last executing test programs: 2m34.113071083s ago: executing program 4 (id=49): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='team_slave_0\x00', 0x10) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r0, &(0x7f0000003000)=[{{&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2}, 0x2}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001180)=""/10, 0xa}, {&(0x7f00000011c0)=""/223, 0xdf}, {&(0x7f00000012c0)=""/207, 0xcf}, {&(0x7f00000013c0)=""/249, 0xf9}, {&(0x7f00000014c0)=""/129, 0x81}, {&(0x7f0000001580)=""/117, 0x75}], 0x6, &(0x7f0000001680)=""/46, 0x2e}, 0x8}, {{&(0x7f00000016c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001740)=""/41, 0x29}, {&(0x7f0000001780)=""/49, 0x31}], 0x2, &(0x7f0000001800)=""/78, 0x4e}, 0xc}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/158, 0x9e}, {&(0x7f0000001940)=""/134, 0x86}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001a40)=""/220, 0xdc}, {&(0x7f0000001b40)=""/245, 0xf5}, {&(0x7f0000001c40)=""/255, 0xff}, {&(0x7f0000001d40)=""/6, 0x6}, {&(0x7f0000001d80)=""/225, 0xe1}, {&(0x7f0000001e80)=""/84, 0x54}, {&(0x7f0000001f00)=""/200, 0xc8}, {&(0x7f0000002000)=""/128, 0x80}], 0x8, &(0x7f0000002100)=""/146, 0x92}, 0x2}, {{&(0x7f00000021c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0}, 0x8a8}, {{&(0x7f0000002a40)=@ax25={{0x3, @null}, [@remote, @default, @remote, @null, @bcast, @null, @rose, @rose]}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002b80)=""/54, 0x36}, {&(0x7f0000002bc0)=""/170, 0xaa}, {&(0x7f0000002c80)=""/11, 0xb}, {&(0x7f0000002cc0)=""/127, 0x7f}, {&(0x7f0000002d40)=""/139, 0x8b}, {&(0x7f0000002e00)=""/186, 0xba}, {&(0x7f0000002ec0)=""/91, 0x5b}], 0x7, &(0x7f0000002fc0)}, 0x1}], 0x7, 0x20, &(0x7f00000031c0)={0x0, 0x3938700}) recvmsg(0xffffffffffffffff, &(0x7f00000034c0)={&(0x7f0000003200)=@l2tp, 0x80, &(0x7f0000003480)=[{&(0x7f0000003280)=""/137, 0x89}, {&(0x7f0000003340)=""/35, 0x23}, {&(0x7f0000003380)=""/222, 0xde}], 0x3}, 0x120) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000003500), 0x200400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000003540)={0x4, [0x0, 0x0, 0x0, 0x0]}) recvmsg(r1, &(0x7f0000003740)={&(0x7f0000003580)=@alg, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003600)=""/155, 0x9b}], 0x1, &(0x7f0000003700)=""/7, 0x7}, 0x3) r3 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(r3, &(0x7f0000003b00)={&(0x7f0000003780)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003800)=""/180, 0xb4}, {&(0x7f00000038c0)=""/129, 0x81}, {&(0x7f0000003980)=""/254, 0xfe}], 0x3, &(0x7f0000003ac0)=""/8, 0x8}, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000003b40)=0x7, &(0x7f0000003b80)=0x4) recvmsg(r0, &(0x7f0000004240)={&(0x7f0000003bc0)=@qipcrtr, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003c40)=""/199, 0xc7}, {&(0x7f0000003d40)=""/247, 0xf7}, {&(0x7f0000003e40)=""/238, 0xee}, {&(0x7f0000003f40)=""/211, 0xd3}, {&(0x7f0000004040)=""/77, 0x4d}], 0x5, &(0x7f0000004140)=""/217, 0xd9}, 0x40000002) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000004280), &(0x7f00000042c0)=0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000004300)={'dummy0\x00'}) bind$inet6(r1, &(0x7f0000004340)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x101}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000004380), r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000043c0)) bind$inet6(r1, &(0x7f0000004400)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x4b7}, 0x1c) clock_gettime(0x0, &(0x7f0000004900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000004440)=@x25={0x9, @remote}, 0x80, &(0x7f0000004740)=[{&(0x7f00000044c0)=""/12, 0xc}, {&(0x7f0000004500)=""/14, 0xe}, {&(0x7f0000004540)=""/136, 0x88}, {&(0x7f0000004600)=""/37, 0x25}, {&(0x7f0000004640)=""/149, 0x95}, {&(0x7f0000004700)=""/22, 0x16}], 0x6, &(0x7f00000047c0)=""/242, 0xf2}, 0x7}], 0x1, 0x12000, &(0x7f0000004940)={r5, r6+10000000}) write$tun(r2, &(0x7f0000004980)={@val={0x0, 0x8906}, @void, @x25={0x3, 0x1, 0xf3, "3243c897564d80b80e7f4759a0b8883ca7d969bebb1ba787d80e309e30dea55df259caad6a13ee3f83b0ac71d9b6d510aa722885c694bbe4475739616e7df5b3bbad9823c67bb8e805d253fcab18ee27aa5a83bca4c9c40aedd5145fcc2689178329e6a5e49ce9e8db871ad4cd376be05bd643417535870772fe5da4307a65ccfed28e5b6f28705fa2389349a893c5a657dcb03baf7ea8bf29566e95a1"}}, 0xa4) pipe2$9p(&(0x7f0000004a40), 0x89000) read(r1, &(0x7f0000004a80)=""/9, 0x9) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004b00), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000004d80)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004d40)={&(0x7f0000004b40)={0x1c8, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2e7a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xda, 0x3, "ff0b1294fc4a607fb02dca554e9a9c58fa582bd0bb1c7a9da1ed90f57eaaed43139a95936d21bbbc8a396ac16ede6ec2029e54f784ce28132d0c4dc218c03187d2f1e6e86f956e0dd2783a25f031262b0321fd969b544e85b1bf7dacd930dfba7571bb2d3155ea4c54e98e6de8b73b17fd0cca5dabe327c607993f4ce037b7dc1cf3916a5b0bddb1b6d95f8e1cca313d766007324290584b39380f0f184632c1c30a289ca488c5a6f091a77d2c01f2a45298241307fb873eccde4fdffd0d0f39049cbb7f4c1659aa76f81a7561df2fca4df28280e989"}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8278}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x28cf173}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "74e02674e63edf58d18686dea15f5f5f3c5bc61f4ad3634762e4"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x810}, 0x80) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000005080)={&(0x7f0000004e00)={0x10, 0x0, 0x0, 0x2800100}, 0xc, &(0x7f0000005040)={&(0x7f0000004e80)={0x1ac, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x125}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}]}, 0x1ac}}, 0x0) 2m32.338757949s ago: executing program 4 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30"], 0xcdc}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30"], 0xcdc}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'ipvlan1\x00', {'pim6reg0\x00'}, 0x1}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r1, 0x200002) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x67c, &(0x7f0000000580)="$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") (async) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x67c, &(0x7f0000000580)="$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") link(&(0x7f0000000200)='.\x00', &(0x7f0000000300)='./bus\x00') (async) link(&(0x7f0000000200)='.\x00', &(0x7f0000000300)='./bus\x00') connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r3, r2, 0x0, 0x80001d00c0d0) 2m30.471558763s ago: executing program 4 (id=58): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x8}, 0x18) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x204000000) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000580)='p', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[], 0x20}}], 0x2, 0x20004800) 2m29.187364144s ago: executing program 4 (id=64): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x448, &(0x7f0000000f80)="$eJzs282PE+UfAPDvzG6XHz/QrYovvKiraNz4sssCKgcPajTxgImJHvS42V0IUljDrokQomAMnowx8W48+i940osxnky86t2QEMMF8FQznRloS1ugtBTo55MMPM+87PP9duZpn5mnDWBszWT/JBGbI+LPiJjOq607zOT/XTx/cunS+ZNLSdTr7/6TNPa7cP7kUrlredymojKbRqRfJLG9Q7trx08cXqzVVo4V9fn1Ix/Nrx0/8cKhI4sHVw6uHN29b9/ePQsvv7T7xYHkmcV0Ydunqzu2vvXBN2/v/6ol/7Y8BmSm18an6/UBNzda94w6APoyERGTEVFp9P/pmGjUctPx5ucjDQ4Yqnq9Xt/UffOpOnAXS6K1rsvDuCg/6LP733JpHwS8Orzhx8idey2/Acryvlgs+ZbJSIt9KkO8v52JiPdP/ftdtsRwnkMAALT4KRv/PN9p/JfGQ0373VvMDVUj4r6IuD8iHoiILRHxYERj34cj4pEbbL99kuTq8U96tq/ErlM2/nulmNtqHf+l9em8UJ1ovBr5GLAaleTAodrKruI1mY3Khqy+0KONn9/44+tu25rHf9mStV+OBYs4zk5uaD1meXF98eayvuLc6Yhtk53yTy7PBCQRsTUitvXZxqFnf9jRbdu18+9hss+AmtS/j3gmP/+noi3/UtJ7fnL+f1Fb2TVfXhVX++33M+90a/+m8h+A7Pz/v+P1fzn/atI8X7t2422c+evLrvc0/V7/U8l7jfJUse6TxfX1YwsRU8n+POjm9buvHFvWy/2z/Gd3duz/jfe48pXYHhHZRfxoRDwWEY8XsT8REU9GxM4e+f/6+lMf9p//cGX5L9/Q+b9SmIr2NZ0LE4d/+bGl0epV+V/qff73NkqzxZrref+7nrj6u5oBAADgzpNGxOZI0rnL5TSdm8u/L78lIq2trq0/d2D146PL+W8EqlFJyydd003PQxeK2/q8fjoi8q8WlNv3FM+Nv53Y2KjPLa3WlkedPIy5TV36f+bviVFHBwzdAObRgDuU/g/jS/+H8aX/w/jq0P83jiIO4Nbr9Pn/2QjiAG69tv5v2g/GiPt/GF/6P4wv/R/G0trGuPaP5HsWyr/U5+F3bSEqt0UYQytEeluEoTCkwmjflwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAblvwAAAP//i0zh2w==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x10074, 0x0, 0x1, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x1, 0x2) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000140)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x4aaaacd8120aef3b, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0x0, 0x6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getuid() mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2m27.872369723s ago: executing program 0 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf3, 0x0, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xe}]}}}]}, 0x3c}}, 0x40) 2m26.78382649s ago: executing program 0 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 2m26.539786763s ago: executing program 4 (id=73): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaba86dd6000000000140600fe8000000007000000000000000000bbfe8000000000000000000000000000aa00004e223f762915a4a3749bef50"], 0x0) 2m26.19355465s ago: executing program 0 (id=74): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x8}, 0x18) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x204000000) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000580)='p', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[], 0x20}}], 0x2, 0x20004800) 2m25.823773728s ago: executing program 4 (id=76): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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", &(0x7f0000000000), 0x0, 0x0, 0x7000000}, 0x28) 2m22.904802225s ago: executing program 32 (id=76): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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", &(0x7f0000000000), 0x0, 0x0, 0x7000000}, 0x28) 2m22.869044464s ago: executing program 0 (id=78): creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x84) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x2d, 0xaf, 0xa, 0x80000b, 0x2c}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008000000000000004f8b70c820c37ec3e9f980a107c782cc4a62a56bfa3325b2a29fe92008692e63487a832edc251486ed93bedc782fbd2a43093d7e64ec67002929a50b88a749e895e7fa8d709fd1356b45fe42f843b38985b3c664ecb0c10fc36d73aeebd71cec175b350755bdfa9bb1da64c6eb741aaca4bcacbde3be64a6cf8f26bdcc7ae177c341e02047d1dcc1981a523021294de2cd5af7a0b54beb5c9cd5db0110882487", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ptrace$ARCH_GET_GS(0x1e, r1, 0x0, 0x1004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000180)=0x100000001, 0x4) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x800001, &(0x7f0000000280)=ANY=[@ANYBLOB='l'], 0x1, 0x1c5, &(0x7f00000005c0)="$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") r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x4004af07, 0x0) execve(&(0x7f0000000c40)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x1e8) 2m20.405810112s ago: executing program 0 (id=84): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x5) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect$uac1(0x6, 0xfc, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0x1, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x6}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x1, 0x8, "dad6b5"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x307, 0x5, 0x80, 0x9}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x5, 0x5, [0x7, 0x4, 0x7, 0x9, 0x1], 0x5}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x1, 0x5, "b4598290"}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0xe3, 0x45, "1a8731"}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x9, 0x9, "3c06e3bed0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x2, 0x6, "311194ab49fbb61c"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0x0, 0xb, "53dc78fa"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x9a, 0x4, {0x7, 0x25, 0x1, 0x3, 0x2, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9c, 0x3, 0x3, 0xd, "ba2e", "18"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0x7ff, 0xc5, "28bbacc0"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xf711, 0x5, 0x2, "1990bf0278f9990600"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x5, 0x7, {0x7, 0x25, 0x1, 0x1, 0x20, 0x1}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x62, 0x9, 0xc0, 0x10, 0xa8}, 0x7b, &(0x7f0000000580)={0x5, 0xf, 0x7b, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "d180f837d5152ef2433590670dd21d47"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x48, 0x1, 0x9, 0xfff7, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "6d7925b8927efadcc06bf3d57f5e9f00"}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x640, 0xff00, 0x9, [0x30, 0xc0, 0x3f00, 0x1fe0000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0x1, 0x7f, 0x7f}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0xab13, 0x1100, 0x9, [0x0, 0x5d16c7f5cbfe10f6, 0xc0, 0x3f30]}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4001}}]}) r6 = syz_usb_connect(0x1, 0xf4f, &(0x7f0000000cc0)={{0x12, 0x1, 0x250, 0x52, 0x58, 0xc7, 0x8, 0x22b8, 0x2d93, 0x2645, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3d, 0x4, 0x5, 0x4, 0x0, 0x6, [{{0x9, 0x4, 0xbd, 0xc0, 0xe, 0x10, 0x6b, 0xb7, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0xa}, [@processing_unit={0x7, 0x24, 0x7, 0x2, 0x0, 0x2}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x8, "c2fc"}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x84, "899c"}]}], [{{0x9, 0x5, 0x4, 0x10, 0x20, 0x2, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x49, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x13}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x0, 0x4, 0xc0, [@generic={0xca, 0x21, "09b2aa491646b495631af936b23b1df6c4f7698df3a8f5db73aac6bb559218c98d2a48e81987a36edcf6780a59de32e213b5ea7c0d2fdf49d5f75e35bfbe14699eb576023dd20ef6b639fb66045a62dc67b088ad3467e50ec471f11c24d2380cd3bc4db38ebdd1bae4b9845cf606d4b67b17da712d0ff74e7a78042abdf9a3267cd3c46df99ecb7f4f8c181e914c8a04c93fecb574c12cccadef98fedb8ab007debee1f7168a32c33caa76feb2cff6a991505adcb5af540c5714b94852f26f90f3853750e8cac6f7"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x3, 0x7, [@generic={0x9, 0x10, "f7a5fd46567c68"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xe, 0xfc, 0x4, [@generic={0x6e, 0xc, "4183eda590e52be897ae25fbea7a21aa8281d056c96357ab4ebdff57e81c809ba254e532716d99dd385f84340c4462c85f0d01b2a777f706c985f12a37090adabbdc1dadbc718b89bbd2b87a0781ddf1fca95417698e2e3a1f6f18da446bbde1c749b06b2ba6a142849864b9"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x43, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xba, 0x7f}, @generic={0x9, 0x30, "d0f39ca73bc214"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0xc, 0x1, 0x1d, [@generic={0x91, 0x22, "b049dba43ac41153fd97b84e66e4b6f89c8dd71859fb49a7c853a4305b9c690bffb1aa2a9059c4c142d8e8b75e99a5a09c606cc7f4b67836f5eb80dce8ca30cde7d4d4c396f636504a9714acee63af621e0933b1b8613d2f210cb52cf6af7ee7ea09cd4b53f9f72c79073864e294edcbc0ef7e1de0ffe54d66a2d8024f895517e61ba1938e254ccef3225e7048c110"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0xf8, 0x6, 0xaf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0xa9, 0x1, 0x2, [@generic={0x61, 0xa, "52f3c99167268b4e2cb3af607e97c0acc696c6f70b24bd8e988dfb3f281465cd82363e819dc8adda5a6706ab0f79c1480a2690538ed16867b7df0b40d574aa7ed4ddc0e21ff32c49863a742ba29ebb1ad64cf64eb6acdfebad504d5562e05b"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x6, 0x2, 0x1, [@generic={0x3f, 0x6, "5665fdf792793646fb17ce07e897785d7d83d1f0057b0674dc45e5d5a81f8aacab38b141693b0c32bd2e3821043de1051cb539a8cd9e49ecc2c8f310ce"}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x4, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x7, 0xf6, 0x6, [@generic={0x13, 0x30, "b4b085606e98cb83584e97960c4a13ebb8"}, @generic={0xb3, 0x21, "f8472122273ed109e6de1919a9497d54ecce03794fdbf2ab2c86ff9ba048a67cf28c322d8ef8523b314de5f63966b5f0f1a92d53b02282439f2cd5b796598f032f4ec779671ee107c1689b2e072210789c6c0c2b4d5e55ab6d0b62c85adc71819b5324bb45eca5e40c97d2fbf60927d1f610db13987ba68b19fbcf4495994f077cb720c452afa4c0e51e67a29780da069941a3eed7489332dd64bed376eb8672088c52a161b1e73654bbe81a885e0508d9"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x5, 0xbf, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x10, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7f}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x0, 0x40, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x2}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x7f, 0x8, 0x5, [@generic={0xdf, 0x23, "2ea269e40e42f906101a0944cddb5a7703e445dbee4620939345353bf4dde538f1a484277fdf2eb113355647b2a059cccd1661542b2c37e1c149a90a3b3fb2e50eefa06dcd734463da329167353743d743f70a37b946af4c35de092a4657d0b13d419555111dde7aff4ea3223addf76b2f0d24af07f7495c36bca80118caa553fe848f46cb03c3d1be9d40776784f494e71a45ad679d7932c755b797a0a8750c992cfddf07c96ce1ffb073dad90615ab8325c65b4a5159b54afde5d7bc96eff506febc4d034693804e43de7bea0ad89f817263d666c65c07d0453393e6"}]}}]}}, {{0x9, 0x4, 0x67, 0x6, 0x5, 0x39, 0xa9, 0xbe, 0x81, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x25, 0x4, 0x9, 0x61, "5fbc19087051"}]}], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0x4, 0xa3, 0x5, [@generic={0x2b, 0x21, "8b42f70cefa7d8e206c41412babb4561c3ff33d7cb707a014b1ac67e8a952b86c84389f8748199e4ec"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, [@generic={0x5b, 0x0, "c62f99cde1f55b03c2df64e494c2b0da2a6e4166e90e81ab7ef99ef837f36f4fe862eea78c5a5416b8ba89340a04960ad462e4b1eac11549a583d4ae79cac52599fd728fc9f1b172e85ade3d48d8ce77f4df3adc7e2b762412"}]}}, {{0x9, 0x5, 0x4, 0x94d67b36971d3524, 0x10, 0x5, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xff}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x1, 0x6, 0xa4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x61, 0xeed}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x41, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0xa2, 0x41cb}]}}]}}, {{0x9, 0x4, 0x42, 0x5, 0x6, 0x32, 0xf3, 0xcb, 0xb, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "e2d3d0"}, {0x5, 0x24, 0x0, 0x81b}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0x6, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x200}, @acm={0x4, 0x24, 0x2, 0x2}, @obex={0x5}, @acm={0x4, 0x24, 0x2, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x80, 0x20}, @country_functional={0xe, 0x24, 0x7, 0x8, 0xbd0c, [0x2, 0x3, 0x0, 0x9]}]}], [{{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x3e, 0x96, 0x7, [@generic={0x6b, 0x22, "252e679d2fb916cc7316b346b7273acd806566b414b3b908186a2008a93f3762fea652f95f8e3f998e95f1dd84306cbd4d0f2c6b1814427db2bc6ce1f38c06f6ecc8ca0ed7bb473b5d3c42dfe95934df9020148e7a99a5b76c7497e4866e7b6b1f09a0490a538e08c6"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x40, 0x5, 0x53, [@generic={0x79, 0xe, "f867c7cbd2b6d20d750f7cba872028255d96251c085eaec7ceed70767286dc33cd61beac1e120afc5791975d673aad9d4418a0f57946042828b8e5e572c0c9fb29aa40515b14d1fb00673796227af49f532e4ac2ef46382b02292c08f04d0fca3cd9a439c65ce5a4185b7e6aa5ac55b5ca866583d31582"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3, 0x3, 0x5, [@generic={0x83, 0xe, "fa85e6fe8c450431e33147a149c676af57a3fb74c5881552141572c39e14cab049a83e7f50d187408efeb6d6a2c40440a63ab1d371cc42ae1177fdc827e406c60ca7f86c4404acc202ff5fbf3653bc7676699e5c738d1cddffa198c2785c8759680c8f1e5789ae0396ce3ca395d5fe1bd14db5d571fec2589f801d4c5ecf670143"}, @generic={0xa8, 0x1, "5b86b22c868fb41da9e26058465666d1f608516cc4f8bdc06c2c5d6256a2ebd28f077c7b186b4a68fceb0d05f5e31a972e4d5e5687948574f910f3dab315d9e944c7670acc06a4eff9a214edec2701390095c79c36592225bc0730e337ebd74bec9dc7d6117c25cc0d7f6faf0bddf98db7db5d417f285e45deb0f36ba9afff08ad098e2908c25c7cf038f65c5f24a7a74f6fc0901ba1c2f67b7ebeff7dd12ecb51424ca012a8"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x3, 0x3, 0x3, [@generic={0xf9, 0x30, "b0a1ab7c67ab6855f9be4d75ed4b0c6847238de04a69ec2b0cb0d6bbda3916d4ed83aa5d809bcc60dd135fdd105b58142d9e2fa5de5279b40e97e50487d375da7a1d25da94eec066a49106bb8e55e6fa4e1bd9338da889540b09ec565e7a3ba05874754cfbc33acc64f017893d6558dc46fae71662db825ef91f1529950a95f0b3971403d873700e60d0c6b993d4916070159ac91ff462f8acb3d9a733b1b4bd1a6e6a91d42ff0ebe2170edb3aa5ddb2f3f22f780707a3ce083671127b28c57c74d36e5f48022e536ff8d56234c485a9f828436c2a60814c89361d76bfb91e75e5246a54329cb531d51662224376c23a3b388b35f3f42a"}, @generic={0x50, 0x11, "ae0fd49e9be279bd964487fd2555e7a5172a3de6b0ae4bdcaff74385c42544ee07dd0daba3325f7f5eefabc5a16c23e254533d55319e0e9a823680d7631db69609e79e6b7254efca767d357becca"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x7, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x67, 0x81, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xf001}]}}]}}, {{0x9, 0x4, 0xe, 0x9, 0xa, 0x16, 0x39, 0x9d, 0x3, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x1, 0x9, 0x8, "24be27bde6156a6e63"}]}], [{{0x9, 0x5, 0xa, 0x1, 0x3ff, 0x77, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xe839}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x0, 0x9, 0x8, [@generic={0xb9, 0x22, "be6ed422c9916275bf49de0d053668c63968da74111872e14b06366866f688f916680bfbc02b10f33c897d05ebe7de7351d10e3e6d07a8e4a2f460fdb956d2ed3f40acc59a744e690c7ebf1cf2708ad0d7d571fd23e0abe15dd7fbe8b76a36905c764fa0b41b49ceed54d17a047388c748e4ab54accc909afce899b845f675366fd74c9f94755591c9c1d0b87423e87ee66ddf7d7ee7c3a60f4aee16fd2f10418853102de0d56d85525ff7aa40a8c6803358af98842e3c"}, @generic={0x75, 0x22, "edcda0284da29094105b30861d696a690688618325c17734d9644b71d24fb43bf948e3505cfa14e410dbc550c93e96befad1c584067bd00650f4c66bdaa324828dfd1ee0a591a5913131bd19862f87d80db101e4975c05caedabb23e0937fa1f68fe71293b2220ec107c2e7ff3feab7e861e6c"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0xa, 0x8, 0x6, [@generic={0xa8, 0x24, "edb2a49aaa8d599f29f06233f58c07060a7f1654b2c6c55e359fb27c260aca0efbda6ca089ebbf9a2a4f6c8a7aea6bd9038e39900e76e4da5d7adbaa1f9dd46a532553b51a53632fe51ead948b7c938a309fbd4f7e4d4ab5a887ffbeb32db15988e82e680dfdc6a001361cd6a1092d0d44f79749df254a3da62643bf3194462dbd0d5a1ed8d84515d1c89980ad0424ef816f1becf7eaa7c37b13faffe1d272326b636b9414f7"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0xa, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7d}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x2, 0x80, 0x8, [@generic={0x8d, 0xe, "d205a10838c10563cd2e207c6271ee79b8929008f029ca0e699e2078eccb1d8b1a2dbce72eb61a8822caf61eee16f51d8ed6a7789da03e99b9577282e8302df10c2f3bac4bb91b56e53748b9bc31d2753646d3b9b5f68205889f743612fd944b6604b4ec38e3760e53e1cca356d5823a88023a29c87e0181f5b6fa9ddff480e3986b40b2dd961b0cd128bc"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x80, 0x3, 0x3, [@generic={0x7c, 0x21, "ca8bbe3740857943db85716d726b9266501a3386d8bca4188f2ce3a5e76048ca1e0d7ba40d422fbc626f1fd2df0dde5459c8ac839e4ab87a6ae0f2eadc30d4772faee1583d781dead4cba5baf7957167cb6dd6e49428b367a76b65237bfc3d585cecdf028d7a15e9c2eafa2a33ea6a0d242c82ef8db070ef9bf3"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x18, 0x7, 0xbf, 0x9, [@generic={0xc3, 0x5, "da657fe50025fa5e56dc5fcfd670c41ce9eb0f0d8eaaf44d67af5b11c539549eb50a81d962dda70ff75f6efa222d899653f9ebeccfb988d77002f6c772c8ba8d87b5b8e13c7be1d604f16f52c03287aae43a83f4b6b4ab7077fdb325c3905fd37c4f7bc2673b31ce59c4c8525f3876a250e4e5b27eb26a03db457665712dff00644a23731163f4ba66a3f7539175d5dcaf6a66940e544f28ca4c436f6fffb144b75b3d532455409c688c2646a0514dfbf3c2bd0ed4f3adb12cc9f538c79bdf18b8"}, @generic={0xf9, 0x1, "b7978eb92ac17a01e3d352d32f23f8c1e7581790aebe3700848bbb96505b76e6811343383df14ab3ec6191c8542863178e423a1e69235c6795a82a020bca26a8c9d787737010fe493d33ad057c886c4ccf95f25fde60eee6f755ad2d0796bf6af2ca88ceac680bb93d2c4ccf80ccbe0514ee44a19bcb2ad4edb2435f51a1b805610e26021f1374a9de9bf029f63713a87928b6267ae87d2de9c22368ecc7a904c363b8d9afc843498aa35d8f0b920751934ccb8d8901f5a3d1da9bac1c915f83bedde2a5230a951b711c4c2f94b2ccd6553444bc8ec584e31095eaa0c27bce8fa55a2b4643bd4d93c869f09cc446f666f44b5e8726ca91"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xfb, 0x1d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0xc39}]}}, {{0x9, 0x5, 0xe, 0x10, 0x268, 0x5, 0x85, 0x1, [@generic={0x1c, 0x7, "022e965ebfd08c32fd7478a1402984b2e6e62711bd873377fe40"}]}}, {{0x9, 0x5, 0x9, 0x10, 0xddafbe49370e4b6f, 0x9, 0xf2, 0x18, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x9, 0x3, 0x8, 0x40, 0x6}, 0x38, &(0x7f00000004c0)={0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x6, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x2, 0x3, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x40, 0xf000, 0x5, [0xffc000, 0xc0, 0xff3f0f]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x9, 0x4, 0x3}]}, 0x3, [{0xea, &(0x7f0000000600)=@string={0xea, 0x3, "59641ca42123e8a3d55a3907bb7a17338606f41f9e5503300bc441f442a1d31efbf6eef96370a0886fbed55a6fe6c47c4fff241431e5fbce6e5fc26693818a6d3865f537b62ffba4cd84e95fc4406b1adcbfd4e43307fad43498f36cec5059d8ce6e4ac620365b5292b4a6a0165e1887896769215f8c43e35376f5bc197e2da5d4764e987f1fc13f4798b5b3e6fed0d06012cfc982a92a6229865f84c7d3060ea59549113957a2cfb103a706b96cfe3dbdca45f1e20d56bf5e5d5444f8e03bb7ec9b7d3b3211c546be9977ea304b8c2f9e5799550ce337cb5b7d2e724b33ac3c9d7bbac1335229da"}}, {0x9c, &(0x7f0000000700)=@string={0x9c, 0x3, "b331b5fa8507d39165856f23936e08ffe0646bb8b9ff33221bb00a7ab92cd662580aa0565eea64d5ab930849acef0f672a32db19611d65b4ef2b8701a48466811ec654b9052308ab8096e79fc8d2acaf833382daa0a48d141c7ae421b905302ba38ad358ca72944e978b58edd21b02362a2845a650f7493ba3c177f3ec53eee2fcabfaaf0dc270ac40a68705b34446f17569b7df98f41e266707"}}, {0x66, &(0x7f00000007c0)=@string={0x66, 0x3, "1fb4231dcaccf1066a1adb4a3c7de55dd152c271d0fd9ef3b28af8c954c160f1a1d542f285e3f9e7f7a28ae6c64ce036a8e9d21161b3db08d39ef009d1073136673d87fdf23538f57542d12b15a0aedeb70ccb65e7590701e4f821e8e6f39908cbcd4ed8"}}]}) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(0xffffffffffffffff, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x40, 0x6, 0x1, '|'}, 0x0, 0x0, 0x0, 0x0}) 2m15.642469819s ago: executing program 0 (id=90): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = userfaultfd(0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000001c40)={[{@resgid}, {@abort}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0xac9}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {}, {@inlinecrypt}]}, 0x9, 0x606, &(0x7f0000000600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000100000000000400020000000000100002000000000020"], 0x24, 0x0) fchmod(r2, 0x148) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) userfaultfd(0x1) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000001c40)={[{@resgid}, {@abort}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0xac9}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {}, {@inlinecrypt}]}, 0x9, 0x606, &(0x7f0000000600)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000100000000000400020000000000100002000000000020"], 0x24, 0x0) (async) fchmod(r2, 0x148) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) 2m13.291027845s ago: executing program 33 (id=90): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = userfaultfd(0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000001c40)={[{@resgid}, {@abort}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0xac9}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {}, {@inlinecrypt}]}, 0x9, 0x606, &(0x7f0000000600)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFoIUaGiNFk0oCW5MjBtjTFy5EP8LJbJlpW5cuHFlSIgaliaOudM7pdPeaenH9Fbm90uGnnvu3J5zpzxzzj1zzp0A2tZg9k8lYn9ETKeI/jS/uK8z8p2DC8978OeHZ7NHimr1td9TpDyv/vyU/+zLD+6JiB++T7GvY2W5M3PXLo5PTU1ezbeHZy9ND8/MXTt84dL4+cnzk5dHXxg9cfzY8RMjRzZ0XtcL8k7ffOe9/o/H3vz6y7/SyDe/jKU4GS/nT1x6HltlMAZrr0lauavvxFYXVqLOZdtpeQY7Vkf+9+uKiCeiPzqW/DX746NXSq0c0FLVFFEF2lRaR/xnvYVW1gXYTvV+QP3afvl1cKWUXgmwHe6fWhgAWBn/nQtjg9FTGxvY/SA1jPOkiNjYyFyjPRFx987YzXN3xm5Gi8bhgGLzNyLiyaL4T7X4H4ieGKjFf6Uh/rN+wZn8Z5b/6gZ7CsuHisU/bJ+F+O9ZNf6jSfy/tST+395EHfJLkeu9DfHf6+oDAAAAAAAA1un2qYh4vujz/8ri/J8omP/TFxEnt6D8wWXbKz//r9zbgmKAAvdPRbxUOP+3Uv/8faAjT/2nNh+gK527MDV5JCL+GxGHomtXtj2yShmHP9n3RbN9g/n8v/ojK/9uPhcwr8e9zl2Nx0yMD45v9ryBiPs3Ip4qnP+bFtv/VND+Z+8H049Yxr5nb51ptm/t+AdapfpVxMHC9v/hXSvS6vfnGK71B4brvYKVnv7g02+blb/R+HeLCdi8rP3fvXr8D6Sl9+uZWfXXzRdlHp3rrDY7YGP9/9nx7vR67a5C3Xne++Ozs1dHIrrT6Y4styF/dK1XAR4zPxVn1+OhHi9Z/B96ZvXxv6L+f29BsKc/GtcU1/3/775fm1VT/x/Kk8X/xLra//UnRm8NfNes/Edr/4/V2vpDeU7W/rfuFYF/j8/rYdrdmF8Qjp1Fu7a7vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKhExJ5IlaHFdKUyNBTRFxH/i92VqSszs8+du/Lu5YlsX+37/yv1b/rtX9hOte//r2Tph9uj0bh9NCL2RsRnHb217aGzV6Ymyj55AAAAAAAAAAAAAAAAAAAA2CH6mqz/z/zWUXbtgJbrLLsCQGkK4v/HMuoBbD/tP7SvDcV/mt/6igDbTvsP7Uv8Q/sS/9C+xD+0L/EP7WrZOH4qqx4AAAAAAMAW2Xvg9s8pIuZf7K09Mt35vq5Sawa0WqXsCgClcYsfaF+m/kH7co0PrDXrt6fpQZuZLzx9dhMHAwAAAAAAAAAAAEDbObjf+n9oV9b/Q/uy/h/aV339/4GS6wFsP9f4QKyxkr9w/f+aRwEAAAAAAAAAAAAAW2mmuitiamry6szctYvjLUt0R0SLi9h04o2dUY2iRG+LfnO1Wr2e/S8o/QQfj0R9KvxOqc+yRH2t36MdVd57EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OifAAAA//8sxicA") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000100000000000400020000000000100002000000000020"], 0x24, 0x0) fchmod(r2, 0x148) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) userfaultfd(0x1) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000001c40)={[{@resgid}, {@abort}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0xac9}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {}, {@inlinecrypt}]}, 0x9, 0x606, &(0x7f0000000600)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000100000000000400020000000000100002000000000020"], 0x24, 0x0) (async) fchmod(r2, 0x148) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) 13.043682805s ago: executing program 6 (id=343): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa10102030109235378ce79e1e467da7f78d0750eb3e933a3ec010000000009040000009d144e00"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xc0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, @void, @value}, 0x28) umount2(0x0, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x103101, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) r4 = memfd_secret(0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000045c0)=@multiplanar_userptr={0x7, 0x7, 0x4, 0x0, 0x100, {}, {0x4, 0xc, 0x3, 0xfd, 0xa, 0x3, "b6bc4ad5"}, 0x10, 0x2, {0x0}, 0x2}) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0xfffffff9, 0x3ff, 0x1, 0x8, 0x3, "ca0a573ccc24905439102847a3e250c00f6e07"}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x180, 0xe000060, 0xffffff6a, 0x180, 0x4, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [], [], 'wg2\x00', 'rose0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@limit={{0x48}, {0x48000000, 0x180}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000040)) 12.77703539s ago: executing program 5 (id=344): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000580)={[{@lazytime}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@prjquota}, {@gquota}, {@noquota}, {@swidth}, {@nouuid}], [{@flag='nomand'}]}, 0x1, 0x9606, &(0x7f0000012cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x1, 0x700, 0xfff}) 11.583094849s ago: executing program 2 (id=348): connect$inet6(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000580)=@nullb, r0, &(0x7f0000000680)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46057d9b08050000000000000003000300155eef2e5d020000380000000b03000007000000090020"], 0x78) close(r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) shmdt(0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) fspick(0xffffffffffffff9c, 0x0, 0x5d135e8c4e6b5b6b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000200)={0x8010, 0x25, 0x1, 0x0, 0x3}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006100), 0x49f, 0xf0ff, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1d, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=""/73, 0x128, 0x49, 0x0, 0x6a2c, 0x10000, @value=r3}, 0x28) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x4e21, 0x7ff, 0x4e20, 0x7, 0x2, 0x80, 0x80, 0x3c, 0x0, r4}, {0x5, 0x0, 0x9, 0x7, 0xc, 0x1, 0xb8a, 0x2}, {0x5, 0x0, 0xffffffff, 0x1}, 0xfffffffd, 0x6e6bba, 0x0, 0x0, 0x3, 0x1}, {{@in6=@empty, 0x4d3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3501, 0x2, 0x2, 0xb, 0x0, 0x6, 0x1ff}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) 10.103586892s ago: executing program 1 (id=351): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) 9.367852655s ago: executing program 6 (id=352): connect$inet6(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0xa}, @void, @eth={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x6558}}, {@llc_tr={0x11, {@llc={0x80, 0x7e, '\\', "4e254b44394715e74d36c7f74ac1509cf869eb6e132b12db2d2b71ff915085764e0a4a50fd2c536d837525ef05a7aaf79ff0964a204939d9f91a1318bc00407d934156ab6cbe1c358e5b58de97e8e80731486b08120a6d6bdaa530762344cf5c5d0a3cb7cc8cf00f39ac63e6708b1da721956eb0881611c9d089feec4e563fd2708c822102d8ecb01f8fe60338af561a1eb56ad00b01c92e86b7ddd95b482fc055b996aa"}}}}}}, 0xc1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x4, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 9.326299728s ago: executing program 1 (id=353): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='team_slave_0\x00', 0x10) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r0, &(0x7f0000003000)=[{{&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2}, 0x2}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001180)=""/10, 0xa}, {&(0x7f00000011c0)=""/223, 0xdf}, {&(0x7f00000012c0)=""/207, 0xcf}, {&(0x7f00000013c0)=""/249, 0xf9}, {&(0x7f00000014c0)=""/129, 0x81}, {&(0x7f0000001580)=""/117, 0x75}], 0x6, &(0x7f0000001680)=""/46, 0x2e}, 0x8}, {{&(0x7f00000016c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001740)=""/41, 0x29}, {&(0x7f0000001780)=""/49, 0x31}], 0x2, &(0x7f0000001800)=""/78, 0x4e}, 0xc}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/158, 0x9e}, {&(0x7f0000001940)=""/134, 0x86}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001a40)=""/220, 0xdc}, {&(0x7f0000001b40)=""/245, 0xf5}, {&(0x7f0000001c40)=""/255, 0xff}, {&(0x7f0000001d40)=""/6, 0x6}, {&(0x7f0000001d80)=""/225, 0xe1}, {&(0x7f0000001e80)=""/84, 0x54}, {&(0x7f0000001f00)=""/200, 0xc8}, {0x0}], 0x8, &(0x7f0000002100)=""/146, 0x92}, 0x2}, {{&(0x7f00000021c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f00000029c0)=""/103, 0x67}, 0x8a8}, {{&(0x7f0000002a40)=@ax25={{0x3, @null}, [@remote, @default, @remote, @null, @bcast, @null, @rose, @rose]}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002b80)=""/54, 0x36}, {&(0x7f0000002bc0)=""/170, 0xaa}, {&(0x7f0000002c80)=""/11, 0xb}, {&(0x7f0000002cc0)=""/127, 0x7f}, {&(0x7f0000002d40)=""/139, 0x8b}, {&(0x7f0000002e00)=""/186, 0xba}, {&(0x7f0000002ec0)=""/91, 0x5b}], 0x7, &(0x7f0000002fc0)}, 0x1}], 0x7, 0x20, &(0x7f00000031c0)={0x0, 0x3938700}) recvmsg(0xffffffffffffffff, &(0x7f00000034c0)={&(0x7f0000003200)=@l2tp, 0x80, &(0x7f0000003480)=[{&(0x7f0000003280)=""/137, 0x89}, {&(0x7f0000003340)=""/35, 0x23}, {&(0x7f0000003380)=""/222, 0xde}], 0x3}, 0x120) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000003500), 0x200400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000003540)={0x4, [0x0, 0x0, 0x0, 0x0]}) recvmsg(r1, &(0x7f0000003740)={&(0x7f0000003580)=@alg, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003600)=""/155, 0x9b}], 0x1, &(0x7f0000003700)=""/7, 0x7}, 0x3) r3 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(r3, &(0x7f0000003b00)={&(0x7f0000003780)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003800)=""/180, 0xb4}, {&(0x7f00000038c0)=""/129, 0x81}, {&(0x7f0000003980)=""/254, 0xfe}], 0x3, &(0x7f0000003ac0)=""/8, 0x8}, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000003b40)=0x7, &(0x7f0000003b80)=0x4) recvmsg(r0, &(0x7f0000004240)={&(0x7f0000003bc0)=@qipcrtr, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003c40)=""/199, 0xc7}, {&(0x7f0000003d40)=""/247, 0xf7}, {&(0x7f0000003e40)=""/238, 0xee}, {&(0x7f0000003f40)=""/211, 0xd3}, {&(0x7f0000004040)=""/77, 0x4d}], 0x5, &(0x7f0000004140)=""/217, 0xd9}, 0x40000002) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000004280), &(0x7f00000042c0)=0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000004300)={'dummy0\x00'}) bind$inet6(r1, &(0x7f0000004340)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x101}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000004380), r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000043c0)) bind$inet6(r1, &(0x7f0000004400)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x4b7}, 0x1c) clock_gettime(0x0, &(0x7f0000004900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000004440)=@x25={0x9, @remote}, 0x80, &(0x7f0000004740)=[{&(0x7f00000044c0)=""/12, 0xc}, {&(0x7f0000004500)=""/14, 0xe}, {&(0x7f0000004540)=""/136, 0x88}, {&(0x7f0000004600)=""/37, 0x25}, {&(0x7f0000004640)=""/149, 0x95}, {&(0x7f0000004700)=""/22, 0x16}], 0x6, &(0x7f00000047c0)=""/242, 0xf2}, 0x7}], 0x1, 0x12000, &(0x7f0000004940)={r5, r6+10000000}) write$tun(r2, &(0x7f0000004980)={@val={0x0, 0x8906}, @void, @x25={0x3, 0x1, 0xf3, "3243c897564d80b80e7f4759a0b8883ca7d969bebb1ba787d80e309e30dea55df259caad6a13ee3f83b0ac71d9b6d510aa722885c694bbe4475739616e7df5b3bbad9823c67bb8e805d253fcab18ee27aa5a83bca4c9c40aedd5145fcc2689178329e6a5e49ce9e8db871ad4cd376be05bd643417535870772fe5da4307a65ccfed28e5b6f28705fa2389349a893c5a657dcb03baf7ea8bf29566e95a1"}}, 0xa4) pipe2$9p(&(0x7f0000004a40), 0x89000) read(r1, &(0x7f0000004a80)=""/9, 0x9) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004b00), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000004d80)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004d40)={&(0x7f0000004b40)={0x1c8, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2e7a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xda, 0x3, "ff0b1294fc4a607fb02dca554e9a9c58fa582bd0bb1c7a9da1ed90f57eaaed43139a95936d21bbbc8a396ac16ede6ec2029e54f784ce28132d0c4dc218c03187d2f1e6e86f956e0dd2783a25f031262b0321fd969b544e85b1bf7dacd930dfba7571bb2d3155ea4c54e98e6de8b73b17fd0cca5dabe327c607993f4ce037b7dc1cf3916a5b0bddb1b6d95f8e1cca313d766007324290584b39380f0f184632c1c30a289ca488c5a6f091a77d2c01f2a45298241307fb873eccde4fdffd0d0f39049cbb7f4c1659aa76f81a7561df2fca4df28280e989"}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8278}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x28cf173}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "74e02674e63edf58d18686dea15f5f5f3c5bc61f4ad3634762e4"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x810}, 0x80) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000005080)={&(0x7f0000004e00)={0x10, 0x0, 0x0, 0x2800100}, 0xc, &(0x7f0000005040)={&(0x7f0000004e80)={0x1ac, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x125}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}]}, 0x1ac}}, 0x0) 8.531658522s ago: executing program 3 (id=354): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000300)=[{0x80, 0x0, 0x0, 0x0, @time={0x0, 0x4}, {}, {0x0, 0xb5}, @raw32}, {0x1, 0x0, 0x0, 0x0, @tick=0xc, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0xfd, @tick, {}, {0x0, 0xa}, @raw32}, {0x0, 0x0, 0x0, 0x4, @tick, {0x2}, {}, @result={0x80000001}}, {0xff, 0x0, 0x0, 0x0, @time={0x4a136960}, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time={0x3}, {}, {}, @note={0x9, 0xc, 0x0, 0x8, 0xffff}}, {0x0, 0x0, 0x7, 0x0, @time, {}, {}, @connect={{0x0, 0x1}}}], 0xa8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x481, &(0x7f0000000140)={[{}, {@gid}, {@type={'type', 0x3d, "69759d7b"}}, {@nobarrier}, {@part={'part', 0x3d, 0x5}}, {@part}, {@gid}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp775'}}]}, 0x1, 0x6f8, &(0x7f0000002440)="$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") r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 8.399627776s ago: executing program 6 (id=355): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000300)={[{@dioread_lock}, {@delalloc}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@barrier}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f00000003c0)="$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") chdir(&(0x7f00000000c0)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x80, 0x3}, {0xd7, 0x10000}]}, 0x18, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x2a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffcc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x126, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x114, 0x1, 0x1, 0x0, 0x80, 0xa, [{{0x9, 0x4, 0x0, 0x0, 0x1a, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x9, 0x22}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff5, 0x8, 0xfff}, @obex={0x5, 0x24, 0x15, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x8, 0x3d}, @mdlm_detail={0xb6, 0x24, 0x13, 0x40, "721387db864b4c1b5976fb5999bcf8e5ce0bed1e26138072befe67c353aec6a3ba2774ad56f58083c224cbb8c08662d3eefe01c8fe8dc81342060cdd52597a56ca0baece0b082f06fbb4d76d1516526a6e1040beecb4a51ec2ac0a319b72deb6e59bdd9a422df97d7776f0e5e8ede51ff254bed037ea34efd9e7c02dd47454758f5acc18b19a559e85d5dd78d4fa7cd86589ff979bcd5e9e851f38c5c444937c82fb1cd5a2961097c17d82762b5d288e613b"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x0, 0x8b}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0xfd}}}}}]}}]}}, 0x0) 7.966191986s ago: executing program 1 (id=356): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x10000, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009840)='./file1\x00', 0x14810, &(0x7f0000000080)={[{@qnoenforce}, {@allocsize={'allocsize', 0x3d, [0x39, 0x67]}}]}, 0x1, 0x985d, &(0x7f0000009880)="$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") setresuid(0xee01, 0xee00, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000006c0), 0x12) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x1, &(0x7f0000000040)={[{@space_cache}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") 7.538064384s ago: executing program 3 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf1ff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000fff1000000000100000e00fff1"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7.327811321s ago: executing program 5 (id=358): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x40488c4) sendmsg$inet(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001080)="b8c610580aa76e2b000000b3947a58c9a4ccf068329292131c9e44e7135934c37c3d61673e36be1ae116812ca8c992b10432350e43289c8711ecf393388ec318713948d6f70000000002", 0x4a}, {&(0x7f0000001440)="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", 0xb9}, {&(0x7f00000011c0)="3ab395316f40b0e83ec599235b7130384a47ac10662012deb759bf21d72fd3d116325dcb025b91df00ea691a7f2d23762118ee488a35be4772645339056cfb53ce380a0abbed11c99a7a63836d2a827561435926831dd26594975cf7f95c175731101f276c8b6667cbbd50b696c94fdacf350fa5efa8267a58a5b568d2861f4eca5cc292e81a221259d424814fad2ec705a38432c42801a51c4e0690f93fec9583226e71e7e0552bf34ca3d596362c131459e53796a43e130381ce96", 0xfdab}, {&(0x7f0000000f40)="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", 0xb5}], 0x4, 0x0, 0x0, 0x10000000}, 0x8004) 6.11617744s ago: executing program 5 (id=359): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811f1010301090212000d0000000009048d20b10e32d3ab"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_disconnect(r2) sendmsg$nl_route(r1, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080), 0x5, 0x4080) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f000000a2c0), 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x27a000, 0x1c4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="0423fb1d7c7335720d"], 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) openat(r0, &(0x7f0000000000)='./file1/file0\x00', 0x719202, 0x108) 6.084035887s ago: executing program 3 (id=360): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000020008000a00000000004400078008"], 0x90}}, 0x0) 5.429222079s ago: executing program 1 (id=361): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0x8}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="1f3cef0a1ef45ff9c927a60177e43b649da5d8eaaad449da4848bc8fbf7f", 0x1e}, {&(0x7f0000000040)="4f3f68d96f7ae9d453d30ed61d59b7246bdf0ae1c6aa00ee658d154f4da0a13941681161c62a38a00914c583841a7e1e4409338f875e0c1480d5f1de127baf4b7686a1051036f6cca479dacc660f96be1cda936ebb5fc5db939895352dfeb41ca3b31fb84bab5c7397b03bb78623900c23456ec907fc64ee9f26dcfad51f9c0dc079486491f9914551132918783721031a82bce41f595231", 0x98}], 0x2}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000dc0)={'gretap0\x00', 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.989288098s ago: executing program 2 (id=362): r0 = io_uring_setup(0x3b2c, &(0x7f0000000000)={0x0, 0x603b, 0x10, 0x1, 0x2a8}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)={[{@redirect_dir_follow}, {@verity_on}, {@xino_off}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x80, r3}) (async) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r3}) (async) llistxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000480)=""/6, 0xfffffffffffffe7f) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r4) (async) close(r0) 4.867299298s ago: executing program 3 (id=363): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) 4.793345992s ago: executing program 6 (id=364): socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 3.855465147s ago: executing program 2 (id=365): connect$inet6(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0xa}, @void, @eth={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x6558}}, {@llc_tr={0x11, {@llc={0x80, 0x7e, '\\', "4e254b44394715e74d36c7f74ac1509cf869eb6e132b12db2d2b71ff915085764e0a4a50fd2c536d837525ef05a7aaf79ff0964a204939d9f91a1318bc00407d934156ab6cbe1c358e5b58de97e8e80731486b08120a6d6bdaa530762344cf5c5d0a3cb7cc8cf00f39ac63e6708b1da721956eb0881611c9d089feec4e563fd2708c822102d8ecb01f8fe60338af561a1eb56ad00b01c92e86b7ddd95b482fc055b996aa"}}}}}}, 0xc1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x4, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 3.820579045s ago: executing program 3 (id=366): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='team_slave_0\x00', 0x10) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r0, &(0x7f0000003000)=[{{&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2}, 0x2}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001180)=""/10, 0xa}, {&(0x7f00000011c0)=""/223, 0xdf}, {&(0x7f00000012c0)=""/207, 0xcf}, {&(0x7f00000013c0)=""/249, 0xf9}, {&(0x7f00000014c0)=""/129, 0x81}, {&(0x7f0000001580)=""/117, 0x75}], 0x6, &(0x7f0000001680)=""/46, 0x2e}, 0x8}, {{&(0x7f00000016c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001740)=""/41, 0x29}, {&(0x7f0000001780)=""/49, 0x31}], 0x2, &(0x7f0000001800)=""/78, 0x4e}, 0xc}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/158, 0x9e}, {&(0x7f0000001940)=""/134, 0x86}], 0x2}, 0x9}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001a40)=""/220, 0xdc}, {&(0x7f0000001b40)=""/245, 0xf5}, {&(0x7f0000001c40)=""/255, 0xff}, {&(0x7f0000001d40)=""/6, 0x6}, {&(0x7f0000001d80)=""/225, 0xe1}, {&(0x7f0000001e80)=""/84, 0x54}, {&(0x7f0000002000)=""/128, 0x80}], 0x7, &(0x7f0000002100)=""/146, 0x92}, 0x2}, {{&(0x7f00000021c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f00000029c0)=""/103, 0x67}, 0x8a8}, {{&(0x7f0000002a40)=@ax25={{0x3, @null}, [@remote, @default, @remote, @null, @bcast, @null, @rose, @rose]}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002b80)=""/54, 0x36}, {&(0x7f0000002bc0)=""/170, 0xaa}, {&(0x7f0000002c80)=""/11, 0xb}, {&(0x7f0000002cc0)=""/127, 0x7f}, {&(0x7f0000002d40)=""/139, 0x8b}, {&(0x7f0000002e00)=""/186, 0xba}, {&(0x7f0000002ec0)=""/91, 0x5b}], 0x7, &(0x7f0000002fc0)}, 0x1}], 0x7, 0x20, &(0x7f00000031c0)={0x0, 0x3938700}) recvmsg(0xffffffffffffffff, &(0x7f00000034c0)={&(0x7f0000003200)=@l2tp, 0x80, &(0x7f0000003480)=[{&(0x7f0000003280)=""/137, 0x89}, {&(0x7f0000003340)=""/35, 0x23}, {&(0x7f0000003380)=""/222, 0xde}], 0x3}, 0x120) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000003500), 0x200400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000003540)={0x4, [0x0, 0x0, 0x0, 0x0]}) recvmsg(r1, &(0x7f0000003740)={&(0x7f0000003580)=@alg, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003600)=""/155, 0x9b}], 0x1, &(0x7f0000003700)=""/7, 0x7}, 0x3) r3 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(r3, &(0x7f0000003b00)={&(0x7f0000003780)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003800)=""/180, 0xb4}, {&(0x7f00000038c0)=""/129, 0x81}, {&(0x7f0000003980)=""/254, 0xfe}], 0x3, &(0x7f0000003ac0)=""/8, 0x8}, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000003b40)=0x7, &(0x7f0000003b80)=0x4) recvmsg(r0, &(0x7f0000004240)={&(0x7f0000003bc0)=@qipcrtr, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003c40)=""/199, 0xc7}, {&(0x7f0000003d40)=""/247, 0xf7}, {&(0x7f0000003e40)=""/238, 0xee}, {&(0x7f0000003f40)=""/211, 0xd3}, {&(0x7f0000004040)=""/77, 0x4d}], 0x5, &(0x7f0000004140)=""/217, 0xd9}, 0x40000002) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000004280), &(0x7f00000042c0)=0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000004300)={'dummy0\x00'}) bind$inet6(r1, &(0x7f0000004340)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x101}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000004380), r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000043c0)) bind$inet6(r1, &(0x7f0000004400)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x4b7}, 0x1c) clock_gettime(0x0, &(0x7f0000004900)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000004440)=@x25={0x9, @remote}, 0x80, &(0x7f0000004740)=[{&(0x7f00000044c0)=""/12, 0xc}, {&(0x7f0000004500)=""/14, 0xe}, {&(0x7f0000004540)=""/136, 0x88}, {&(0x7f0000004600)=""/37, 0x25}, {&(0x7f0000004640)=""/149, 0x95}, {&(0x7f0000004700)=""/22, 0x16}], 0x6, &(0x7f00000047c0)=""/242, 0xf2}, 0x7}], 0x1, 0x12000, &(0x7f0000004940)={r5, r6+10000000}) write$tun(r2, &(0x7f0000004980)={@val={0x0, 0x8906}, @void, @x25={0x3, 0x1, 0xf3, "3243c897564d80b80e7f4759a0b8883ca7d969bebb1ba787d80e309e30dea55df259caad6a13ee3f83b0ac71d9b6d510aa722885c694bbe4475739616e7df5b3bbad9823c67bb8e805d253fcab18ee27aa5a83bca4c9c40aedd5145fcc2689178329e6a5e49ce9e8db871ad4cd376be05bd643417535870772fe5da4307a65ccfed28e5b6f28705fa2389349a893c5a657dcb03baf7ea8bf29566e95a1"}}, 0xa4) pipe2$9p(&(0x7f0000004a40), 0x89000) read(r1, &(0x7f0000004a80)=""/9, 0x9) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004b00), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000004d80)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004d40)={&(0x7f0000004b40)={0x1c8, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2e7a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xda, 0x3, "ff0b1294fc4a607fb02dca554e9a9c58fa582bd0bb1c7a9da1ed90f57eaaed43139a95936d21bbbc8a396ac16ede6ec2029e54f784ce28132d0c4dc218c03187d2f1e6e86f956e0dd2783a25f031262b0321fd969b544e85b1bf7dacd930dfba7571bb2d3155ea4c54e98e6de8b73b17fd0cca5dabe327c607993f4ce037b7dc1cf3916a5b0bddb1b6d95f8e1cca313d766007324290584b39380f0f184632c1c30a289ca488c5a6f091a77d2c01f2a45298241307fb873eccde4fdffd0d0f39049cbb7f4c1659aa76f81a7561df2fca4df28280e989"}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8278}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x28cf173}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "74e02674e63edf58d18686dea15f5f5f3c5bc61f4ad3634762e4"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x810}, 0x80) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000005080)={&(0x7f0000004e00)={0x10, 0x0, 0x0, 0x2800100}, 0xc, &(0x7f0000005040)={&(0x7f0000004e80)={0x1ac, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x125}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}]}, 0x1ac}}, 0x0) 3.052203856s ago: executing program 1 (id=367): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3) r1 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r1, 0x0) io_setup(0x6, &(0x7f0000001380)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) ftruncate(0xffffffffffffffff, 0xffff) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3) (async) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r1, 0x0) (async) io_setup(0x6, &(0x7f0000001380)) (async) 2.905909605s ago: executing program 2 (id=368): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000840)={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x30, 0x67, 0x0, 0x2, 0x67, 0x0, @private=0xa010102, @broadcast}, "21976495f10100c100ed6eb7a3d8260e94554829f729711abb8a77bc"}}}}, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)=' ', 0x1}]) 2.545291562s ago: executing program 5 (id=369): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x401}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xffffa888, 0x0, 0x4000}, 0x48) 2.415007667s ago: executing program 1 (id=370): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000380)={0x8, {"be0cb91ea527c5f2653a833d939d95ab77112d655b5c99b07380338bd859aa5a6e5ef9c837b56b45d199978fc3ac21f52444a0111deb65273d81e2ed8f140f7c82eb0353112ee05509bc90c28d224504945f3dc40e39f58cbd83ffd481adea83979e71917fc1c5d90c9c1dacd7a56853b9358b1998e711bd4a65ff18858b254f66fe640c3030a88f8728a9abc1b3d5aea4e2883a52c52beba7097ac0d7b2b2b31a4abdcc1a960a87d33190a894eb32cf60ef79f9b174a282fd4fa1d25375d9212cdeaeeb9a0c154267b1e89310f8087abf82cd9e4d22d2f208aa354abe79d6c53b1630dacbb0603773281f51e41ddd04baeacf295009004a53c118d5a67f72c8417c1bf0498f85ca91ecf0beb3a2e6e25a477572d042e42b66d42f0941d56d45f70ed6e03939d1a6f484788134963d85107602abd1f3c1ca244aed50eba8cb86e2bae085d6647d055387dc97845ca07be25641b9c3b7ae376182808e7e1714e7dc49ebaa1a785e84176962e0efb1eec949a9138931b6ca3e58582f2943a3598242338aecb0ef260ee333c29298be47880d3d3d8dad0c7456e0ad1e27b227ec39426edf0ca60b773f46c650173e1be01ee96729c95c739398c9db7d82fbc77f8c48212ba3b88a2a8480d1cdc6526932adaa741176413b0537dfa0f0b46c334a727685bcbbfb788f6bdd39494c9da919b402e6456a9922d0672943b1530967cf6f81a960f3f49380d3fa871f58d14cb7bbe38043203e811f3cf095968ba64d2b7c1339a0fc0ce04743e8d5c5fc1b5e8117be0390ac5cd71a458017012cc6d146bff9be60f429a2f99acdb863adc6ebc9d897ecd994a8add131d2a4f5a46201715e879b75e6e188aa1471e5c0142c13c38cf909af4706b329d1044bf53a3a990c5c2742714b3f9cfb9cd7f0e7f3d665997dc7e245a8d71517648fc52152a7a73bc97310904ebc8e627e137170ab4af82b81998033ee469c9735c3459ad2c4299e77bc5bf9a98b214ca035e7885528631b38c2d33ac48ac94775ea80ea535177b898ac0e8041a6e9cb8d5f894bb16741e2ef55ffbf0f812764377458fa21fe505d33ffbfb36001a3aaa499b9eb453e3b362f5efaa3116896157d239b5a72cdaa6ee499926bdd2c54c487eed829a684afc7eaffe1d7ed1eded24fee1d208376f223bd2defde5c5cbd0f8d6d9f69e649a3d500a9c8e7b0fe29ed4c5be58d092c38b40b55b3dc22242e78631ec363a84749e4cba6fc0e4529c5b411e8a0ee01ea9958bb9acfeae881d85a1d567ccc29d1771f1dd22aee433e01671fe7c540d39ba1eb7b37a7681c0c551a6aeb6c5da5ae47231d20b5ca53056ac5c30093ffeec35ee007cb852a4d66a420af9f25268984b2f2e721d0e52a5f565fa5f86410cbf881e65d6c4cbfeab3b1d82aa8ad13821199ffc6d5e99c2e4e1b40ac3a7eb1fed8547b245d340c651af967aafdc56f393cdf6e469b29890fd3943c7480163ce60dbdc87f50899d5b9c921a964ff062addcff581858ab08ad19328ba327df8c95dacf213e70bc9dd366ad4ab089376abe2c8fa625a3735a777f2d2438d11ff3724d181256aa09bcdc437efde7d47b3d5f56e3f4978b98d31ba3436b69f8b54f0af672c6f80546f81a2670089ce6ad9d0a5f6bb117be2b7b47c09b1eda3558a993fa173618db321f17e6379b34d84a7206be657a8367103c11cadd87ed0ee011c0a720a6aab9959babdcb07e37a9c0a82c0186ebd9117acc30018f7525fa94606023900e1a2a931b24c65bf23795e057e63191feae3fb2f49700ca1567f0c9ffba2a4d6273d6663758bdb199531eaa2afbf604d614a491235201b22e2af097973362da562ba294d215302035715b086c644a28f68a528b4e2825e30705163943b32494980427d9edaf96e5bfeb2d7390f4d6bcbf773e2fcc1efacae5bf088358690e89c2a5e557d35b1a29d1bef2bc6532ae844871504d1b257259fc20832fee0a09c4c88e29f776007067cb5a41215cd4b9bd5dc6d9dd3417f9f8c0f6ba073113fc8329de079c87d804d0298b7a9f3ef236cf18e0e1c3e31d41d384f61965549e3f7270cf374433603f4240a5b17289580a8cec4ca7c7dbc57091c167d898c292c55a4286a8fb634d095cadcca1c7bd31d842ade14518d659252e7ad9fcd6b3f3871d0d3655a8ce00ec1b3401d44e6fae024d6a8328a1ba3dc383749ae71d98ed5ad60ba299cedf89f62262cd5016201be555c278fb87bf326c90c62dd56cd464e6308563d7117601d9fe0eb0b22abc554c245b6eedc3083ccad791f969de71694951e01dac4a95e7176175e28477bd94487dd05ece6f66a7ef579e51d52fa372f0760399fbeea9b8b78df04b11e5dcca0a61dd203932a49032fb0bf239ceb736a3dbfccd8376b09bc543a8492d25c55da2a2a9cd52611406052908faab6d118b0b4926c2ea9e9f279c3eba597257c5aa82340afc680a5fd6a4abab395a017c7fcbd184f292a0e20235792da81575a221fe767200b2244224e92737e3244b5ab8490e5b8914642fbd91c06252246edd715802a0744791b998de740943e1e50e17cea8f82319c44d97ed41ba1e5b904a9a7446af1c1d65ffe0196c475d61b07743acf46fec0b16ab868d5fc75c0e2d5305f6e4dec515cba977cbef65ff7ab1e4e6a2af9732d5241cc5ed632bafa494d9686d206684aecf9c979a468c65791caa1f6f9fa973f3a18497c825c8fa5a4193ed9ae60155244917cf9cbf9207855598015fa36604fa26e13b76f1e73866c9c28df263523afd5095ab65aa02b0cd868ed4e765488f2426bd2f30d7e8fbb7109fc01053ba771006c31280995f3d886061ce6f4ac233f3de0bd03e6f05ed5ab7d5353d28975ecfc7b8dbfaf570e8af46889ea427557a9d39fc46f412b3b182623d918861ef3c4df782709016b77cb8790d1de4c8d1d7b97af2f9db1e19bbb56b3d19a3bbf5a0ebf589bd28aea992b61d220ff5b6cc581781b2083cc638e9241fe24f865ad6b504e270d1b40739c432c120db22031b346ee3cc959200f1394dea60e6340c33c0d38f62df4862fd12cd3d82333e79c2ff538d5892b9fc14dc7c9a3890743117a5fbb2d3f1288f529e662ea57a1e204ad8679b4af1cdab6f453142aae525ba1253c70263ac1207eb5116d7330cdfd380fe849238ac0ddb8c87278a1ad752b8c316fe8aceac86cf29bd2a5a828f3613ecb566babe7b9f71e47122652a6c304c6bfb66976f3ecb4a623ebb12ed791139f51bd480627d1fa33f9e0d75a42b404ef5a7dbb1400270fd0d5e1e94ed48daaf24dadbed1e1faf4b6f29d37d248f51eec439e2185196a5875774bc31ea08ea28ad8740cdf7bf375656be08583e218668b77e7c5aa59b3073aa5c347fd82c5ee1e3ea1a339f0291175a5d33103378ddc37762c6277caa0a9c43d31f5c012f8f2c304c8520274f21038059a217d7f779ee96df65536e71ff0059758df3dde485e41d23bba6386050efeb60cbb9349b5ffce55fa4101216e133aaeaf715284c95bdece778e3c850103eb78fe5f040a02c46582ecd2129d2f39a4106a4d2a98a76fb2bb6b7832297d24ec984ffbe471d76386910fe7d8a5a3a32786ac6bb66890f9650662248d3e530b382c8087ea0e0dc6374f26b692bc82721530c249b498c9088dd19ce98e171da58f9c46ebe54fe9c942635e09eff9fb80f88f889354c93da1322b718eee88f06aa74b22b9266283182877c4ff9a9f2b5a73f060591f6e349dbe255b879a19aaee3252cbe7110608d4e1e30e29ca43019489313d6402d1740ae9a30ddb82157c82357f83e5c76a5ea84cd1c410ede50feca963676c527cdad4647ae60175cab3837e97e957043643f5b9922052c78ec6889b41e22eb94569f7a31534370a6a416d26df8d457fc5d59c87dc077dac211b20e5085cc68237f1aee45abbb26b4e3cf0776bda0dc621ebb8ea026698b744a2624ed2fb3a538653dc010d1ab496f5705aa77a9ac70a18b4421ea186985f4e6ed1b0498a03b8b7fb35c62f985a41639a3b4a97b973f739b44549fdca49c4567400316231ef14d8b12884a8cef9f1a9f109d80ab5db3a17de0460f894f872cb4d968e830c4190b7761269d5bfdb176c895f4454c7baabc37323e83bd07f87b1197bb4143c1acbaeb0fb228f91e01bc537b88716791fad07f0605e87d492e4fc6df20981329296560ce980c0ee938cd15a655899e8fb5e6ad3565c4c30806b38c1fe2931dfe6d9ca1452245b355a52f0904c3e6e72e5564721a16ddf87bbf1ab04059a58c55d6868c8a8a1403e19e29e3143267f39da45f9d6eb0ceabff2a98b3e3297d04b17ec1e702d9b25ccda1ebc43a1185b8e9e7409862231fb4e2be5f508bb0956ebfd5bc3648310962fb31d50424a5abea89e0dcb7c60c8b2f1aaf770ad3e4ba4d4e40c9e997700a575fc63317b6098715e2650ec3c37b99490a79fa54d189084667c33db11331ac32d1226c5c685c30f1af64fae8dbd61909c529799deae9016ae8c4374cbf0f575156e869556a907faf0115aa568036e709981da175620481fa9cdd8eab9329bd006c32be557153d3c4a5905196e255145b07922a83bde55b8f2f85992f8917ba7d3ca9a0626f440f518f0ece2aef64532750fad5485297d6bd275c6da520b547bab19d17e3d49752e3e9cb7c711157a65611bfee28aeaa69ddb9c5710ce4b55e2fc35bd5d0eacda81274f4e200429bfbb789458e534eee30a8a47e3ee0129476632489627622f9a86ac5bc3316fec6f1803cbe428813742a7752ad5ff6a60bb74755ce9246114aa15a2ab05f8578379774e2d411593ca3393aba1bcb4b84d34d459279d100ff4832b5b6084f81d3fd4915b7c50859786cf5d02c3ae4ad453dcf9faedc621c51936598a95b607ca05febfbee9c50aa5980b49ea04fa0bcdfcac3d7a8b2bcb112e2afdeae3e5a6ff1a3b20c8798e798bd5a8497ddb108b3bd80b1120c7d5bc0770232d639ebbccb6d0cd5c275b8bb371db088d1fe4afadedc185d71290c4e50d1c4fe67b8f8dc74aa083291e80064f6036dab7b0d4f2b4a091e65908fdfd5957d3748f8929f73a772a979663576e7f4b37eeaa68010962823884f515db94f921634d65ffd09f058f6f08cf2223f3aa3d0c786fd404c48bda012c9d21f66a256ba7a68c81cb14acda775b6b671ee8176708e4e52d8eb98615f2a946516ce994c6bc25c2322fbb32e6ea3882f03f2c95db094b7f18b733e98b2dc5f45468dca2dfe23567eb109f2aab9d06de94e25e636010be1b3d97345f7ecabb64bc222b406b3e1959704af1263387814cd51a2078e3b1b2817a2ebf06ea09dd5832ff4f54ff4ee4b33fcd89ae38ad78a773b861b45a9796c1b9b70387cdac55e2baadf0e25c89d6089e6a8a07a14c421f68fca81b05452be9b4547a36f9d67099ec4a656d54ad631500c5fe60ea01e796c23ba62927bd8c6787e2bcffcbe2d26b610d5d85638c3d07ab54f3b868c77b09f4c3201a12aedf2fdbb6bae110d3eaa3d8f3a230e3b22ab70c8bcbd59144769db920e8e50012457218e8dbe2f8205a4791246be6c4418a1c247bbecdbfd5ae21daaa522e73b9b6a01a160dbc6c2e506adb86669ec5759fe7dadbe8a3c5fa45d9c048915dda1299ba92b100098b67117c3b8e16bf880a3660b6338f8bd2f841f991fd47bf0aaec1c4fb2cffa973785bda64723a206d76dd0df1ff26dc36ceab28d49384d6ebceabf786ee185df21597638539ea36cd90e111676fbedd8dbc6c14cc8fa8968a57c3b01d987647f45d79cc9", 0x1000}}, 0x1006) chdir(0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000540), 0x8, 0x0) syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000005140)='./file0\x00', 0x1000884, &(0x7f00000002c0)={[{@clear_cache}, {@nodatacow}, {@acl}, {@noautodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x2}}, {@autodefrag}, {@discard_sync}, {@usebackuproot}, {@ssd_spread}, {@ref_verify}]}, 0x1, 0x5100, &(0x7f000000f3c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xcV30A8LPP2ZfXm0BFSBEsUMe44PXaDg+1qVinqYpCKeuSElWIYmOvw+INNrZTcATIsYNSFCVNSyT40CiOEKrzIalFggJNoriRMIqaB0rViCRKRFoniCg0DaCkEAlXs/ee2Tvn7jxs7zre9PeTvHNm/ud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/4cjX/3C3zaLP/Dbi554+tKJz+7fcOkLX77o7EdCmJx9vCMLdwxcc9PEL2678Pb9d6+7+c5jF7+7Ny+Xx8Ng9U9nfufqWOuxZSHc1RFCdxpYPZQFevL7Q7G+twyFcFaYC9RKTA1kJdKGww/6QzgY5gK1qr7fH8JQIXDJo/ffd101cWN/CCtCCJW0jacqWRv9aeC83iwwkAZ2dGeBV45naoHvdWYBOGXxzVB70R+erM8wMn+5Bq+/ngXr2GsrHV5XTIw0zvfzDYvcqYLe9IHJU3raStWxKEpvjyPebUvg3Vbazjd42opfpPJvKMfnQpXQuXVq2+YrZvbERzrD2FhXo5oW6Xl+/KUvbTmR9JJ5HcYOjCzI6/D6h1fc1rXqIw/duXrFc4fec+D5U+3mjwubtJhebJWQv+aWzPMYTfg8WQJvv9K3pFFfukII2z7zex9tFi/N/0eaz//jyznedtbljrW+OpzNzeMjQzHx4nA2NwcAAIAlYynsNd0xdu8HmtVXmv+Ptnf8Px7yzyfz2WiPhDAxmziwPIRzZh/PArfG5j69PIS3z6Ym6wMbksCREN48m1hVqyop0RdLjCaBnw7ngYkkcDQGJpPAt2PghiRwdQwcTgJbYuBIErgwBsJ0/Th+fzgfR9uB/hjYlG3Ew/EshF8Ox9aSbfVkrSoAAIAFks8Oe+rvFs51ONUMcXp5uL9VhngGdsMMlaSGdAZbm1Y1rKG7VQ2drWqojXtf8+GXau5oVXPpNIyO+gw3/epvPhaaKM3/x5vP/yvzdKSjdPw/hI2zf2PuzjwyU4tvmqzLAAAAAJyCwf995lvN4qX5/0R75//HfSJdhczhwbgbYvvyEMbrA1m1f1gOZEe9B/MAAAAALAW14/G1Y+HT+W12inY6ny7nnzzB/PHA/8S8+XuP3LOpWX9L8//J9s7/H6i/zTpxNPbi68tD6CsEfhh7WQ3MGo2Bn3ywPpCP/2jcANfGqvITE2pVXRtLbIqB8SRwsFGJH9VKnFMfyJ+sWuMHauOYzksUAgAAAHDaxd0B8bh8PP//Hb9Z94Vm5Urz/00ndv7/7Dy4dHr/zGAIa7pD6Ep/GPDgQLYwYAwMdeSJeweyurrSqq4aCOGC6sDSqp7J1//vTtcYfLQ/qyoGznnHoZfOqya+1R/CmmLgsU/c8t5qYk8SqDX+l/0hvK062rTx7/ZljfekjX+jL4S3FgK1qj7dF0K1sd60qvsr+XUM0qr+uRLCGwqBWlXvq4SwNwCwRMX/SrcWH9y998rtm2dmpnYtYiLuw+8P26Znpsa27JjZWmnQp61Jn+uWMbqqPKZ2r3zzZL5E0cfv2DjUTrr2O8HxYlv5fvzSiYP5/fhdqGd2nOt66u6uT4f8rneWmwiFb1KNhty5yEMeKFYy9ySW6o/5e8Ng6Lti99SusS9u3rNn19rsb7vZ12V/42GmbFutTbfVwHx9a+Pl0XC1rMTJbquVxUrW7Ll855rde69cPX355sumLpv63Nr3rRs/f3z9+PvPX1Md1Xj2t8VQV85XdTLU47e0Oa4FHOq53YVKTsenhoSExFJL7Bhc2fT/5NL8f2fz+X/81Imf/Pn6DI2O/4/Ew/zZ43OH+TfFwMF2j/+PNDqaXzsxYDQJ7IuBfQ7zAwAA8PoQJ/lxb2bcK/2zVd99rlm50vx/X3u//1+g9f9rS9df3GiZ/1WxxHij9f/TZf5r6//va7T+f7rMf239/4Ovwfr/V9QCySb5pfX/AQCA14MFXP+/+lCT9f9bLu+fXiCglKHl8v7pBQJKGVou49/uBQJOeP3/p/7zr/47NFGa/9/Q3vzfwv0AAABw5vjKn33hd5rFS/P/g+3N/0//+n+h0fn/o40Ck40WBrT+HwAAAEtUo/X/Rq4Z+FSzcqX5/+H25v+vHM901uWOtb46nK1pF9I17V4crv1kAAAAAJaGzjA21tNm3rqVUTecfJuP50uBNksXPfMnx07s/P8j7c3/636Xcf3DK27rWvWRh169c/WK5w6958Dzc8f/AQAAgMXT7n4JAAAAAAAAAAAAAADgtffMf+xf3yxe+v1/2Dj7eKPf/8fr/sXfF7yxLnestfX6f/n9Sz58+97ZJQsfHA7hncXA9v3bzwr5tflXFgP3fXLVm6qJ/WmJe56+8Nlq4lNp4EOrz365mrggCWyKiyS+OQ3Eqyq+vCwJxOUV/z0NxO1xOA305oGvLcvG0ZFuq58NZduqI91WTwyFsLwQqG2ru4ayNjrSAd6YBGoD/HwaiAP88zzQmfbq9sGsVzEwFIvePJj1CgCAM1b8FtgTtk3PTI3Hr/Dx9tzu+tuobsmyq8rVdrTZ/JP50mQfv2PjUDvprvS76Ny1xntCpTqEtaWvq8UsHbOjXJhaWmy6NzYYcqvV3joblEud6KbrbTyi/mxEY1t2zGztaTnw9a2zrOtumWVtabJTzNI5u0nbqKWNvrQxoja3TRtdjvc7w9hYV5LrD2JwJNRp9Ypo9/f6xXX+Gr0Kink+d+zAK83qK83/R9qb/1eK43o5vxjAvnhlvb9bbpl/AAAAWFxf2/Drb8Z/H7vmgcea5S3N/0fbm//HPVj5oeBsb8eReP3/A8tDmL20/kgWuDU29+nlIbx9NjUZS2QX1L84lhjPArfGHSarYolNk/VV9cXA4STw0+E8cCQJHI2BfC/FoZDvyvn74RDeO5vaWF9iZywxkgQ+GgOjSWAsBsaTwLIYmEgCLyzLA5NJ4N9iIEzXb6s7luXbCgAA4ETk86ye+rshnecd7m6VoaNVhoFWGTpbZai0ytBoFPH+d2KGnuTklY5Cpp601v6kllKGeDH8E+5XKUP4UX3OtGCp6Xj+Qe18g476DHd/oLsSmijN/8fbm/8P1N9mrR+N8/+56/9lgR/G7n09njo+GgM/+WB9IN8xcDROdq+tVTWZl8gn7dfGEhMxMJoEdsbARBLYtDEPHHxTfSCfadcaP1BrfDovUQgAAADAaRd3EMTdNHH+f/Purw42K1ea/0+0N/+P7Q0WG7s61npsWQh3dcz1phZYPZQF4n6Mofjz+LcMhXBWYQdHrcTUQFaiN2k4/KA/+4V6b1rV9/uzHx/E+5c8ev9911UTN/aHsKKw96XWxlOVrI3+NHBebxYYSAM7urNA3PNTC3yvMwvAKavtFYwvqPxUl5qR+cs1eP29Xq4Jmg6vtA90nnzz/eZqsZR2uOb7VGtO7Glruv+WBVN6exzxbluK77YR77biF6n8G8rxuVAldG6d2rb5ipk98ZHiL1lLFul5Lv5KtZ30ArwO9518b1urpB0YTz4+xucvN//rsCNWd/3DK27rWvWRh+5cvaL6lD7fdjcaiD8Uvv/L/zr048LmXWyVkL/mltznyaTPk6X438Copy2EsPGFb1zbLF6a/0+2N//vTm5n/TpuzN3LQ3hXYeM+GDf/Hy/PPgcLgexT8g3lQHbI/b+GG35yAgAAwEKr7e6o7S+Yzm+zE8LTeXI5/+QJ5o/7Kybmzd9uvwf++pMrmsVL8/9Nzef/fUk3Hf93/J+F0ld/1/H/eZ3pu6L70gf2ndKu6FJ1LArH/+d1pr/bHP+fl+P/r7vj/88des8Bx/8Xm+P/8zrTn7bSt6SdvnSFEJ77o3ufaBYvzf93tjf/t/7f/Iv21db/29Ro/b+djdb/22f9PwAAYFE1WGguneeVVu8rZUhX7ytlaLlAYMslBq3/d8Lr/z177lO/CU2U5v/72pv/x5fDYLH1pbL+3+jGBlXdEAM7LQwIAADAmajRDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeW3f/w/9sbRZ/4LcXPfH0pROf3b/h0he+fNHZj4QwPft4RxbuGLjmpolf3Hbh7fvvXnfznccufnclL9eT3/5uXe5Y66vDIRwsPDIUEy8OV+/MBS758O17u6uJB4dDeGcxsH3/9rNCOF759nAIK4uB+z656k3VxP60xD1PX/hsNfGpNPCh1We/XE1ckAc60u7+47Ksux1pd69bFsLyQqDW3c8uq6+q1saf5oHOtI1/GsraiIGhWPSbQ1kbMTATS0z3hbCmO4SutKoHKllVXWlV/1LJqupKq/pKJYQLQgjdaVVP92ZVdacjf6Q3qyoGznnHoZfOqyYO9oawphh47BO3vLea+HwSqDX+F70hvK36kkkb/05P1nhP2viNPSG8NYTQm5b4VXdWojct8Ux3CG8oBGqNf6Y7hL2B14X44VP3ibZ775XbN8/MTO1axERv3lZ/2DY9MzW2ZcfM1krSp0Y6CunjV5382J986Utbqrcfv2PjUDvp7rxcz2yX1/XU3V1/pvc+9mugWMnc81Gqv1Lr7mDou2L31K6xL27es2fX2uxvo+yhtz77uuxvVx7NttXapbKtVhYrWbPn8p1rdu+9cvX05Zsvm7ps6nNr37du/Pzx9ePvP39NdVTj2d+FGOotp3+o53YXKjkdHwASEhJLLdFZ9+k2fqZ/kJe+6M91tCdUZj+gS9OKYpaO2VEuxKA3nOSIT+Z7SssRrS1NHEpZ1rXOsr40mZjL0p9lmf1eV5ocFmvqnN2k8X5nGBvrarQdRurvFjfvz09h8z6eb7p20wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAA//+4TB3h") prlimit64(0xffffffffffffffff, 0x1f7be7b42801a60e, &(0x7f0000000000)={0x4, 0x8}, &(0x7f0000000080)) 2.367227174s ago: executing program 3 (id=371): ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0xd, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x2a020400) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getflags(r0, 0x401) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) ioperm(0x0, 0x4, 0x2) rseq(0x0, 0x0, 0x1, 0x0) syz_mount_image$bcachefs(&(0x7f00000003c0), &(0x7f0000000000)='./file1\x00', 0x808040, &(0x7f0000000040)=ANY=[@ANYBLOB='data_checksum=xxhash,str_hash=crc64,noread_only,metadata_checksum=xxhash,noexcl,errors=continue,reconstruct_alloc,journal_transaction_names,acl,no_data_io,verbose,discard,compression=lz4,very_degraded,defcontext=unconfined_u,\x00'/235], 0x1, 0x5903, &(0x7f0000000f00)="$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") 2.320887354s ago: executing program 6 (id=372): pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000500)={0x1, 0x0, [{0xec6a, 0x3, 0x7, [0x4, 0x0, 0x2d, 0x6, 0x6, 0x1, 0x1, 0x4]}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0xffa1, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c010000130005000000000000000000ff810000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a000100aaaaaaaaaa30000008001b000101000004001400140003006272696467655f736c6176655f300000b800198008000100080000008a0002"], 0x11c}}, 0x0) 2.06292084s ago: executing program 2 (id=373): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x20, 0x5, 0x4e22, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x32}, @in6=@remote, {0x0, 0x0, 0x8, 0x0, 0x438}, {0x0, 0x80000000000000}, {0x8}, 0x70bd2b, 0x0, 0xa, 0x0, 0x0, 0x3}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) io_uring_setup(0x7fc5, &(0x7f0000001240)={0x0, 0xfffffffd, 0x0, 0x2, 0x4}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_init_net_socket$llc(0x1a, 0x803, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) close_range(r2, r1, 0x0) 1.288102777s ago: executing program 5 (id=374): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x9c, 0x11, [{@in6=@loopback, @in=@broadcast, @in6=@local, @in=@private=0xa010100, 0x62, 0x0, 0x0, 0xa801, 0x0, 0xa}, {@in6=@loopback, @in=@broadcast, @in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6c}]}]}, 0xec}}, 0x0) 1.224078348s ago: executing program 6 (id=375): prlimit64(0x0, 0x1, &(0x7f0000000180)={0x208, 0x1000601}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r1, 0x1) 171.459871ms ago: executing program 2 (id=376): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) 0s ago: executing program 5 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902240001df00000009040000022a3e740009058bff7f0000100109050b362f7d72729416a62278eb12a879223dbed0a47f102fdeed4baf78201359f88574abd8b35e9e4bcfe2898af7657542d784e8d7a8e238119864041e745481e540becbb756bd3e949731", @ANYBLOB="366c5c1c317e19dd1c73d87ce39cc2c7667691eb966a5a149439316d4f73c4ae26430dd8b0ff2744a90d685b25320533161200cfd642c8ae83d5"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xd}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r6, 0x0, 0x4ffe6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000600b500c80200010c004300400000004e"], 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x4) kernel console output (not intermixed with test programs): 09][ T6297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.350404][ T6297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.448263][ T9] usb 3-1: USB disconnect, device number 3 [ 281.603955][ T6297] team0: Port device team_slave_0 added [ 281.658977][ T6297] team0: Port device team_slave_1 added [ 281.856472][ T6337] loop3: detected capacity change from 0 to 4096 [ 281.874626][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.883430][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.909845][ T6297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.086798][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.094893][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.122692][ T6297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.743510][ T6297] hsr_slave_0: entered promiscuous mode [ 282.753648][ T6297] hsr_slave_1: entered promiscuous mode [ 282.902991][ T6345] netlink: 'syz.2.91': attribute type 1 has an invalid length. [ 282.992766][ T5787] Bluetooth: hci3: command tx timeout [ 283.188146][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.91'. [ 284.144999][ T6297] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.205469][ T6297] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.263110][ T6297] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 284.303636][ T6297] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 284.901596][ T6359] netlink: 212 bytes leftover after parsing attributes in process `syz.1.93'. [ 285.071973][ T5787] Bluetooth: hci3: command tx timeout [ 285.413771][ T6297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.607193][ T6297] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.778227][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.785997][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.824510][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.855917][ T1833] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.863637][ T1833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.898710][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.935178][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.976581][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.023225][ T5803] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.058846][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.169749][ T6297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.180726][ T6297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.863043][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 287.077533][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 287.122425][ T9] usb 3-1: no configurations [ 287.127414][ T9] usb 3-1: can't read configurations, error -22 [ 287.292276][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 287.331540][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 287.446252][ T6297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.504415][ T6393] loop1: detected capacity change from 0 to 256 [ 287.537542][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 287.567597][ T9] usb 3-1: no configurations [ 287.572247][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 287.572956][ T9] usb 3-1: can't read configurations, error -22 [ 287.596943][ T9] usb usb3-port1: attempt power cycle [ 287.614730][ T46] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 287.623423][ T46] usb 4-1: config 0 has no interface number 0 [ 287.629784][ T46] usb 4-1: config 0 interface 12 has no altsetting 0 [ 287.715367][ T46] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 287.726047][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.735109][ T46] usb 4-1: Product: syz [ 287.739504][ T46] usb 4-1: Manufacturer: syz [ 287.744670][ T46] usb 4-1: SerialNumber: syz [ 287.778699][ T5868] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 287.843892][ T46] usb 4-1: config 0 descriptor?? [ 287.984635][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 288.031328][ T5868] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 288.042465][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 288.052513][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 288.064332][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 288.073562][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.075712][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 288.086405][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.156847][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 288.186659][ T9] usb 3-1: no configurations [ 288.191610][ T9] usb 3-1: can't read configurations, error -22 [ 288.222370][ T5787] Bluetooth: hci4: command tx timeout [ 288.269272][ T5868] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 288.280103][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.289838][ T5868] usb 2-1: Product: syz [ 288.295368][ T5868] usb 2-1: Manufacturer: syz [ 288.300194][ T5868] usb 2-1: SerialNumber: syz [ 288.308103][ T6371] chnl_net:caif_netlink_parms(): no params data found [ 288.329726][ T5868] usb 2-1: config 0 descriptor?? [ 288.362108][ T5868] usb 2-1: ucan: probing device on interface #0 [ 288.368632][ T5868] usb 2-1: ucan: invalid endpoint configuration [ 288.375491][ T5868] usb 2-1: ucan: probe failed; try to update the device firmware [ 288.394552][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 288.434790][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 288.452137][ T9] usb 3-1: no configurations [ 288.456989][ T9] usb 3-1: can't read configurations, error -22 [ 288.504240][ T9] usb usb3-port1: unable to enumerate USB device [ 288.640112][ T5868] usb 2-1: USB disconnect, device number 2 [ 289.194587][ T46] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 289.202695][ T46] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 289.210271][ T46] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 289.218569][ T46] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 289.353613][ T46] usb 4-1: USB disconnect, device number 4 [ 290.194483][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.203589][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.212040][ T6371] bridge_slave_0: entered allmulticast mode [ 290.221003][ T6371] bridge_slave_0: entered promiscuous mode [ 290.246498][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 290.246571][ T30] audit: type=1326 audit(1742547033.995:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.2.102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f0b3a384127 code=0x0 [ 290.314507][ T5787] Bluetooth: hci4: command tx timeout [ 290.372393][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.380326][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.388547][ T6371] bridge_slave_1: entered allmulticast mode [ 290.397976][ T6371] bridge_slave_1: entered promiscuous mode [ 290.672843][ T6297] veth0_vlan: entered promiscuous mode [ 290.722277][ T6371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.776234][ T6297] veth1_vlan: entered promiscuous mode [ 290.807582][ T6371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.192353][ T6371] team0: Port device team_slave_0 added [ 291.307041][ T6371] team0: Port device team_slave_1 added [ 291.703755][ T6426] loop1: detected capacity change from 0 to 1024 [ 291.844396][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.851844][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.878317][ T6371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.148985][ T6297] veth0_macvtap: entered promiscuous mode [ 292.254011][ T6426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.266829][ T6426] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.319255][ T6297] veth1_macvtap: entered promiscuous mode [ 292.362160][ T5787] Bluetooth: hci4: command tx timeout [ 292.367575][ T6429] loop2: detected capacity change from 0 to 32768 [ 292.422927][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.430138][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.456477][ T6371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.581082][ T6429] XFS (loop2): Metadata CRC error detected at xfs_sb_read_verify+0x52b/0x630, xfs_sb block 0x0 [ 292.592567][ T6429] XFS (loop2): Unmount and run xfs_repair [ 292.598532][ T6429] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 292.611101][ T6429] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 292.621903][ T6429] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 292.631008][ T6429] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab ..*.w.B.....G.K. [ 292.640253][ T6429] 00000030: 00 00 00 00 00 00 00 3f 00 00 00 00 00 00 04 20 .......?....... [ 292.649443][ T6429] 00000040: 00 00 00 00 00 00 04 21 00 00 00 00 00 00 04 22 .......!......." [ 292.658618][ T6429] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 292.667937][ T6429] 00000060: 00 00 02 04 b4 b5 02 00 08 00 00 02 00 00 00 00 ................ [ 292.677120][ T6429] 00000070: 00 00 00 00 00 00 00 00 0c 09 0b 01 0c 00 00 64 ...............d [ 292.686414][ T6429] XFS (loop2): SB validate failed with error -74. [ 293.537402][ T6444] loop3: detected capacity change from 0 to 256 [ 293.831485][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.880909][ T6371] hsr_slave_0: entered promiscuous mode [ 293.892493][ T6371] hsr_slave_1: entered promiscuous mode [ 293.901042][ T6371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.909011][ T6371] Cannot create hsr debugfs directory [ 294.087277][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 294.110498][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.131466][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.154878][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.167346][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.177458][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.188190][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.198330][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.209180][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.224385][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.259021][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.269872][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.280179][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.290975][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.301125][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.311884][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.322000][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.332779][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.354112][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.443980][ T5787] Bluetooth: hci4: command tx timeout [ 294.475406][ T26] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 294.486181][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 294.496336][ T26] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 294.508243][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 294.519554][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 294.646732][ T6297] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.661049][ T6297] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.671779][ T6297] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.680791][ T6297] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.892296][ T26] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 294.901987][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.910246][ T26] usb 4-1: Product: syz [ 294.914904][ T26] usb 4-1: Manufacturer: syz [ 294.919732][ T26] usb 4-1: SerialNumber: syz [ 295.014419][ T46] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 295.054363][ T26] usb 4-1: config 0 descriptor?? [ 295.104764][ T26] usb 4-1: ucan: probing device on interface #0 [ 295.111309][ T26] usb 4-1: ucan: invalid endpoint configuration [ 295.118769][ T26] usb 4-1: ucan: probe failed; try to update the device firmware [ 295.233413][ T1564] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 295.242673][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 295.273948][ T46] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 295.282495][ T46] usb 3-1: config 0 has no interface number 0 [ 295.288849][ T46] usb 3-1: config 0 interface 12 has no altsetting 0 [ 295.357938][ T26] usb 4-1: USB disconnect, device number 5 [ 295.412649][ T1564] usb 2-1: Using ep0 maxpacket: 32 [ 295.438741][ T1564] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 295.447577][ T1564] usb 2-1: config 0 has no interface number 0 [ 295.454258][ T1564] usb 2-1: config 0 interface 12 has no altsetting 0 [ 295.492883][ T46] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 295.502564][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.510812][ T46] usb 3-1: Product: syz [ 295.515375][ T46] usb 3-1: Manufacturer: syz [ 295.520272][ T46] usb 3-1: SerialNumber: syz [ 295.604163][ T1564] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 295.614100][ T1564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.622524][ T1564] usb 2-1: Product: syz [ 295.626920][ T1564] usb 2-1: Manufacturer: syz [ 295.632470][ T1564] usb 2-1: SerialNumber: syz [ 295.662709][ T46] usb 3-1: config 0 descriptor?? [ 295.783945][ T1564] usb 2-1: config 0 descriptor?? [ 295.895920][ T6449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.906200][ T6449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.007393][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.017914][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.256443][ T6371] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 296.433064][ T6371] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 296.555225][ T6371] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 296.708324][ T6371] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 296.993544][ T46] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 297.001664][ T46] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 297.013090][ T46] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 297.021109][ T46] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 297.216838][ T46] usb 3-1: USB disconnect, device number 8 [ 297.348876][ T1564] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 297.358295][ T1564] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 297.366154][ T1564] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 297.374300][ T1564] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 297.514481][ T1564] usb 2-1: USB disconnect, device number 3 [ 298.477448][ T6371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.726561][ T6371] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.907470][ T3972] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.915271][ T3972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.073718][ T3972] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.081381][ T3972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.070202][ T6480] loop1: detected capacity change from 0 to 2048 [ 300.278083][ T6480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.538518][ T6479] capability: warning: `syz.1.115' uses deprecated v2 capabilities in a way that may be insecure [ 301.375382][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.020573][ T6371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.358216][ T6501] loop2: detected capacity change from 0 to 32768 [ 302.367150][ T6501] XFS: ikeep mount option is deprecated. [ 302.373213][ T6501] XFS: noikeep mount option is deprecated. [ 302.391048][ T6507] loop1: detected capacity change from 0 to 256 [ 302.575856][ T6501] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 303.030758][ T6501] XFS (loop2): Ending clean mount [ 303.043702][ T6501] XFS (loop2): Quotacheck needed: Please wait. [ 303.144954][ T6501] XFS (loop2): Quotacheck: Done. [ 303.183414][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 303.422364][ T5868] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 303.454705][ T46] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 303.467722][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 303.481192][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 303.493101][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 303.504723][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 303.605898][ T5785] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 303.632640][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 303.669309][ T5868] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 303.679076][ T5868] usb 4-1: config 0 has no interface number 0 [ 303.685955][ T5868] usb 4-1: config 0 interface 12 has no altsetting 0 [ 303.729042][ T5868] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 303.739616][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.740554][ T46] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 303.747947][ T5868] usb 4-1: Product: syz [ 303.748046][ T5868] usb 4-1: Manufacturer: syz [ 303.757244][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.761360][ T5868] usb 4-1: SerialNumber: syz [ 303.768330][ T46] usb 2-1: Product: syz [ 303.768427][ T46] usb 2-1: Manufacturer: syz [ 303.768522][ T46] usb 2-1: SerialNumber: syz [ 303.774239][ T46] usb 2-1: config 0 descriptor?? [ 303.854676][ T46] usb 2-1: ucan: probing device on interface #0 [ 303.861305][ T46] usb 2-1: ucan: invalid endpoint configuration [ 303.873129][ T46] usb 2-1: ucan: probe failed; try to update the device firmware [ 303.914476][ T5868] usb 4-1: config 0 descriptor?? [ 304.109031][ T46] usb 2-1: USB disconnect, device number 4 [ 304.143232][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.154107][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.691130][ T5868] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 304.699893][ T5868] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 304.708584][ T5868] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 304.716699][ T5868] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 304.898639][ T5868] usb 4-1: USB disconnect, device number 6 [ 305.673041][ T5868] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 305.902498][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 305.922814][ T5868] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 305.931284][ T5868] usb 2-1: config 0 has no interface number 0 [ 305.937786][ T5868] usb 2-1: config 0 interface 12 has no altsetting 0 [ 306.034708][ T6371] veth0_vlan: entered promiscuous mode [ 306.060503][ T5868] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 306.069946][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.078340][ T5868] usb 2-1: Product: syz [ 306.082831][ T5868] usb 2-1: Manufacturer: syz [ 306.087649][ T5868] usb 2-1: SerialNumber: syz [ 306.109204][ T3739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.117591][ T3739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.194833][ T5868] usb 2-1: config 0 descriptor?? [ 306.361821][ T6371] veth1_vlan: entered promiscuous mode [ 306.403272][ T3739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.411523][ T3739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.423520][ T6537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.435986][ T6537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.465175][ T46] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 306.709343][ T46] usb 3-1: config index 0 descriptor too short (expected 227, got 18) [ 306.767241][ T46] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 306.777353][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.785968][ T46] usb 3-1: Product: syz [ 306.790349][ T46] usb 3-1: Manufacturer: syz [ 306.795350][ T46] usb 3-1: SerialNumber: syz [ 306.829059][ T6371] veth0_macvtap: entered promiscuous mode [ 306.864159][ T6548] loop3: detected capacity change from 0 to 512 [ 306.903284][ T6371] veth1_macvtap: entered promiscuous mode [ 306.973794][ T46] usb 3-1: config 0 descriptor?? [ 307.007147][ T46] ch341 3-1:0.0: ch341-uart converter detected [ 307.060932][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.072439][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.083702][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.094666][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.105296][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.116232][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.126558][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.137975][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.151035][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.162920][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.179863][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.562760][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.573784][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.575314][ T6555] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 307.584100][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.592969][ T6555] PKCS7: Only support pkcs7_signedData type [ 307.610143][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.620406][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.631348][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.642575][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.653487][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.666614][ T6371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.678692][ T6371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.695751][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.778120][ T5868] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 307.787295][ T5868] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 307.795598][ T5868] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 307.803686][ T5868] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 307.840766][ T6371] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.850144][ T6371] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.859789][ T6371] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.872207][ T6371] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.182609][ T5868] usb 2-1: USB disconnect, device number 5 [ 308.591510][ T6545] 9pnet_fd: Insufficient options for proto=fd [ 308.674740][ T6545] loop2: detected capacity change from 0 to 8 [ 308.745324][ T6545] squashfs: Unknown parameter ' [ 308.745324][ T6545] ' [ 308.876446][ T46] ch341-uart ttyUSB0: failed to read break control: -71 [ 308.886369][ T46] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 309.002179][ T46] usb 3-1: USB disconnect, device number 9 [ 309.010866][ T46] ch341 3-1:0.0: device disconnected [ 309.554555][ T6573] netlink: 'syz.3.130': attribute type 11 has an invalid length. [ 309.563230][ T6573] netlink: 'syz.3.130': attribute type 5 has an invalid length. [ 309.678342][ T6576] netlink: 'syz.3.130': attribute type 11 has an invalid length. [ 309.690604][ T6576] netlink: 'syz.3.130': attribute type 5 has an invalid length. [ 310.134263][ T6581] loop2: detected capacity change from 0 to 256 [ 310.436063][ T46] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 310.542337][ T5868] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 310.673659][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 310.710276][ T46] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 310.719898][ T46] usb 2-1: config 0 has no interface number 0 [ 310.726644][ T46] usb 2-1: config 0 interface 12 has no altsetting 0 [ 310.779458][ T5868] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 310.790164][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 310.800348][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 310.812182][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 310.823513][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 310.853772][ T46] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 310.863926][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.872974][ T46] usb 2-1: Product: syz [ 310.879124][ T46] usb 2-1: Manufacturer: syz [ 310.884156][ T46] usb 2-1: SerialNumber: syz [ 310.952836][ T5868] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 310.962692][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.970936][ T5868] usb 3-1: Product: syz [ 310.975587][ T5868] usb 3-1: Manufacturer: syz [ 310.980405][ T5868] usb 3-1: SerialNumber: syz [ 311.074089][ T5868] usb 3-1: config 0 descriptor?? [ 311.074919][ T46] usb 2-1: config 0 descriptor?? [ 311.097418][ T5868] usb 3-1: ucan: probing device on interface #0 [ 311.104284][ T5868] usb 3-1: ucan: invalid endpoint configuration [ 311.110765][ T5868] usb 3-1: ucan: probe failed; try to update the device firmware [ 311.319309][ T6582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.329338][ T6582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.484780][ T5868] usb 3-1: USB disconnect, device number 10 [ 311.501181][ T6586] loop5: detected capacity change from 0 to 4096 [ 311.575391][ T6586] ntfs3: Unknown parameter 'windo ' [ 312.065425][ T46] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 312.074229][ T46] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 312.082042][ T46] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 312.090047][ T46] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 312.316996][ T46] usb 2-1: USB disconnect, device number 6 [ 312.989106][ T5868] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 313.193439][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 313.201566][ T6609] netlink: 'syz.5.138': attribute type 6 has an invalid length. [ 313.235975][ T5868] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 313.245450][ T5868] usb 3-1: config 0 has no interface number 0 [ 313.252219][ T5868] usb 3-1: config 0 interface 12 has no altsetting 0 [ 313.354446][ T5868] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 313.365846][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.374749][ T5868] usb 3-1: Product: syz [ 313.379141][ T5868] usb 3-1: Manufacturer: syz [ 313.384121][ T5868] usb 3-1: SerialNumber: syz [ 313.486837][ T5868] usb 3-1: config 0 descriptor?? [ 313.720281][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.730882][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.220178][ T6617] netlink: 132 bytes leftover after parsing attributes in process `syz.1.140'. [ 314.752606][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 314.822226][ T6620] loop5: detected capacity change from 0 to 32768 [ 314.902694][ T6620] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 314.918718][ T5868] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 314.935875][ T5868] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 314.945726][ T5868] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 314.953807][ T5868] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 315.015903][ T5868] usb 3-1: USB disconnect, device number 11 [ 315.061544][ T6620] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 315.335448][ T6627] FAULT_INJECTION: forcing a failure. [ 315.335448][ T6627] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 315.352560][ T6627] CPU: 1 UID: 0 PID: 6627 Comm: syz.1.142 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 315.352687][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.352757][ T6627] Call Trace: [ 315.352807][ T6627] [ 315.352850][ T6627] dump_stack_lvl+0x216/0x2d0 [ 315.352991][ T6627] dump_stack+0x1e/0x24 [ 315.353102][ T6627] should_fail_ex+0x767/0x830 [ 315.353289][ T6627] should_fail_alloc_page+0x235/0x2b0 [ 315.353464][ T6627] __alloc_frozen_pages_noprof+0x343/0xe00 [ 315.353668][ T6627] alloc_pages_mpol+0x4cd/0x890 [ 315.353838][ T6627] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 315.354010][ T6627] vma_alloc_folio_noprof+0x454/0x820 [ 315.354198][ T6627] handle_mm_fault+0xa43c/0xdd90 [ 315.354341][ T6627] ? kmsan_get_metadata+0x13e/0x1c0 [ 315.354556][ T6627] exc_page_fault+0x41b/0x700 [ 315.354704][ T6627] asm_exc_page_fault+0x2b/0x30 [ 315.354855][ T6627] RIP: 0033:0x7ffa9ea4fbe3 [ 315.354955][ T6627] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 315.355064][ T6627] RSP: 002b:00007ffa9f9364a0 EFLAGS: 00010202 [ 315.355171][ T6627] RAX: 0000000000100000 RBX: 00007ffa9f936540 RCX: 00007ffa94400000 [ 315.355265][ T6627] RDX: 00007ffa9f9366e0 RSI: 0000000000000001 RDI: 00007ffa9f9365e0 [ 315.355349][ T6627] RBP: 000000000000008c R08: 000000000000000a R09: 0000000000000383 [ 315.355425][ T6627] R10: 00000000000003be R11: 00007ffa9f936540 R12: 0000000000000001 [ 315.355507][ T6627] R13: 00007ffa9ec293e0 R14: 0000000000000029 R15: 00007ffa9f9365e0 [ 315.355619][ T6627] [ 315.355693][ T6627] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 316.217466][ T6627] loop1: detected capacity change from 0 to 32768 [ 316.226750][ T6627] btrfs: Deprecated parameter 'usebackuproot' [ 316.233236][ T6627] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 316.269966][ T6627] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.142 (6627) [ 316.302462][ T46] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 316.322443][ T6627] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 316.333140][ T6627] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 316.342367][ T6627] BTRFS info (device loop1): using free-space-tree [ 316.472243][ T46] usb 6-1: device descriptor read/64, error -71 [ 316.551913][ T35] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 316.571126][ T6627] BTRFS warning (device loop1): couldn't read tree root [ 316.580408][ T6627] BTRFS warning (device loop1): try to load backup roots slot 1 [ 316.624329][ T63] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 316.638521][ T6627] BTRFS warning (device loop1): couldn't read tree root [ 316.645904][ T6627] BTRFS warning (device loop1): try to load backup roots slot 2 [ 316.677937][ T4022] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 316.689233][ T6627] BTRFS warning (device loop1): couldn't read tree root [ 316.696886][ T6627] BTRFS warning (device loop1): try to load backup roots slot 3 [ 316.763008][ T46] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 316.815546][ T6627] BTRFS info (device loop1): rebuilding free space tree [ 316.884807][ T6627] BTRFS info (device loop1): checking UUID tree [ 316.971992][ T46] usb 6-1: device descriptor read/64, error -71 [ 317.105987][ T46] usb usb6-port1: attempt power cycle [ 317.124078][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.646489][ T46] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 317.675036][ T5787] Bluetooth: hci1: unexpected event for opcode 0x042c [ 317.777283][ T6297] ocfs2: Unmounting device (7,5) on (node local) [ 317.825482][ T6661] loop2: detected capacity change from 0 to 256 [ 317.922138][ T46] usb 6-1: device not accepting address 4, error -71 [ 318.196565][ T5787] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 318.210440][ T5787] Bluetooth: hci3: Injecting HCI hardware error event [ 318.219985][ T5787] Bluetooth: hci3: hardware error 0x00 [ 318.222666][ T26] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 318.355411][ T6668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.365249][ T6668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.536925][ T26] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 318.547667][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 318.557722][ T26] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 318.570052][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 318.581334][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 318.597744][ T4022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.606846][ T4022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.632720][ T5868] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 318.831945][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 318.860328][ T5868] usb 2-1: unable to get BOS descriptor or descriptor too short [ 318.892294][ T5868] usb 2-1: config 1 has an invalid interface number: 149 but max is 0 [ 318.900844][ T5868] usb 2-1: config 1 has no interface number 0 [ 318.907451][ T5868] usb 2-1: config 1 interface 149 has no altsetting 0 [ 318.912622][ T26] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 318.926285][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.935488][ T26] usb 3-1: Product: syz [ 318.939899][ T26] usb 3-1: Manufacturer: syz [ 318.945066][ T26] usb 3-1: SerialNumber: syz [ 319.007776][ T3870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.016271][ T3870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.059030][ T26] usb 3-1: config 0 descriptor?? [ 319.079281][ T5868] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.80 [ 319.092434][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.102693][ T5868] usb 2-1: Product: syz [ 319.107098][ T5868] usb 2-1: Manufacturer: syz [ 319.112350][ T5868] usb 2-1: SerialNumber: syz [ 319.160160][ T26] usb 3-1: ucan: probing device on interface #0 [ 319.166943][ T26] usb 3-1: ucan: invalid endpoint configuration [ 319.175070][ T26] usb 3-1: ucan: probe failed; try to update the device firmware [ 319.419671][ T26] usb 3-1: USB disconnect, device number 12 [ 320.275860][ T5787] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 320.751067][ T6676] loop3: detected capacity change from 0 to 512 [ 320.876246][ T6676] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 320.989032][ T6676] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0002] [ 321.045662][ T6676] System zones: 1-12 [ 321.189100][ T6676] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 321.361641][ T6676] EXT4-fs (loop3): 1 truncate cleaned up [ 321.369981][ T6676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.392365][ T46] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 321.529014][ T5868] usb 2-1: Invalid firmware size=18. [ 321.592317][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 321.616197][ T46] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 321.625021][ T46] usb 6-1: config 0 has no interface number 0 [ 321.631344][ T46] usb 6-1: config 0 interface 12 has no altsetting 0 [ 321.651623][ T5868] usb 2-1: USB disconnect, device number 7 [ 321.753223][ T46] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 321.762951][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.771176][ T46] usb 6-1: Product: syz [ 321.775874][ T46] usb 6-1: Manufacturer: syz [ 321.780692][ T46] usb 6-1: SerialNumber: syz [ 321.986247][ T46] usb 6-1: config 0 descriptor?? [ 322.059382][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.239822][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.249912][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.843379][ T6692] loop1: detected capacity change from 0 to 32768 [ 322.986123][ T6692] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 323.224771][ T46] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 323.234360][ T46] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 323.242188][ T46] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 323.250180][ T46] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 323.533709][ T46] usb 6-1: USB disconnect, device number 6 [ 323.544734][ T5868] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 323.802801][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 323.883078][ T6692] XFS (loop1): Ending clean mount [ 323.886432][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 323.991590][ T5868] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 324.001424][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.009831][ T5868] usb 3-1: Product: syz [ 324.014329][ T5868] usb 3-1: Manufacturer: syz [ 324.019146][ T5868] usb 3-1: SerialNumber: syz [ 324.082220][ T5868] usb 3-1: config 0 descriptor?? [ 324.108917][ T5868] hub 3-1:0.0: bad descriptor, ignoring hub [ 324.116064][ T5868] hub 3-1:0.0: probe with driver hub failed with error -5 [ 324.132124][ T5868] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 324.151247][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 324.410004][ T6716] loop6: detected capacity change from 0 to 256 [ 324.827935][ T6718] loop5: detected capacity change from 0 to 16 [ 324.968492][ T6718] erofs (device loop5): mounted with root inode @ nid 36. [ 325.035573][ T6721] loop3: detected capacity change from 0 to 16 [ 325.105382][ T6721] erofs (device loop3): mounted with root inode @ nid 36. [ 325.232476][ T6721] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 325.267010][ T6716] loop6: detected capacity change from 0 to 4096 [ 325.334839][ T6716] nilfs2: Unknown parameter 'ĸĸĸĸ0x0000000000000003ĸĸĸĸ' [ 325.462517][ T5787] Bluetooth: hci1: unexpected event for opcode 0x042c [ 325.601541][ T6726] loop2: detected capacity change from 0 to 256 [ 325.993757][ T5130] usb 3-1: reset high-speed USB device number 13 using dummy_hcd [ 325.998242][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.156'. [ 326.011271][ T6730] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 326.032368][ T5130] usb 3-1: device reset changed ep0 maxpacket size! [ 326.083373][ T6716] loop6: detected capacity change from 0 to 2048 [ 326.096730][ T5868] usb 3-1: USB disconnect, device number 13 [ 326.122124][ T46] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 326.229315][ T6126] loop6: p1 < > p2 < > p3 p4 < > [ 326.234739][ T6126] loop6: partition table partially beyond EOD, truncated [ 326.243175][ T6126] loop6: p1 start 2304 is beyond EOD, truncated [ 326.249689][ T6126] loop6: p2 start 4294902784 is beyond EOD, truncated [ 326.256892][ T6126] loop6: p3 start 3724543488 is beyond EOD, truncated [ 326.277213][ T6733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.289970][ T6733] loop3: detected capacity change from 0 to 16 [ 326.378647][ T6733] erofs: Unknown parameter 'GPL' [ 326.392655][ T46] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 326.406196][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.432790][ T5868] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 326.461410][ T6716] loop6: p1 < > p2 < > p3 p4 < > [ 326.467122][ T6716] loop6: partition table partially beyond EOD, truncated [ 326.475428][ T6716] loop6: p1 start 2304 is beyond EOD, truncated [ 326.482074][ T6716] loop6: p2 start 4294902784 is beyond EOD, truncated [ 326.489121][ T6716] loop6: p3 start 3724543488 is beyond EOD, truncated [ 326.518539][ T46] usb 6-1: config 0 descriptor?? [ 326.694380][ T5868] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 326.711215][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 326.723400][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 326.735318][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 326.746567][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 327.002607][ T6728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.018674][ T6728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.103917][ T5868] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 327.120026][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.130498][ T5868] usb 3-1: Product: syz [ 327.135101][ T5868] usb 3-1: Manufacturer: syz [ 327.139935][ T5868] usb 3-1: SerialNumber: syz [ 327.204840][ T46] [drm:udl_init] *ERROR* Selecting channel failed [ 327.306706][ T46] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 327.315465][ T46] [drm] Initialized udl on minor 2 [ 327.348924][ T5868] usb 3-1: config 0 descriptor?? [ 327.405415][ T5868] usb 3-1: ucan: probing device on interface #0 [ 327.412482][ T5868] usb 3-1: ucan: invalid endpoint configuration [ 327.428418][ T5868] usb 3-1: ucan: probe failed; try to update the device firmware [ 327.823944][ T5868] usb 3-1: USB disconnect, device number 14 [ 328.144443][ T6738] loop3: detected capacity change from 0 to 32768 [ 328.157292][ T46] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 328.166533][ T46] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 328.181045][ T26] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 328.192197][ T26] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 328.200672][ T26] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 328.208503][ T46] usb 6-1: USB disconnect, device number 7 [ 328.283096][ T5969] udevd[5969]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 328.495449][ T6738] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 328.516902][ T6738] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 328.526495][ T6738] bcachefs (loop3): Version upgrade required: [ 328.526495][ T6738] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 328.526495][ T6738] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 328.526495][ T6738] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 328.603267][ T6738] bcachefs (loop3): dropping and reconstructing all alloc info [ 328.785076][ T6738] bcachefs (loop3): accounting_read... done [ 328.793389][ T6738] bcachefs (loop3): alloc_read... done [ 328.799451][ T6738] bcachefs (loop3): stripes_read... done [ 328.806071][ T6738] bcachefs (loop3): snapshots_read... done [ 328.818810][ T6738] bcachefs (loop3): done starting filesystem [ 328.917284][ T30] audit: type=1800 audit(1742547072.645:121): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.163" name="file2" dev="loop3" ino=536870913 res=0 errno=0 [ 328.938795][ T30] audit: type=1800 audit(1742547072.665:122): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.163" name="file2" dev="loop3" ino=536870913 res=0 errno=0 [ 329.165288][ T5789] bcachefs (loop3): shutting down [ 329.207902][ T5969] udevd[5969]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 329.403035][ T5789] bcachefs (loop3): shutdown complete [ 329.942091][ T5868] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 330.202428][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 330.250242][ T5868] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 330.259164][ T5868] usb 6-1: config 0 has no interface number 0 [ 330.265735][ T5868] usb 6-1: config 0 interface 12 has no altsetting 0 [ 330.386141][ T5868] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 330.403972][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.412401][ T5868] usb 6-1: Product: syz [ 330.416805][ T5868] usb 6-1: Manufacturer: syz [ 330.421627][ T5868] usb 6-1: SerialNumber: syz [ 330.565394][ T5868] usb 6-1: config 0 descriptor?? [ 330.590947][ T6772] loop1: detected capacity change from 0 to 1024 [ 330.772873][ T6772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.785755][ T6772] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.786157][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.814950][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.374938][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.532354][ T6779] fuse: Unknown parameter 'Q4' [ 331.714157][ T6779] loop6: detected capacity change from 0 to 512 [ 331.752172][ T6779] ext3: Unknown parameter 'fowner' [ 331.843780][ T6779] netlink: 4216 bytes leftover after parsing attributes in process `syz.6.172'. [ 331.947368][ T5868] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 331.957345][ T5868] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 331.965474][ T5868] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 331.973571][ T5868] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 332.298940][ T5868] usb 6-1: USB disconnect, device number 8 [ 332.613673][ T6784] loop1: detected capacity change from 0 to 32768 [ 332.623075][ T6784] btrfs: Deprecated parameter 'usebackuproot' [ 332.629388][ T6784] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 332.646832][ T6784] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.173 (6784) [ 332.922645][ T6784] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 332.933406][ T6784] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 332.942693][ T6784] BTRFS error (device loop1): superblock checksum mismatch [ 332.957135][ T6784] BTRFS error (device loop1): open_ctree failed: -22 [ 333.251521][ T6788] loop6: detected capacity change from 0 to 256 [ 333.387883][ T6788] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 333.733811][ T5868] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 333.952121][ T46] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 334.002085][ T5868] usb 6-1: unable to get BOS descriptor or descriptor too short [ 334.029534][ T5868] usb 6-1: not running at top speed; connect to a high speed hub [ 334.103641][ T5868] usb 6-1: config 8 has an invalid interface number: 219 but max is 1 [ 334.112214][ T5868] usb 6-1: config 8 has an invalid interface number: 149 but max is 1 [ 334.120643][ T5868] usb 6-1: config 8 has an invalid interface number: 210 but max is 1 [ 334.129254][ T5868] usb 6-1: config 8 has 3 interfaces, different from the descriptor's value: 2 [ 334.138550][ T5868] usb 6-1: config 8 has no interface number 0 [ 334.145244][ T5868] usb 6-1: config 8 has no interface number 1 [ 334.151575][ T5868] usb 6-1: config 8 has no interface number 2 [ 334.157987][ T5868] usb 6-1: config 8 interface 149 altsetting 3 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 334.169332][ T5868] usb 6-1: config 8 interface 149 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 334.189063][ T5868] usb 6-1: too many endpoints for config 8 interface 210 altsetting 47: 52, using maximum allowed: 30 [ 334.198398][ T46] usb 7-1: config 0 has an invalid interface number: 144 but max is 0 [ 334.202329][ T5868] usb 6-1: config 8 interface 210 altsetting 47 endpoint 0xB has invalid wMaxPacketSize 0 [ 334.208631][ T46] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 334.218517][ T5868] usb 6-1: config 8 interface 210 altsetting 47 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 334.226780][ T46] usb 7-1: config 0 has an invalid interface number: 182 but max is 0 [ 334.237849][ T5868] usb 6-1: config 8 interface 210 altsetting 47 has a duplicate endpoint with address 0xE, skipping [ 334.237983][ T5868] usb 6-1: config 8 interface 210 altsetting 47 has a duplicate endpoint with address 0xB, skipping [ 334.246306][ T46] usb 7-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 334.257243][ T5868] usb 6-1: config 8 interface 210 altsetting 47 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 334.268255][ T46] usb 7-1: config 0 has no interface number 0 [ 334.277312][ T5868] usb 6-1: config 8 interface 210 altsetting 47 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 334.277467][ T5868] usb 6-1: config 8 interface 210 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 334.277590][ T5868] usb 6-1: config 8 interface 210 altsetting 47 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.277717][ T5868] usb 6-1: config 8 interface 210 altsetting 47 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 334.292228][ T46] usb 7-1: config 0 has no interface number 1 [ 334.292331][ T46] usb 7-1: config 0 has no interface number 2 [ 334.292465][ T46] usb 7-1: config 0 interface 144 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 334.292612][ T46] usb 7-1: too many endpoints for config 0 interface 29 altsetting 229: 129, using maximum allowed: 30 [ 334.292771][ T46] usb 7-1: config 0 interface 29 altsetting 229 endpoint 0xE has invalid wMaxPacketSize 0 [ 334.292903][ T46] usb 7-1: config 0 interface 29 altsetting 229 has a duplicate endpoint with address 0x6, skipping [ 334.293027][ T46] usb 7-1: config 0 interface 29 altsetting 229 has an invalid descriptor for endpoint zero, skipping [ 334.293156][ T46] usb 7-1: config 0 interface 29 altsetting 229 has a duplicate endpoint with address 0xC, skipping [ 334.293286][ T46] usb 7-1: config 0 interface 29 altsetting 229 bulk endpoint 0x2 has invalid maxpacket 64 [ 334.293427][ T46] usb 7-1: config 0 interface 29 altsetting 229 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 334.293576][ T46] usb 7-1: config 0 interface 29 altsetting 229 has a duplicate endpoint with address 0x7, skipping [ 334.293700][ T46] usb 7-1: config 0 interface 29 altsetting 229 has 11 endpoint descriptors, different from the interface descriptor's value: 129 [ 334.293846][ T46] usb 7-1: too many endpoints for config 0 interface 182 altsetting 34: 238, using maximum allowed: 30 [ 334.293997][ T46] usb 7-1: config 0 interface 182 altsetting 34 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 334.294147][ T46] usb 7-1: config 0 interface 29 has no altsetting 0 [ 334.294253][ T46] usb 7-1: config 0 interface 182 has no altsetting 0 [ 334.294417][ T46] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=99.7b [ 334.294548][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.548196][ T5868] usb 6-1: config 8 interface 210 altsetting 47 has 10 endpoint descriptors, different from the interface descriptor's value: 52 [ 334.562010][ T5868] usb 6-1: config 8 interface 219 has no altsetting 0 [ 334.569039][ T5868] usb 6-1: config 8 interface 149 has no altsetting 0 [ 334.576296][ T5868] usb 6-1: config 8 interface 210 has no altsetting 0 [ 334.708719][ T46] usb 7-1: config 0 descriptor?? [ 334.836264][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 334.904852][ T5868] usb 6-1: New USB device found, idVendor=f621, idProduct=1e7d, bcdDevice=ad.a3 [ 334.915034][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.923447][ T5868] usb 6-1: Product: Љ [ 334.927750][ T5868] usb 6-1: Manufacturer: 䝞ëŦœí€Ŧ萐ė§ĐåœĒ姖ãœīïĪ錄î·ē끎áĨ“į”―Õ ëОîĩįĩķāŧ“æŠĐꔈŨƒčŋč―„ã°ˆįŦŒėžžî”ĪäŦĩčБ闋ᆠëĻķįžŽî‘“ėē“âĢŊ꓆čŋ–ëļūᓃčđë‚­æ‹ší—‰āŊ—ïŒŦęœžå„‚ęœąä§Ģ扇₂āī“áŽĢï™đᎌ⮐áķšęĩģáąŪÞŊåĢŸ6⎅ëŽĒ噂慎į…Ēį€Ģį™ģâĪ­éē”╛햊ėŸŦįŽĶáķ˜áŽ§ŅĻ [ 334.937394][ T46] usb 7-1: string descriptor 0 read error: -71 [ 334.953430][ T5868] usb 6-1: SerialNumber: ā Š [ 335.124184][ T46] snd-usb-6fire 7-1:0.144: unable to receive device firmware state. [ 335.132664][ T46] snd-usb-6fire 7-1:0.144: probe with driver snd-usb-6fire failed with error -71 [ 335.330742][ T46] usb 7-1: USB disconnect, device number 2 [ 335.422800][ T11] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 335.661982][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 335.765818][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.777306][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.787578][ T11] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 335.797189][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.933203][ T5868] usb 6-1: USB disconnect, device number 9 [ 336.289698][ T6808] loop3: detected capacity change from 0 to 32768 [ 336.522586][ T6808] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.541024][ T11] usb 2-1: config 0 descriptor?? [ 337.029798][ T11] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 337.037195][ T11] kone 0003:1E7D:2CED.0001: item fetching failed at offset 2/5 [ 337.167243][ T11] kone 0003:1E7D:2CED.0001: parse failed [ 337.173513][ T11] kone 0003:1E7D:2CED.0001: probe with driver kone failed with error -22 [ 337.301916][ T11] usb 2-1: USB disconnect, device number 8 [ 337.666768][ T6827] netlink: 'syz.2.182': attribute type 10 has an invalid length. [ 337.675513][ T6827] bridge0: port 3(team0) entered blocking state [ 337.682679][ T6827] bridge0: port 3(team0) entered disabled state [ 337.689619][ T6827] team0: entered allmulticast mode [ 337.695163][ T6827] team_slave_0: entered allmulticast mode [ 337.701110][ T6827] team_slave_1: entered allmulticast mode [ 337.712358][ T6827] team0: entered promiscuous mode [ 337.717636][ T6827] team_slave_0: entered promiscuous mode [ 337.724595][ T6827] team_slave_1: entered promiscuous mode [ 337.733927][ T6827] bridge0: port 3(team0) entered blocking state [ 337.740865][ T6827] bridge0: port 3(team0) entered forwarding state [ 337.846103][ T6808] XFS (loop3): Ending clean mount [ 338.447328][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 338.633698][ T6827] loop2: detected capacity change from 0 to 32768 [ 338.676666][ T6827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.182 (6827) [ 338.764400][ T6827] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 338.778606][ T6827] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 338.794901][ T6827] BTRFS info (device loop2): disk space caching is enabled [ 338.804736][ T6827] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 339.997721][ T6849] loop1: detected capacity change from 0 to 32768 [ 340.048172][ T6849] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #68: i_blkno is 18756 [ 340.051842][ T6827] BTRFS info (device loop2): rebuilding free space tree [ 340.063149][ T6849] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 340.063211][ T6849] OCFS2: File system is now read-only. [ 340.063265][ T6849] (syz.1.184,6849,1):ocfs2_read_locked_inode:535 ERROR: status = -30 [ 340.063615][ T6849] (syz.1.184,6849,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 340.104764][ T6849] (syz.1.184,6849,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30 [ 340.114054][ T6849] (syz.1.184,6849,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 340.114224][ T6849] (syz.1.184,6849,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30 [ 340.140328][ T6849] (syz.1.184,6849,1):ocfs2_initialize_super:2195 ERROR: status = -30 [ 340.149232][ T6849] (syz.1.184,6849,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 340.173518][ T6827] BTRFS info (device loop2): disabling free space tree [ 340.181026][ T6827] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 340.191501][ T6827] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 341.254041][ T5785] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 341.977043][ T6861] loop6: detected capacity change from 0 to 1024 [ 342.197592][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.204406][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 343.155326][ T6871] loop3: detected capacity change from 0 to 16 [ 343.300046][ T6871] erofs (device loop3): mounted with root inode @ nid 36. [ 343.921047][ T3488] hfsplus: b-tree write err: -5, ino 4 [ 344.199821][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 344.207310][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 345.091763][ T6885] loop6: detected capacity change from 0 to 32768 [ 345.218404][ T6885] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 346.131272][ T6885] XFS (loop6): Ending clean mount [ 346.208690][ T6914] loop1: detected capacity change from 0 to 64 [ 346.459911][ T6371] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 346.633194][ T6904] loop3: detected capacity change from 0 to 4096 [ 346.642881][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 346.687018][ T6904] ntfs3: Unknown parameter 'windo ' [ 346.841532][ T6921] loop2: detected capacity change from 0 to 512 [ 346.972845][ T6921] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 346.985258][ T6921] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 347.013637][ T6921] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 347.024277][ T6921] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 347.035935][ T6921] EXT4-fs (loop2): 1 truncate cleaned up [ 347.043575][ T6921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.209568][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.791199][ T6929] loop5: detected capacity change from 0 to 16 [ 347.890302][ T6929] erofs (device loop5): mounted with root inode @ nid 36. [ 347.972944][ T6931] loop2: detected capacity change from 0 to 256 [ 349.092455][ T6942] netlink: 'syz.2.207': attribute type 6 has an invalid length. [ 350.715579][ T6955] loop5: detected capacity change from 0 to 32768 [ 350.811248][ T6967] loop6: detected capacity change from 0 to 64 [ 350.828676][ T6955] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 351.044116][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.213'. [ 351.313052][ T6955] XFS (loop5): Ending clean mount [ 351.538746][ T6297] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 352.298683][ T6988] loop3: detected capacity change from 0 to 1024 [ 352.435939][ T6988] EXT4-fs: Ignoring removed orlov option [ 352.534415][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'. [ 352.614258][ T6988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.742148][ T11] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 352.848537][ T6994] loop1: detected capacity change from 0 to 1024 [ 352.867975][ T6988] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.3.219: corrupted in-inode xattr: bad magic number in in-inode xattr [ 352.937703][ T6988] EXT4-fs (loop3): Remounting filesystem read-only [ 352.996056][ T11] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 353.006996][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.119077][ T6988] netlink: 32 bytes leftover after parsing attributes in process `syz.3.219'. [ 353.164587][ T11] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 353.175517][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.259292][ T11] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 353.270554][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.437637][ T11] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 353.448281][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.562588][ T11] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 353.573275][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.677339][ T1833] hfsplus: b-tree write err: -5, ino 4 [ 353.708795][ T11] usb 6-1: string descriptor 0 read error: -22 [ 353.719968][ T11] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.729512][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.765140][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.881279][ T11] usb 6-1: invalid UAC_HEADER (v1) [ 354.013291][ T11] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 354.176465][ T11] usb 6-1: USB disconnect, device number 10 [ 354.727815][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.819437][ T7013] loop3: detected capacity change from 0 to 2048 [ 355.036524][ T7021] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 355.138593][ T7013] netlink: 'syz.3.224': attribute type 21 has an invalid length. [ 355.150925][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 355.240223][ T7024] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 355.472256][ T7024] Remounting filesystem read-only [ 356.465612][ T7033] loop6: detected capacity change from 0 to 512 [ 356.626580][ T7033] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 357.104614][ T7033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.124664][ T7033] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.365744][ T7047] loop1: detected capacity change from 0 to 16 [ 357.455161][ T7047] erofs (device loop1): mounted with root inode @ nid 36. [ 357.598129][ T7047] capability: warning: `syz.1.231' uses 32-bit capabilities (legacy support in use) [ 357.887168][ T6371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.959085][ T7052] loop5: detected capacity change from 0 to 1764 [ 358.228284][ T7052] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 358.289294][ T7057] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 358.445109][ T7060] loop6: detected capacity change from 0 to 512 [ 359.360132][ T5868] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 359.426832][ T7060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.440442][ T7060] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.442345][ T7063] loop1: detected capacity change from 0 to 40427 [ 359.552078][ T5868] usb 4-1: device descriptor read/64, error -71 [ 359.572099][ T46] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 359.842211][ T5868] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 360.052985][ T5868] usb 4-1: device descriptor read/64, error -71 [ 360.122100][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 360.144128][ T46] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 360.153950][ T46] usb 3-1: config 0 has no interface number 0 [ 360.160306][ T46] usb 3-1: config 0 interface 12 has no altsetting 0 [ 360.194761][ T46] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 360.204281][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.212777][ T46] usb 3-1: Product: syz [ 360.217162][ T46] usb 3-1: Manufacturer: syz [ 360.221538][ T5868] usb usb4-port1: attempt power cycle [ 360.222026][ T46] usb 3-1: SerialNumber: syz [ 360.236408][ T46] usb 3-1: config 0 descriptor?? [ 360.364590][ T6371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.490988][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.504692][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.682345][ T5868] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 360.828586][ T5868] usb 4-1: device descriptor read/8, error -71 [ 361.073949][ T46] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 361.083180][ T46] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 361.090721][ T46] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 361.099144][ T46] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 361.176382][ T5868] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 361.241119][ T46] usb 3-1: USB disconnect, device number 15 [ 361.257099][ T5868] usb 4-1: device descriptor read/8, error -71 [ 361.283451][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 361.292803][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 361.302121][ T7083] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 361.310053][ T7083] netlink: 'syz.1.241': attribute type 12 has an invalid length. [ 361.388277][ T5868] usb usb4-port1: unable to enumerate USB device [ 362.303262][ T7097] loop2: detected capacity change from 0 to 512 [ 362.567825][ T7097] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 362.859360][ T7097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.874679][ T7097] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.141075][ T7100] loop6: detected capacity change from 0 to 32768 [ 363.554830][ T7100] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 363.581804][ T7100] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 363.591116][ T7100] bcachefs (loop6): Version upgrade required: [ 363.591116][ T7100] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 363.591116][ T7100] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 363.591116][ T7100] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 363.723412][ T7100] bcachefs (loop6): dropping and reconstructing all alloc info [ 364.058534][ T7100] bcachefs (loop6): accounting_read... done [ 364.074793][ T7100] bcachefs (loop6): alloc_read... done [ 364.084312][ T7100] bcachefs (loop6): stripes_read... done [ 364.090395][ T7100] bcachefs (loop6): snapshots_read... done [ 364.098083][ T7100] bcachefs (loop6): check_allocations... done [ 364.272413][ T7100] bcachefs (loop6): going read-write [ 364.326667][ T7100] bcachefs (loop6): done starting filesystem [ 364.364525][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.392590][ T7123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.248'. [ 364.458230][ T7126] netlink: 256 bytes leftover after parsing attributes in process `syz.3.249'. [ 364.874711][ T6371] bcachefs (loop6): shutting down [ 364.879980][ T6371] bcachefs (loop6): going read-only [ 364.886667][ T6371] bcachefs (loop6): finished waiting for writes to stop [ 364.946223][ T6371] bcachefs (loop6): flushing journal and stopping allocators, journal seq 11 [ 365.043185][ T6371] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 11 [ 365.087292][ T7131] loop2: detected capacity change from 0 to 512 [ 365.134115][ T6371] bcachefs (loop6): unclean shutdown complete, journal seq 12 [ 365.146663][ T6371] bcachefs (loop6): done going read-only, filesystem not clean [ 365.184991][ T6371] bcachefs (loop6): shutdown complete [ 365.263831][ T7131] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0f000002) [ 366.219165][ T7131] loop2: detected capacity change from 0 to 32768 [ 366.714272][ T7131] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 366.738814][ T7131] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 366.752804][ T7131] bcachefs (loop2): Version upgrade required: [ 366.752804][ T7131] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 366.752804][ T7131] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size [ 366.752804][ T7131] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 366.826205][ T7131] bcachefs (loop2): dropping and reconstructing all alloc info [ 366.915352][ T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 366.985708][ T7131] bcachefs (loop2): accounting_read... done [ 366.993004][ T7131] bcachefs (loop2): alloc_read... done [ 366.998877][ T7131] bcachefs (loop2): stripes_read... done [ 367.005125][ T7131] bcachefs (loop2): snapshots_read... done [ 367.014326][ T7131] bcachefs (loop2): done starting filesystem [ 367.172705][ T5785] bcachefs (loop2): shutting down [ 367.237744][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 367.311048][ T26] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 367.312902][ T5785] bcachefs (loop2): shutdown complete [ 367.319586][ T26] usb 4-1: config 0 has no interface number 0 [ 367.331386][ T26] usb 4-1: config 0 interface 12 has no altsetting 0 [ 367.465709][ T26] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 367.475254][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.483758][ T26] usb 4-1: Product: syz [ 367.488142][ T26] usb 4-1: Manufacturer: syz [ 367.493077][ T26] usb 4-1: SerialNumber: syz [ 367.572757][ T26] usb 4-1: config 0 descriptor?? [ 367.642766][ T1564] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 367.800652][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.811238][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.832329][ T1564] usb 6-1: device descriptor read/64, error -71 [ 368.088403][ T1564] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 368.283596][ T1564] usb 6-1: device descriptor read/64, error -71 [ 368.359347][ T26] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 368.368678][ T26] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 368.376439][ T26] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 368.389196][ T26] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 368.443559][ T1564] usb usb6-port1: attempt power cycle [ 368.535167][ T26] usb 4-1: USB disconnect, device number 11 [ 368.774255][ T7165] loop1: detected capacity change from 0 to 512 [ 368.834531][ T1564] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 368.878217][ T7165] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 368.905090][ T1564] usb 6-1: device descriptor read/8, error -71 [ 369.060415][ T7165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.075658][ T7165] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.168894][ T1564] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 369.263610][ T1564] usb 6-1: device descriptor read/8, error -71 [ 369.383594][ T1564] usb usb6-port1: unable to enumerate USB device [ 369.789828][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.434804][ T7172] loop3: detected capacity change from 0 to 40427 [ 370.455505][ T7172] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1fffff [ 370.467161][ T7172] F2FS-fs (loop3): invalid crc value [ 370.491914][ T7172] F2FS-fs (loop3): Found nat_bits in checkpoint [ 370.803645][ T7172] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 370.951267][ T5789] syz-executor: attempt to access beyond end of device [ 370.951267][ T5789] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 370.970994][ T5789] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 371.756296][ T7188] loop1: detected capacity change from 0 to 512 [ 371.933348][ T7188] EXT4-fs (loop1): orphan cleanup on readonly fs [ 371.940066][ T7188] EXT4-fs error (device loop1): ext4_quota_enable:7097: comm syz.1.262: Bad quota inum: 5, type: 1 [ 372.102483][ T7188] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 372.146138][ T7188] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 372.154863][ T7188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.472415][ T11] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 372.616468][ T7195] loop3: detected capacity change from 0 to 1024 [ 372.664441][ T7195] hfsplus: Unknown parameter 'nobarr2>ĀSĀ!7ier' [ 372.767781][ T11] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 372.778525][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.793061][ T11] usb 2-1: Product: syz [ 372.797457][ T11] usb 2-1: Manufacturer: syz [ 372.804480][ T11] usb 2-1: SerialNumber: syz [ 372.950856][ T11] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 373.269485][ T1564] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 373.368715][ T5868] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 373.550389][ T1564] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.560832][ T1564] usb 4-1: config 0 interface 0 has no altsetting 0 [ 373.568017][ T1564] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 373.577561][ T1564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.799000][ T1564] usb 4-1: config 0 descriptor?? [ 374.187247][ T11] usb 2-1: USB disconnect, device number 9 [ 374.351000][ T1564] dragonrise 0003:0079:0011.0002: hidraw0: USB HID v10.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 374.451235][ T5868] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 374.459153][ T5868] ath9k_htc: Failed to initialize the device [ 374.489540][ T1564] usb 4-1: USB disconnect, device number 12 [ 374.552225][ T11] usb 2-1: ath9k_htc: USB layer deinitialized [ 374.773361][ T7209] loop2: detected capacity change from 0 to 512 [ 375.009819][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.114586][ T7209] EXT4-fs (loop2): 1 orphan inode deleted [ 375.124460][ T7209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.203778][ T7209] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.216485][ T35] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 375.227884][ T35] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 1 [ 375.465384][ T30] audit: type=1800 audit(1742547119.205:123): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.268" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 376.174731][ T7215] loop6: detected capacity change from 0 to 32768 [ 376.184068][ T7215] btrfs: Deprecated parameter 'usebackuproot' [ 376.190400][ T7215] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 376.206345][ T7215] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.269 (7215) [ 376.229631][ T7215] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 376.240464][ T7215] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 376.249852][ T7215] BTRFS error (device loop6): superblock checksum mismatch [ 376.261127][ T7215] BTRFS error (device loop6): open_ctree failed: -22 [ 376.450620][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.502224][ T5868] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 376.812777][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 376.899990][ T5868] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 376.909459][ T5868] usb 4-1: config 0 has no interface number 0 [ 376.916961][ T5868] usb 4-1: config 0 interface 12 has no altsetting 0 [ 377.023248][ T5868] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 377.033410][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.042330][ T5868] usb 4-1: Product: syz [ 377.046714][ T5868] usb 4-1: Manufacturer: syz [ 377.051534][ T5868] usb 4-1: SerialNumber: syz [ 377.165213][ T5868] usb 4-1: config 0 descriptor?? [ 377.175266][ T7227] loop2: detected capacity change from 0 to 512 [ 377.257674][ T7227] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 377.481422][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.484275][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.863257][ T7233] netlink: 'syz.5.275': attribute type 10 has an invalid length. [ 377.863411][ T7233] netlink: 40 bytes leftover after parsing attributes in process `syz.5.275'. [ 377.863570][ T7233] team0: Device netdevsim1 is up. Set it down before adding it as a team port [ 377.866836][ T7233] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 378.049226][ T7227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.049645][ T7230] loop6: detected capacity change from 0 to 32768 [ 378.049673][ T7227] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.135018][ T5868] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 378.149810][ T5868] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 378.157592][ T5868] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 378.168035][ T5868] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 378.269715][ T5868] usb 4-1: USB disconnect, device number 13 [ 378.277685][ T7230] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 378.404807][ T7244] netlink: 104 bytes leftover after parsing attributes in process `syz.1.276'. [ 379.016498][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.148046][ T7230] XFS (loop6): Ending clean mount [ 379.457831][ T6371] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 379.855507][ T26] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 380.044349][ T26] usb 2-1: device descriptor read/64, error -71 [ 380.303180][ T26] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 380.502198][ T26] usb 2-1: device descriptor read/64, error -71 [ 380.514965][ T1564] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 380.632805][ T26] usb usb2-port1: attempt power cycle [ 380.722424][ T7274] Cannot find set identified by id 0 to match [ 380.752882][ T1564] usb 3-1: Using ep0 maxpacket: 32 [ 380.792998][ T1564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 380.804535][ T1564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 380.814789][ T1564] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 380.827466][ T1564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 380.838771][ T1564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 381.052042][ T26] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 381.141480][ T26] usb 2-1: device descriptor read/8, error -71 [ 381.296331][ T1564] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 381.306213][ T1564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.314780][ T1564] usb 3-1: Product: syz [ 381.319171][ T1564] usb 3-1: Manufacturer: syz [ 381.324202][ T1564] usb 3-1: SerialNumber: syz [ 381.422467][ T26] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 381.496073][ T26] usb 2-1: device descriptor read/8, error -71 [ 381.556460][ T1564] usb 3-1: config 0 descriptor?? [ 381.578794][ T7274] loop5: detected capacity change from 0 to 32768 [ 381.635672][ T26] usb usb2-port1: unable to enumerate USB device [ 381.674957][ T1564] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 381.774509][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.784686][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.799410][ T7274] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 381.911173][ T7266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.920995][ T7266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.032526][ T5868] usb 3-1: USB disconnect, device number 16 [ 382.381148][ T7274] XFS (loop5): Ending clean mount [ 382.402330][ T11] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 382.460323][ T30] audit: type=1800 audit(1742547126.195:124): pid=7274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.284" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 382.814181][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.830959][ T11] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 382.843077][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.861611][ T6297] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 382.867611][ T11] usb 4-1: config 0 descriptor?? [ 383.462959][ T11] lg-g15 0003:046D:C222.0003: unbalanced collection at end of report description [ 383.527621][ T11] lg-g15 0003:046D:C222.0003: probe with driver lg-g15 failed with error -22 [ 383.658996][ T1564] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 383.685956][ T11] usb 4-1: USB disconnect, device number 14 [ 383.899893][ T26] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 384.112005][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 384.153411][ T26] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 384.161936][ T26] usb 2-1: config 0 has no interface number 0 [ 384.168381][ T26] usb 2-1: config 0 interface 12 has no altsetting 0 [ 384.284931][ T26] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 384.294583][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.303043][ T26] usb 2-1: Product: syz [ 384.307440][ T26] usb 2-1: Manufacturer: syz [ 384.312440][ T26] usb 2-1: SerialNumber: syz [ 384.518587][ T26] usb 2-1: config 0 descriptor?? [ 384.777199][ T7296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.787003][ T7296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.330611][ T7308] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 385.355799][ T7309] overlayfs: conflicting lowerdir path [ 385.460716][ T26] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 385.470431][ T26] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 385.478410][ T26] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 385.491188][ T26] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 385.540881][ T7308] 9pnet_fd: Insufficient options for proto=fd [ 385.693054][ T26] usb 2-1: USB disconnect, device number 14 [ 386.642416][ T26] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 386.746872][ T7326] loop2: detected capacity change from 0 to 1024 [ 386.774713][ T7326] EXT4-fs: Ignoring removed orlov option [ 386.840278][ T7326] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 386.853379][ T26] usb 7-1: Using ep0 maxpacket: 32 [ 386.898176][ T26] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 386.906803][ T26] usb 7-1: config 0 has no interface number 0 [ 386.916674][ T26] usb 7-1: config 0 interface 12 has no altsetting 0 [ 387.059639][ T26] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 387.069427][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.077888][ T26] usb 7-1: Product: syz [ 387.082416][ T26] usb 7-1: Manufacturer: syz [ 387.087238][ T26] usb 7-1: SerialNumber: syz [ 387.104758][ T7326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.219216][ T26] usb 7-1: config 0 descriptor?? [ 387.286004][ T7326] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #12: block 7: comm syz.2.296: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 387.472157][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.482990][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.537658][ T7339] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #12: block 7: comm syz.2.296: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 387.834095][ T7342] loop5: detected capacity change from 0 to 512 [ 387.902188][ T7342] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 388.150627][ T7342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.164055][ T7342] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.207077][ T26] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 388.215987][ T26] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 388.223812][ T26] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 388.231962][ T26] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 388.312384][ T3690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.354288][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.377558][ T26] usb 7-1: USB disconnect, device number 3 [ 388.493155][ T3690] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.502259][ T7347] syz.3.301 uses obsolete (PF_INET,SOCK_PACKET) [ 388.723874][ T11] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 388.770190][ T3690] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.932756][ T11] usb 2-1: device descriptor read/64, error -71 [ 388.990075][ T3690] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.196278][ T6297] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.224154][ T11] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 389.492129][ T11] usb 2-1: device descriptor read/64, error -71 [ 389.604156][ T11] usb usb2-port1: attempt power cycle [ 389.622506][ T7357] netlink: 132 bytes leftover after parsing attributes in process `syz.6.303'. [ 389.663888][ T3690] bridge_slave_1: left allmulticast mode [ 389.669824][ T3690] bridge_slave_1: left promiscuous mode [ 389.676697][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.846693][ T3690] bridge_slave_0: left allmulticast mode [ 389.852738][ T3690] bridge_slave_0: left promiscuous mode [ 389.859424][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.972907][ T11] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 390.060927][ T11] usb 2-1: device descriptor read/8, error -71 [ 390.332591][ T11] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 390.651503][ T11] usb 2-1: device descriptor read/8, error -71 [ 390.815962][ T7362] loop5: detected capacity change from 0 to 32768 [ 390.822369][ T11] usb usb2-port1: unable to enumerate USB device [ 390.831430][ T5145] udevd[5145]: worker [6002] terminated by signal 33 (Unknown signal 33) [ 390.852127][ T5145] udevd[5145]: worker [6002] failed while handling '/devices/netdevsim0/net/eth5' [ 391.019195][ T7365] loop6: detected capacity change from 0 to 1024 [ 391.403329][ T3690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.493872][ T3690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.546949][ T3690] bond0 (unregistering): Released all slaves [ 391.554455][ T7362] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 391.555936][ T7362] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 391.587478][ T7362] bcachefs (loop5): Version upgrade required: [ 391.587478][ T7362] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 391.587478][ T7362] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size [ 391.587478][ T7362] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 391.590671][ T3690] bond1 (unregistering): Released all slaves [ 391.664873][ T7362] bcachefs (loop5): dropping and reconstructing all alloc info [ 391.927926][ T7362] bcachefs (loop5): accounting_read... done [ 391.939446][ T7362] bcachefs (loop5): alloc_read... done [ 391.945563][ T7362] bcachefs (loop5): stripes_read... done [ 391.951618][ T7362] bcachefs (loop5): snapshots_read... done [ 391.961318][ T7362] bcachefs (loop5): done starting filesystem [ 392.076196][ T6297] bcachefs (loop5): shutting down [ 392.250735][ T63] hfsplus: b-tree write err: -5, ino 4 [ 392.255411][ T6297] bcachefs (loop5): shutdown complete [ 392.584521][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 392.599793][ T3690] hsr_slave_0: left promiscuous mode [ 392.654639][ T3690] hsr_slave_1: left promiscuous mode [ 392.662719][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.670570][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.740158][ T7380] loop6: detected capacity change from 0 to 1024 [ 392.800896][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.809976][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.833063][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 392.877402][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 392.886481][ T9] usb 3-1: config 0 has no interface number 0 [ 392.893097][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 392.932769][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 392.942216][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.945161][ T3690] veth1_macvtap: left promiscuous mode [ 392.950467][ T9] usb 3-1: Product: syz [ 392.950565][ T9] usb 3-1: Manufacturer: syz [ 392.959422][ T3690] veth0_macvtap: left promiscuous mode [ 392.959732][ T3690] veth1_vlan: left promiscuous mode [ 392.959953][ T3690] veth0_vlan: left promiscuous mode [ 392.988508][ T9] usb 3-1: SerialNumber: syz [ 393.155061][ T9] usb 3-1: config 0 descriptor?? [ 393.425346][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.435739][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.230238][ T7384] loop1: detected capacity change from 0 to 128 [ 394.314422][ T9] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 394.323295][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 394.330834][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 394.339888][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 394.402591][ T7384] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 394.437567][ T9] usb 3-1: USB disconnect, device number 18 [ 394.487173][ T7386] loop3: detected capacity change from 0 to 2048 [ 394.499607][ T7386] EXT4-fs: Ignoring removed mblk_io_submit option [ 394.518758][ T7384] sysv_free_block: trying to free block not in datazone [ 394.574569][ T7386] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 394.710806][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 394.793923][ T7384] syz.1.312: attempt to access beyond end of device [ 394.793923][ T7384] loop1: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 394.811128][ T7384] Buffer I/O error on dev loop1, logical block 209285, lost async page write [ 394.821416][ T7384] syz.1.312: attempt to access beyond end of device [ 394.821416][ T7384] loop1: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 394.835763][ T7384] Buffer I/O error on dev loop1, logical block 13466417, lost async page write [ 394.845199][ T7384] syz.1.312: attempt to access beyond end of device [ 394.845199][ T7384] loop1: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 394.859320][ T7384] Buffer I/O error on dev loop1, logical block 8768635, lost async page write [ 394.868896][ T7384] syz.1.312: attempt to access beyond end of device [ 394.868896][ T7384] loop1: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 394.885183][ T7384] Buffer I/O error on dev loop1, logical block 3211264, lost async page write [ 394.894595][ T7384] syz.1.312: attempt to access beyond end of device [ 394.894595][ T7384] loop1: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 394.912658][ T7384] Buffer I/O error on dev loop1, logical block 13269809, lost async page write [ 394.922173][ T7384] syz.1.312: attempt to access beyond end of device [ 394.922173][ T7384] loop1: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 394.936381][ T7384] Buffer I/O error on dev loop1, logical block 8767744, lost async page write [ 394.945700][ T7384] syz.1.312: attempt to access beyond end of device [ 394.945700][ T7384] loop1: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 394.960107][ T7384] Buffer I/O error on dev loop1, logical block 2066843070, lost async page write [ 394.969718][ T7384] syz.1.312: attempt to access beyond end of device [ 394.969718][ T7384] loop1: rw=2049, sector=2066843069, nr_sectors = 1 limit=128 [ 394.984196][ T7384] Buffer I/O error on dev loop1, logical block 2066843069, lost async page write [ 394.985340][ T7393] loop6: detected capacity change from 0 to 512 [ 395.013778][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 395.284217][ T7393] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 395.701227][ T7393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.715435][ T7393] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.314980][ T6371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.628626][ T7403] loop2: detected capacity change from 0 to 32768 [ 396.640367][ T7403] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.316 (7403) [ 396.702559][ T7403] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 396.713358][ T7403] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 396.726189][ T7403] BTRFS info (device loop2): using free-space-tree [ 397.017584][ T7419] loop3: detected capacity change from 0 to 1024 [ 397.120174][ T7419] EXT4-fs: Ignoring removed orlov option [ 397.209881][ T7419] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 397.285001][ T7419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.349120][ T5785] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 397.495079][ T7423] loop6: detected capacity change from 0 to 1024 [ 397.658334][ T7419] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #12: block 7: comm syz.3.319: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 397.687885][ T7423] hfsplus: walked past end of dir [ 397.784629][ T7426] EXT4-fs error (device loop3): ext4_find_dest_de:2079: inode #12: block 7: comm syz.3.319: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 398.051411][ T5786] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 398.171589][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.602155][ T7433] loop1: detected capacity change from 0 to 64 [ 399.909249][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 400.132104][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 400.132669][ T26] psmouse serio2: Failed to reset mouse on : -5 [ 400.324069][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 400.397014][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 400.405741][ T9] usb 3-1: config 0 has no interface number 0 [ 400.412230][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 400.466351][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 400.475901][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.484332][ T9] usb 3-1: Product: syz [ 400.488738][ T9] usb 3-1: Manufacturer: syz [ 400.493677][ T9] usb 3-1: SerialNumber: syz [ 400.505250][ T7454] loop5: detected capacity change from 0 to 512 [ 400.562338][ T7454] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 400.563462][ T9] usb 3-1: config 0 descriptor?? [ 400.704410][ T7454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.717907][ T7454] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.801494][ T7448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.811466][ T7448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.832946][ T7455] netlink: 'syz.6.329': attribute type 1 has an invalid length. [ 400.843844][ T7455] netlink: 56 bytes leftover after parsing attributes in process `syz.6.329'. [ 401.159830][ T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 401.168346][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 401.177424][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 401.186910][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 401.286229][ T6297] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.303839][ T9] usb 3-1: USB disconnect, device number 19 [ 401.554859][ T7463] loop5: detected capacity change from 0 to 256 [ 401.574747][ T7463] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 401.631451][ T7463] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 401.767789][ T7464] loop6: detected capacity change from 0 to 2048 [ 401.829299][ T7464] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.128476][ T7467] loop2: detected capacity change from 0 to 512 [ 402.142588][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 402.153856][ T7467] ext4: Unknown parameter 'debug"data' [ 402.289406][ T5803] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 402.342644][ T7471] 9pnet_fd: Insufficient options for proto=fd [ 402.355252][ T9] usb 7-1: config 162 has an invalid interface number: 63 but max is 1 [ 402.364076][ T9] usb 7-1: config 162 has an invalid interface number: 172 but max is 1 [ 402.372830][ T9] usb 7-1: config 162 has no interface number 0 [ 402.384728][ T9] usb 7-1: config 162 has no interface number 1 [ 402.391256][ T9] usb 7-1: config 162 interface 63 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 402.406678][ T9] usb 7-1: config 162 interface 172 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 402.418194][ T9] usb 7-1: config 162 interface 172 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 402.429714][ T9] usb 7-1: config 162 interface 172 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 402.441947][ T9] usb 7-1: config 162 interface 172 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 402.453722][ T9] usb 7-1: config 162 interface 172 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.467728][ T9] usb 7-1: config 162 interface 63 has no altsetting 0 [ 402.474951][ T9] usb 7-1: config 162 interface 172 has no altsetting 0 [ 402.573142][ T9] usb 7-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=cf.0b [ 402.587826][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.600616][ T9] usb 7-1: Product: syz [ 402.605321][ T9] usb 7-1: Manufacturer: syz [ 402.610144][ T9] usb 7-1: SerialNumber: syz [ 402.851234][ T9] pl2303 7-1:162.63: required endpoints missing [ 402.877730][ T9] pl2303 7-1:162.172: required interrupt-in endpoint missing [ 402.907930][ T9] usb 7-1: USB disconnect, device number 4 [ 403.022419][ T1564] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 403.208935][ T1564] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 403.221123][ T1564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 403.235880][ T1564] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 403.245361][ T1564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.263498][ T1564] usb 4-1: config 0 descriptor?? [ 403.481122][ T1564] ath6kl: Failed to submit usb control message: -71 [ 403.488378][ T1564] ath6kl: unable to send the bmi data to the device: -71 [ 403.495882][ T1564] ath6kl: Unable to send get target info: -71 [ 403.588258][ T7480] loop5: detected capacity change from 0 to 2048 [ 403.603422][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.614535][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.623928][ T1564] ath6kl: Failed to init ath6kl core: -71 [ 403.635778][ T1564] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 403.719844][ T1564] usb 4-1: USB disconnect, device number 15 [ 403.849850][ T7480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.888926][ T7480] netlink: 'syz.5.336': attribute type 3 has an invalid length. [ 403.911272][ T7480] netlink: 'syz.5.336': attribute type 3 has an invalid length. [ 403.922275][ T26] misc userio: Buffer overflowed, userio client isn't keeping up [ 403.935662][ T7480] netlink: 'syz.5.336': attribute type 3 has an invalid length. [ 403.944181][ T7480] netlink: 16 bytes leftover after parsing attributes in process `syz.5.336'. [ 403.989505][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.336'. [ 404.069194][ T1564] kernel write not supported for file /input/event2 (pid: 1564 comm: kworker/1:2) [ 404.295024][ T6297] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.595246][ T7491] loop2: detected capacity change from 0 to 512 [ 404.613345][ T7491] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 404.682818][ T7491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.696074][ T7491] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.976470][ T26] input: PS/2 Generic Mouse as /devices/serio2/input/input8 [ 405.094356][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.232460][ T26] psmouse serio2: Failed to enable mouse on [ 405.252219][ T1564] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 405.292306][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 405.412148][ T1564] usb 4-1: Using ep0 maxpacket: 8 [ 405.438760][ T1564] usb 4-1: config 0 has an invalid interface number: 134 but max is 0 [ 405.447414][ T1564] usb 4-1: config 0 has no interface number 0 [ 405.457075][ T1564] usb 4-1: config 0 interface 134 has no altsetting 0 [ 405.530817][ T9] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 405.532731][ T1564] usb 4-1: New USB device found, idVendor=16d8, idProduct=6008, bcdDevice=44.17 [ 405.538855][ T9] usb 7-1: can't read configurations, error -61 [ 405.547793][ T1564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.547914][ T1564] usb 4-1: Product: syz [ 405.570381][ T1564] usb 4-1: Manufacturer: syz [ 405.575439][ T1564] usb 4-1: SerialNumber: syz [ 405.719042][ T1564] usb 4-1: config 0 descriptor?? [ 405.764067][ T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 405.817746][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 405.944687][ T1564] option 4-1:0.134: GSM modem (1-port) converter detected [ 405.944896][ T9] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 405.965553][ T9] usb 7-1: can't read configurations, error -61 [ 405.972541][ T7509] loop1: detected capacity change from 0 to 256 [ 405.976677][ T7509] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 406.024271][ T1564] usb 4-1: USB disconnect, device number 16 [ 406.033281][ T1564] option 4-1:0.134: device disconnected [ 406.044908][ T9] usb usb7-port1: attempt power cycle [ 406.077429][ T7509] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 406.416621][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 406.515904][ T9] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 406.524048][ T9] usb 7-1: can't read configurations, error -61 [ 406.710568][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 406.742840][ T1564] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 406.807850][ T9] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 406.816112][ T9] usb 7-1: can't read configurations, error -61 [ 406.845109][ T9] usb usb7-port1: unable to enumerate USB device [ 406.921061][ T1564] usb 3-1: Using ep0 maxpacket: 16 [ 406.950733][ T1564] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.959246][ T1564] usb 3-1: config 0 has no interface number 0 [ 407.062223][ T1564] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 407.071603][ T1564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.080842][ T1564] usb 3-1: Product: syz [ 407.085504][ T1564] usb 3-1: Manufacturer: syz [ 407.092762][ T1564] usb 3-1: SerialNumber: syz [ 407.275116][ T1564] usb 3-1: config 0 descriptor?? [ 407.346094][ T1564] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 407.993853][ T7518] process 'syz.2.348' launched './file0' with NULL argv: empty string added [ 408.029714][ T1564] gspca_spca1528: reg_w err -110 [ 408.064472][ T1564] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 409.765432][ T7528] loop3: detected capacity change from 0 to 1024 [ 409.839992][ T7529] loop6: detected capacity change from 0 to 2048 [ 410.053069][ T7529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.367398][ T7529] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.355: bg 0: block 234: padding at end of block bitmap is not set [ 410.542070][ T7529] EXT4-fs (loop6): Remounting filesystem read-only [ 410.812477][ T5788] Bluetooth: hci4: command 0x0406 tx timeout [ 410.854151][ T7534] loop1: detected capacity change from 0 to 32768 [ 410.917008][ T7534] XFS (loop1): Metadata CRC error detected at xfs_sb_read_verify+0x52b/0x630, xfs_sb block 0x0 [ 410.928018][ T7534] XFS (loop1): Unmount and run xfs_repair [ 410.934131][ T7534] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 410.942011][ T7534] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 410.951098][ T7534] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 410.960349][ T7534] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab ..*.w.B.....G.K. [ 410.969577][ T7534] 00000030: 00 00 00 00 00 00 00 77 00 00 00 00 00 00 04 20 .......w....... [ 410.973773][ T1564] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 410.987576][ T7534] 00000040: 00 00 00 00 00 00 04 21 00 00 00 00 00 00 04 22 .......!......." [ 410.997952][ T7534] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 411.007122][ T7534] 00000060: 00 00 02 04 b4 b5 02 00 08 00 00 02 00 00 00 00 ................ [ 411.016369][ T7534] 00000070: 00 00 00 00 00 00 00 00 0c 09 0b 01 0c 00 00 64 ...............d [ 411.025679][ T7534] XFS (loop1): SB validate failed with error -74. [ 411.229274][ T1564] usb 7-1: device descriptor read/64, error -71 [ 411.536634][ T1564] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 411.752132][ T1564] usb 7-1: device descriptor read/64, error -71 [ 411.889833][ T1564] usb usb7-port1: attempt power cycle [ 412.162920][ T26] usb 3-1: USB disconnect, device number 20 [ 412.354115][ T1564] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 412.379493][ T7548] loop5: detected capacity change from 0 to 1024 [ 412.399974][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 412.409242][ T7547] nbd: socks must be embedded in a SOCK_ITEM attr [ 412.441021][ T1564] usb 7-1: device descriptor read/8, error -71 [ 412.569292][ T7548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.582623][ T7548] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.694343][ T1564] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 412.943299][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 412.975471][ T1564] usb 7-1: device descriptor read/8, error -71 [ 413.046094][ T6371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.092571][ T26] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 413.115731][ T1564] usb usb7-port1: unable to enumerate USB device [ 413.192646][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 413.203701][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.243007][ T9] usb 2-1: config 0 descriptor?? [ 413.260700][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 413.362272][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 413.363767][ T7556] overlayfs: missing 'lowerdir' [ 413.415245][ T26] usb 6-1: config 0 has an invalid interface number: 141 but max is 12 [ 413.424017][ T26] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 413.433500][ T26] usb 6-1: config 0 has no interface number 0 [ 413.442185][ T26] usb 6-1: too many endpoints for config 0 interface 141 altsetting 32: 177, using maximum allowed: 30 [ 413.454582][ T26] usb 6-1: config 0 interface 141 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 177 [ 413.468585][ T26] usb 6-1: config 0 interface 141 has no altsetting 0 [ 413.599134][ T9] gspca_spca508: reg_read err -32 [ 413.632110][ T9] gspca_spca508: reg_read err -32 [ 413.830369][ T26] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 413.840209][ T26] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 413.852658][ T26] usb 6-1: Product: syz [ 413.857052][ T26] usb 6-1: Manufacturer: syz [ 413.862009][ T26] usb 6-1: SerialNumber: syz [ 413.878353][ T9] gspca_spca508: reg_read err -71 [ 413.898507][ T9] gspca_spca508: reg_read err -71 [ 413.957024][ T9] gspca_spca508: reg write: error -71 [ 413.962968][ T9] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 414.068311][ T9] usb 2-1: USB disconnect, device number 19 [ 414.069934][ T26] usb 6-1: config 0 descriptor?? [ 414.316558][ T26] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 414.351220][ T26] gspca_zc3xx: reg_w_i err -71 [ 414.942534][ T26] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 414.949284][ T26] gspca_zc3xx 6-1:0.141: probe with driver gspca_zc3xx failed with error -71 [ 415.030148][ T26] usb 6-1: USB disconnect, device number 15 [ 415.335986][ T7573] Scaler: ================= START STATUS ================= [ 415.344352][ T6297] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.344382][ T7573] Scaler: ================== END STATUS ================== [ 416.091461][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.6.372'. [ 416.119003][ T7581] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 416.506503][ T7580] loop3: detected capacity change from 0 to 32768 [ 416.662872][ T26] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 416.776946][ T7580] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=xxhash,compression=lz4,str_hash=crc64,very_degraded,noexcl,reconstruct_alloc,no_data_io [ 416.799109][ T7580] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 416.807976][ T7580] bcachefs (loop3): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete [ 416.807976][ T7580] Doing compatible version upgrade from 1.19: autofix_errors to 1.20: directory_size [ 416.807976][ T7580] [ 416.850484][ T7580] bcachefs (loop3): dropping and reconstructing all alloc info [ 416.921788][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 416.961402][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.972969][ T26] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 416.982462][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.004457][ T7580] bcachefs (loop3): accounting_read... done [ 417.011616][ T7580] bcachefs (loop3): alloc_read... done [ 417.017698][ T7580] bcachefs (loop3): stripes_read... done [ 417.027081][ T7580] bcachefs (loop3): snapshots_read... done [ 417.033743][ T7580] bcachefs (loop3): check_allocations... [ 417.051547][ T7580] btree ptr not marked in member info btree allocated bitmap [ 417.051798][ T7580] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 417.114416][ T26] usb 2-1: config 0 descriptor?? [ 417.154418][ T7580] btree ptr not marked in member info btree allocated bitmap [ 417.154566][ T7580] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 417.203024][ T7580] btree ptr not marked in member info btree allocated bitmap [ 417.203173][ T7580] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 417.325601][ T7580] btree ptr not marked in member info btree allocated bitmap [ 417.325750][ T7580] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 417.486023][ T7580] done [ 417.522500][ T7580] bcachefs (loop3): going read-write [ 417.555253][ T7580] bcachefs (loop3): journal_replay... [ 417.669254][ T26] uclogic 0003:5543:0003.0004: unknown main item tag 0x0 [ 417.682630][ T26] uclogic 0003:5543:0003.0004: unknown main item tag 0x0 [ 417.690020][ T26] uclogic 0003:5543:0003.0004: unknown main item tag 0x0 [ 417.697607][ T26] uclogic 0003:5543:0003.0004: unknown main item tag 0x0 [ 417.705123][ T26] uclogic 0003:5543:0003.0004: unknown main item tag 0x0 [ 417.717727][ T26] uclogic 0003:5543:0003.0004: No inputs registered, leaving [ 417.768907][ T26] uclogic 0003:5543:0003.0004: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.1-1/input0 [ 417.826151][ T3972] ===================================================== [ 417.833634][ T3972] BUG: KMSAN: uninit-value in bch2_bkey_cmp_packed_inlined+0x8d0/0xd50 [ 417.848147][ T3972] bch2_bkey_cmp_packed_inlined+0x8d0/0xd50 [ 417.858863][ T3972] bch2_sort_keys_keep_unwritten_whiteouts+0xebd/0x1840 [ 417.868887][ T3972] __bch2_btree_node_write+0x3b3f/0x6870 [ 417.874910][ T3972] bch2_btree_node_write_trans+0xd7/0x890 [ 417.881423][ T3972] btree_interior_update_work+0x3eac/0x4830 [ 417.887679][ T3972] process_scheduled_works+0xc1a/0x1e80 [ 417.893546][ T3972] worker_thread+0xea7/0x14f0 [ 417.898466][ T3972] kthread+0x6b9/0xef0 [ 417.902880][ T3972] ret_from_fork+0x6d/0x90 [ 417.907471][ T3972] ret_from_fork_asm+0x1a/0x30 [ 417.912496][ T3972] [ 417.914916][ T3972] Uninit was created at: [ 417.919381][ T3972] ___kmalloc_large_node+0x22c/0x370 [ 417.926320][ T3972] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 417.932433][ T3972] __kmalloc_node_noprof+0xc96/0x1250 [ 417.937983][ T3972] __kvmalloc_node_noprof+0xc0/0x2d0 [ 417.949364][ T3972] __bch2_btree_node_mem_alloc+0x2be/0xa80 [ 417.957314][ T3972] bch2_fs_btree_cache_init+0x4f0/0xb60 [ 417.963297][ T3972] bch2_fs_open+0x4d84/0x5ba0 [ 417.968187][ T3972] bch2_fs_get_tree+0x98a/0x24e0 [ 417.973410][ T3972] vfs_get_tree+0xb1/0x5a0 [ 417.978055][ T3972] do_new_mount+0x71f/0x15e0 [ 417.982946][ T3972] path_mount+0x742/0x1f10 [ 417.987546][ T3972] __se_sys_mount+0x71f/0x800 [ 417.992503][ T3972] __x64_sys_mount+0xe4/0x150 [ 417.997467][ T3972] x64_sys_call+0x39bf/0x3c30 [ 418.002444][ T3972] do_syscall_64+0xcd/0x1e0 [ 418.007141][ T3972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.013344][ T3972] [ 418.015764][ T3972] CPU: 0 UID: 0 PID: 3972 Comm: kworker/u8:20 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 418.027476][ T3972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 418.037819][ T3972] Workqueue: btree_update btree_interior_update_work [ 418.050624][ T3972] ===================================================== [ 418.059948][ T3972] Disabling lock debugging due to kernel taint [ 418.066291][ T3972] Kernel panic - not syncing: kmsan.panic set ... [ 418.072835][ T3972] CPU: 0 UID: 0 PID: 3972 Comm: kworker/u8:20 Tainted: G B 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 418.085456][ T3972] Tainted: [B]=BAD_PAGE [ 418.089715][ T3972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 418.099925][ T3972] Workqueue: btree_update btree_interior_update_work [ 418.106841][ T3972] Call Trace: [ 418.110229][ T3972] [ 418.113266][ T3972] dump_stack_lvl+0x216/0x2d0 [ 418.118110][ T3972] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 418.124140][ T3972] dump_stack+0x1e/0x24 [ 418.128450][ T3972] panic+0x4e2/0xcf0 [ 418.132563][ T3972] ? kmsan_get_metadata+0x61/0x1c0 [ 418.137892][ T3972] kmsan_report+0x2c7/0x2d0 [ 418.142606][ T3972] ? filter_irq_stacks+0x60/0x1a0 [ 418.147829][ T3972] ? __msan_warning+0x95/0x120 [ 418.152776][ T3972] ? bch2_bkey_cmp_packed_inlined+0x8d0/0xd50 [ 418.159040][ T3972] ? bch2_sort_keys_keep_unwritten_whiteouts+0xebd/0x1840 [ 418.166374][ T3972] ? __bch2_btree_node_write+0x3b3f/0x6870 [ 418.172382][ T3972] ? bch2_btree_node_write_trans+0xd7/0x890 [ 418.178465][ T3972] ? btree_interior_update_work+0x3eac/0x4830 [ 418.184747][ T3972] ? process_scheduled_works+0xc1a/0x1e80 [ 418.190689][ T3972] ? worker_thread+0xea7/0x14f0 [ 418.195696][ T3972] ? kthread+0x6b9/0xef0 [ 418.200106][ T3972] ? ret_from_fork+0x6d/0x90 [ 418.204870][ T3972] ? ret_from_fork_asm+0x1a/0x30 [ 418.209990][ T3972] ? kmsan_get_metadata+0x13e/0x1c0 [ 418.215413][ T3972] ? kmsan_get_metadata+0x13e/0x1c0 [ 418.220821][ T3972] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 418.226828][ T3972] ? bch2_bkey_cmp_packed_inlined+0x43/0xd50 [ 418.233009][ T3972] ? filter_irq_stacks+0x60/0x1a0 [ 418.238244][ T3972] ? stack_depot_save_flags+0x2c/0x750 [ 418.243920][ T3972] ? kmsan_get_metadata+0x13e/0x1c0 [ 418.249390][ T3972] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 418.255930][ T3972] ? kmsan_get_metadata+0x13e/0x1c0 [ 418.261341][ T3972] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 418.267373][ T3972] __msan_warning+0x95/0x120 [ 418.272159][ T3972] bch2_bkey_cmp_packed_inlined+0x8d0/0xd50 [ 418.278256][ T3972] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 418.284292][ T3972] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 418.290326][ T3972] bch2_sort_keys_keep_unwritten_whiteouts+0xebd/0x1840 [ 418.297525][ T3972] __bch2_btree_node_write+0x3b3f/0x6870 [ 418.303362][ T3972] ? kmsan_get_metadata+0x13e/0x1c0 [ 418.308775][ T3972] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 418.314801][ T3972] ? kmsan_get_metadata+0x13e/0x1c0 [ 418.320205][ T3972] ? kmsan_get_metadata+0x13e/0x1c0 [ 418.325611][ T3972] ? kmsan_get_metadata+0x13e/0x1c0 [ 418.331077][ T3972] bch2_btree_node_write_trans+0xd7/0x890 [ 418.337030][ T3972] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 418.343059][ T3972] btree_interior_update_work+0x3eac/0x4830 [ 418.349215][ T3972] ? btree_interior_update_work+0x3c6f/0x4830 [ 418.355515][ T3972] ? __pfx_btree_interior_update_work+0x10/0x10 [ 418.361978][ T3972] process_scheduled_works+0xc1a/0x1e80 [ 418.367789][ T3972] worker_thread+0xea7/0x14f0 [ 418.372658][ T3972] kthread+0x6b9/0xef0 [ 418.376903][ T3972] ? __pfx_worker_thread+0x10/0x10 [ 418.382197][ T3972] ? __pfx_kthread+0x10/0x10 [ 418.386964][ T3972] ret_from_fork+0x6d/0x90 [ 418.391570][ T3972] ? __pfx_kthread+0x10/0x10 [ 418.396342][ T3972] ret_from_fork_asm+0x1a/0x30 [ 418.401309][ T3972] [ 418.404710][ T3972] Kernel Offset: disabled [ 418.409102][ T3972] Rebooting in 86400 seconds..