKA0Yu4fDTOpSP7X/9f/1//X/9f/1/9fTvr/+v/t6P/r//fy+vX/9f/prNv6/zH3bwgzqUj+BwAAgCqIuX9jmIn8DwAAAKURc/+NYSbyPwAAAJRGzP2bwkwqkv/1//X/9f/L2v8f0P/X/+8K+v/6/+3o/+v/9/L69f/1/+ms2/r/MfffFGZSkfwPAAAAVRBz/81hJvI/AAAAlEbM/beEmcj/AAAAUBox928OM6lI/tf/1//X/y9r/9/n/+v/dwf9f/3/dvT/9f97ef36//r/dNZt/f+Y+28NM6lI/gcAAIAqiLn/tjAT+R8AAABKI+b+28NM5H8AAAAojZj7x8JMKpL/9f/1//X/9f/1//X/l5P+v/5/O/r/+v+9vH79f/1/Ouu2/n/M/XeEmVQk/wMAAEAVxNy/JcxE/gcAAIDSiLl/PMxE/gcAAIDSiLl/IsykIvlf/1//X/9f/1//X/9/Oen/6/+3o/+v/9/L69f/1/+ns27r/8fcvzXMpCL5HwAAAHrUdQvZOOb+bWEm8j8AAACURsz928NM5H8AAAAojZj7d4SZVCT/6//r/+v/6//r/+v/Lyf9f/3/dur7//kl9f+r0v+f6ydNr6y/oP+v/09n3db/j7n/zjCTiuR/AAAAqIKY+3eGmcj/AAAAUBox9+8KM5md///m4q0KAAAAWEox9+8OM+n5f/+fX6+qUv3/A/env+r/F/T/9f8z/X/9/2Wm/6//347P/69q/39pXOr16//r/9NZt/X/Y+7fE2bS8/kfAAAAiGLu/39hJvI/AAAAlEbM/f8/zET+BwAAgNKIuf+Xwkwqkv8r1f+vo/9f0P/X/8/0//X/l5n+v/5/O/r/+v+9vP7u7f9/e3WW6f/THbqt/x9z/94wk4rkfwAAAKiCmPs/HWYyd/4fXv5VAQAAAEsp5v67wkz8+z8AAACURsz9+8JMKpL/9f/1//X/9f/1//X/l5P+v/5/O4vr/4/q/y/Spe7P9/r6u7f/7/P/6R7d1v+Puf/uMJOK5H8AAACogpj77wkzkf8BAACgNGLuvzfMRP4HAACA0oi5/zNhJhXJ/xet/9+iUKz/r/+f6f/r/+v/6/8vkv5/lfv/Pv9/sS51f34J1p/f5fr/+v90sW7r/8fcf1+YSUXyPwAAAFRBzP2fDTOR/wEAAKA0Yu7/5TAT+R8AAABKI+b++8NMKpL/ff6//r/+v/6//r/+/3LS/9f/b0f/X/+/l9ev/6//T2fd1v+Puf9Xwkwqkv8BAACgCmLufyDMRP4HAACA0oi5/8EwE/kfAAAASiPm/l8NM6lI/tf/1//X/9f/1//X/19O+v/6/+3o/+v/9/L69f/1/+ms2/r/Mff/WphJRfI/AAAAlMLcrx/UxNz/62Em8j8AAACURsz9nwszkf8BAACgNGLufyjMpCL5X/9f/1//X/9f/1//fznp/+v/t6P/r//fy+vX/9f/p7Nu6//H3P/5MJOK5H8AAACogpj7Hw4zkf8BAACgNGLu/0KYifwPAAAAPeDsvLaKuf+LYSYVyf/6//r/+v/6/0vY/1+R6f8n+v+ran/q/+v/t9NL/f9W5+j/6//r/+v/01639f9j7n8kzKQi+R8AAACqIOb+R8NM5H8AAAAojZj7fyPMRP4HAACA0oi5/zfDTCqS//X/9f/1//X/ff6//v9y0v/X/2+nl/r/rej/6//r/+v/01639f9j7v+tMJOK5H8AAACogpj7fzvMRP4HAACA0oi5/3fCTOR/AAAAKI2Y+x8LM6lI/i/6/48e1P8v6P/r/+v/6/9H+v9LQ/9f/78d/X/9/15ev/6//j+ddVv/P+b+L4WZVCT/AwAAQBXE3P+7YSbyPwAAAJRGzP37w0zkfwAAACiNmPsfDzOpSP73+f/6//r/+v8L6f+vanG6/n9B/781/X/9/3b0/8vc/1+xJGu8dOuf6wlrMP1N/1//n866rf8fc/+BMJOK5H8AAACogpj7fy/MRP4HAACA0oi5/2CYifwPAAAApRFz/6Ewk4rkf/1//X/9f/3/Hvn8/6FsOfr/M/r/y60k/f/39P8L+v+N9P99/r/+v/4/7XVb/z/m/skwk4rkfwAAAOh183nX0Zj7D4eZyP8AAABQGjH3Hwkzkf8BAACgNGLufyLMpCL5vxv7/zfo/+v/6/+n69H/9/n/+v/t+fx//f9M//+CXer+fK+vX/9f/5/Ouq3/H3P/VJhJRfI/AAAAVEHM/V8OM5H/AQAAoDRi7v9KmIn8DwAAAD1n5Rynx9x/NMykIvm/G/v/mf6//r/+f7oe/X/9f/3/9vT/9f8z/f8Ldqn7872+/iXt/6/Q/6ecuq3/H3P/sTCTiuR/AAAAqIKY+4+Hmcj/AAAAUBox958IM5H/AQAAoDRi7j8ZZtKT+b9vzt7uXPT/9f+7rf9f37wsdf9/pf6//r/+/1LQ/9f/z/T/L9il7s/3+vp9/r/+P511W/8/5v7fDzPpyfwPAAAAtBJz/6kwE/kfAAAASiPm/ukwE/kfAAAASiPm/v9j7z539LirOI4/thI7kSC8R9wLiPvgNTdAL4npLfQamqmh995b6BB6773XUEKRgrR7zok3Xs/sPvjxzvzP5/PmsGTXO5GN0U+rr+YBccv0/j+926e6cvT/+v+l9f9t3/9/lf4/6f/1/8eh/9f/b/T/Wzvpfn7tz6//1/8zb2n9f+7+B8Ytfv4PAAAAw8jd/6C4xf4HAACAYeTuf3DcYv8DAADAMHL3PyRuabL/r2z/f98DH+n/9f+brfr/s/W1Q/X/3v9/5++r/l//fwxd+//8m1D/v0//v52T7ufX/vz6f/0/85bW/+fuf2jc0mT/AwAAQAe5+x8Wt9j/AAAAMIzc/Q+PW+x/AAAAGEbu/kfELU32v/f/6//X1/8P+v5//X/R/+v/j6Nr/5/0//v0/9s56X5+7c+v/9f/M29p/X/u/kfGLU32PwAAAHSQu//6uMX+BwAAgGHk7r8hbrH/AQAAYBi5+8/FLU32v/5f/6//1//r//X/u6T/1/9P0f8vt/+/Q/8/+/31//p/5i2t/z9342Zv9+9/m377HwAAADrI3f/ouMX+BwAAgGHk7n9M3GL/AwAAwDBy9z82bmmy//X/+n/9v/5f/6//3yX9v/5/iv5/uf2/9//r/+e+Xv/PUSyt/8/d/7i4pcn+BwAAgA5y9z8+brH/AQAAYBi5+58Qt9j/AAAAMIzc/U+MW5rsf/2//l//r//X/+v/d0n/r/+fspL+P36Ji3979P9D9//3v9fM11+y/z+10f/r/wlL6/9z9z8pbmmy/wEAAKCD3P1PjlvsfwAAABhG7v6nxC32PwAAAAwjd/+NcUuT/a//1//r//X/+n/9/y7p//X/U1bS/1+S/n/o/n/2+3v/v/6feUvr/3P3PzVuOTD8zh7z3xIAAABYktz9T4tbmvz8HwAAADrI3f/0uMX+BwAAgGHk7n9G3NJk/+v/5/v/6+8+/+vp/w9/fv2//l//r//X/6+g/7/5kE/U/x+J/r9R/3/txV+v/9f/M29p/X/u/mfGLU32PwAAAHSQu/9ZcYv9DwAAAMPI3f/suMX+BwAAgGHk7n9O3HKfzeaIGfuq6f+9/1//r//X/+v/d0n/v4L+/zD6/yPR/zfq/w+h/9f/M29p/X/u/ufGLX7+DwAAAMPI3f+8uMX+BwAAgGHk7n9+3GL/AwAAwDBy978gbmmy//X/6+n/r9L/j9D/3/OW8/fT/8c/1//r/y8H/b/+f6P/39pJ9/Nrf379v/6feUvr/3P33xS3NNn/AAAA0EHu/hfGLfY/AAAADCN3/4viFvsfAAAAhpG7/8VxS5P9r/9fT//v/f9D9P/e/7/g/v9R8ecx6f8vD/2//n/KZej/b7pO/7+1k+7nT+j5T1+u59f/6/+Zt7T+P3f/S+KWJvsfAAAAOsjd/9K4xf4HAACAYeTuPx+32P8AAAAwjNz9L4tbmux//b/+X/+v/9f/e///Lun/9f9TvP9f/7/m59f/6/+Zt7T+P3f/y+OWJvsfAAAAOsjd/4q4xf4HAACAYeTuf2XcYv8DAADAql3YgeXuf1Xc0mT/6//1//r/S/X/5/X/d6H/1/9vQ/+v/5+i/9f/r/n59f/6f+Ytrf/P3f/quKXJ/gcAAIAOcvffHLfY/wAAADCM3P2viVvsfwAAABhG7v7Xxi1N9r/+X/+v//f+f/2//n+X9P/6/yn6f/3/mp9f/6//Z97S+v/c/a+LW5rsfwAAAOggd//r4xb7HwAAAIaRu/8NcYv9DwAAAMPI3f/GuKXJ/tf/6//1//p//b/+f5f0//r/Kfp//f+an1//r/9n3tL6/9z9b4pbmux/AAAA6CB3/5vjFvsfAAAAhpG7/y1xi/0PAAAAw8jd/9a4pcn+1//r//X/+n/9v/5/l/T/+v8p+n/9/5qfX/+v/2fe0vr/3P1vi1ua7H8AAADoIHf/2+MW+x8AAACGkbv/HXGL/Q8AAADDyN3/zrilyf7X/+v/9f/6f/2//n+X9P/6/ynr6/+vPvCR/l//r//X/zNtaf1/7v53xS1N9j8AAAB0kLv/3XGL/Q8AAADDyN3/nrjF/gcAAIBh5O5/b9zSZP/r/zv3/6fObTb6/43+X/+v/98p/b/+f8r6+v+D9P/6f/2//p9pS+v/c/e/L25psv8BAACgg9z9749b7H8AAAAYRu7+D8Qt9j8AAAAMI3f/B+OWJvtf/9+5//f+f/3/wefU/+v/d0H/r/+fov/X/6/5+Zfc/5/W/7MQJ97/5yfGx7n7PxS3NNn/AAAA0EHu/g/HLfY/AAAADCN3/0fiFvsfAAAAhpG7/6NxS5P9r//X/+v/9f8X9v9nDv8jvkf/r//fhv5f/z9F/6//X/PzL7n/9/5/luLE+/+7fJy7/2NxS5P9DwAAAB3k7v943GL/AwAAwDBy938ibrH/AQAAYBi5+2+JW5rsf/2//l//r//3/n/9/y7p//X/U/T/q+v/r7rwA/2//l//z5yl9f+5+z8ZtzTZ/wAAALBy1x7lk3L3fypusf8BAABgGLn7Px232P8AAAAwjNz9n4lbmuz/bfr/s/r/i+j/D39+/b/+X/+v/19Y/3/Ntt9H/79P/39Qw/7/AP2//l//z5yl9f+5+z8btzTZ/wAAANBB7v7PxS32PwAAAAwjd//n4xb7HwAAAIaRu/8LcUuT/e/9//p//f+x+v8b9P/6f/3/8Sys/9+a/n/f7vr/e2969P9Xx3/Q/4/w/Pp//T/zltb/5+7/YtzSZP8DAABAB7n7b41b7H8AAAAYRu7+L8Ut9j8AAAAMI3f/l+OWJvtf/6//1/97/7/+X/+/S/r/4/b/Z471XOP0/97/v9H/r+759f/6f+Ytrf/P3f+VuKXJ/gcAAIAOcvd/NW6x/wEAAGAYufu/FrfY/wAAADCM3P1fj1ua7H/9v/5f/6//1//r/3dJ/+/9/1P0//r/NT+//l//z7yl9f+5+78RtzTZ/wAAANBB7v5vxi32PwAAAAwjd/+34hb7HwAAAIaRu//bcUuT/a//1//r//X/+v+F9P+nzun/t6D/1/9v9P9bO+l+fu3Pr//X/zNvaf1/7v7vxC1N9j8AAAB0kLv/u3GL/Q8AAADDyN3/vbjF/gcAAIBh5O7/ftzSZP/P9P/VwOn/p+n/N3v/+9H/H/z19f/6f+//1//r/6fp//X/a35+/b/+n3lL6/9z9/8gbrlz+J05/r8lAAAAsCS5+38YtzT5+T8AAAB0kLv/R3GL/Q8AAADDyN3/47ilyf73/n/9v/f/6//1//r/XdL/6/+n6P/1/2t+fv2//p95S+v/c/f/JG5psv8BAACgg9z9P41b7H8AAAAYRu7+n8Ut9j8AAAAMI3f/z+OWJvtf/z9q/3/b3fb/qf5f/6//n3t+/f9u6f/1/1P0//r/NT+//l//z7yl9f+5+38RtzTZ/wAAALB+p2c/I3f/L+MW+x8AAACGkbv/V3GL/Q8AAADDyN3/67ilyf7X/4/a/3v/v/5f/6//Xwb9v/5/iv5f/7/m59f/6/+Zt7T+P3f/b+KWJvsfAAAAOsjd/9u4xf4HAACAYeTu/13cYv8DAADAMHL3/z5uabL/9f+76P9v1f/r//fo//X/+v/19/+n4i8c/f8+/f9B+n/9v/5f/8+0pfX/ufv/ELc02f8AAADQQe7+P8Yt9j8AAAAMI3f/n+IW+x8AAACGkbv/z3FLk/0/Tv8fT7qI/t/7//X/+/T/+n/9//r7/6T/36f/P0j/r//X/+v/mba0/j93/1/ilib7HwAAADrI3f/XuMX+BwAAgGHk7r8tbrH/AQAAYBi5+/8WtzTZ/+P0/0H/r//X/+v/47/X/y+D/l//P0X/r/9f8/Pr//X/zFta/5+7/+9xS5P9DwAAAB3k7v9H3GL/AwAAwDBy9/8zbrH/AQAAYBi5+2+PWy7a/2eu4FNdOfp//f/u+v877rHZ6P/1//p//b/+X/9/afp//f+an1//r/9n3tL6/9v3/r/2ms2/9r7az/8BAABgRLn7/x232P8AAAAwjNz9/4lb7H8AAAAYRu7+/8YtTfa//l//7/3//1f/f93Unwf9v/5f/6//1/9P0//r/9f8/Pp//T/zltb/5+7/XwAAAP//RByXNg==") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f0000000240)='./file1\x00', 0xd) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x4}}, 0x20) 7.655480194s ago: executing program 5 (id=996): socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYRES16=r2], 0xc4}}, 0x40) 6.659858638s ago: executing program 4 (id=997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x18, 0x3, 0x94, '\x00', 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.60642142s ago: executing program 5 (id=998): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x86, 0x0, 0xe, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 6.388712085s ago: executing program 5 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) flock(0xffffffffffffffff, 0x2) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r2, 0x6f6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r5, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 6.18759359s ago: executing program 4 (id=1000): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(0x3) write(r1, 0x0, 0x0) 6.020832144s ago: executing program 4 (id=1001): r0 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x10000000}], 0x2, 0x0, 0x0) 5.927575446s ago: executing program 4 (id=1002): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xfffb, 0x6, 0x6, 0x2}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x28}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) 5.910515097s ago: executing program 2 (id=1003): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r4, 0x7800, 0x20, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x4}]}}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0x3d13, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.010360069s ago: executing program 5 (id=1004): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r6 = fsopen(0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_int(r7, 0x0, 0x2, 0x0) 4.53426772s ago: executing program 4 (id=1005): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/tracing/trace_pipe\x00', 0x8000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) close(r2) 0s ago: executing program 5 (id=1006): socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB, @ANYRES16=r2], 0xc4}}, 0x40) kernel console output (not intermixed with test programs): 0 to 64 [ 98.529326][ T8] usb write operation failed. (-71) [ 98.578825][ T8] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 98.611072][ T8] dvbdev: DVB: registering new adapter (Terratec H7) [ 98.624247][ T8] usb 2-1: media controller created [ 98.631594][ T5815] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.654191][ T8] usb read operation failed. (-71) [ 98.660192][ T8] usb write operation failed. (-71) [ 98.676625][ T8] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 98.695484][ T8] usb 2-1: USB disconnect, device number 2 [ 99.447846][ T5945] binder: 5944:5945 ioctl c00c6211 0 returned -14 [ 99.461563][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.496971][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 99.520101][ T5815] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.573463][ T5815] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.657987][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 99.692759][ T5815] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.738840][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.763358][ T5815] usb 3-1: Product: syz [ 99.767864][ T23] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 99.786948][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.795068][ T5815] usb 3-1: Manufacturer: syz [ 99.812023][ T5949] loop1: detected capacity change from 0 to 8 [ 99.813612][ T5815] usb 3-1: SerialNumber: syz [ 99.824999][ T5949] SQUASHFS error: zlib decompression failed, data probably corrupt [ 99.835781][ T5949] SQUASHFS error: Failed to read block 0x9b: -5 [ 99.842250][ T5949] SQUASHFS error: Unable to read metadata cache entry [99] [ 99.850965][ T5949] SQUASHFS error: Unable to read inode 0x127 [ 100.020353][ T23] usb 4-1: config 0 descriptor?? [ 100.903554][ T23] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 100.913447][ T5815] usb 3-1: 0:2 : does not exist [ 100.934983][ T5815] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 101.053655][ T5815] usb 3-1: USB disconnect, device number 2 [ 101.174524][ T5954] loop1: detected capacity change from 0 to 2048 [ 101.237970][ T5954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.295830][ T5954] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.352188][ T5954] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 101.432379][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.585482][ T5964] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 101.622147][ T5964] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 101.958852][ T5972] overlay: Unknown parameter '/' [ 101.999307][ T5972] input: syz0 as /devices/virtual/input/input6 [ 102.145732][ T23] gspca_vc032x: reg_w err -71 [ 102.426883][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.748734][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.754195][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.761077][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.766421][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.771821][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.777213][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.782537][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.788050][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.793381][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.798784][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.804120][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.809486][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.814817][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.821096][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.826432][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.831833][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.837254][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 102.842598][ T23] gspca_vc032x: Unknown sensor... [ 102.847821][ T23] vc032x: probe of 4-1:0.0 failed with error -22 [ 102.878359][ T23] usb 4-1: USB disconnect, device number 2 [ 103.979931][ T8] IPVS: starting estimator thread 0... [ 104.064430][ T5989] binder: 5988:5989 ioctl c00c6211 0 returned -14 [ 104.087049][ T5987] IPVS: using max 19 ests per chain, 45600 per kthread [ 104.508392][ T5996] loop3: detected capacity change from 0 to 8 [ 104.684153][ T5996] SQUASHFS error: zlib decompression failed, data probably corrupt [ 104.763854][ T5998] loop0: detected capacity change from 0 to 8 [ 104.776466][ T5996] SQUASHFS error: Failed to read block 0x9b: -5 [ 104.826032][ T5996] SQUASHFS error: Unable to read metadata cache entry [99] [ 104.907832][ T5996] SQUASHFS error: Unable to read inode 0x127 [ 104.957486][ T5998] SQUASHFS error: zlib decompression failed, data probably corrupt [ 104.965494][ T5998] SQUASHFS error: Failed to read block 0x9b: -5 [ 104.979822][ T5994] loop1: detected capacity change from 0 to 2048 [ 104.999240][ T5998] SQUASHFS error: Unable to read metadata cache entry [99] [ 105.006523][ T5998] SQUASHFS error: Unable to read inode 0x127 [ 105.202405][ T5994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.220960][ T5769] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.691910][ T5994] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.764985][ T6005] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.42'. [ 107.108714][ T6013] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.43'. [ 107.192611][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.937015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 109.220868][ T8] IPVS: starting estimator thread 0... [ 109.317987][ T6032] IPVS: using max 18 ests per chain, 43200 per kthread [ 109.466640][ T6041] loop0: detected capacity change from 0 to 8 [ 109.481708][ T6036] binder: 6034:6036 ioctl c00c6211 0 returned -14 [ 109.562995][ T6041] SQUASHFS error: zlib decompression failed, data probably corrupt [ 109.644998][ T6041] SQUASHFS error: Failed to read block 0x9b: -5 [ 109.735005][ T6041] SQUASHFS error: Unable to read metadata cache entry [99] [ 109.772588][ T6041] SQUASHFS error: Unable to read inode 0x127 [ 110.894464][ T6052] loop2: detected capacity change from 0 to 2048 [ 111.081050][ T6057] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.55'. [ 111.387548][ T6052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.581902][ T6052] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.009150][ T6052] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 112.232833][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.263158][ T6066] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 112.806838][ T23] IPVS: starting estimator thread 0... [ 113.017421][ T6071] IPVS: using max 17 ests per chain, 40800 per kthread [ 113.354813][ T6077] loop0: detected capacity change from 0 to 8 [ 113.380859][ T6077] SQUASHFS error: zlib decompression failed, data probably corrupt [ 113.502703][ T6077] SQUASHFS error: Failed to read block 0x9b: -5 [ 113.725005][ T6077] SQUASHFS error: Unable to read metadata cache entry [99] [ 113.753510][ T6077] SQUASHFS error: Unable to read inode 0x127 [ 113.839292][ T5765] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 115.460363][ T6098] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.67'. [ 115.543546][ T6102] loop0: detected capacity change from 0 to 2048 [ 115.677435][ T6102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.762207][ T6108] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.69'. [ 115.844972][ T6102] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.228583][ T6102] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 116.478007][ T789] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.554141][ T6112] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 116.650172][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.727062][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 116.768201][ T789] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.794928][ T789] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 116.819167][ T789] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.841448][ T789] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 116.858000][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.873040][ T789] usb 2-1: Product: syz [ 117.033924][ T789] usb 2-1: Manufacturer: syz [ 117.039128][ T789] usb 2-1: SerialNumber: syz [ 117.867098][ T789] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 117.880396][ T789] usb 2-1: clock source 0 is not valid, cannot use [ 117.888276][ T789] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 118.512930][ T6147] Zero length message leads to an empty skb [ 118.521374][ T6147] fuse: Unknown parameter 'u0000000000000000000000000000000000000004' [ 121.156964][ T789] usb 2-1: USB disconnect, device number 3 [ 121.277049][ T6144] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.80'. [ 121.633755][ T6157] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.81'. [ 124.047182][ T177] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.401869][ T177] usb 4-1: Using ep0 maxpacket: 8 [ 124.425988][ T177] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.456730][ T177] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 124.473289][ T177] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.495564][ T177] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 124.516123][ T177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.538560][ T177] usb 4-1: Product: syz [ 124.542784][ T177] usb 4-1: Manufacturer: syz [ 124.567374][ T177] usb 4-1: SerialNumber: syz [ 124.887046][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.099117][ T23] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 125.129329][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.197978][ T177] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 125.206637][ T177] usb 4-1: clock source 0 is not valid, cannot use [ 125.233884][ T177] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 125.415212][ T23] cxacru 2-1:1.0: invalid response length to cm 0x90: 62 [ 125.495769][ T6195] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 125.696938][ T6195] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 125.798071][ T6197] fuse: Unknown parameter 'user0000000000000000000000000000000000000004' [ 127.540298][ T5854] usb 4-1: USB disconnect, device number 3 [ 127.642188][ T177] usb 2-1: USB disconnect, device number 4 [ 127.803007][ T6203] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.95'. [ 128.750046][ T6213] loop0: detected capacity change from 0 to 4096 [ 129.035504][ T6213] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 129.213589][ T6213] ntfs3: loop0: Failed to load $Extend (-22). [ 129.311675][ T6213] ntfs3: loop0: Failed to initialize $Extend. [ 131.117113][ T789] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.308947][ T789] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 131.331663][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.575046][ T789] cxacru 1-1:1.0: invalid response length to cm 0x90: 63 [ 131.689575][ T6244] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.106'. [ 132.954313][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.961374][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.334819][ T5854] usb 1-1: USB disconnect, device number 3 [ 135.478343][ T6274] loop0: detected capacity change from 0 to 8 [ 135.502708][ T6270] loop1: detected capacity change from 0 to 8 [ 135.512894][ T6270] SQUASHFS error: zlib decompression failed, data probably corrupt [ 135.525745][ T6274] SQUASHFS error: zlib decompression failed, data probably corrupt [ 135.534562][ T6270] SQUASHFS error: Failed to read block 0x9b: -5 [ 135.544297][ T6274] SQUASHFS error: Failed to read block 0x9b: -5 [ 135.564541][ T6274] SQUASHFS error: Unable to read metadata cache entry [99] [ 135.566859][ T6270] SQUASHFS error: Unable to read metadata cache entry [99] [ 135.586086][ T6270] SQUASHFS error: Unable to read inode 0x127 [ 135.606313][ T6274] SQUASHFS error: Unable to read inode 0x127 [ 135.784091][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 137.516901][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 137.530706][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.561759][ T8] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 137.600651][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.627657][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 137.650553][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.675161][ T8] usb 3-1: Product: syz [ 137.691732][ T8] usb 3-1: Manufacturer: syz [ 137.696398][ T8] usb 3-1: SerialNumber: syz [ 138.073600][ T6298] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.122'. [ 138.816826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.080273][ T8] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 139.106907][ T8] usb 3-1: clock source 0 is not valid, cannot use [ 139.121127][ T8] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 139.138370][ T8] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 139.297120][ T8] usb 3-1: USB disconnect, device number 3 [ 139.520045][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.706879][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.943136][ T6310] loop0: detected capacity change from 0 to 8 [ 139.954274][ T6310] SQUASHFS error: zlib decompression failed, data probably corrupt [ 139.966553][ T6310] SQUASHFS error: Failed to read block 0x9b: -5 [ 139.973188][ T6310] SQUASHFS error: Unable to read metadata cache entry [99] [ 139.984747][ T6310] SQUASHFS error: Unable to read inode 0x127 [ 140.119109][ T6312] loop2: detected capacity change from 0 to 8 [ 140.169841][ T6312] SQUASHFS error: zlib decompression failed, data probably corrupt [ 140.227984][ T6312] SQUASHFS error: Failed to read block 0x9b: -5 [ 140.234791][ T6312] SQUASHFS error: Unable to read metadata cache entry [99] [ 140.242246][ T6312] SQUASHFS error: Unable to read inode 0x127 [ 140.250768][ T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 140.262321][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.884297][ T9] cxacru 4-1:1.0: invalid response length to cm 0x90: 63 [ 140.936800][ T6320] loop0: detected capacity change from 0 to 8 [ 140.991006][ T6320] SQUASHFS error: zlib decompression failed, data probably corrupt [ 141.006938][ T6320] SQUASHFS error: Failed to read block 0x9b: -5 [ 141.044623][ T6320] SQUASHFS error: Unable to read metadata cache entry [99] [ 141.064067][ T6320] SQUASHFS error: Unable to read inode 0x127 [ 141.108437][ T5769] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.477295][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.787158][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 141.809370][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.836001][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.866348][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.883633][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.893095][ T9] usb 3-1: Product: syz [ 141.902729][ T9] usb 3-1: Manufacturer: syz [ 141.908695][ T9] usb 3-1: SerialNumber: syz [ 142.131989][ T9] usb 3-1: 0:2 : does not exist [ 142.145953][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 142.193197][ T9] usb 3-1: USB disconnect, device number 4 [ 142.283798][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.389209][ T5823] usb 4-1: USB disconnect, device number 4 [ 144.467235][ T6344] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.134'. [ 145.151782][ T6350] loop0: detected capacity change from 0 to 8 [ 145.223779][ T6350] SQUASHFS error: zlib decompression failed, data probably corrupt [ 145.242510][ T6354] loop1: detected capacity change from 0 to 8 [ 145.262701][ T6350] SQUASHFS error: Failed to read block 0x9b: -5 [ 145.307245][ T6354] SQUASHFS error: zlib decompression failed, data probably corrupt [ 145.315833][ T6354] SQUASHFS error: Failed to read block 0x9b: -5 [ 145.338088][ T6350] SQUASHFS error: Unable to read metadata cache entry [99] [ 145.380601][ T6350] SQUASHFS error: Unable to read inode 0x127 [ 145.395255][ T6354] SQUASHFS error: Unable to read metadata cache entry [99] [ 145.462678][ T6354] SQUASHFS error: Unable to read inode 0x127 [ 146.224490][ T6361] loop0: detected capacity change from 0 to 8 [ 146.250520][ T6361] SQUASHFS error: zlib decompression failed, data probably corrupt [ 146.273501][ T6361] SQUASHFS error: Failed to read block 0x9b: -5 [ 146.283593][ T6361] SQUASHFS error: Unable to read metadata cache entry [99] [ 146.301241][ T6361] SQUASHFS error: Unable to read inode 0x127 [ 147.241523][ T6370] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.142'. [ 147.767858][ T6379] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.143'. [ 149.235041][ T6388] loop1: detected capacity change from 0 to 2048 [ 149.318352][ T6388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.343888][ T6396] loop3: detected capacity change from 0 to 8 [ 149.356415][ T6396] SQUASHFS error: zlib decompression failed, data probably corrupt [ 149.364752][ T6396] SQUASHFS error: Failed to read block 0x9b: -5 [ 149.371795][ T6396] SQUASHFS error: Unable to read metadata cache entry [99] [ 149.381007][ T6396] SQUASHFS error: Unable to read inode 0x127 [ 149.388928][ T6388] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.407640][ T5817] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.420999][ T6388] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 149.626892][ T5817] usb 3-1: Using ep0 maxpacket: 8 [ 149.652943][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.702679][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.714899][ T5817] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 149.757341][ T5817] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.806063][ T5817] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 149.828486][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.864134][ T5817] usb 3-1: Product: syz [ 149.872844][ T5817] usb 3-1: Manufacturer: syz [ 149.884387][ T5817] usb 3-1: SerialNumber: syz [ 149.927433][ T6403] loop1: detected capacity change from 0 to 8 [ 149.982019][ T6403] SQUASHFS error: zlib decompression failed, data probably corrupt [ 150.017250][ T6403] SQUASHFS error: Failed to read block 0x9b: -5 [ 150.037310][ T6403] SQUASHFS error: Unable to read metadata cache entry [99] [ 150.044600][ T6403] SQUASHFS error: Unable to read inode 0x127 [ 150.545275][ T5817] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 150.623142][ T6413] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.154'. [ 151.418664][ T5817] usb 3-1: clock source 0 is not valid, cannot use [ 151.433690][ T5817] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 151.713279][ T6386] fuse: Unknown parameter 'user_0000000000000000000000000000000000000004' [ 151.915982][ T5817] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 154.929482][ T6432] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.159'. [ 154.997022][ T6400] usb 3-1: USB disconnect, device number 5 [ 155.429097][ T6443] loop3: detected capacity change from 0 to 8 [ 155.513979][ T6443] SQUASHFS error: zlib decompression failed, data probably corrupt [ 155.545597][ T6443] SQUASHFS error: Failed to read block 0x9b: -5 [ 155.553523][ T6443] SQUASHFS error: Unable to read metadata cache entry [99] [ 155.561330][ T6443] SQUASHFS error: Unable to read inode 0x127 [ 155.699157][ T6449] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.166'. [ 158.217601][ T6470] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.171'. [ 161.133028][ T6484] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.176'. [ 161.701372][ T6490] binder: 6488:6490 ioctl c00c6211 0 returned -14 [ 161.896917][ T5815] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.918018][ T6495] loop1: detected capacity change from 0 to 8 [ 163.134583][ T6495] SQUASHFS error: zlib decompression failed, data probably corrupt [ 163.231504][ T6495] SQUASHFS error: Failed to read block 0x9b: -5 [ 163.285829][ T6495] SQUASHFS error: Unable to read metadata cache entry [99] [ 163.326545][ T6495] SQUASHFS error: Unable to read inode 0x127 [ 163.515630][ T5815] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 163.946635][ T6498] loop3: detected capacity change from 0 to 64 [ 164.338302][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.493293][ T5815] cxacru 3-1:1.0: invalid response length to cm 0x91: 0 [ 165.500520][ T5815] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 165.508757][ T5815] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 165.519429][ T5815] cxacru: probe of 3-1:1.0 failed with error -5 [ 165.532121][ T5815] usb 3-1: USB disconnect, device number 6 [ 165.705013][ T6508] loop0: detected capacity change from 0 to 8 [ 165.735363][ T6508] SQUASHFS error: zlib decompression failed, data probably corrupt [ 165.757262][ T6508] SQUASHFS error: Failed to read block 0x9b: -5 [ 165.764856][ T6508] SQUASHFS error: Unable to read metadata cache entry [99] [ 165.787018][ T6508] SQUASHFS error: Unable to read inode 0x127 [ 165.927988][ T6513] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.183'. [ 166.406940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 167.149325][ T6521] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.186'. [ 168.118790][ T6523] loop1: detected capacity change from 0 to 2048 [ 168.124970][ T6527] loop0: detected capacity change from 0 to 8 [ 168.134401][ T6527] SQUASHFS error: zlib decompression failed, data probably corrupt [ 168.180064][ T6527] SQUASHFS error: Failed to read block 0x9b: -5 [ 168.196647][ T6527] SQUASHFS error: Unable to read metadata cache entry [99] [ 168.200226][ T6523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.204491][ T6527] SQUASHFS error: Unable to read inode 0x127 [ 168.245752][ T6523] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.274416][ T5768] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.357888][ T6534] loop2: detected capacity change from 0 to 64 [ 168.624226][ T6523] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 169.412240][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.996298][ T6558] loop3: detected capacity change from 0 to 8 [ 172.059108][ T6558] SQUASHFS error: zlib decompression failed, data probably corrupt [ 172.069671][ T6559] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.197'. [ 172.122211][ T6558] SQUASHFS error: Failed to read block 0x9b: -5 [ 172.192506][ T6558] SQUASHFS error: Unable to read metadata cache entry [99] [ 172.266697][ T6558] SQUASHFS error: Unable to read inode 0x127 [ 173.243824][ T6567] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.200'. [ 174.170151][ T6571] loop3: detected capacity change from 0 to 8 [ 174.191805][ T6571] SQUASHFS error: zlib decompression failed, data probably corrupt [ 174.199983][ T6571] SQUASHFS error: Failed to read block 0x9b: -5 [ 174.206306][ T6571] SQUASHFS error: Unable to read metadata cache entry [99] [ 174.213790][ T6571] SQUASHFS error: Unable to read inode 0x127 [ 174.456540][ T6574] loop2: detected capacity change from 0 to 64 [ 174.515643][ T6576] loop0: detected capacity change from 0 to 64 [ 175.537590][ T6583] loop3: detected capacity change from 0 to 64 [ 176.479209][ T6592] syz.3.205: attempt to access beyond end of device [ 176.479209][ T6592] loop3: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 176.493109][ T6592] Buffer I/O error on dev loop3, logical block 8388608, lost async page write [ 176.681383][ T6593] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.208'. [ 177.583030][ T6601] loop3: detected capacity change from 0 to 8 [ 177.633453][ T6601] SQUASHFS error: zlib decompression failed, data probably corrupt [ 177.654166][ T6601] SQUASHFS error: Failed to read block 0x9b: -5 [ 177.696115][ T6601] SQUASHFS error: Unable to read metadata cache entry [99] [ 177.703475][ T6601] SQUASHFS error: Unable to read inode 0x127 [ 177.859982][ T6609] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.212'. [ 179.207437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 179.486158][ T6615] loop0: detected capacity change from 0 to 8 [ 179.525405][ T6615] SQUASHFS error: zlib decompression failed, data probably corrupt [ 179.558742][ T6618] loop1: detected capacity change from 0 to 64 [ 179.568827][ T6615] SQUASHFS error: Failed to read block 0x9b: -5 [ 179.575173][ T6615] SQUASHFS error: Unable to read metadata cache entry [99] [ 179.583986][ T6615] SQUASHFS error: Unable to read inode 0x127 [ 180.368962][ T6400] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.688742][ T6400] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 180.706823][ T6400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.251064][ T6633] loop1: detected capacity change from 0 to 8 [ 181.543383][ T6400] cxacru 3-1:1.0: invalid response length to cm 0x91: 0 [ 181.660671][ T6400] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 181.743682][ T6633] SQUASHFS error: zlib decompression failed, data probably corrupt [ 181.786933][ T6633] SQUASHFS error: Failed to read block 0x9b: -5 [ 181.793277][ T6633] SQUASHFS error: Unable to read metadata cache entry [99] [ 181.797525][ T6400] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 181.828172][ T6633] SQUASHFS error: Unable to read inode 0x127 [ 181.883658][ T6400] cxacru: probe of 3-1:1.0 failed with error -5 [ 182.055722][ T6400] usb 3-1: USB disconnect, device number 7 [ 182.913535][ T6649] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.224'. [ 183.800351][ T6648] loop3: detected capacity change from 0 to 8 [ 183.930397][ T6655] loop2: detected capacity change from 0 to 64 [ 185.071575][ T6661] loop2: detected capacity change from 0 to 8 [ 185.110562][ T6661] SQUASHFS error: zlib decompression failed, data probably corrupt [ 185.137224][ T6661] SQUASHFS error: Failed to read block 0x9b: -5 [ 185.171315][ T6661] SQUASHFS error: Unable to read metadata cache entry [99] [ 185.191888][ T6661] SQUASHFS error: Unable to read inode 0x127 [ 185.256292][ T6663] binder: 6662:6663 ioctl c00c6211 0 returned -14 [ 185.344686][ T5765] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.985306][ T6241] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 190.996540][ T6195] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 191.005927][ T6318] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 193.494375][ T6688] CIFS: Attempting to mount //127.0.0.1/share [ 193.550084][ T6689] loop0: detected capacity change from 0 to 64 [ 193.569399][ T6692] lo: entered allmulticast mode [ 194.351912][ T6687] lo: left allmulticast mode [ 194.392883][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.531683][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.537694][ T6700] loop3: detected capacity change from 0 to 8 [ 194.603740][ T6688] CIFS: VFS: cifs_mount failed w/return code = -112 [ 194.612349][ T6700] SQUASHFS error: zlib decompression failed, data probably corrupt [ 194.620477][ T5818] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.648660][ T6700] SQUASHFS error: Failed to read block 0x9b: -5 [ 194.657208][ T6700] SQUASHFS error: Unable to read metadata cache entry [99] [ 194.664485][ T6700] SQUASHFS error: Unable to read inode 0x127 [ 195.017898][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 195.025084][ T5818] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.043151][ T5818] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 195.054602][ T5818] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.083568][ T5818] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 195.159861][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.176923][ T5823] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 195.204449][ T5818] usb 3-1: Product: syz [ 195.210618][ T5818] usb 3-1: Manufacturer: syz [ 195.215390][ T5818] usb 3-1: SerialNumber: syz [ 195.381056][ T5823] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 196.101628][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.387755][ T5818] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 196.406699][ T5818] usb 3-1: clock source 0 is not valid, cannot use [ 196.441424][ T5818] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 196.887440][ T5823] cxacru 2-1:1.0: invalid response length to cm 0x91: 0 [ 196.894992][ T5823] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 196.903462][ T5823] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 196.913081][ T5823] cxacru: probe of 2-1:1.0 failed with error -5 [ 196.933554][ T5823] usb 2-1: USB disconnect, device number 5 [ 197.035855][ T6723] fuse: Unknown parameter '0x0000000000000004' [ 198.205679][ T6728] CIFS: Attempting to mount //127.0.0.1/share [ 198.277457][ T6732] lo: entered allmulticast mode [ 198.787995][ T789] usb 3-1: USB disconnect, device number 8 [ 199.115896][ T6727] lo: left allmulticast mode [ 199.204833][ T6728] CIFS: VFS: cifs_mount failed w/return code = -112 [ 200.327169][ T6747] loop1: detected capacity change from 0 to 4096 [ 200.376890][ T5854] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 201.387449][ T6747] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 201.467120][ T5854] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 201.476620][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.540144][ T6747] ntfs3: loop1: Failed to load $Extend (-22). [ 201.546296][ T6747] ntfs3: loop1: Failed to initialize $Extend. [ 202.781739][ T5854] cxacru 3-1:1.0: invalid response length to cm 0x91: 0 [ 202.807521][ T5854] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 202.815265][ T5854] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 202.889958][ T5854] cxacru: probe of 3-1:1.0 failed with error -5 [ 202.932177][ T5854] usb 3-1: USB disconnect, device number 9 [ 202.978083][ T6765] CIFS: Attempting to mount //127.0.0.1/share [ 203.032115][ T6767] lo: entered allmulticast mode [ 203.226969][ T5823] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 203.506879][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 203.519322][ T5823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.541445][ T5823] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.565692][ T5823] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.595012][ T5823] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 203.605507][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.624753][ T5823] usb 2-1: Product: syz [ 203.633692][ T5823] usb 2-1: Manufacturer: syz [ 203.644294][ T5823] usb 2-1: SerialNumber: syz [ 203.788348][ T6762] lo: left allmulticast mode [ 203.799377][ T6765] CIFS: VFS: cifs_mount failed w/return code = -512 [ 204.285892][ T5823] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 205.013392][ T5823] usb 2-1: clock source 0 is not valid, cannot use [ 205.026521][ T5823] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 205.437800][ T6784] fuse: Unknown parameter '0x0000000000000004' [ 206.714911][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 206.726508][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 206.736964][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 206.743084][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 208.495388][ T6802] loop0: detected capacity change from 0 to 4096 [ 208.505699][ T177] usb 2-1: USB disconnect, device number 6 [ 208.517309][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 208.682779][ T6802] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 208.749225][ T27] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 208.779892][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.786447][ T6802] ntfs3: loop0: Failed to load $Extend (-22). [ 208.826697][ T6802] ntfs3: loop0: Failed to initialize $Extend. [ 209.823959][ T27] cxacru 4-1:1.0: invalid response length to cm 0x91: 32 [ 209.859951][ T27] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 209.902799][ T27] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 209.961795][ T27] cxacru: probe of 4-1:1.0 failed with error -5 [ 210.103491][ T27] usb 4-1: USB disconnect, device number 5 [ 210.219088][ T6814] loop1: detected capacity change from 0 to 64 [ 210.656641][ T6821] syz.1.272: attempt to access beyond end of device [ 210.656641][ T6821] loop1: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 210.670858][ T6821] Buffer I/O error on dev loop1, logical block 8388608, lost async page write [ 212.577423][ T5854] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 212.868864][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 212.960955][ T5854] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.054386][ T5854] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 213.146994][ T5854] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 213.218840][ T5854] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 213.236621][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.263530][ T5854] usb 1-1: Product: syz [ 213.274796][ T5854] usb 1-1: Manufacturer: syz [ 213.279910][ T5854] usb 1-1: SerialNumber: syz [ 213.541310][ T6834] loop1: detected capacity change from 0 to 4096 [ 213.658282][ T6834] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 213.850067][ T6834] ntfs3: loop1: Failed to load $Extend (-22). [ 213.898571][ T6834] ntfs3: loop1: Failed to initialize $Extend. [ 214.124090][ T5854] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 214.477510][ T5854] usb 1-1: clock source 0 is not valid, cannot use [ 214.490128][ T5854] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 214.959652][ T6831] fuse: Unknown parameter '0x0000000000000004' [ 216.277598][ T27] usb 1-1: USB disconnect, device number 4 [ 216.343883][ T6853] loop3: detected capacity change from 0 to 64 [ 219.778576][ T6878] binder: 6877:6878 ioctl c00c6211 0 returned -14 [ 230.206954][ T5854] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 230.303716][ T6924] loop2: detected capacity change from 0 to 764 [ 230.340302][ T6924] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 230.874167][ T5854] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 231.213652][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.548257][ T6927] binder: 6926:6927 ioctl c00c6211 0 returned -14 [ 232.054790][ T6931] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.307'. [ 232.080917][ T5854] cxacru 2-1:1.0: invalid response length to cm 0x91: 32 [ 232.880098][ T5854] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 234.294535][ T5854] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 236.152396][ T5854] cxacru: probe of 2-1:1.0 failed with error -5 [ 237.098518][ T5854] usb 2-1: USB disconnect, device number 7 [ 238.098983][ T6952] ip6erspan0: entered allmulticast mode [ 238.623537][ T6957] loop1: detected capacity change from 0 to 64 [ 239.865291][ T6968] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.317'. [ 240.624264][ T6967] loop1: detected capacity change from 0 to 2048 [ 240.652691][ T6967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.700095][ T6967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.863314][ T6967] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.316: bg 0: block 2: invalid block bitmap [ 240.889483][ T6973] binder: 6972:6973 ioctl c00c6211 0 returned -14 [ 240.923747][ T6967] EXT4-fs (loop1): Remounting filesystem read-only [ 240.933241][ T6967] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 240.943298][ T6967] overlayfs: failed to verify upper root origin [ 247.277550][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.853664][ T6996] loop3: detected capacity change from 0 to 64 [ 249.079385][ T7007] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.327'. [ 250.320045][ T7012] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 250.354101][ T7012] ip_tables: iptables: counters copy to user failed while replacing table [ 250.649004][ T7014] binder: 7013:7014 ioctl c00c6211 0 returned -14 [ 255.830380][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.836833][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.552817][ T7025] CIFS: Attempting to mount //127.0.0.1/share [ 256.687298][ T7027] lo: entered allmulticast mode [ 257.007937][ T7033] fuse: Bad value for 'fd' [ 257.387476][ T7025] CIFS: VFS: cifs_mount failed w/return code = -112 [ 257.456270][ T7039] loop1: detected capacity change from 0 to 128 [ 257.468440][ T7039] EXT4-fs (loop1): Test dummy encryption mode enabled [ 257.501785][ T7039] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.530745][ T7039] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.587009][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 257.681924][ T7048] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.337'. [ 257.790586][ T27] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 257.800094][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.891519][ T7039] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 258.243073][ T7039] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 258.370859][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.550384][ T7066] binder: 7064:7066 ioctl c00c6211 0 returned -14 [ 258.574758][ T27] cxacru 1-1:1.0: invalid response length to cm 0x91: 48 [ 258.596910][ T27] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 259.292383][ T27] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 260.763018][ T27] cxacru: probe of 1-1:1.0 failed with error -5 [ 262.982992][ T27] usb 1-1: USB disconnect, device number 5 [ 265.852771][ T7075] loop0: detected capacity change from 0 to 64 [ 266.375805][ T7078] CIFS: Attempting to mount //127.0.0.1/share [ 266.407980][ T7082] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.346'. [ 266.461146][ T7085] lo: entered allmulticast mode [ 266.949613][ T7076] lo: left allmulticast mode [ 266.958846][ T7078] CIFS: VFS: cifs_mount failed w/return code = -112 [ 267.317054][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 267.385359][ T7101] binder: 7100:7101 ioctl c00c6211 0 returned -14 [ 268.242396][ T27] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 268.806744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 269.247321][ T7106] loop0: detected capacity change from 0 to 131072 [ 269.280807][ T7106] F2FS-fs (loop0): invalid crc value [ 269.403174][ T7106] F2FS-fs (loop0): Found nat_bits in checkpoint [ 269.463672][ T7106] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 269.610662][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.705872][ T28] audit: type=1800 audit(1786358741.155:2): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.353" name="file2" dev="loop0" ino=8 res=0 errno=0 [ 270.326923][ T27] cxacru 2-1:1.0: invalid response length to cm 0x91: 56 [ 270.334284][ T27] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 270.374547][ T27] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 270.406209][ T27] cxacru: probe of 2-1:1.0 failed with error -5 [ 270.446592][ T27] usb 2-1: USB disconnect, device number 8 [ 270.510254][ T7115] loop2: detected capacity change from 0 to 64 [ 271.488773][ T7121] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.357'. [ 272.980902][ T7137] jffs2: notice: (7137) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 273.628341][ T7143] binder: 7142:7143 ioctl c00c6211 0 returned -14 [ 279.708636][ T7148] loop1: detected capacity change from 0 to 64 [ 280.690533][ T7159] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.368'. [ 282.416690][ T7176] loop3: detected capacity change from 0 to 8 [ 282.480580][ T7176] SQUASHFS error: zlib decompression failed, data probably corrupt [ 282.523483][ T7176] SQUASHFS error: Failed to read block 0x9b: -5 [ 282.535607][ T7176] SQUASHFS error: Unable to read metadata cache entry [99] [ 282.544612][ T7176] SQUASHFS error: Unable to read inode 0x127 [ 284.894866][ T7187] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.379'. [ 286.549136][ T7207] jffs2: notice: (7207) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 286.765047][ T7214] CIFS: Attempting to mount //127.0.0.1/share [ 286.845781][ T7217] lo: entered allmulticast mode [ 287.297527][ T7220] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.390'. [ 287.525423][ T7213] lo: left allmulticast mode [ 287.539331][ T7214] CIFS: VFS: cifs_mount failed w/return code = -512 [ 287.938997][ T7224] loop0: detected capacity change from 0 to 64 [ 289.286791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 289.841077][ T7234] binder: 7233:7234 ioctl c00c6211 0 returned -14 [ 296.376413][ T7247] CIFS: Attempting to mount //127.0.0.1/share [ 296.457729][ T7250] lo: entered allmulticast mode [ 296.592869][ T7259] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.401'. [ 297.499398][ T7246] lo: left allmulticast mode [ 297.684999][ T7247] CIFS: VFS: cifs_mount failed w/return code = -512 [ 298.606789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 299.290810][ T7278] binder: 7277:7278 ioctl c00c6211 0 returned -14 [ 306.838843][ T7296] binder: 7295:7296 ioctl c00c6211 0 returned -14 [ 306.979558][ T7300] CIFS: Attempting to mount //127.0.0.1/share [ 307.263024][ T7298] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.414'. [ 307.312316][ T7305] lo: entered allmulticast mode [ 312.607643][ T7300] CIFS: VFS: cifs_mount failed w/return code = -512 [ 312.837017][ T7299] lo: left allmulticast mode [ 314.167102][ T5823] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 314.221629][ T28] audit: type=1804 audit(1786358785.685:3): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.422" name="bus" dev="ramfs" ino=12706 res=1 errno=0 [ 314.308565][ T28] audit: type=1804 audit(1786358785.715:4): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.422" name="bus" dev="ramfs" ino=12706 res=1 errno=0 [ 314.389981][ T5823] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 314.414962][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.063298][ T5823] cxacru 1-1:1.0: invalid response length to cm 0x91: 60 [ 315.083383][ T5823] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 315.115645][ T5823] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 315.145568][ T7337] binder: 7335:7337 ioctl c00c6211 0 returned -14 [ 315.157845][ T5823] cxacru: probe of 1-1:1.0 failed with error -5 [ 315.512971][ T5823] usb 1-1: USB disconnect, device number 6 [ 320.771259][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.777762][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.028773][ T7346] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.426'. [ 321.416675][ T7350] binder: 7348:7350 ioctl c00c6211 0 returned -14 [ 321.453871][ T7351] CIFS: Attempting to mount //127.0.0.1/share [ 321.507065][ T7353] lo: entered allmulticast mode [ 321.701177][ T7357] loop3: detected capacity change from 0 to 8 [ 321.716363][ T7357] SQUASHFS error: zlib decompression failed, data probably corrupt [ 321.726419][ T7357] SQUASHFS error: Failed to read block 0x9b: -5 [ 321.736583][ T7357] SQUASHFS error: Unable to read metadata cache entry [99] [ 321.745750][ T7357] SQUASHFS error: Unable to read inode 0x127 [ 322.919222][ T7349] lo: left allmulticast mode [ 322.927248][ T7351] CIFS: VFS: cifs_mount failed w/return code = -112 [ 324.966564][ T7363] loop2: detected capacity change from 0 to 40427 [ 325.014531][ T7363] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 325.034686][ T7363] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 325.072848][ T7363] F2FS-fs (loop2): invalid crc value [ 325.100946][ T7370] loop1: detected capacity change from 0 to 32768 [ 325.109677][ T7363] F2FS-fs (loop2): Found nat_bits in checkpoint [ 325.283520][ T7363] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 325.327193][ T7363] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 326.367378][ T7379] UFO tlock:0xffffc9000289a090 [ 326.760484][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 327.089494][ T23] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 327.098974][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.555917][ T7362] syz.2.432: attempt to access beyond end of device [ 327.555917][ T7362] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 328.316757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 328.586748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 328.666756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 329.249408][ T23] cxacru 1-1:1.0: invalid response length to cm 0x91: 62 [ 329.256533][ T23] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 329.303892][ T23] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 329.329549][ T23] cxacru: probe of 1-1:1.0 failed with error -5 [ 329.395331][ T23] usb 1-1: USB disconnect, device number 7 [ 331.048128][ T7394] binder: 7393:7394 ioctl c00c6211 0 returned -14 [ 331.088817][ T7397] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.437'. [ 332.908402][ T7408] CIFS: Attempting to mount //127.0.0.1/share [ 332.972266][ T7412] lo: entered allmulticast mode [ 333.012490][ T7413] overlay: Unknown parameter '/' [ 333.833410][ T7407] lo: left allmulticast mode [ 333.974718][ T7408] CIFS: VFS: cifs_mount failed w/return code = -512 [ 334.466383][ T7420] loop2: detected capacity change from 0 to 8 [ 334.545430][ T7420] SQUASHFS error: zlib decompression failed, data probably corrupt [ 334.582548][ T7420] SQUASHFS error: Failed to read block 0x9b: -5 [ 334.636968][ T7420] SQUASHFS error: Unable to read metadata cache entry [99] [ 334.644340][ T7420] SQUASHFS error: Unable to read inode 0x127 [ 336.797769][ T7438] binder: 7437:7438 ioctl c00c6211 0 returned -14 [ 337.726357][ T7444] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.453'. [ 339.224384][ T7454] loop0: detected capacity change from 0 to 64 [ 339.239113][ T7455] CIFS: Attempting to mount //127.0.0.1/share [ 339.560026][ T7462] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.458'. [ 340.224616][ T7455] CIFS: VFS: cifs_mount failed w/return code = -112 [ 340.747141][ T6400] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 341.000368][ T6400] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 341.012444][ T6400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.683468][ T6400] cxacru 2-1:1.0: invalid response length to cm 0x91: 62 [ 341.701136][ T6400] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 341.721481][ T6400] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 341.748209][ T6400] cxacru: probe of 2-1:1.0 failed with error -5 [ 341.795697][ T6400] usb 2-1: USB disconnect, device number 9 [ 341.814850][ T7476] binder: 7475:7476 ioctl c00c6211 0 returned -14 [ 348.588684][ T7488] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.464'. [ 349.071859][ T7495] binder: 7494:7495 ioctl c00c6211 0 returned -14 [ 350.030531][ T7506] loop2: detected capacity change from 0 to 64 [ 350.069621][ T7505] binder: 7504:7505 ioctl c00c6211 0 returned -14 [ 359.024489][ T7525] loop1: detected capacity change from 0 to 64 [ 360.072145][ T7536] loop3: detected capacity change from 0 to 32768 [ 360.138626][ T7536] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.481 (7536) [ 360.172294][ T7536] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 360.183068][ T7536] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 360.191934][ T7536] BTRFS info (device loop3): use zlib compression, level 3 [ 360.199202][ T7536] BTRFS info (device loop3): turning on sync discard [ 360.205911][ T7536] BTRFS info (device loop3): using free space tree [ 360.387142][ T7536] BTRFS info (device loop3): enabling ssd optimizations [ 361.058250][ T28] audit: type=1800 audit(1786358832.415:5): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.481" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 361.876237][ T7560] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.479'. [ 365.050281][ T5775] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.278905][ T7568] loop2: detected capacity change from 0 to 8 [ 365.319010][ T7568] SQUASHFS error: zlib decompression failed, data probably corrupt [ 365.345930][ T7568] SQUASHFS error: Failed to read block 0x9b: -5 [ 365.387023][ T7568] SQUASHFS error: Unable to read metadata cache entry [99] [ 365.397067][ T7568] SQUASHFS error: Unable to read inode 0x127 [ 367.968653][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.986532][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.996944][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.015688][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.029226][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 368.044371][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.113997][ T7589] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.490'. [ 369.589180][ T3000] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.639109][ T7602] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.493'. [ 369.752824][ T3000] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.024700][ T3000] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.466930][ T5087] Bluetooth: hci4: command tx timeout [ 372.546913][ T5087] Bluetooth: hci4: command tx timeout [ 372.695188][ T7605] loop2: detected capacity change from 0 to 8 [ 372.802078][ T7585] chnl_net:caif_netlink_parms(): no params data found [ 372.852020][ T7605] SQUASHFS error: zlib decompression failed, data probably corrupt [ 372.961349][ T7605] SQUASHFS error: Failed to read block 0x9b: -5 [ 373.064069][ T7605] SQUASHFS error: Unable to read metadata cache entry [99] [ 373.169890][ T7605] SQUASHFS error: Unable to read inode 0x127 [ 374.377337][ T3000] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.630800][ T5087] Bluetooth: hci4: command tx timeout [ 374.645727][ T7623] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.499'. [ 374.668515][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.675733][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.685506][ T7585] bridge_slave_0: entered allmulticast mode [ 374.694215][ T7585] bridge_slave_0: entered promiscuous mode [ 374.720484][ T7585] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.775994][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.787268][ T7585] bridge_slave_1: entered allmulticast mode [ 374.803911][ T7585] bridge_slave_1: entered promiscuous mode [ 374.977063][ T7585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.033300][ T7585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.152236][ T7635] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.503'. [ 375.344638][ T7585] team0: Port device team_slave_0 added [ 375.416222][ T7585] team0: Port device team_slave_1 added [ 376.331348][ T7651] loop3: detected capacity change from 0 to 8 [ 376.621125][ T7651] SQUASHFS error: zlib decompression failed, data probably corrupt [ 376.711177][ T5087] Bluetooth: hci4: command tx timeout [ 376.785455][ T7651] SQUASHFS error: Failed to read block 0x9b: -5 [ 376.888682][ T7651] SQUASHFS error: Unable to read metadata cache entry [99] [ 377.040952][ T7651] SQUASHFS error: Unable to read inode 0x127 [ 377.281064][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.340049][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.416806][ T7585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.583526][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.672242][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.023232][ T7585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.169072][ T7666] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.508'. [ 378.756723][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.763515][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.303283][ T7675] loop0: detected capacity change from 0 to 8 [ 380.125599][ T7672] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.509'. [ 380.464036][ T7585] hsr_slave_0: entered promiscuous mode [ 380.518354][ T7585] hsr_slave_1: entered promiscuous mode [ 380.576076][ T7585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.605921][ T7585] Cannot create hsr debugfs directory [ 380.796800][ T7690] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.513'. [ 382.748631][ T7698] loop3: detected capacity change from 0 to 8 [ 382.798537][ T7698] SQUASHFS error: zlib decompression failed, data probably corrupt [ 382.806528][ T7698] SQUASHFS error: Failed to read block 0x9b: -5 [ 382.857622][ T7698] SQUASHFS error: Unable to read metadata cache entry [99] [ 382.867437][ T7698] SQUASHFS error: Unable to read inode 0x127 [ 383.821585][ T7713] loop0: detected capacity change from 0 to 8 [ 384.598126][ T7717] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.520'. [ 385.651324][ T3000] hsr_slave_0: left promiscuous mode [ 385.690823][ T3000] hsr_slave_1: left promiscuous mode [ 385.716461][ T3000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.730072][ T3000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.755431][ T3000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.766270][ T3000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.859415][ T7734] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.523'. [ 385.909908][ T3000] bridge_slave_1: left allmulticast mode [ 385.974631][ T3000] bridge_slave_1: left promiscuous mode [ 386.053335][ T3000] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.291218][ T3000] bridge_slave_0: left allmulticast mode [ 386.353607][ T3000] bridge_slave_0: left promiscuous mode [ 386.430803][ T3000] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.795107][ T3000] veth1_macvtap: left promiscuous mode [ 386.805075][ T3000] veth0_macvtap: left promiscuous mode [ 386.821478][ T3000] veth1_vlan: left promiscuous mode [ 386.835842][ T3000] veth0_vlan: left promiscuous mode [ 386.888750][ T7742] binder: 7740:7742 ioctl c00c6211 0 returned -14 [ 386.940874][ T7744] loop2: detected capacity change from 0 to 8 [ 386.975482][ T7744] SQUASHFS error: zlib decompression failed, data probably corrupt [ 386.995614][ T7744] SQUASHFS error: Failed to read block 0x9b: -5 [ 387.004049][ T7744] SQUASHFS error: Unable to read metadata cache entry [99] [ 387.023691][ T7744] SQUASHFS error: Unable to read inode 0x127 [ 387.079930][ T7511] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 388.200777][ T3000] team0 (unregistering): Port device team_slave_1 removed [ 388.350765][ T3000] team0 (unregistering): Port device team_slave_0 removed [ 388.439575][ T3000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.518857][ T3000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.071600][ T3000] bond0 (unregistering): Released all slaves [ 389.283991][ T7755] loop3: detected capacity change from 0 to 8 [ 389.304725][ T7755] SQUASHFS error: zlib decompression failed, data probably corrupt [ 389.315636][ T7755] SQUASHFS error: Failed to read block 0x9b: -5 [ 389.336837][ T7755] SQUASHFS error: Unable to read metadata cache entry [99] [ 389.354616][ T7755] SQUASHFS error: Unable to read inode 0x127 [ 389.373902][ T7585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 389.406905][ T7585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 389.469674][ T7585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 389.551655][ T7585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 390.587108][ T7585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.700922][ T7767] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.530'. [ 391.264569][ T3000] IPVS: stop unused estimator thread 0... [ 391.515053][ T7585] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.626537][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.633802][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.700981][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.708338][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.919255][ T7585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 392.269648][ T7789] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.534'. [ 393.140004][ T7794] loop2: detected capacity change from 0 to 8 [ 393.148960][ T7794] SQUASHFS error: zlib decompression failed, data probably corrupt [ 393.157071][ T7794] SQUASHFS error: Failed to read block 0x9b: -5 [ 393.163348][ T7794] SQUASHFS error: Unable to read metadata cache entry [99] [ 393.173915][ T7794] SQUASHFS error: Unable to read inode 0x127 [ 393.184034][ T7792] binder: 7791:7792 ioctl c00c6211 0 returned -14 [ 394.131555][ T7802] loop3: detected capacity change from 0 to 8 [ 394.195189][ T7802] SQUASHFS error: zlib decompression failed, data probably corrupt [ 394.250285][ T7802] SQUASHFS error: Failed to read block 0x9b: -5 [ 394.256632][ T7802] SQUASHFS error: Unable to read metadata cache entry [99] [ 394.302572][ T7585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.324300][ T7802] SQUASHFS error: Unable to read inode 0x127 [ 396.139582][ T7585] veth0_vlan: entered promiscuous mode [ 396.216029][ T7585] veth1_vlan: entered promiscuous mode [ 396.419078][ T7585] veth0_macvtap: entered promiscuous mode [ 396.451338][ T7585] veth1_macvtap: entered promiscuous mode [ 396.582892][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.627532][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.659082][ T7834] loop0: detected capacity change from 0 to 2048 [ 396.677440][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.701803][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.766931][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.798590][ T7834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.817065][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.846262][ T7834] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.868854][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.913090][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.955354][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.987063][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.017974][ T7834] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 397.026893][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.051310][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.116152][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.146563][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.180449][ T7585] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.201331][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.210689][ T7585] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.221773][ T7585] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.230983][ T7585] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.438843][ T7847] loop0: detected capacity change from 0 to 8 [ 397.483602][ T7847] SQUASHFS error: zlib decompression failed, data probably corrupt [ 397.580401][ T7381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.588794][ T7847] SQUASHFS error: Failed to read block 0x9b: -5 [ 397.595090][ T7847] SQUASHFS error: Unable to read metadata cache entry [99] [ 397.625010][ T7381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.655474][ T7847] SQUASHFS error: Unable to read inode 0x127 [ 397.924329][ T7381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.967487][ T7381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.340471][ T7852] binder: 7851:7852 ioctl c00c6211 0 returned -14 [ 404.410302][ T7863] loop0: detected capacity change from 0 to 8 [ 404.497501][ T7863] SQUASHFS error: zlib decompression failed, data probably corrupt [ 404.505491][ T7863] SQUASHFS error: Failed to read block 0x9b: -5 [ 404.528336][ T7863] SQUASHFS error: Unable to read metadata cache entry [99] [ 404.535623][ T7863] SQUASHFS error: Unable to read inode 0x127 [ 404.803665][ T7865] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.547'. [ 405.738869][ T7874] loop3: detected capacity change from 0 to 2048 [ 405.816063][ T7874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.878614][ T7874] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.003428][ T7874] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 406.128432][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.409796][ T7894] loop3: detected capacity change from 0 to 8 [ 406.493155][ T7894] SQUASHFS error: zlib decompression failed, data probably corrupt [ 406.535846][ T7894] SQUASHFS error: Failed to read block 0x9b: -5 [ 406.567003][ T7894] SQUASHFS error: Unable to read metadata cache entry [99] [ 406.574295][ T7894] SQUASHFS error: Unable to read inode 0x127 [ 407.624302][ T7914] loop3: detected capacity change from 0 to 8 [ 407.775635][ T7914] SQUASHFS error: zlib decompression failed, data probably corrupt [ 407.822170][ T7915] loop4: detected capacity change from 0 to 8 [ 408.066513][ T7914] SQUASHFS error: Failed to read block 0x9b: -5 [ 408.075347][ T7914] SQUASHFS error: Unable to read metadata cache entry [99] [ 408.094215][ T7914] SQUASHFS error: Unable to read inode 0x127 [ 408.163964][ T7916] binder: 7911:7916 ioctl c00c6211 0 returned -14 [ 409.262126][ T7929] loop3: detected capacity change from 0 to 2048 [ 409.345930][ T7929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.497677][ T7929] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.689023][ T7941] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.563'. [ 409.732591][ T7929] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 409.897681][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.839773][ T7950] loop4: detected capacity change from 0 to 8 [ 410.933754][ T7950] SQUASHFS error: zlib decompression failed, data probably corrupt [ 411.012484][ T7950] SQUASHFS error: Failed to read block 0x9b: -5 [ 411.039222][ T7950] SQUASHFS error: Unable to read metadata cache entry [99] [ 411.047550][ T7950] SQUASHFS error: Unable to read inode 0x127 [ 411.099443][ T7511] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 411.519779][ T7960] loop2: detected capacity change from 0 to 4096 [ 411.663868][ T7968] loop3: detected capacity change from 0 to 8 [ 411.744389][ T7968] SQUASHFS error: zlib decompression failed, data probably corrupt [ 411.803209][ T7968] SQUASHFS error: Failed to read block 0x9b: -5 [ 411.854945][ T7968] SQUASHFS error: Unable to read metadata cache entry [99] [ 411.916964][ T7968] SQUASHFS error: Unable to read inode 0x127 [ 412.980493][ T7975] loop4: detected capacity change from 0 to 1764 [ 413.168284][ T7980] binder: 7979:7980 ioctl c00c6211 0 returned -14 [ 413.859454][ T7989] loop4: detected capacity change from 0 to 64 [ 414.379118][ T7995] loop3: detected capacity change from 0 to 64 [ 414.499806][ T8000] loop4: detected capacity change from 0 to 8 [ 414.547288][ T8000] SQUASHFS error: zlib decompression failed, data probably corrupt [ 414.597054][ T8000] SQUASHFS error: Failed to read block 0x9b: -5 [ 414.660543][ T8000] SQUASHFS error: Unable to read metadata cache entry [99] [ 414.676301][ T8001] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.578'. [ 414.789576][ T8000] SQUASHFS error: Unable to read inode 0x127 [ 416.225491][ T8017] loop0: detected capacity change from 0 to 64 [ 418.242261][ T8015] loop4: detected capacity change from 0 to 40427 [ 418.281204][ T8015] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 418.303728][ T8015] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 418.338500][ T8015] F2FS-fs (loop4): invalid crc value [ 418.368574][ T8015] F2FS-fs (loop4): Found nat_bits in checkpoint [ 418.453437][ T8042] syz.0.582: attempt to access beyond end of device [ 418.453437][ T8042] loop0: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 418.467496][ T8042] Buffer I/O error on dev loop0, logical block 8388608, lost async page write [ 418.585583][ T8015] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 418.605356][ T8015] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 418.842460][ T8046] binder: 8045:8046 ioctl c00c6211 0 returned -14 [ 419.443473][ T8054] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 419.485740][ T8054] netlink: 'syz.2.584': attribute type 2 has an invalid length. [ 420.056081][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a79d400: rx timeout, send abort [ 420.278749][ T8064] Cannot find del_set index 0 as target [ 420.557274][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf79400: rx timeout, send abort [ 420.566431][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a79d400: abort rx timeout. Force session deactivation [ 420.985476][ T8077] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.591'. [ 421.065573][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf79400: abort rx timeout. Force session deactivation [ 421.850066][ T8081] binder: 8078:8081 ioctl c00c6211 0 returned -14 [ 428.871666][ T8092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.594'. [ 430.556339][ T8103] binder: 8100:8103 ioctl c00c6211 0 returned -14 [ 433.129038][ T8111] loop2: detected capacity change from 0 to 512 [ 433.460854][ T8111] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 433.544680][ T8111] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 436.567372][ T8111] EXT4-fs: error -4 creating inode table initialization thread [ 436.698134][ T8111] EXT4-fs (loop2): mount failed [ 436.829533][ T8123] loop4: detected capacity change from 0 to 64 [ 437.237637][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 437.441581][ T9] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 437.485985][ T9] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 437.516916][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.525024][ T9] usb 3-1: Product: syz [ 437.536885][ T9] usb 3-1: Manufacturer: syz [ 437.547836][ T9] usb 3-1: SerialNumber: syz [ 437.804429][ T8125] loop2: detected capacity change from 0 to 1024 [ 437.812521][ T8125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 437.869611][ T8125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.347464][ T28] audit: type=1804 audit(1786358909.795:6): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.600" name="/newroot/146/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 438.373111][ T8133] syz.4.599: attempt to access beyond end of device [ 438.373111][ T8133] loop4: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 438.387900][ T8133] Buffer I/O error on dev loop4, logical block 8388608, lost async page write [ 438.448709][ T9] vmk80xx 3-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 438.527421][ T9] usb 3-1: USB disconnect, device number 10 [ 438.646779][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 438.657618][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 438.667901][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 438.680014][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 438.691459][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 438.700335][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 438.916465][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.182921][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.306486][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.356305][ T8135] chnl_net:caif_netlink_parms(): no params data found [ 439.379444][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.451011][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.706217][ T8149] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.602'. [ 440.152719][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.169444][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.671166][ T8156] loop3: detected capacity change from 0 to 64 [ 440.790776][ T5087] Bluetooth: hci3: command tx timeout [ 440.841870][ T8135] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.849581][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.860019][ T8135] bridge_slave_0: entered allmulticast mode [ 440.867477][ T8135] bridge_slave_0: entered promiscuous mode [ 441.273172][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.355804][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.512680][ T8135] bridge_slave_1: entered allmulticast mode [ 441.759851][ T8135] bridge_slave_1: entered promiscuous mode [ 443.064416][ T8135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.171751][ T5087] Bluetooth: hci3: command tx timeout [ 443.374973][ T8135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.241810][ T8135] team0: Port device team_slave_0 added [ 444.353629][ T8135] team0: Port device team_slave_1 added [ 444.889648][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.937232][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.062323][ T8135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.215950][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.261447][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.343800][ T8135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.815362][ T5778] Bluetooth: hci3: command tx timeout [ 446.625702][ T8135] hsr_slave_0: entered promiscuous mode [ 446.694818][ T8135] hsr_slave_1: entered promiscuous mode [ 446.736621][ T8135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.847768][ T8135] Cannot create hsr debugfs directory [ 447.561193][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.605'. [ 447.827176][ T5778] Bluetooth: hci3: command tx timeout [ 448.167237][ T5818] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 448.387747][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 448.395496][ T5818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.422958][ T5818] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.458013][ T5818] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.479186][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.532678][ T5818] usb 4-1: Product: syz [ 448.544217][ T5818] usb 4-1: Manufacturer: syz [ 448.556731][ T5818] usb 4-1: SerialNumber: syz [ 448.721288][ T8201] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.611'. [ 449.174041][ T5818] usb 4-1: 0:2 : does not exist [ 449.606226][ T5818] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 449.644093][ T5818] usb 4-1: USB disconnect, device number 6 [ 450.650585][ T8209] loop3: detected capacity change from 0 to 64 [ 450.696226][ T8178] udevd[8178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.084852][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fc7e800: rx timeout, send abort [ 451.590738][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fc7f000: rx timeout, send abort [ 451.600145][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fc7e800: abort rx timeout. Force session deactivation [ 452.099066][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fc7f000: abort rx timeout. Force session deactivation [ 452.219668][ T8135] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 452.256615][ T8135] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 452.372024][ T8135] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 454.571894][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 455.381107][ T8135] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 455.443916][ T5817] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 455.793371][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 457.031642][ T9] usb 5-1: device descriptor read/all, error -71 [ 458.467215][ T5817] usb 4-1: device not accepting address 7, error -71 [ 459.452036][ T8135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.340629][ T8135] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.403784][ T75] hsr_slave_0: left promiscuous mode [ 461.487016][ T75] hsr_slave_1: left promiscuous mode [ 461.537959][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.545466][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.614280][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.633951][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.654254][ T75] bridge_slave_1: left allmulticast mode [ 461.697423][ T75] bridge_slave_1: left promiscuous mode [ 461.703758][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.780175][ T75] bridge_slave_0: left allmulticast mode [ 461.785903][ T75] bridge_slave_0: left promiscuous mode [ 461.819060][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.875276][ T8294] loop4: detected capacity change from 0 to 4096 [ 462.038175][ T5823] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 462.246865][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 462.287063][ T8294] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 462.298306][ T5823] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.327544][ T75] veth1_macvtap: left promiscuous mode [ 462.333105][ T75] veth0_macvtap: left promiscuous mode [ 462.380344][ T75] veth1_vlan: left promiscuous mode [ 462.385780][ T75] veth0_vlan: left promiscuous mode [ 462.407266][ T5823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.515647][ T5823] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.555297][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.627389][ T5823] usb 4-1: Product: syz [ 462.647033][ T5823] usb 4-1: Manufacturer: syz [ 462.652512][ T5823] usb 4-1: SerialNumber: syz [ 462.962072][ T5823] usb 4-1: 0:2 : does not exist [ 463.017399][ T5823] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 463.180362][ T5823] usb 4-1: USB disconnect, device number 9 [ 464.060697][ T8178] udevd[8178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.864979][ T8329] loop3: detected capacity change from 0 to 32768 [ 470.266504][ T8332] UFO tlock:0xffffc9000289a0d8 [ 470.991418][ T75] team0 (unregistering): Port device team_slave_1 removed [ 471.056361][ T75] team0 (unregistering): Port device team_slave_0 removed [ 471.479745][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.949107][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.354993][ T75] bond0 (unregistering): Released all slaves [ 472.467479][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.474714][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.512811][ T8286] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.520139][ T8286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.958353][ T8349] loop2: detected capacity change from 0 to 512 [ 472.970971][ T8349] EXT4-fs: Ignoring removed mblk_io_submit option [ 473.776033][ T8349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.895031][ T8349] ext4 filesystem being mounted at /157/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.309617][ T75] IPVS: stop unused estimator thread 0... [ 474.343567][ T8135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.446466][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.756442][ T8367] loop3: detected capacity change from 0 to 512 [ 474.795608][ T8367] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.643: bg 0: block 127: padding at end of block bitmap is not set [ 474.814353][ T8367] EXT4-fs (loop3): Remounting filesystem read-only [ 474.821562][ T8367] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.3.643: cleanup dec ref error -28 [ 474.835040][ T8367] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 474.846269][ T8367] EXT4-fs (loop3): 1 orphan inode deleted [ 474.853009][ T8367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.008024][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 475.052583][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.300018][ T8395] binder: 8394:8395 ioctl c00c6211 0 returned -14 [ 476.424311][ T8135] veth0_vlan: entered promiscuous mode [ 476.971288][ T8135] veth1_vlan: entered promiscuous mode [ 477.030910][ T8135] veth0_macvtap: entered promiscuous mode [ 477.066271][ T8135] veth1_macvtap: entered promiscuous mode [ 477.149611][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.171762][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.206779][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.236704][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.246596][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.276692][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.318574][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.365280][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.407032][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.433834][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.465469][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.496770][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.517104][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.548585][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.969286][ T8135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.093505][ T8135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.217414][ T8135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.348957][ T8135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.451206][ T8415] fuse: Bad value for 'fd' [ 478.642554][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 478.766825][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.795664][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.892964][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.916979][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.170241][ T8435] kvm: pic: non byte write [ 480.685133][ T8455] loop3: detected capacity change from 0 to 8 [ 481.877111][ T8457] fuse: Bad value for 'fd' [ 482.024804][ T8464] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.661'. [ 484.677325][ T8475] binder: 8473:8475 ioctl c00c6211 0 returned -14 [ 488.144320][ T8511] fuse: Bad value for 'fd' [ 489.608390][ T8528] loop3: detected capacity change from 0 to 64 [ 490.021287][ T8536] loop4: detected capacity change from 0 to 256 [ 490.175555][ T8536] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 490.412230][ T28] audit: type=1800 audit(1786358961.875:7): pid=8536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.678" name="file1" dev="loop4" ino=1048598 res=0 errno=0 [ 492.930657][ T8556] fuse: Invalid rootmode [ 493.747298][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 493.948253][ T8562] binder: 8560:8562 ioctl c00c6211 0 returned -14 [ 496.677653][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.692'. [ 496.800973][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.692'. [ 496.850105][ T8606] fuse: Invalid rootmode [ 497.122893][ T8609] binder: 8608:8609 ioctl c00c6211 0 returned -14 [ 498.621741][ T8604] loop4: detected capacity change from 0 to 40427 [ 498.644223][ T8604] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 498.677062][ T8604] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 498.688227][ T8604] F2FS-fs (loop4): invalid crc value [ 498.719595][ T8604] F2FS-fs (loop4): Found nat_bits in checkpoint [ 498.747654][ T8629] loop2: detected capacity change from 0 to 64 [ 498.946091][ T8604] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 499.009472][ T8604] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 499.080410][ T8637] loop5: detected capacity change from 0 to 64 [ 499.681405][ T8638] syz.2.696: attempt to access beyond end of device [ 499.681405][ T8638] loop2: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 499.695483][ T8638] Buffer I/O error on dev loop2, logical block 8388608, lost async page write [ 501.597336][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.603723][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.859440][ T8669] binder: 8668:8669 ioctl c00c6211 0 returned -14 [ 501.973681][ T8675] binder: 8674:8675 ioctl c00c6211 0 returned -14 [ 505.059189][ T8700] loop5: detected capacity change from 0 to 64 [ 505.539673][ T8712] kvm: pic: non byte write [ 505.889262][ T8720] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.716'. [ 506.918289][ T8723] binder: 8721:8723 ioctl c00c6211 0 returned -14 [ 509.749440][ T8746] loop4: detected capacity change from 0 to 8 [ 509.959688][ T8746] SQUASHFS error: zlib decompression failed, data probably corrupt [ 510.056205][ T8746] SQUASHFS error: Failed to read block 0x9b: -5 [ 510.297964][ T8746] SQUASHFS error: Unable to read metadata cache entry [99] [ 510.365375][ T8761] loop3: detected capacity change from 0 to 8 [ 512.090605][ T8758] sched: RT throttling activated [ 512.131658][ T8746] SQUASHFS error: Unable to read inode 0x127 [ 513.837238][ T5816] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 514.140586][ T5816] usb 3-1: Using ep0 maxpacket: 16 [ 515.134430][ T5816] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.536879][ T5816] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.551016][ T8780] loop5: detected capacity change from 0 to 64 [ 515.572892][ T5816] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 515.637243][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.645472][ T5816] usb 3-1: Product: syz [ 515.707887][ T5816] usb 3-1: Manufacturer: syz [ 515.742667][ T5816] usb 3-1: SerialNumber: syz [ 515.874592][ T8783] binder: 8782:8783 ioctl c00c6211 0 returned -14 [ 516.210013][ T5816] usb 3-1: 0:2 : does not exist [ 516.263896][ T5816] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 516.312915][ T5816] usb 3-1: USB disconnect, device number 11 [ 516.392952][ T8178] udevd[8178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.492635][ T8791] loop4: detected capacity change from 0 to 8 [ 516.979539][ T8791] SQUASHFS error: zlib decompression failed, data probably corrupt [ 516.987815][ T8791] SQUASHFS error: Failed to read block 0x9b: -5 [ 516.994235][ T8791] SQUASHFS error: Unable to read metadata cache entry [99] [ 517.002328][ T8791] SQUASHFS error: Unable to read inode 0x127 [ 517.706218][ T8798] loop3: detected capacity change from 0 to 256 [ 517.886286][ T8798] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 518.310099][ T28] audit: type=1800 audit(1786358989.755:8): pid=8798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.733" name="file1" dev="loop3" ino=1048599 res=0 errno=0 [ 518.822044][ T8816] loop5: detected capacity change from 0 to 8 [ 521.677100][ T8822] loop2: detected capacity change from 0 to 8 [ 521.756925][ T8822] SQUASHFS error: zlib decompression failed, data probably corrupt [ 521.765020][ T8822] SQUASHFS error: Failed to read block 0x9b: -5 [ 521.907637][ T8822] SQUASHFS error: Unable to read metadata cache entry [99] [ 521.964462][ T8822] SQUASHFS error: Unable to read inode 0x127 [ 522.714784][ T8820] loop5: detected capacity change from 0 to 32768 [ 523.040820][ T8820] UFO tlock:0xffffc9000289a090 [ 523.242054][ T8844] binder: 8840:8844 ioctl c00c6211 0 returned -14 [ 524.646878][ T8774] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 524.748254][ T8863] loop2: detected capacity change from 0 to 64 [ 524.916881][ T8774] usb 6-1: Using ep0 maxpacket: 16 [ 524.932956][ T8774] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.943373][ T8774] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.955753][ T8774] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 525.026705][ T8774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.160502][ T8774] usb 6-1: Product: syz [ 525.187267][ T8774] usb 6-1: Manufacturer: syz [ 525.209782][ T8774] usb 6-1: SerialNumber: syz [ 525.257440][ T8866] loop4: detected capacity change from 0 to 4096 [ 525.453685][ T8774] usb 6-1: 0:2 : does not exist [ 525.482640][ T8774] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 525.485389][ T8866] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 525.613236][ T8774] usb 6-1: USB disconnect, device number 2 [ 525.783456][ T8178] udevd[8178]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.377752][ T8884] loop4: detected capacity change from 0 to 8 [ 528.470150][ T8887] loop5: detected capacity change from 0 to 8 [ 528.510229][ T8887] SQUASHFS error: zlib decompression failed, data probably corrupt [ 528.542980][ T8887] SQUASHFS error: Failed to read block 0x9b: -5 [ 528.603927][ T8887] SQUASHFS error: Unable to read metadata cache entry [99] [ 528.634607][ T8887] SQUASHFS error: Unable to read inode 0x127 [ 529.147980][ T8894] loop4: detected capacity change from 0 to 256 [ 529.256091][ T8894] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 529.434591][ T28] audit: type=1800 audit(1786359000.895:9): pid=8894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.751" name="file1" dev="loop4" ino=1048600 res=0 errno=0 [ 529.725687][ T8905] loop4: detected capacity change from 0 to 8 [ 529.745071][ T8905] SQUASHFS error: zlib decompression failed, data probably corrupt [ 529.756938][ T8905] SQUASHFS error: Failed to read block 0x9b: -5 [ 529.763389][ T8905] SQUASHFS error: Unable to read metadata cache entry [99] [ 529.796792][ T8905] SQUASHFS error: Unable to read inode 0x127 [ 529.968427][ T8907] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.753'. [ 531.094094][ T8925] loop5: detected capacity change from 0 to 64 [ 531.842796][ T8927] loop2: detected capacity change from 0 to 64 [ 532.386104][ T8921] loop3: detected capacity change from 0 to 4096 [ 532.653807][ T8921] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 533.847860][ T8947] loop2: detected capacity change from 0 to 8 [ 533.920783][ T8947] SQUASHFS error: zlib decompression failed, data probably corrupt [ 533.958700][ T8947] SQUASHFS error: Failed to read block 0x9b: -5 [ 533.966825][ T8947] SQUASHFS error: Unable to read metadata cache entry [99] [ 533.996820][ T8947] SQUASHFS error: Unable to read inode 0x127 [ 534.055234][ T8950] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.762'. [ 534.818824][ T8964] loop2: detected capacity change from 0 to 64 [ 535.213058][ T8970] loop5: detected capacity change from 0 to 64 [ 537.946968][ T8774] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 538.138895][ T8774] usb 4-1: Using ep0 maxpacket: 16 [ 538.207922][ T8774] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.222934][ T8774] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 538.235505][ T8991] loop5: detected capacity change from 0 to 8 [ 538.251284][ T8774] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.281432][ T8991] SQUASHFS error: zlib decompression failed, data probably corrupt [ 538.290337][ T8774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.301621][ T8991] SQUASHFS error: Failed to read block 0x9b: -5 [ 538.312041][ T8774] usb 4-1: Product: syz [ 538.316280][ T8774] usb 4-1: Manufacturer: syz [ 538.317228][ T8991] SQUASHFS error: Unable to read metadata cache entry [99] [ 538.343558][ T8774] usb 4-1: SerialNumber: syz [ 538.347147][ T8991] SQUASHFS error: Unable to read inode 0x127 [ 538.651235][ T8774] usb 4-1: 0:2 : does not exist [ 538.704575][ T8774] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 539.690250][ T8774] usb 4-1: USB disconnect, device number 10 [ 539.851710][ T8178] udevd[8178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.020346][ T9010] loop4: detected capacity change from 0 to 64 [ 542.565090][ T9033] loop3: detected capacity change from 0 to 256 [ 542.652362][ T9033] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 542.708911][ T9037] loop2: detected capacity change from 0 to 8 [ 542.779374][ T9037] SQUASHFS error: zlib decompression failed, data probably corrupt [ 542.823059][ T9037] SQUASHFS error: Failed to read block 0x9b: -5 [ 542.836808][ T9037] SQUASHFS error: Unable to read metadata cache entry [99] [ 542.844117][ T9037] SQUASHFS error: Unable to read inode 0x127 [ 544.366017][ T9051] loop3: detected capacity change from 0 to 64 [ 544.559151][ T9034] loop5: detected capacity change from 0 to 32768 [ 544.779517][ T9034] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 545.298471][ T9074] loop4: detected capacity change from 0 to 64 [ 545.325868][ T9034] XFS (loop5): Ending clean mount [ 545.732731][ T8135] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 547.842735][ T9109] loop3: detected capacity change from 0 to 256 [ 547.917340][ T8774] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 547.968039][ T9109] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 548.147247][ T8774] usb 6-1: Using ep0 maxpacket: 16 [ 548.181745][ T8774] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.203896][ T8774] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.246696][ T8774] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 548.254645][ T9115] ipt_REJECT: TCP_RESET invalid for non-tcp [ 548.255824][ T8774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.274472][ T8774] usb 6-1: config 0 descriptor?? [ 548.283787][ T8774] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 548.399437][ T9119] loop2: detected capacity change from 0 to 8 [ 548.436316][ T9119] SQUASHFS error: zlib decompression failed, data probably corrupt [ 548.450975][ T9121] loop3: detected capacity change from 0 to 64 [ 548.457610][ T9119] SQUASHFS error: Failed to read block 0x9b: -5 [ 548.464657][ T9119] SQUASHFS error: Unable to read metadata cache entry [99] [ 548.479798][ T9119] SQUASHFS error: Unable to read inode 0x127 [ 549.133730][ T5817] usb 6-1: USB disconnect, device number 3 [ 549.460580][ T9141] loop3: detected capacity change from 0 to 64 [ 550.891543][ T9154] loop2: detected capacity change from 0 to 256 [ 551.006318][ T9154] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 551.183214][ T9160] loop3: detected capacity change from 0 to 64 [ 551.313667][ T9162] loop2: detected capacity change from 0 to 8 [ 551.341784][ T9162] SQUASHFS error: zlib decompression failed, data probably corrupt [ 551.406925][ T9162] SQUASHFS error: Failed to read block 0x9b: -5 [ 551.436865][ T9162] SQUASHFS error: Unable to read metadata cache entry [99] [ 551.482073][ T9162] SQUASHFS error: Unable to read inode 0x127 [ 552.278460][ T9180] loop4: detected capacity change from 0 to 64 [ 553.974319][ T9200] syz.4.811: attempt to access beyond end of device [ 553.974319][ T9200] loop4: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 553.988326][ T9200] Buffer I/O error on dev loop4, logical block 8388608, lost async page write [ 554.434724][ T9207] loop2: detected capacity change from 0 to 8 [ 554.450230][ T9207] SQUASHFS error: zlib decompression failed, data probably corrupt [ 554.461214][ T9207] SQUASHFS error: Failed to read block 0x9b: -5 [ 554.470224][ T9207] SQUASHFS error: Unable to read metadata cache entry [99] [ 554.497074][ T9207] SQUASHFS error: Unable to read inode 0x127 [ 555.625603][ T9196] loop5: detected capacity change from 0 to 32768 [ 556.382311][ T9196] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 556.402221][ T9196] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 556.537565][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.823'. [ 556.569698][ T9196] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 556.589881][ T8774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 556.602542][ T8774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 556.607293][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.823'. [ 556.677882][ T8774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 75ms [ 556.687165][ T9229] syz_tun: entered promiscuous mode [ 556.700988][ T8774] gfs2: fsid=syz:syz.0: jid=0: Done [ 556.713121][ T9229] syz_tun: left promiscuous mode [ 556.719115][ T9196] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 556.767663][ T9196] gfs2: fsid=syz:syz.0: can't create quotad thread: -4 [ 556.777909][ T9238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.823'. [ 556.796687][ T9238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.823'. [ 556.823718][ T9238] syz_tun: entered promiscuous mode [ 556.940861][ T9238] syz_tun: left promiscuous mode [ 557.459816][ T9254] loop4: detected capacity change from 0 to 8 [ 557.497153][ T9254] SQUASHFS error: zlib decompression failed, data probably corrupt [ 557.552334][ T9254] SQUASHFS error: Failed to read block 0x9b: -5 [ 557.572436][ T9254] SQUASHFS error: Unable to read metadata cache entry [99] [ 557.586594][ T9254] SQUASHFS error: Unable to read inode 0x127 [ 557.600467][ T9257] binder: 9256:9257 ioctl c00c6211 0 returned -14 [ 563.035047][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.845973][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.159381][ T9285] jffs2: notice: (9285) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 566.947622][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 567.745768][ T9278] loop4: detected capacity change from 0 to 32768 [ 567.784616][ T9303] CIFS: Attempting to mount //127.0.0.1/share [ 569.208928][ T9311] read_mapping_page failed! [ 569.219370][ T9311] UFO tlock:0xffffc9000289a0d8 [ 569.477570][ T9303] CIFS: VFS: cifs_mount failed w/return code = -112 [ 569.489725][ T9308] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.840'. [ 569.996719][ T5854] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 570.298264][ T5854] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 570.307926][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.317417][ T5854] usb 3-1: Product: syz [ 570.323992][ T5854] usb 3-1: Manufacturer: syz [ 570.331023][ T5854] usb 3-1: SerialNumber: syz [ 570.337275][ T9324] loop5: detected capacity change from 0 to 64 [ 570.358655][ T5854] usb 3-1: config 0 descriptor?? [ 570.652538][ T5854] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 012 [ 572.220653][ T9335] loop4: detected capacity change from 0 to 32768 [ 572.273474][ T9335] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 572.936126][ T9335] XFS (loop4): Ending clean mount [ 573.251596][ T6400] usb 3-1: USB disconnect, device number 12 [ 573.587215][ T7585] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 574.469834][ T9371] CIFS: Attempting to mount //127.0.0.1/share [ 574.790384][ T9372] lo: entered allmulticast mode [ 574.839722][ T9374] loop2: detected capacity change from 0 to 64 [ 575.162291][ T9369] lo: left allmulticast mode [ 575.186841][ T9371] CIFS: VFS: cifs_mount failed w/return code = -112 [ 575.419617][ T9383] loop2: detected capacity change from 0 to 8 [ 575.440252][ T9383] SQUASHFS error: zlib decompression failed, data probably corrupt [ 575.456878][ T9383] SQUASHFS error: Failed to read block 0x9b: -5 [ 575.463203][ T9383] SQUASHFS error: Unable to read metadata cache entry [99] [ 575.577814][ T9387] binder: 9386:9387 ioctl c00c6211 0 returned -14 [ 575.595187][ T9383] SQUASHFS error: Unable to read inode 0x127 [ 581.782944][ T9396] loop2: detected capacity change from 0 to 64 [ 581.826469][ T9397] syz.3.855 uses obsolete (PF_INET,SOCK_PACKET) [ 582.141687][ T9402] loop5: detected capacity change from 0 to 256 [ 582.223896][ T9402] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 582.341787][ T28] audit: type=1800 audit(1786359053.805:10): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.858" name="file1" dev="loop5" ino=1048604 res=0 errno=0 [ 582.490508][ T9406] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.860'. [ 582.757659][ T9410] loop3: detected capacity change from 0 to 64 [ 583.839710][ T9412] CIFS: Attempting to mount //127.0.0.1/share [ 583.899236][ T9417] lo: entered allmulticast mode [ 584.070484][ T9415] netlink: 16 bytes leftover after parsing attributes in process `syz.5.863'. [ 584.108096][ T9420] loop3: detected capacity change from 0 to 8 [ 584.135055][ T9420] SQUASHFS error: zlib decompression failed, data probably corrupt [ 584.157117][ T9420] SQUASHFS error: Failed to read block 0x9b: -5 [ 584.163466][ T9420] SQUASHFS error: Unable to read metadata cache entry [99] [ 584.185390][ T9420] SQUASHFS error: Unable to read inode 0x127 [ 584.529758][ T9411] lo: left allmulticast mode [ 584.540529][ T9412] CIFS: VFS: cifs_mount failed w/return code = -112 [ 584.752665][ T9426] binder: 9425:9426 ioctl c00c6211 0 returned -14 [ 586.694189][ T9424] loop4: detected capacity change from 0 to 32768 [ 587.011867][ T9442] loop2: detected capacity change from 0 to 2048 [ 588.106950][ T9448] read_mapping_page failed! [ 588.112061][ T9448] ialloc: diAlloc returned -5! [ 588.424807][ T9442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.460033][ T9442] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.636938][ T9442] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 590.580757][ T9457] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.870'. [ 590.698161][ T9460] loop5: detected capacity change from 0 to 64 [ 590.769959][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.180327][ T9464] syz.5.872: attempt to access beyond end of device [ 591.180327][ T9464] loop5: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 591.194832][ T9464] Buffer I/O error on dev loop5, logical block 8388608, lost async page write [ 591.250621][ T9466] loop4: detected capacity change from 0 to 8 [ 591.285680][ T9466] SQUASHFS error: zlib decompression failed, data probably corrupt [ 591.318336][ T9466] SQUASHFS error: Failed to read block 0x9b: -5 [ 591.324783][ T9466] SQUASHFS error: Unable to read metadata cache entry [99] [ 591.420464][ T9466] SQUASHFS error: Unable to read inode 0x127 [ 591.552312][ T9468] CIFS: Attempting to mount //127.0.0.1/share [ 591.750277][ T9473] lo: entered allmulticast mode [ 591.895823][ T9476] binder: 9475:9476 unknown command 1074553619 [ 591.903479][ T9476] binder: 9475:9476 ioctl c0306201 200000000540 returned -22 [ 591.968552][ T9477] binder: 9475:9477 unknown command 1074291477 [ 591.974913][ T9477] binder: 9475:9477 ioctl c0306201 200000000640 returned -22 [ 592.179559][ T9467] lo: left allmulticast mode [ 592.265167][ T9468] CIFS: VFS: cifs_mount failed w/return code = -112 [ 592.507718][ T9481] loop2: detected capacity change from 0 to 256 [ 592.558388][ T9481] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 593.174385][ T9487] loop3: detected capacity change from 0 to 2048 [ 593.273573][ T9487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.306811][ T9487] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.326914][ T9487] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 593.406732][ T8774] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 593.442510][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.463008][ T9479] loop4: detected capacity change from 0 to 32768 [ 593.697797][ T8774] usb 3-1: Using ep0 maxpacket: 16 [ 595.085852][ T8774] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.106756][ T8774] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 595.196152][ T9495] UFO tlock:0xffffc9000289a090 [ 595.606810][ T8774] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 595.616002][ T8774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.705339][ T8774] usb 3-1: Product: syz [ 595.722022][ T8774] usb 3-1: Manufacturer: syz [ 595.747971][ T8774] usb 3-1: SerialNumber: syz [ 595.858231][ T9508] loop4: detected capacity change from 0 to 8 [ 595.901526][ T9508] SQUASHFS error: zlib decompression failed, data probably corrupt [ 595.933523][ T9508] SQUASHFS error: Failed to read block 0x9b: -5 [ 595.943846][ T9508] SQUASHFS error: Unable to read metadata cache entry [99] [ 595.952958][ T9508] SQUASHFS error: Unable to read inode 0x127 [ 595.959136][ T9510] CIFS: Attempting to mount //127.0.0.1/share [ 595.993407][ T8774] usb 3-1: 0:2 : does not exist [ 596.010185][ T9512] lo: entered allmulticast mode [ 596.031098][ T8774] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 596.080789][ T8774] usb 3-1: USB disconnect, device number 13 [ 596.165696][ T8178] udevd[8178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.737675][ T9509] lo: left allmulticast mode [ 597.845681][ T9510] CIFS: VFS: cifs_mount failed w/return code = -512 [ 598.111412][ T9519] loop4: detected capacity change from 0 to 256 [ 598.193413][ T9519] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 598.565705][ T9526] loop3: detected capacity change from 0 to 2048 [ 598.788061][ T9528] loop2: detected capacity change from 0 to 40427 [ 598.818643][ T9528] F2FS-fs (loop2): invalid crc value [ 598.835780][ T9528] F2FS-fs (loop2): Found nat_bits in checkpoint [ 598.865125][ T9526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.884490][ T9528] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 598.905693][ T9526] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.043395][ T9539] overlay: Unknown parameter '/' [ 599.801631][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 600.955574][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.293080][ T9544] syz.2.893: attempt to access beyond end of device [ 601.293080][ T9544] loop2: rw=2049, sector=77824, nr_sectors = 3600 limit=40427 [ 601.325157][ T9550] loop3: detected capacity change from 0 to 8 [ 601.361539][ T9550] SQUASHFS error: zlib decompression failed, data probably corrupt [ 601.395801][ T9544] syz.2.893: attempt to access beyond end of device [ 601.395801][ T9544] loop2: rw=2049, sector=81424, nr_sectors = 496 limit=40427 [ 601.408833][ T9550] SQUASHFS error: Failed to read block 0x9b: -5 [ 601.436902][ T9550] SQUASHFS error: Unable to read metadata cache entry [99] [ 601.462104][ T9550] SQUASHFS error: Unable to read inode 0x127 [ 601.601436][ T9544] syz.2.893: attempt to access beyond end of device [ 601.601436][ T9544] loop2: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 601.792705][ T9544] syz.2.893: attempt to access beyond end of device [ 601.792705][ T9544] loop2: rw=2049, sector=57344, nr_sectors = 4096 limit=40427 [ 601.820450][ T9544] syz.2.893: attempt to access beyond end of device [ 601.820450][ T9544] loop2: rw=2049, sector=61440, nr_sectors = 768 limit=40427 [ 601.885568][ T5776] syz-executor: attempt to access beyond end of device [ 601.885568][ T5776] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 601.903313][ T5776] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 603.186905][ T5823] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 603.478639][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 603.518762][ T5823] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.546899][ T5823] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 603.575093][ T5823] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 603.586785][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.606713][ T5823] usb 6-1: Product: syz [ 603.612929][ T5823] usb 6-1: Manufacturer: syz [ 603.626816][ T5823] usb 6-1: SerialNumber: syz [ 603.897901][ T5823] usb 6-1: 0:2 : does not exist [ 603.911311][ T5823] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 603.978827][ T5823] usb 6-1: USB disconnect, device number 4 [ 604.075659][ T8178] udevd[8178]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.184335][ T9566] loop3: detected capacity change from 0 to 2048 [ 604.281542][ T9566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.316802][ T9566] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.410339][ T9566] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 606.319182][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.557635][ T9584] binder: 9583:9584 ioctl c00c6211 0 returned -14 [ 607.123434][ T9588] loop4: detected capacity change from 0 to 40427 [ 607.411408][ T9588] F2FS-fs (loop4): invalid crc value [ 607.743923][ T9588] F2FS-fs (loop4): Found nat_bits in checkpoint [ 607.799033][ T9600] loop3: detected capacity change from 0 to 8 [ 607.837896][ T9588] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 607.874987][ T9581] loop5: detected capacity change from 0 to 32768 [ 607.907884][ T9600] SQUASHFS error: zlib decompression failed, data probably corrupt [ 607.915876][ T9600] SQUASHFS error: Failed to read block 0x9b: -5 [ 608.012297][ T9600] SQUASHFS error: Unable to read metadata cache entry [99] [ 608.047683][ T9600] SQUASHFS error: Unable to read inode 0x127 [ 609.064241][ T9606] UFO tlock:0xffffc9000289a0d8 [ 609.503462][ T9588] syz.4.909: attempt to access beyond end of device [ 609.503462][ T9588] loop4: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 609.531901][ T9588] syz.4.909: attempt to access beyond end of device [ 609.531901][ T9588] loop4: rw=2049, sector=79872, nr_sectors = 2048 limit=40427 [ 609.560213][ T9588] syz.4.909: attempt to access beyond end of device [ 609.560213][ T9588] loop4: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 609.589210][ T9588] syz.4.909: attempt to access beyond end of device [ 609.589210][ T9588] loop4: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 609.653336][ T9588] syz.4.909: attempt to access beyond end of device [ 609.653336][ T9588] loop4: rw=2049, sector=57344, nr_sectors = 7488 limit=40427 [ 609.693516][ T9588] syz.4.909: attempt to access beyond end of device [ 609.693516][ T9588] loop4: rw=2049, sector=64832, nr_sectors = 2848 limit=40427 [ 609.723885][ T9588] syz.4.909: attempt to access beyond end of device [ 609.723885][ T9588] loop4: rw=2049, sector=67680, nr_sectors = 1952 limit=40427 [ 609.740606][ T9588] syz.4.909: attempt to access beyond end of device [ 609.740606][ T9588] loop4: rw=2049, sector=69632, nr_sectors = 8 limit=40427 [ 609.754620][ T9588] syz.4.909: attempt to access beyond end of device [ 609.754620][ T9588] loop4: rw=2049, sector=69640, nr_sectors = 8 limit=40427 [ 609.768540][ T9588] syz.4.909: attempt to access beyond end of device [ 609.768540][ T9588] loop4: rw=2049, sector=69648, nr_sectors = 8 limit=40427 [ 610.278927][ T7585] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 610.566791][ T6400] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 610.764908][ T6400] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 610.787059][ T6400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.795141][ T6400] usb 4-1: Product: syz [ 610.804836][ T6400] usb 4-1: Manufacturer: syz [ 610.946368][ T9616] loop5: detected capacity change from 0 to 64 [ 611.131221][ T6400] usb 4-1: SerialNumber: syz [ 611.610230][ T6400] usb 4-1: config 0 descriptor?? [ 611.931035][ T6400] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 011 [ 612.028052][ T9619] loop4: detected capacity change from 0 to 2048 [ 612.108167][ T9619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.122714][ T9619] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.148262][ T9619] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 612.305614][ T7585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.531233][ T9636] loop2: detected capacity change from 0 to 8 [ 613.542213][ T9636] SQUASHFS error: zlib decompression failed, data probably corrupt [ 613.551177][ T9636] SQUASHFS error: Failed to read block 0x9b: -5 [ 613.557914][ T9636] SQUASHFS error: Unable to read metadata cache entry [99] [ 613.565380][ T9636] SQUASHFS error: Unable to read inode 0x127 [ 613.640322][ T8178] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 614.228761][ T9610] i2c i2c-1: failure writing data [ 614.616017][ T27] usb 4-1: USB disconnect, device number 11 [ 615.625252][ T9656] loop2: detected capacity change from 0 to 2048 [ 615.671507][ T9656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.732121][ T9656] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.799017][ T9646] loop4: detected capacity change from 0 to 32768 [ 615.925412][ T9656] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 616.307584][ T9663] UFO tlock:0xffffc9000289a090 [ 616.703586][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.064492][ T9669] loop4: detected capacity change from 0 to 8 [ 617.612259][ T9669] SQUASHFS error: zlib decompression failed, data probably corrupt [ 617.713865][ T9669] SQUASHFS error: Failed to read block 0x9b: -5 [ 617.822765][ T9669] SQUASHFS error: Unable to read metadata cache entry [99] [ 617.926970][ T9669] SQUASHFS error: Unable to read inode 0x127 [ 620.517602][ T9690] loop3: detected capacity change from 0 to 2048 [ 620.554724][ T9694] loop4: detected capacity change from 0 to 8 [ 620.582728][ T9694] SQUASHFS error: zlib decompression failed, data probably corrupt [ 620.627185][ T9694] SQUASHFS error: Failed to read block 0x9b: -5 [ 620.636693][ T9694] SQUASHFS error: Unable to read metadata cache entry [99] [ 620.644085][ T9694] SQUASHFS error: Unable to read inode 0x127 [ 620.654374][ T9690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.731538][ T9690] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.801472][ T8178] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 621.020646][ T9690] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 621.600391][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.579263][ T9714] loop2: detected capacity change from 0 to 8 [ 623.600825][ T9714] SQUASHFS error: zlib decompression failed, data probably corrupt [ 623.614594][ T9714] SQUASHFS error: Failed to read block 0x9b: -5 [ 623.621607][ T9714] SQUASHFS error: Unable to read metadata cache entry [99] [ 623.640638][ T9714] SQUASHFS error: Unable to read inode 0x127 [ 624.477250][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.483639][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.786730][ T9274] Bluetooth: hci3: command 0x0406 tx timeout [ 624.883026][ T9731] loop3: detected capacity change from 0 to 8 [ 624.907154][ T9731] SQUASHFS error: zlib decompression failed, data probably corrupt [ 624.915145][ T9731] SQUASHFS error: Failed to read block 0x9b: -5 [ 624.922480][ T9731] SQUASHFS error: Unable to read metadata cache entry [99] [ 624.931063][ T9731] SQUASHFS error: Unable to read inode 0x127 [ 625.514161][ T8] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 625.650703][ T9739] loop5: detected capacity change from 0 to 2048 [ 625.690020][ T9739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.736890][ T9739] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.907761][ T8] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 626.917028][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.935470][ T8] usb 5-1: Product: syz [ 626.940081][ T8] usb 5-1: Manufacturer: syz [ 626.944729][ T8] usb 5-1: SerialNumber: syz [ 626.952047][ T8] usb 5-1: config 0 descriptor?? [ 627.012586][ T9739] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 627.108653][ T8135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.196858][ T8] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 004 [ 627.263050][ T9748] loop3: detected capacity change from 0 to 8 [ 627.320063][ T9748] SQUASHFS error: zlib decompression failed, data probably corrupt [ 627.348905][ T9748] SQUASHFS error: Failed to read block 0x9b: -5 [ 627.355224][ T9748] SQUASHFS error: Unable to read metadata cache entry [99] [ 627.393844][ T9748] SQUASHFS error: Unable to read inode 0x127 [ 628.520644][ T9757] loop5: detected capacity change from 0 to 8 [ 628.566386][ T9757] SQUASHFS error: zlib decompression failed, data probably corrupt [ 628.586089][ T9757] SQUASHFS error: Failed to read block 0x9b: -5 [ 628.593296][ T9757] SQUASHFS error: Unable to read metadata cache entry [99] [ 628.656741][ T9757] SQUASHFS error: Unable to read inode 0x127 [ 629.054737][ T9763] gadgetfs: bound to dummy_udc driver [ 629.427610][ T9725] i2c i2c-1: failure writing data [ 629.502938][ T5823] usb 5-1: USB disconnect, device number 4 [ 630.831211][ T9781] loop4: detected capacity change from 0 to 8 [ 630.841092][ T9781] SQUASHFS error: zlib decompression failed, data probably corrupt [ 630.856799][ T9781] SQUASHFS error: Failed to read block 0x9b: -5 [ 630.864212][ T9781] SQUASHFS error: Unable to read metadata cache entry [99] [ 630.875371][ T9781] SQUASHFS error: Unable to read inode 0x127 [ 632.922856][ T9797] 9pnet_fd: Insufficient options for proto=fd [ 633.374582][ T9810] loop3: detected capacity change from 0 to 8 [ 633.843982][ T9810] SQUASHFS error: zlib decompression failed, data probably corrupt [ 634.015250][ T9810] SQUASHFS error: Failed to read block 0x9b: -5 [ 634.120173][ T9810] SQUASHFS error: Unable to read metadata cache entry [99] [ 634.247742][ T9810] SQUASHFS error: Unable to read inode 0x127 [ 637.009829][ T9834] binder: 9833:9834 ioctl c00c6211 0 returned -14 [ 644.573765][ T9878] gadgetfs: bound to dummy_udc driver [ 644.802959][ T9866] loop3: detected capacity change from 0 to 32768 [ 644.833162][ T9883] binder: 9882:9883 ioctl c00c6211 0 returned -14 [ 645.204486][ T9866] bio_check_eod: 1513 callbacks suppressed [ 645.204573][ T9866] syz.3.995: attempt to access beyond end of device [ 645.204573][ T9866] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 645.391892][ T9866] lbmIODone: I/O error in JFS log [ 645.453046][ T9866] *** Log Format Error ! *** [ 645.533039][ T9866] lmLogInit: exit(-22) [ 645.604431][ T9866] lmLogOpen: exit(-22) [ 645.987397][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 650.138685][ T9866] ERROR: (device loop3): txBegin: read-only filesystem [ 650.138685][ T9866] [ 650.226280][ T9866] ERROR: (device loop3): remounting filesystem as read-only [ 650.470796][ T9866] jfs_dirty_inode called on read-only volume [ 650.529063][ T9866] Is remount racy? [ 650.545200][ T9866] jfs_dirty_inode called on read-only volume [ 650.599281][ T9866] Is remount racy? [ 650.640155][ T9866] jfs_dirty_inode called on read-only volume [ 650.646431][ T9866] Is remount racy? [ 653.536852][ T9866] general protection fault, probably for non-canonical address 0xdffffc00000000c6: 0000 [#1] PREEMPT SMP KASAN [ 653.548764][ T9866] KASAN: null-ptr-deref in range [0x0000000000000630-0x0000000000000637] [ 653.557224][ T9866] CPU: 1 PID: 9866 Comm: syz.3.995 Not tainted syzkaller #0 [ 653.564524][ T9866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.574588][ T9866] RIP: 0010:txEnd+0xb4/0x520 [ 653.579229][ T9866] Code: 49 8d 5e 20 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 8c 43 d8 fe 41 bf 30 06 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 6d 43 d8 fe 49 8b 1f 48 83 c3 30 [ 653.598966][ T9866] RSP: 0018:ffffc90010d7f6a0 EFLAGS: 00010206 [ 653.605129][ T9866] RAX: 00000000000000c6 RBX: ffffc90002679020 RCX: 1ffff920021afeb8 [ 653.613121][ T9866] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 00000000ffffffff [ 653.621118][ T9866] RBP: ffffc90010d7f788 R08: ffffffff911ed54f R09: 1ffffffff223daa9 [ 653.629117][ T9866] R10: dffffc0000000000 R11: fffffbfff223daaa R12: 0000000000000000 [ 653.637109][ T9866] R13: dffffc0000000000 R14: ffffc90002679000 R15: 0000000000000630 [ 653.645089][ T9866] FS: 00007f18bb0126c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 653.654047][ T9866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.660649][ T9866] CR2: 000020000000f000 CR3: 000000006ab13000 CR4: 00000000003506e0 [ 653.668634][ T9866] Call Trace: [ 653.671982][ T9866] [ 653.674995][ T9866] jfs_truncate_nolock+0x1de/0x2b0 [ 653.680181][ T9866] ? jfs_direct_IO+0x220/0x220 [ 653.685027][ T9866] ? unmap_mapping_pages+0x160/0x160 [ 653.690352][ T9866] ? jfs_dirty_inode+0x240/0x240 [ 653.695307][ T9866] jfs_truncate+0xce/0x140 [ 653.699740][ T9866] jfs_setattr+0x4ee/0x750 [ 653.704175][ T9866] ? jfs_fsync+0x1b0/0x1b0 [ 653.708618][ T9866] notify_change+0xb05/0xde0 [ 653.713261][ T9866] do_truncate+0x1b0/0x240 [ 653.717703][ T9866] ? put_page_bootmem+0x2b0/0x2b0 [ 653.722738][ T9866] ? apparmor_file_truncate+0x24a/0x2e0 [ 653.728328][ T9866] ? ima_bprm_check+0x200/0x200 [ 653.733254][ T9866] path_openat+0x2a7e/0x3270 [ 653.737916][ T9866] ? do_filp_open+0x430/0x430 [ 653.742642][ T9866] ? asan.module_dtor+0x20/0x20 [ 653.747649][ T9866] do_filp_open+0x1f2/0x430 [ 653.752197][ T9866] ? vfs_tmpfile+0x620/0x620 [ 653.756869][ T9866] ? _raw_spin_unlock+0x3a/0x40 [ 653.761784][ T9866] ? alloc_fd+0x590/0x640 [ 653.766174][ T9866] do_sys_openat2+0x134/0x1d0 [ 653.770915][ T9866] ? do_sys_open+0xe0/0xe0 [ 653.775384][ T9866] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 653.781438][ T9866] ? lock_chain_count+0x20/0x20 [ 653.786330][ T9866] __x64_sys_creat+0x90/0xb0 [ 653.790979][ T9866] do_syscall_64+0x55/0xb0 [ 653.795494][ T9866] ? clear_bhb_loop+0x40/0x90 [ 653.800222][ T9866] ? clear_bhb_loop+0x40/0x90 [ 653.804914][ T9866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.810817][ T9866] RIP: 0033:0x7f18ba19e0d9 [ 653.815244][ T9866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.834861][ T9866] RSP: 002b:00007f18bb012028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 653.843297][ T9866] RAX: ffffffffffffffda RBX: 00007f18ba425fa0 RCX: 00007f18ba19e0d9 [ 653.851286][ T9866] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000200000000240 [ 653.859274][ T9866] RBP: 00007f18ba235024 R08: 0000000000000000 R09: 0000000000000000 [ 653.867272][ T9866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.875248][ T9866] R13: 00007f18ba426038 R14: 00007f18ba425fa0 R15: 00007ffe3522a208 [ 653.883230][ T9866] [ 653.886260][ T9866] Modules linked in: [ 653.890211][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.898711][ T9866] ---[ end trace 0000000000000000 ]--- [ 653.904560][ T9866] RIP: 0010:txEnd+0xb4/0x520 [ 653.909742][ T9866] Code: 49 8d 5e 20 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 8c 43 d8 fe 41 bf 30 06 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 6d 43 d8 fe 49 8b 1f 48 83 c3 30 [ 653.929613][ T9866] RSP: 0018:ffffc90010d7f6a0 EFLAGS: 00010206 [ 653.936346][ T9866] RAX: 00000000000000c6 RBX: ffffc90002679020 RCX: 1ffff920021afeb8 [ 653.944497][ T9866] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 00000000ffffffff [ 653.952599][ T9866] RBP: ffffc90010d7f788 R08: ffffffff911ed54f R09: 1ffffffff223daa9 [ 653.960714][ T9866] R10: dffffc0000000000 R11: fffffbfff223daaa R12: 0000000000000000 [ 653.968818][ T9866] R13: dffffc0000000000 R14: ffffc90002679000 R15: 0000000000000630 [ 653.976938][ T9866] FS: 00007f18bb0126c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 653.986006][ T9866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.992774][ T9866] CR2: 000020000000f000 CR3: 000000006ab13000 CR4: 00000000003506e0 [ 654.000928][ T9866] Kernel panic - not syncing: Fatal exception [ 654.007582][ T9866] Kernel Offset: disabled [ 654.011915][ T9866] Rebooting in 86400 seconds..