last executing test programs: 17m0.542864394s ago: executing program 0 (id=446): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xa0000011}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) 16m57.263385271s ago: executing program 0 (id=448): socket$inet6_sctp(0xa, 0x5, 0x84) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r0], 0x18}, 0x40c0) 16m54.458217787s ago: executing program 0 (id=453): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) syz_open_dev$media(0x0, 0xfff, 0xe2040) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x68, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000d5c000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000091c000/0x2000)=nil) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) 16m50.511177453s ago: executing program 0 (id=459): syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, 0x0) connect$llc(r1, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x80080) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) 16m49.418354869s ago: executing program 0 (id=460): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xa0000011}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x446000, 0x40) ioctl$KDSKBLED(r6, 0x4b65, 0x9) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x40, &(0x7f0000000140)={0x11, 0x8100, 0x0, 0x1, 0xfc}, 0x14) 16m47.733819067s ago: executing program 0 (id=461): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm], 0x5) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x8004881, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002807235ab62080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 16m31.600478001s ago: executing program 32 (id=461): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm], 0x5) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x8004881, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002807235ab62080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 13m48.448364971s ago: executing program 1 (id=714): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13m46.886691148s ago: executing program 1 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {0x0}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c7319", 0x19}, {0x0}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 13m45.218441264s ago: executing program 1 (id=721): syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, 0x0) connect$llc(r2, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x80080) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 13m44.321037483s ago: executing program 1 (id=722): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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") r3 = getpgrp(0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() symlink(0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) ioctl$FITRIM(r2, 0xc0185879, 0x0) write(r1, &(0x7f0000000380)="240000001a005f0400f9f4070009040180202000000001c1cbd4a479eac4876f00000000", 0x24) sigaltstack(&(0x7f0000000100)={&(0x7f00000000c0)=""/36, 0x80000002, 0x24}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') 13m40.918674951s ago: executing program 1 (id=727): modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) 13m40.287852366s ago: executing program 1 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff000300060010"], 0x40}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x4) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x56, &(0x7f0000004180)={@broadcast, @multicast, @val={@val, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x18, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xc0, '\x00', @empty}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount$nfs4(0x0, 0x0, 0x0, 0x10080, 0x0) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1300000008"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000008bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b700000000000000959a893b1dccacf46c17f891d17dd3c8c0f8e3ae6d0bdb7e4eb4904bd857a0b18277e8e4c1f404d6392287468e73da63d6d25ca5abbc46803f3f7343519a4fb547047c1b50d178e42b975c3dde5f37f16be007db631073ab1245226fe49a27477bc6d7073919b06441f9d14ecaa36a82388b00"/212], &(0x7f0000001080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r7], 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000004cc0)={0x0, 0x0, 0x0}, 0x0) 13m39.605400716s ago: executing program 33 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff000300060010"], 0x40}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x4) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x56, &(0x7f0000004180)={@broadcast, @multicast, @val={@val, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x18, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xc0, '\x00', @empty}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount$nfs4(0x0, 0x0, 0x0, 0x10080, 0x0) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1300000008"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000008bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b700000000000000959a893b1dccacf46c17f891d17dd3c8c0f8e3ae6d0bdb7e4eb4904bd857a0b18277e8e4c1f404d6392287468e73da63d6d25ca5abbc46803f3f7343519a4fb547047c1b50d178e42b975c3dde5f37f16be007db631073ab1245226fe49a27477bc6d7073919b06441f9d14ecaa36a82388b00"/212], &(0x7f0000001080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r7], 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000004cc0)={0x0, 0x0, 0x0}, 0x0) 3m13.469137765s ago: executing program 3 (id=2017): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000240), 0x2, 0x2) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000040)='btrfs\x00', 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000500)={0x923}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @value=r5}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000700)="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", 0x11e) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x5, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) creat(&(0x7f0000000580)='./file1\x00', 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m11.067010035s ago: executing program 3 (id=2021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c}, 0x14}, 0x1, 0xff07}, 0x2000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x800) 3m8.985778378s ago: executing program 3 (id=2023): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000840)) 3m8.28071256s ago: executing program 3 (id=2026): mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x130800b, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m6.879545083s ago: executing program 3 (id=2030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace$pokeuser(0x6, 0x0, 0x358, 0x800000000000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc724, 0xc000, 0xa, 0x3c}) 3m5.022205276s ago: executing program 3 (id=2033): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) syz_io_uring_setup(0x3dad, &(0x7f0000000200)={0x0, 0x5634, 0x8, 0x0, 0x20}, &(0x7f0000000280), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x10, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400, 0x1}) listen(0xffffffffffffffff, 0x5) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x41) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r4, 0x400455c8, 0x1) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) 3m3.975797528s ago: executing program 34 (id=2033): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) syz_io_uring_setup(0x3dad, &(0x7f0000000200)={0x0, 0x5634, 0x8, 0x0, 0x20}, &(0x7f0000000280), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x10, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400, 0x1}) listen(0xffffffffffffffff, 0x5) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x41) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r4, 0x400455c8, 0x1) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) 14.935349837s ago: executing program 5 (id=2416): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000009}) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) 13.799925237s ago: executing program 5 (id=2419): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@mmap={0x0, 0x1, 0x4, 0x100000, 0x9, {}, {0x4, 0x0, 0x8, 0x2, 0x8, 0x7, "2622bf50"}, 0x1, 0x1, {}, 0xffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r5, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x20064a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10040800) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) getpid() madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x660bbb32c8e0e6fb, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) 12.40791611s ago: executing program 5 (id=2423): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x20048000) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x804000000000000) 11.7199431s ago: executing program 6 (id=2426): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x100, 0x88c, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x84}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x1, 0x5, 0x4, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r2, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 11.540995526s ago: executing program 6 (id=2427): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000100)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.454235764s ago: executing program 2 (id=2428): r0 = socket$inet(0x2, 0x4000000000000001, 0x6) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)}, 0x1}, {{0x0, 0x0, 0x0}, 0x81}, {{&(0x7f00000008c0)=@can, 0x80, 0x0, 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0xfffffffa}], 0x3, 0x2, 0x0) 11.247938662s ago: executing program 2 (id=2429): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x63, 0x0, 0x0) 7.365873793s ago: executing program 6 (id=2435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x48}}, 0x0) 6.241899892s ago: executing program 6 (id=2436): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005", 0x7) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) write(r0, 0x0, 0x0) 6.047641969s ago: executing program 4 (id=2437): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) accept(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.323311523s ago: executing program 5 (id=2438): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {}, {0x5, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.874013082s ago: executing program 4 (id=2439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x7d8}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c7319", 0x19}, {0x0}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.66394863s ago: executing program 5 (id=2440): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 4.597885386s ago: executing program 4 (id=2441): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 3.506534352s ago: executing program 2 (id=2442): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000640)=@mmap={0x2e, 0x8, 0x4, 0x80e210, 0x3, {}, {0x1, 0x1, 0x80, 0xc, 0x4, 0x4, "7b066c11"}, 0xeb, 0x1, {}, 0x5}) 3.446537147s ago: executing program 4 (id=2443): syz_open_dev$midi(0x0, 0x3, 0x4a243) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x8080) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44014) recvmmsg(r2, &(0x7f0000000e00), 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff00000000020000"], 0x50}}, 0x4000850) 2.196026067s ago: executing program 2 (id=2444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x48}}, 0x0) 2.195764077s ago: executing program 4 (id=2445): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) 2.094071196s ago: executing program 5 (id=2446): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x20048000) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x804000000000000) 1.844275588s ago: executing program 4 (id=2447): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c410cf8a00000000000109022d00010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.01477642s ago: executing program 6 (id=2448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 1.009943821s ago: executing program 2 (id=2449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x7d8}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234d81e", 0x26}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c7319", 0x19}, {0x0}], 0x5}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 186.139413ms ago: executing program 2 (id=2450): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f00000002c0)={[{@resgid}, {@prjquota}, {@auto_da_alloc}, {@nobarrier}, {@noblock_validity}]}, 0xfe, 0x4bb, &(0x7f0000001180)="$eJzs3M1vVFUbAPDnTj/4pry8vLzvy4dU0dj40dKCysLEaHSniYkucGNS20KQgRpaEiFEqjG4NCTujStj9C9wpRuirkzc6t6QECUY0IWMuXPvHaal09JhPoD+fsnAOb1n5pxnzv0495yZCWDVGkz/SSI2RsTPETGQZecXGMz+u37l7MSfV85OJFGpvPZbUi137crZiaJo8bwNeWaoFFH6MMkrmW/m9Jlj4+Xy1Mk8PzJ7/J2RmdNnnjx6fPzI1JGpE2MHDx7YP/rM02NPtSTONK5rO96b3pX0vnHhlYlDF976/qveiNi+O9teH8cdKW2oJQfTwH+vVC0s9khLKrt7bKpLJ71dbAgr0hMRaXf1VY//geiJm503EC990Oh5fZ1qINA26bVpTePNczcqwP0riW63AOiO4kKf3v8Wjw4NPe4Kl5/PboDSuK/nj2xLb5TyMu281/lfRBya++vT9BF5P/y9sY0VAgCr3jfp+OeJxcZ/pdheV25zvoayJSL+FRFbI+LfEbEtIv4TUS3733w8sxLZ0lBPLX/r+LN0qengbkM6/ns2X9uaP/7LRn+VSuVGT57bVI2/Lzl8tDy1L39PhqJvTZofXaKOb1/86eNG2wbrxn/pI62/GAvm7bjUu2CCbnJ8drxVg9LL70fs6F0s/qS2EpBExP8jYsfKXnpzkTj62Be7GhVaPv4ltGCdqfJZxKNZ/8/FgvgLydLrkyNrozy1b6TYK271w4/nX21U/x3F3wJp/6+fv/8vKDFwNalfr51ZeR3nf/mo4T1ls/t/f/J6dc26P//bu+OzsydHI/qTl6v5/nN1fx+7+dwiX5RP4x/aW4t/Tf3xvzVLXEzj3xkR6U68OyIeiIg9edsfjIiHImJvowDXRXz3wsNvNxP/Hx24D0zjn1z0/Ffb/7fM7/+VJ3qOXfy6mfgzaf8fqKaG8vNw9fy3jMbNifJUelpvem8GAACAe096P70xktJwLV0qDQ9nn+HfFutL5emZ2ccPT586MZl9R2BL9JWKma6BfD40vdseTebyV8zmR8fyueJivnR/Pm/8Sc+6an54Yro82eXYYbXb0OD4T/3a0+3WAW3n+1qwei08/ktdagfQea7/sHo1c/w/14Z2AJ3n+g+rV93x/+Wp8zuriezz03tqGxZdC1jil0OAe0P99f9MF9sBdN7y4//77ecqgUJx/C+/7ne17W0BOqvZ+b/TLW4H0FF38r3+5hP90f66+lv3grG2k2/U533d6ZQVJqK0VJk3o+MNi7vibbmNRP7Tm+duq3Cy5I9ZtDHR7TMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa/wTAAD//9QP9q0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) 0s ago: executing program 6 (id=2451): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000000)='./bus/file0\x00', 0x2) kernel console output (not intermixed with test programs): itching to perfect channel medium [ 602.486788][ T9090] loop2: detected capacity change from 0 to 256 [ 602.736458][ T9090] FAT-fs (loop2): Directory bread(block 64) failed [ 602.772287][ T9090] FAT-fs (loop2): Directory bread(block 65) failed [ 602.779708][ T9090] FAT-fs (loop2): Directory bread(block 66) failed [ 602.835626][ T9090] FAT-fs (loop2): Directory bread(block 67) failed [ 602.857480][ T9090] FAT-fs (loop2): Directory bread(block 68) failed [ 602.893240][ T9090] FAT-fs (loop2): Directory bread(block 69) failed [ 602.921613][ T9090] FAT-fs (loop2): Directory bread(block 70) failed [ 602.928235][ T9090] FAT-fs (loop2): Directory bread(block 71) failed [ 602.957975][ T9090] FAT-fs (loop2): Directory bread(block 72) failed [ 602.971796][ T9090] FAT-fs (loop2): Directory bread(block 73) failed [ 606.503214][ T5777] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 607.007336][ T9124] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 609.434021][ T9138] loop3: detected capacity change from 0 to 64 [ 609.466357][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 609.662545][ T9144] loop5: detected capacity change from 0 to 512 [ 609.692097][ T9144] EXT4-fs: Ignoring removed i_version option [ 609.698187][ T9144] EXT4-fs: Ignoring removed bh option [ 609.762384][ T9138] syz.3.830: attempt to access beyond end of device [ 609.762384][ T9138] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 609.801935][ T9138] Buffer I/O error on dev loop3, logical block 512, async page read [ 609.810282][ T9138] syz.3.830: attempt to access beyond end of device [ 609.810282][ T9138] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 609.828183][ T9138] Buffer I/O error on dev loop3, logical block 56576, async page read [ 609.843585][ T9144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.926486][ T9144] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 611.040441][ T8640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.061945][ T5777] Bluetooth: hci3: command 0x1003 tx timeout [ 613.141950][ T8641] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 613.793160][ T9185] loop5: detected capacity change from 0 to 4096 [ 614.789819][ T9185] ntfs3: loop5: ino=21, "bus" attr_insert_range [ 617.574766][ T9207] loop5: detected capacity change from 0 to 32768 [ 617.625561][ T9224] netlink: 'syz.4.848': attribute type 10 has an invalid length. [ 617.692865][ T28] audit: type=1800 audit(1771650162.746:43): pid=9207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.844" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 620.477678][ T9249] loop3: detected capacity change from 0 to 4096 [ 620.829835][ T9249] ntfs3: loop3: ino=21, "bus" attr_insert_range [ 624.597847][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.604294][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.496662][ T9299] loop5: detected capacity change from 0 to 4096 [ 625.649181][ T9299] ntfs3: loop5: ino=21, "bus" attr_insert_range [ 630.397347][ T9365] loop5: detected capacity change from 0 to 4096 [ 631.637876][ T8641] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 632.084966][ T9383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.899385][ T9415] loop2: detected capacity change from 0 to 4096 [ 636.449362][ T9431] fuse: Unknown parameter 'grou00000000000000000000' [ 637.603851][ T9434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.837329][ T9415] ntfs3: loop2: Failed to read $UpCase (-4). [ 642.351652][ T8641] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 643.313470][ T9492] fuse: Unknown parameter 'grou00000000000000000000' [ 645.898400][ T9497] loop4: detected capacity change from 0 to 4096 [ 646.990415][ T9498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.397098][ T9511] loop2: detected capacity change from 0 to 1024 [ 647.514984][ T9515] loop3: detected capacity change from 0 to 128 [ 650.723542][ T9529] fuse: Unknown parameter 'group_i00000000000000000000' [ 652.121502][ T28] audit: type=1800 audit(1771650194.646:44): pid=9527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.907" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 653.196277][ T9541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.338489][ T9547] loop4: detected capacity change from 0 to 128 [ 654.366864][ T9553] loop4: detected capacity change from 0 to 1024 [ 654.394933][ T9553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 654.458010][ T9553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.531568][ T28] audit: type=1800 audit(1771650199.586:45): pid=9553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.922" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 654.650769][ T7599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.885912][ T9560] fuse: Unknown parameter 'group_i00000000000000000000' [ 657.494046][ T9574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.536088][ T9580] loop4: detected capacity change from 0 to 128 [ 658.365953][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.932'. [ 659.231864][ T9588] fuse: Unknown parameter 'group_i00000000000000000000' [ 661.403184][ T9604] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 662.587190][ T9612] loop5: detected capacity change from 0 to 128 [ 662.797398][ T9613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.779202][ T9622] fuse: Unknown parameter 'group_id00000000000000000000' [ 664.956544][ T9628] loop2: detected capacity change from 0 to 8 [ 664.997856][ T9628] SQUASHFS error: lzo decompression failed, data probably corrupt [ 665.016128][ T9628] SQUASHFS error: Failed to read block 0x28d: -5 [ 665.051745][ T9628] SQUASHFS error: Unable to read metadata cache entry [28b] [ 665.059128][ T9628] SQUASHFS error: Unable to read inode 0x11f [ 665.184406][ T5777] Bluetooth: hci1: unexpected event for opcode 0x100c [ 665.631950][ T9638] loop4: detected capacity change from 0 to 128 [ 667.327246][ T9645] fuse: Unknown parameter 'group_id00000000000000000000' [ 668.271454][ T8641] Bluetooth: hci2: command 0x0406 tx timeout [ 669.336040][ T9667] loop5: detected capacity change from 0 to 512 [ 669.592935][ T9670] fuse: Unknown parameter 'group_id00000000000000000000' [ 672.426372][ T9678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.654629][ T9700] loop4: detected capacity change from 0 to 128 [ 673.900781][ T9699] fuse: Bad value for 'user_id' [ 675.557337][ T6254] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 675.754954][ T6254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.771452][ T6254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.801823][ T6254] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 675.834943][ T6254] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 675.851720][ T6254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.880973][ T6254] usb 4-1: config 0 descriptor?? [ 676.019194][ T9705] loop2: detected capacity change from 0 to 32768 [ 676.042253][ T9705] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.970 (9705) [ 676.108197][ T9705] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 676.129501][ T9705] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 676.155721][ T9705] BTRFS info (device loop2): allowing degraded mounts [ 676.171558][ T9705] BTRFS info (device loop2): enabling auto defrag [ 676.179533][ T9705] BTRFS info (device loop2): using free space tree [ 676.359344][ T9705] BTRFS info (device loop2): enabling ssd optimizations [ 676.376447][ T6254] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 676.402750][ T9705] BTRFS info (device loop2): auto enabling async discard [ 676.425383][ T6254] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 676.741831][ T9731] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 677.055390][ T9733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.169292][ T5769] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 678.428847][ T9754] fuse: Bad value for 'user_id' [ 681.103786][ T5756] usb 4-1: USB disconnect, device number 5 [ 683.056000][ T9779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.622566][ T9787] fuse: Bad value for 'user_id' [ 686.383042][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.389398][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.475549][ T9021] IPVS: starting estimator thread 0... [ 686.591529][ T9801] IPVS: using max 20 ests per chain, 48000 per kthread [ 688.720320][ T9821] fuse: Bad value for 'fd' [ 689.822472][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 689.853105][ T9824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.678224][ T9839] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:0 [ 692.960895][ T9848] fuse: Bad value for 'fd' [ 698.244604][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 698.272556][ T9870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.513319][ T9888] fuse: Bad value for 'fd' [ 704.040374][ T5777] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 704.055010][ T5777] Bluetooth: hci4: unexpected event for opcode 0x203e [ 704.561457][ T9924] fuse: Bad value for 'fd' [ 707.984305][ T9954] fuse: Bad value for 'fd' [ 709.428832][ T5777] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 709.438312][ T5777] Bluetooth: hci4: Injecting HCI hardware error event [ 709.449317][ T5777] Bluetooth: hci4: hardware error 0x00 [ 709.729534][ T8641] Bluetooth: hci0: unexpected event for opcode 0x100c [ 711.569721][ T5777] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 712.042981][ T9980] fuse: Bad value for 'fd' [ 713.259802][ T5777] Bluetooth: hci0: unexpected event for opcode 0x100c [ 714.306376][T10005] fuse: Bad value for 'group_id' [ 716.074878][T10011] fuse: Invalid rootmode [ 717.217568][T10015] loop4: detected capacity change from 0 to 4096 [ 717.248117][T10015] ntfs3: Unknown parameter 'È' [ 717.622511][T10029] fuse: Bad value for 'group_id' [ 719.141662][T10041] fuse: Invalid rootmode [ 723.172992][T10047] block nbd5: shutting down sockets [ 723.242227][T10060] fuse: Bad value for 'group_id' [ 724.874981][T10079] loop4: detected capacity change from 0 to 2048 [ 725.472216][T10082] fuse: Invalid rootmode [ 726.680753][T10079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.240843][ T7599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.445219][T10114] fuse: Bad value for 'rootmode' [ 734.051740][T10147] fuse: Bad value for 'rootmode' [ 737.187025][T10171] loop3: detected capacity change from 0 to 128 [ 737.258747][T10171] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 738.212413][T10186] fuse: Bad value for 'rootmode' [ 740.553864][T10208] loop2: detected capacity change from 0 to 8 [ 740.571306][T10208] SQUASHFS error: lzo decompression failed, data probably corrupt [ 740.579262][T10208] SQUASHFS error: Failed to read block 0x28d: -5 [ 740.608525][T10208] SQUASHFS error: Unable to read metadata cache entry [28b] [ 740.628933][T10208] SQUASHFS error: Unable to read inode 0x11f [ 741.121388][T10213] fuse: Unknown parameter 'use00000000000000000000' [ 745.153114][T10235] fuse: Unknown parameter 'use00000000000000000000' [ 746.614350][ T28] audit: type=1326 audit(1771650291.676:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.5.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3775b9c629 code=0x7ffc0000 [ 746.681608][ T28] audit: type=1326 audit(1771650291.696:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.5.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3775b9c629 code=0x7ffc0000 [ 746.934575][T10260] fuse: Unknown parameter 'use00000000000000000000' [ 748.350452][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.356958][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.399673][ T28] audit: type=1326 audit(1771650291.706:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.5.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3775b9c629 code=0x7ffc0000 [ 748.429667][ T28] audit: type=1326 audit(1771650291.706:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.5.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3775b9c629 code=0x7ffc0000 [ 748.452328][ T28] audit: type=1326 audit(1771650291.706:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.5.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3775b9c629 code=0x7ffc0000 [ 748.476210][ T28] audit: type=1326 audit(1771650291.706:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.5.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3775b9c629 code=0x7ffc0000 [ 748.499712][ T28] audit: type=1326 audit(1771650291.706:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.5.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3775b9c629 code=0x7ffc0000 [ 748.538624][ T28] audit: type=1326 audit(1771650291.706:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.5.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3775b9c629 code=0x7ffc0000 [ 748.598067][ T28] audit: type=1326 audit(1771650291.706:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.5.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3775b9c629 code=0x7ffc0000 [ 748.666635][ T28] audit: type=1326 audit(1771650291.706:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.5.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3775b9c629 code=0x7ffc0000 [ 748.822352][T10266] loop2: detected capacity change from 0 to 4096 [ 749.297936][T10275] loop4: detected capacity change from 0 to 8 [ 749.331875][T10275] SQUASHFS error: lzo decompression failed, data probably corrupt [ 749.339779][T10275] SQUASHFS error: Failed to read block 0x28d: -5 [ 749.391631][T10275] SQUASHFS error: Unable to read metadata cache entry [28b] [ 749.398987][T10275] SQUASHFS error: Unable to read inode 0x11f [ 749.823257][T10283] fuse: Unknown parameter 'user_i00000000000000000000' [ 752.462586][T10302] netlink: 'syz.5.1155': attribute type 4 has an invalid length. [ 752.470354][T10302] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1155'. [ 752.492938][T10302] .`: renamed from bond0 (while UP) [ 752.871656][T10309] loop5: detected capacity change from 0 to 8 [ 752.917810][T10309] SQUASHFS error: lzo decompression failed, data probably corrupt [ 753.165223][T10312] fuse: Unknown parameter 'user_i00000000000000000000' [ 754.561519][T10309] SQUASHFS error: Failed to read block 0x28d: -5 [ 754.567963][T10309] SQUASHFS error: Unable to read metadata cache entry [28b] [ 754.606149][T10309] SQUASHFS error: Unable to read inode 0x11f [ 755.148936][T10324] loop5: detected capacity change from 0 to 512 [ 756.050369][T10335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1166'. [ 757.233180][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1165'. [ 757.490803][T10341] loop4: detected capacity change from 0 to 8 [ 757.523335][T10341] SQUASHFS error: lzo decompression failed, data probably corrupt [ 757.544412][T10341] SQUASHFS error: Failed to read block 0x28d: -5 [ 757.561035][T10341] SQUASHFS error: Unable to read metadata cache entry [28b] [ 757.591474][T10341] SQUASHFS error: Unable to read inode 0x11f [ 757.795894][T10347] loop4: detected capacity change from 0 to 512 [ 757.883099][T10347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.895852][T10347] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 758.267599][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 758.267629][ T28] audit: type=1800 audit(1771650303.316:62): pid=10356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1172" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 758.623781][ T7599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.209198][T10370] loop4: detected capacity change from 0 to 512 [ 762.063665][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 763.608098][T10380] fuse: Unknown parameter 'user_i00000000000000000000' [ 765.377225][T10385] trusted_key: syz.2.1182 sent an empty control message without MSG_MORE. [ 767.421594][ T6263] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 767.621986][ T6263] usb 4-1: Using ep0 maxpacket: 32 [ 767.641120][ T6263] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 767.661444][ T6263] usb 4-1: config 0 has no interface number 0 [ 767.676573][ T6263] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 767.689732][ T6263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.719084][ T6263] usb 4-1: Product: syz [ 767.729329][ T6263] usb 4-1: Manufacturer: syz [ 767.739601][ T6263] usb 4-1: SerialNumber: syz [ 767.779834][ T6263] usb 4-1: config 0 descriptor?? [ 767.798291][ T6263] smsc95xx v2.0.0 [ 768.197421][T10403] loop5: detected capacity change from 0 to 8 [ 768.214654][T10403] SQUASHFS error: lzo decompression failed, data probably corrupt [ 768.225504][T10403] SQUASHFS error: Failed to read block 0x28d: -5 [ 768.232938][T10403] SQUASHFS error: Unable to read metadata cache entry [28b] [ 768.240274][T10403] SQUASHFS error: Unable to read inode 0x11f [ 768.303124][ T6263] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 768.323897][ T6263] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 768.441729][ T5777] Bluetooth: hci2: unexpected event for opcode 0x9dc1 [ 768.750200][T10409] loop5: detected capacity change from 0 to 512 [ 769.310398][ T6263] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 769.998802][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1187'. [ 770.826343][ T6263] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 770.838231][ T6263] usb 4-1: USB disconnect, device number 6 [ 770.854731][ T8386] udevd[8386]: setting mode of /dev/bus/usb/004/006 to 020664 failed: No such file or directory [ 771.017024][ T8386] udevd[8386]: setting owner of /dev/bus/usb/004/006 to uid=0, gid=0 failed: No such file or directory [ 771.926224][T10421] fuse: Unknown parameter 'user_id00000000000000000000' [ 773.562892][T10428] loop2: detected capacity change from 0 to 8 [ 773.610987][T10428] SQUASHFS error: lzo decompression failed, data probably corrupt [ 773.631559][T10428] SQUASHFS error: Failed to read block 0x28d: -5 [ 773.637970][T10428] SQUASHFS error: Unable to read metadata cache entry [28b] [ 773.649622][T10428] SQUASHFS error: Unable to read inode 0x11f [ 773.730381][ T5777] Bluetooth: hci1: unexpected event for opcode 0x9dc1 [ 773.733540][ T8375] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 778.403119][T10460] loop2: detected capacity change from 0 to 8 [ 778.446485][T10460] SQUASHFS error: lzo decompression failed, data probably corrupt [ 778.462463][T10460] SQUASHFS error: Failed to read block 0x28d: -5 [ 778.468828][T10460] SQUASHFS error: Unable to read metadata cache entry [28b] [ 778.479969][T10460] SQUASHFS error: Unable to read inode 0x11f [ 778.649882][ T34] Bluetooth: Error in BCSP hdr checksum [ 778.684302][ T8641] Bluetooth: hci1: unexpected event for opcode 0x9dc1 [ 778.931023][ T1324] Bluetooth: Error in BCSP hdr checksum [ 779.165756][ T34] Bluetooth: Error in BCSP hdr checksum [ 780.289770][T10463] loop5: detected capacity change from 0 to 4096 [ 780.662274][ T5777] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 780.662319][ T8641] Bluetooth: hci3: command 0x1003 tx timeout [ 780.773723][T10463] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 784.395767][T10483] fuse: Unknown parameter 'user_id00000000000000000000' [ 785.969944][T10485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.312277][T10493] loop5: detected capacity change from 0 to 4096 [ 790.806054][T10515] fuse: Unknown parameter 'user_id00000000000000000000' [ 793.461403][ T6283] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 794.861675][ T6283] usb 3-1: Using ep0 maxpacket: 32 [ 795.370786][ T6283] usb 3-1: device descriptor read/all, error -71 [ 795.439782][T10534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.002662][T10551] loop2: detected capacity change from 0 to 32768 [ 797.020655][T10551] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1233 (10551) [ 797.043061][T10551] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 797.053495][T10551] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 797.062317][T10551] BTRFS info (device loop2): using free space tree [ 797.218162][T10551] BTRFS info (device loop2): enabling ssd optimizations [ 797.225320][T10551] BTRFS info (device loop2): auto enabling async discard [ 798.424809][T10569] fuse: Bad value for 'fd' [ 799.813685][ T5769] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 803.938024][ T51] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 804.262270][T10595] loop4: detected capacity change from 0 to 256 [ 804.301838][T10595] exFAT-fs (loop4): bogus number of FAT structure [ 804.308333][T10595] exFAT-fs (loop4): failed to read boot sector [ 804.316082][T10595] exFAT-fs (loop4): failed to recognize exfat type [ 804.374280][T10597] loop5: detected capacity change from 0 to 1024 [ 804.673078][ T6998] hfsplus: b-tree write err: -5, ino 4 [ 805.874769][T10607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.951560][ T5777] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 807.960307][ T5777] Bluetooth: hci2: Injecting HCI hardware error event [ 807.997438][ T5777] Bluetooth: hci2: hardware error 0x00 [ 808.111462][ T51] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 809.012921][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.019514][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.271442][ T5777] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 813.652906][ T5777] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 813.849089][T10641] loop4: detected capacity change from 0 to 256 [ 813.951217][T10641] FAT-fs (loop4): Directory bread(block 64) failed [ 813.975363][T10641] FAT-fs (loop4): Directory bread(block 65) failed [ 813.998097][T10641] FAT-fs (loop4): Directory bread(block 66) failed [ 814.018077][T10641] FAT-fs (loop4): Directory bread(block 67) failed [ 814.038831][T10641] FAT-fs (loop4): Directory bread(block 68) failed [ 814.051547][T10641] FAT-fs (loop4): Directory bread(block 69) failed [ 814.086224][T10641] FAT-fs (loop4): Directory bread(block 70) failed [ 814.117740][T10641] FAT-fs (loop4): Directory bread(block 71) failed [ 814.132456][T10641] FAT-fs (loop4): Directory bread(block 72) failed [ 814.143550][T10641] FAT-fs (loop4): Directory bread(block 73) failed [ 814.875055][T10649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.129569][T10660] loop3: detected capacity change from 0 to 256 [ 815.152835][T10660] exFAT-fs (loop3): bogus number of FAT structure [ 815.189973][T10660] exFAT-fs (loop3): failed to read boot sector [ 815.206750][T10660] exFAT-fs (loop3): failed to recognize exfat type [ 817.821548][ T5777] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 817.830588][ T5777] Bluetooth: hci1: Injecting HCI hardware error event [ 818.309963][ T5777] Bluetooth: hci1: hardware error 0x00 [ 818.885698][T10679] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.893331][T10679] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.927199][T10679] bridge0: entered allmulticast mode [ 819.407643][T10682] loop5: detected capacity change from 0 to 128 [ 819.453697][T10682] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 819.541522][T10682] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 819.690081][T10682] fscrypt (loop5, inode 12): Mutually exclusive encryption flags (0x0c) [ 819.869512][ T8640] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 820.341718][ T5777] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 820.659439][T10688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.582636][T10711] netlink: 'syz.2.1272': attribute type 4 has an invalid length. [ 823.590449][T10711] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1272'. [ 823.603612][T10711] .`: renamed from bond0 [ 825.670896][T10733] loop4: detected capacity change from 0 to 40427 [ 825.679616][T10733] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 825.687474][T10733] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 825.699862][T10733] F2FS-fs (loop4): invalid crc value [ 825.719435][T10733] F2FS-fs (loop4): Found nat_bits in checkpoint [ 825.786301][T10733] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 825.793596][T10733] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 826.737336][T10745] loop2: detected capacity change from 0 to 128 [ 826.803906][T10727] loop5: detected capacity change from 0 to 32768 [ 827.381066][T10748] netlink: 'syz.5.1284': attribute type 4 has an invalid length. [ 827.389296][T10748] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1284'. [ 827.646632][T10751] loop5: detected capacity change from 0 to 64 [ 827.973417][T10749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.325112][T10788] netlink: 'syz.2.1294': attribute type 4 has an invalid length. [ 832.481000][T10788] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1294'. [ 832.959113][T10794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.176471][T10783] loop5: detected capacity change from 0 to 32768 [ 833.221688][ T6283] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 833.238073][T10783] read_mapping_page failed! [ 833.263308][T10783] ERROR: (device loop5): txCommit: [ 833.263308][T10783] [ 833.441390][ T6283] usb 4-1: Using ep0 maxpacket: 16 [ 833.458407][ T6283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 833.555194][ T6283] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 833.571681][ T6283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.580156][ T6283] usb 4-1: Product: syz [ 833.585387][ T6283] usb 4-1: Manufacturer: syz [ 833.601462][ T6283] usb 4-1: SerialNumber: syz [ 833.633595][ T6283] usb 4-1: config 0 descriptor?? [ 833.678058][ T6283] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 833.689067][ T6283] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 834.833642][ T6283] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 835.176290][ T6283] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 835.186225][ T6283] em28xx 4-1:0.0: board has no eeprom [ 835.271525][ T6283] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 835.283827][ T6283] em28xx 4-1:0.0: dvb set to bulk mode. [ 835.297366][ T5756] em28xx 4-1:0.0: Binding DVB extension [ 836.568858][ T6283] usb 4-1: USB disconnect, device number 7 [ 836.577450][ T6283] em28xx 4-1:0.0: Disconnecting em28xx [ 837.132875][T10823] loop3: detected capacity change from 0 to 128 [ 837.259661][ T5756] em28xx 4-1:0.0: Registering input extension [ 837.295262][ T6283] em28xx 4-1:0.0: Closing input extension [ 837.369033][ T6283] em28xx 4-1:0.0: Freeing device [ 837.817546][T10828] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 838.719587][T10831] netlink: 'syz.4.1305': attribute type 4 has an invalid length. [ 838.727590][T10831] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1305'. [ 838.746268][T10831] .`: renamed from bond0 (while UP) [ 839.025092][T10843] loop4: detected capacity change from 0 to 128 [ 839.048398][T10837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.229942][T10843] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 839.262866][T10843] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 839.713777][ T7599] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 841.419105][T10867] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 841.592778][T10869] loop2: detected capacity change from 0 to 128 [ 843.506806][T10892] loop5: detected capacity change from 0 to 128 [ 843.523828][T10885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.549017][T10892] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 843.563499][T10892] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 844.088554][ T8640] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 844.975212][T10909] loop5: detected capacity change from 0 to 128 [ 845.128557][T10910] loop3: detected capacity change from 0 to 1024 [ 845.236601][T10910] syz.3.1328: attempt to access beyond end of device [ 845.236601][T10910] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 845.250730][T10910] Buffer I/O error on dev loop3, logical block 458752, async page read [ 845.260332][T10910] syz.3.1328: attempt to access beyond end of device [ 845.260332][T10910] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 845.287950][T10910] Buffer I/O error on dev loop3, logical block 458752, async page read [ 846.361378][T10902] loop2: detected capacity change from 0 to 40427 [ 846.383160][T10902] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 846.395716][T10902] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 846.405718][T10902] F2FS-fs (loop2): heap/no_heap options were deprecated [ 846.419727][T10902] F2FS-fs (loop2): invalid crc value [ 846.444189][T10902] F2FS-fs (loop2): Found nat_bits in checkpoint [ 846.537674][T10902] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 846.557401][T10902] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 846.707871][ T5769] syz-executor: attempt to access beyond end of device [ 846.707871][ T5769] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 846.735359][ T5769] F2FS-fs (loop2): Remounting filesystem read-only [ 846.872733][T10923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.973667][T10929] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 848.945761][T10936] loop2: detected capacity change from 0 to 128 [ 848.990796][T10936] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 849.009211][T10936] ext4 filesystem being mounted at /343/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 849.236338][ T5769] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 849.969599][T10949] fuse: Unknown parameter 'fd0x0000000000000004' [ 851.026122][T10954] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 853.175200][T10960] loop4: detected capacity change from 0 to 1024 [ 853.355345][ T7004] hfsplus: b-tree write err: -5, ino 4 [ 853.553612][T10961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.063446][T10970] loop3: detected capacity change from 0 to 128 [ 854.110091][T10970] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 854.154006][T10970] ext4 filesystem being mounted at /335/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 854.842510][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 855.078731][T10982] netlink: 'syz.3.1351': attribute type 4 has an invalid length. [ 855.087195][T10982] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1351'. [ 855.099112][T10982] .`: renamed from bond0 [ 857.814356][T11004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 857.865317][T11010] loop3: detected capacity change from 0 to 128 [ 857.898358][T11010] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 857.936999][T11010] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 858.115005][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 863.029572][T11045] loop4: detected capacity change from 0 to 128 [ 863.122986][T11045] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 863.159634][T11045] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 864.775016][T11043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.883668][ T7599] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 865.993623][T11046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.415769][T11102] loop3: detected capacity change from 0 to 1024 [ 869.479199][T11102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 869.900333][T11102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 870.027900][ T28] audit: type=1800 audit(1771650415.086:63): pid=11102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1388" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 870.351931][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.358363][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.757384][T11113] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 870.907387][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.138030][T11142] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 878.940799][T11169] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 879.478345][T11175] loop5: detected capacity change from 0 to 4096 [ 879.880229][T11182] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 880.238707][T11188] fuse: Invalid rootmode [ 881.072073][T11194] loop4: detected capacity change from 0 to 4096 [ 881.765921][T11199] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 885.541567][ T8641] Bluetooth: hci3: command 0x1003 tx timeout [ 885.562152][ T5777] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 885.904962][T11220] fuse: Bad value for 'rootmode' [ 886.155108][T11225] loop3: detected capacity change from 0 to 2048 [ 886.269995][T11225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.616501][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.342048][ T49] Bluetooth: Error in BCSP hdr checksum [ 889.738171][ T34] Bluetooth: Error in BCSP hdr checksum [ 891.301469][ T8641] Bluetooth: hci3: command 0x1003 tx timeout [ 891.308485][ T5777] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 891.414974][T10822] Bluetooth: Error in BCSP hdr checksum [ 891.431763][ T6985] Bluetooth: Error in BCSP hdr checksum [ 891.446714][T11252] fuse: Bad value for 'rootmode' [ 895.712667][T11286] fuse: Bad value for 'rootmode' [ 895.885504][T11289] loop2: detected capacity change from 0 to 256 [ 895.998429][T11289] exFAT-fs (loop2): bogus number of FAT structure [ 896.065294][ T34] Bluetooth: Error in BCSP hdr checksum [ 896.128751][T11289] exFAT-fs (loop2): failed to read boot sector [ 896.237911][T11289] exFAT-fs (loop2): failed to recognize exfat type [ 896.323518][ T49] Bluetooth: Error in BCSP hdr checksum [ 896.571824][ T6263] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 896.676073][ T6985] Bluetooth: Error in BCSP hdr checksum [ 896.860167][ T6263] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 896.974360][ T6263] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 897.108858][ T6263] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 897.258676][ T6263] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 897.470077][ T6263] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 897.595305][ T6263] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 897.675026][ T6263] usb 6-1: Product: syz [ 897.720199][ T6263] usb 6-1: Manufacturer: syz [ 897.876104][T11298] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 898.044212][ T6263] cdc_wdm 6-1:1.0: skipping garbage [ 898.102023][ T5777] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 898.109590][ T8641] Bluetooth: hci3: command 0x1003 tx timeout [ 898.153173][ T6263] cdc_wdm 6-1:1.0: skipping garbage [ 898.158505][ T6263] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 898.283945][ T6263] usb 6-1: USB disconnect, device number 2 [ 900.520838][T11330] loop4: detected capacity change from 0 to 256 [ 900.609503][T11330] exFAT-fs (loop4): bogus number of FAT structure [ 900.623822][T11330] exFAT-fs (loop4): failed to read boot sector [ 900.644496][T11330] exFAT-fs (loop4): failed to recognize exfat type [ 900.714927][ T8375] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 900.748229][ T8375] Buffer I/O error on dev loop4, logical block 1, async page read [ 900.780322][ T8375] udevd: attempt to access beyond end of device [ 900.780322][ T8375] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 900.814937][ T8375] Buffer I/O error on dev loop4, logical block 2, async page read [ 900.845432][ T8375] udevd: attempt to access beyond end of device [ 900.845432][ T8375] loop4: rw=0, sector=3, nr_sectors = 1 limit=0 [ 900.905228][ T8375] Buffer I/O error on dev loop4, logical block 3, async page read [ 900.949618][ T8375] udevd: attempt to access beyond end of device [ 900.949618][ T8375] loop4: rw=0, sector=4, nr_sectors = 1 limit=0 [ 900.980714][ T8375] Buffer I/O error on dev loop4, logical block 4, async page read [ 901.019839][ T8375] udevd: attempt to access beyond end of device [ 901.019839][ T8375] loop4: rw=0, sector=5, nr_sectors = 1 limit=0 [ 901.066073][ T8375] Buffer I/O error on dev loop4, logical block 5, async page read [ 901.095712][ T8375] udevd: attempt to access beyond end of device [ 901.095712][ T8375] loop4: rw=0, sector=6, nr_sectors = 1 limit=0 [ 901.119361][ T8375] Buffer I/O error on dev loop4, logical block 6, async page read [ 901.127883][ T8375] udevd: attempt to access beyond end of device [ 901.127883][ T8375] loop4: rw=0, sector=7, nr_sectors = 1 limit=0 [ 901.173628][ T8375] Buffer I/O error on dev loop4, logical block 7, async page read [ 904.434513][T11365] loop5: detected capacity change from 0 to 256 [ 904.465581][T11365] exFAT-fs (loop5): bogus number of FAT structure [ 904.476431][T11365] exFAT-fs (loop5): failed to read boot sector [ 904.484448][T11365] exFAT-fs (loop5): failed to recognize exfat type [ 904.954249][T11367] loop2: detected capacity change from 0 to 4096 [ 906.106013][T11380] loop5: detected capacity change from 0 to 128 [ 907.380219][T11391] loop2: detected capacity change from 0 to 128 [ 907.388442][T11391] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 907.445969][T11393] loop3: detected capacity change from 0 to 256 [ 907.465921][T11391] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 907.477459][T11393] exFAT-fs (loop3): bogus number of FAT structure [ 907.495693][T11393] exFAT-fs (loop3): failed to read boot sector [ 907.517884][T11393] exFAT-fs (loop3): failed to recognize exfat type [ 909.799954][T11417] loop2: detected capacity change from 0 to 256 [ 909.833040][T11417] exFAT-fs (loop2): bogus number of FAT structure [ 909.853789][T11417] exFAT-fs (loop2): failed to read boot sector [ 909.868972][T11417] exFAT-fs (loop2): failed to recognize exfat type [ 910.868849][T11428] loop2: detected capacity change from 0 to 128 [ 912.804851][T11444] loop3: detected capacity change from 0 to 256 [ 912.837760][T11444] exFAT-fs (loop3): bogus number of FAT structure [ 912.845606][T11444] exFAT-fs (loop3): failed to read boot sector [ 912.852523][T11444] exFAT-fs (loop3): failed to recognize exfat type [ 913.222162][T11453] loop3: detected capacity change from 0 to 4096 [ 913.258185][T11453] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 914.205533][T11466] loop5: detected capacity change from 0 to 128 [ 916.664284][T11479] loop3: detected capacity change from 0 to 256 [ 916.692071][T11479] exFAT-fs (loop3): bogus number of FAT structure [ 916.699977][T11479] exFAT-fs (loop3): failed to read boot sector [ 916.723731][T11479] exFAT-fs (loop3): failed to recognize exfat type [ 919.102716][ T34] Bluetooth: Error in BCSP hdr checksum [ 919.363027][T10822] Bluetooth: Error in BCSP hdr checksum [ 920.901663][ T51] Bluetooth: hci3: command 0x1003 tx timeout [ 920.901698][T11301] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 921.427038][T11508] loop3: detected capacity change from 0 to 256 [ 921.471193][T11508] exFAT-fs (loop3): bogus number of FAT structure [ 921.512995][T11508] exFAT-fs (loop3): failed to read boot sector [ 921.558243][T11508] exFAT-fs (loop3): failed to recognize exfat type [ 924.709170][ T6998] Bluetooth: Error in BCSP hdr checksum [ 924.968346][ T49] Bluetooth: Error in BCSP hdr checksum [ 925.224573][ T7004] Bluetooth: Error in BCSP hdr checksum [ 925.489360][T11525] overlayfs: missing 'lowerdir' [ 926.741451][T11301] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 926.741602][ T51] Bluetooth: hci3: command 0x1003 tx timeout [ 926.843733][T11527] loop3: detected capacity change from 0 to 128 [ 927.699910][T11533] loop4: detected capacity change from 0 to 256 [ 927.749804][T11533] exFAT-fs (loop4): bogus number of FAT structure [ 927.779444][T11533] exFAT-fs (loop4): failed to read boot sector [ 927.824628][T11533] exFAT-fs (loop4): failed to recognize exfat type [ 929.833328][T11555] o2cb: This node has not been configured. [ 929.840187][T11555] o2cb: Cluster check failed. Fix errors before retrying. [ 929.847751][T11555] (syz.3.1539,11555,1):user_dlm_register:674 ERROR: status = -22 [ 929.855618][T11555] (syz.3.1539,11555,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 932.649649][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.658948][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.946942][T11569] loop5: detected capacity change from 0 to 128 [ 933.352425][T11574] loop5: detected capacity change from 0 to 256 [ 933.362886][T11574] exFAT-fs (loop5): bogus number of FAT structure [ 933.379885][T11574] exFAT-fs (loop5): failed to read boot sector [ 933.389861][T11574] exFAT-fs (loop5): failed to recognize exfat type [ 934.661608][ T5777] Bluetooth: hci3: command 0x1003 tx timeout [ 934.662694][T11301] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 934.903494][T11581] loop4: detected capacity change from 0 to 128 [ 935.193490][T11590] loop4: detected capacity change from 0 to 128 [ 938.821790][ T5777] Bluetooth: hci3: command 0x1003 tx timeout [ 938.829665][T11301] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 944.440118][ T6998] Bluetooth: Error in BCSP hdr checksum [ 946.341535][T11301] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 949.805659][ T6998] nci: nci_rx_work: unknown MT 0x5 [ 950.520612][T11689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 952.667494][T11691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 953.221765][T11301] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 959.083478][ T49] nci: nci_rx_work: unknown MT 0x5 [ 959.149685][ T6998] Bluetooth: Error in BCSP hdr checksum [ 959.155436][T11739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.091625][T11742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 961.222575][ T5777] Bluetooth: hci3: command 0x1003 tx timeout [ 961.230971][T11301] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 965.790799][T11800] loop5: detected capacity change from 0 to 32768 [ 965.805740][ T6998] nci: nci_rx_work: unknown MT 0x5 [ 965.822410][T11800] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1611 (11800) [ 965.866857][T11800] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 965.877668][T11800] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 965.910843][T11800] BTRFS info (device loop5): using free space tree [ 966.070021][T11800] BTRFS info (device loop5): enabling ssd optimizations [ 966.093824][T11800] BTRFS info (device loop5): auto enabling async discard [ 966.215562][ T8640] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 966.503333][T11806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 966.683082][T11833] loop3: detected capacity change from 0 to 128 [ 969.095168][T11807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 971.702691][T11858] netlink: 'syz.3.1624': attribute type 27 has an invalid length. [ 972.496799][T11871] loop5: detected capacity change from 0 to 128 [ 974.191899][T11875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.207770][T11876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 977.222398][ T6254] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 977.431293][ T6254] usb 5-1: Using ep0 maxpacket: 32 [ 977.439344][ T6254] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 977.458820][ T6254] usb 5-1: config 0 has no interface number 0 [ 977.482050][ T6254] usb 5-1: config 0 interface 12 has no altsetting 0 [ 977.521762][ T6254] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 977.540090][ T6254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.577949][ T6254] usb 5-1: Product: syz [ 977.596961][ T6254] usb 5-1: Manufacturer: syz [ 977.613888][ T6254] usb 5-1: SerialNumber: syz [ 977.633701][ T6254] usb 5-1: config 0 descriptor?? [ 978.361903][T11907] loop2: detected capacity change from 0 to 32768 [ 978.391573][T11907] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1639 (11907) [ 978.446296][T11907] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 978.465317][T11907] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 978.475175][T11907] BTRFS info (device loop2): using free space tree [ 978.570872][T11907] BTRFS info (device loop2): enabling ssd optimizations [ 978.595410][T11907] BTRFS info (device loop2): auto enabling async discard [ 978.823912][ T5769] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 978.916918][ T6254] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 978.944336][ T6254] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 978.955711][ T6254] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 978.991889][ T6254] f81534: probe of 5-1:0.12 failed with error -71 [ 979.059884][ T6254] usb 5-1: USB disconnect, device number 2 [ 981.107405][T11930] loop5: detected capacity change from 0 to 128 [ 981.911829][T11941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 984.096428][T11960] loop2: detected capacity change from 0 to 32768 [ 984.112683][T11960] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1650 (11960) [ 984.150263][T11960] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 984.178875][T11960] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 984.207529][T11960] BTRFS info (device loop2): using free space tree [ 986.003834][T11960] BTRFS info (device loop2): enabling ssd optimizations [ 986.059897][T11960] BTRFS info (device loop2): auto enabling async discard [ 986.736666][ T5769] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 987.019110][ T8375] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 988.119472][T11996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 989.306638][T12018] fuse: Bad value for 'fd' [ 990.341198][T11997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 990.577740][T12022] loop3: detected capacity change from 0 to 256 [ 990.623684][T12022] exFAT-fs (loop3): bogus number of FAT structure [ 990.630172][T12022] exFAT-fs (loop3): failed to read boot sector [ 990.681362][T12022] exFAT-fs (loop3): failed to recognize exfat type [ 993.226897][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.233497][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.215696][ T6283] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 994.421793][ T6283] usb 3-1: Using ep0 maxpacket: 32 [ 994.429304][ T6283] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 994.442018][ T6283] usb 3-1: config 0 has no interface number 0 [ 994.453752][ T6283] usb 3-1: config 0 interface 12 has no altsetting 0 [ 994.493733][ T6283] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 994.512324][ T6283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.532927][ T6283] usb 3-1: Product: syz [ 994.545119][ T6283] usb 3-1: Manufacturer: syz [ 994.556535][ T6283] usb 3-1: SerialNumber: syz [ 994.566384][T12039] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.575593][T12039] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.587996][ T6283] usb 3-1: config 0 descriptor?? [ 995.037156][T12070] loop5: detected capacity change from 0 to 256 [ 995.107550][T12070] exFAT-fs (loop5): bogus number of FAT structure [ 995.120200][T12070] exFAT-fs (loop5): failed to read boot sector [ 995.127546][T12070] exFAT-fs (loop5): failed to recognize exfat type [ 995.901870][T12039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.991196][T12039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.177459][ T6283] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 997.196488][ T6283] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 997.207142][ T6283] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 997.215384][ T6283] f81534: probe of 3-1:0.12 failed with error -71 [ 997.231611][ T6283] usb 3-1: USB disconnect, device number 6 [ 997.290315][T12039] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.307426][T12039] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.319063][T12039] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.336791][T12039] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.989990][T12096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1681'. [ 998.278403][T12100] loop2: detected capacity change from 0 to 256 [ 998.316603][T12100] exFAT-fs (loop2): bogus number of FAT structure [ 998.370417][T12100] exFAT-fs (loop2): failed to read boot sector [ 998.413627][T12100] exFAT-fs (loop2): failed to recognize exfat type [ 998.830570][T12109] loop2: detected capacity change from 0 to 128 [ 1000.941797][T12127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1691'. [ 1001.032042][T12129] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 1001.298848][T12136] loop2: detected capacity change from 0 to 256 [ 1001.328538][T12136] exFAT-fs (loop2): bogus number of FAT structure [ 1001.357168][T12136] exFAT-fs (loop2): failed to read boot sector [ 1001.375896][T12141] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1001.389912][T12136] exFAT-fs (loop2): failed to recognize exfat type [ 1002.162224][T12153] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1701'. [ 1002.241406][T12054] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1002.433102][T12054] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1002.446561][T12054] usb 4-1: config 0 has no interface number 0 [ 1002.478813][T12054] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1002.547676][T12054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.585652][T12054] usb 4-1: Product: syz [ 1002.598380][T12054] usb 4-1: Manufacturer: syz [ 1002.619028][T12054] usb 4-1: SerialNumber: syz [ 1002.654288][T12054] usb 4-1: config 0 descriptor?? [ 1002.917719][T12054] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1002.967663][T12054] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1002.998715][T12054] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1003.027353][T12054] usb 4-1: media controller created [ 1003.137725][T12054] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1003.310911][T12054] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1003.437415][T12054] usb 4-1: USB disconnect, device number 8 [ 1003.519220][T12163] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1003.827333][T12167] loop3: detected capacity change from 0 to 256 [ 1003.854419][T12167] exFAT-fs (loop3): bogus number of FAT structure [ 1003.860906][T12167] exFAT-fs (loop3): failed to read boot sector [ 1003.904204][T12167] exFAT-fs (loop3): failed to recognize exfat type [ 1004.257068][T12179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1710'. [ 1004.296300][T12180] netlink: 'syz.3.1711': attribute type 4 has an invalid length. [ 1004.304417][T12180] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1711'. [ 1004.697493][T12184] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1006.648551][T12201] loop5: detected capacity change from 0 to 256 [ 1006.668438][T12201] exFAT-fs (loop5): bogus number of FAT structure [ 1006.691625][T12201] exFAT-fs (loop5): failed to read boot sector [ 1006.703539][T12201] exFAT-fs (loop5): failed to recognize exfat type [ 1008.178388][T12218] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1008.294832][T12221] netlink: 'syz.2.1726': attribute type 4 has an invalid length. [ 1008.302963][T12221] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1726'. [ 1011.338182][T12238] loop3: detected capacity change from 0 to 128 [ 1012.754651][T12249] loop5: detected capacity change from 0 to 256 [ 1012.786873][T12249] exFAT-fs (loop5): bogus number of FAT structure [ 1012.802696][T12249] exFAT-fs (loop5): failed to read boot sector [ 1012.808916][T12249] exFAT-fs (loop5): failed to recognize exfat type [ 1012.830498][T12251] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1012.861401][T12240] binder: 12235:12240 ioctl 4018620d 0 returned -22 [ 1016.591122][T12269] netlink: 'syz.5.1742': attribute type 4 has an invalid length. [ 1016.636008][T12269] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1742'. [ 1017.101352][ T6283] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1017.339285][ T6283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1017.372426][ T6283] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1017.405780][ T6283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.427246][ T6283] usb 5-1: Product: syz [ 1017.437446][ T6283] usb 5-1: Manufacturer: syz [ 1017.457670][ T6283] usb 5-1: SerialNumber: syz [ 1017.482563][ T6283] usb 5-1: config 0 descriptor?? [ 1017.521768][ T6283] hub 5-1:0.0: bad descriptor, ignoring hub [ 1017.527765][ T6283] hub: probe of 5-1:0.0 failed with error -5 [ 1017.552020][ T6283] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 1019.643968][T12293] loop5: detected capacity change from 0 to 256 [ 1019.667579][T12293] exFAT-fs (loop5): bogus number of FAT structure [ 1019.686727][T12293] exFAT-fs (loop5): failed to read boot sector [ 1019.717637][T12293] exFAT-fs (loop5): failed to recognize exfat type [ 1021.729735][T12305] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1021.830249][T12065] usb 5-1: USB disconnect, device number 3 [ 1022.568171][ C1] hrtimer: interrupt took 37563 ns [ 1031.220322][T12061] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1031.505030][T12061] usb 6-1: Using ep0 maxpacket: 32 [ 1031.529043][T12061] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1031.561238][T12061] usb 6-1: config 0 has no interface number 0 [ 1031.590117][T12061] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1031.629225][T12061] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1031.658797][T12061] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.704077][T12061] usb 6-1: Product: syz [ 1031.708398][T12061] usb 6-1: Manufacturer: syz [ 1031.745036][T12061] usb 6-1: SerialNumber: syz [ 1031.773425][T12061] usb 6-1: config 0 descriptor?? [ 1032.841613][T12061] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1032.857315][T12061] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1032.867675][T12061] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1032.875858][T12061] f81534: probe of 6-1:0.12 failed with error -71 [ 1032.892328][T12061] usb 6-1: USB disconnect, device number 3 [ 1038.965231][T12435] netlink: 'syz.5.1786': attribute type 4 has an invalid length. [ 1038.973314][T12435] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1786'. [ 1039.312383][T12447] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1041.449563][T12473] loop5: detected capacity change from 0 to 1024 [ 1041.480046][T12473] EXT4-fs: inline encryption not supported [ 1041.646572][T12473] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1041.688734][T12473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.918690][ T28] audit: type=1800 audit(1771650842.981:64): pid=12480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1797" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1042.909074][T12486] o2cb: This node has not been configured. [ 1042.915080][T12486] o2cb: Cluster check failed. Fix errors before retrying. [ 1042.922375][T12486] (syz.4.1798,12486,0):user_dlm_register:674 ERROR: status = -22 [ 1042.930275][T12486] (syz.4.1798,12486,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1043.739247][ T8640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.453010][T12527] o2cb: This node has not been configured. [ 1047.459014][T12527] o2cb: Cluster check failed. Fix errors before retrying. [ 1047.466492][T12527] (syz.2.1810,12527,0):user_dlm_register:674 ERROR: status = -22 [ 1047.474452][T12527] (syz.2.1810,12527,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1048.312107][T12061] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1048.714214][T12061] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.729238][T12061] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1048.741543][T12061] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1048.776132][T12061] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1048.785698][T12061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.823606][T12061] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1048.836134][T12061] usb 6-1: invalid MIDI out EP 0 [ 1049.388775][T12061] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 1050.658864][T12054] usb 6-1: USB disconnect, device number 4 [ 1051.442019][T12563] o2cb: This node has not been configured. [ 1051.447980][T12563] o2cb: Cluster check failed. Fix errors before retrying. [ 1051.455562][T12563] (syz.3.1821,12563,1):user_dlm_register:674 ERROR: status = -22 [ 1051.463486][T12563] (syz.3.1821,12563,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1056.437079][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.443596][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.252418][T12596] o2cb: This node has not been configured. [ 1057.258643][T12596] o2cb: Cluster check failed. Fix errors before retrying. [ 1057.265925][T12596] (syz.3.1831,12596,0):user_dlm_register:674 ERROR: status = -22 [ 1057.273854][T12596] (syz.3.1831,12596,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1071.610120][T12693] syz.5.1860 (12693) used greatest stack depth: 19848 bytes left [ 1085.094821][T12786] loop2: detected capacity change from 0 to 32768 [ 1085.127263][T12786] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1890 (12786) [ 1085.145155][T12786] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1085.155635][T12786] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1085.164383][T12786] BTRFS info (device loop2): using free space tree [ 1085.312830][T12786] BTRFS info (device loop2): enabling ssd optimizations [ 1085.319908][T12786] BTRFS info (device loop2): auto enabling async discard [ 1085.870616][T12810] o2cb: This node has not been configured. [ 1085.876646][T12810] o2cb: Cluster check failed. Fix errors before retrying. [ 1085.884238][T12810] (syz.3.1893,12810,1):user_dlm_register:674 ERROR: status = -22 [ 1085.892084][T12810] (syz.3.1893,12810,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1088.274923][ T5769] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1094.654922][T12856] loop3: detected capacity change from 0 to 512 [ 1094.891677][T12856] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1094.898646][T12856] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1096.060789][T12856] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1096.069483][T12856] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1096.076718][T12856] EXT4-fs (loop3): 1 orphan inode deleted [ 1096.083896][T12856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1096.753607][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.292699][T12905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.339170][T12905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.049305][T12926] o2cb: This node has not been configured. [ 1109.055342][T12926] o2cb: Cluster check failed. Fix errors before retrying. [ 1109.062783][T12926] (syz.2.1926,12926,1):user_dlm_register:674 ERROR: status = -22 [ 1109.070560][T12926] (syz.2.1926,12926,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1114.821556][T12962] o2cb: This node has not been configured. [ 1114.827441][T12962] o2cb: Cluster check failed. Fix errors before retrying. [ 1114.835053][T12962] (syz.4.1936,12962,0):user_dlm_register:674 ERROR: status = -22 [ 1114.843058][T12962] (syz.4.1936,12962,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1116.064327][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.070958][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.460279][ T5777] Bluetooth: hci3: command 0x1003 tx timeout [ 1116.497998][T11301] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1117.217601][T12976] netlink: 'syz.4.1940': attribute type 4 has an invalid length. [ 1118.724032][T12990] o2cb: This node has not been configured. [ 1118.730057][T12990] o2cb: Cluster check failed. Fix errors before retrying. [ 1118.737403][T12990] (syz.3.1945,12990,1):user_dlm_register:674 ERROR: status = -22 [ 1118.745174][T12990] (syz.3.1945,12990,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1121.085291][T13002] o2cb: This node has not been configured. [ 1121.091179][T13002] o2cb: Cluster check failed. Fix errors before retrying. [ 1121.098546][T13002] (syz.2.1948,13002,0):user_dlm_register:674 ERROR: status = -22 [ 1121.106507][T13002] (syz.2.1948,13002,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1123.124170][T12061] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1123.324718][T12061] usb 3-1: Using ep0 maxpacket: 32 [ 1123.354883][T12061] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1123.386460][T12061] usb 3-1: config 0 has no interface number 0 [ 1123.415312][T12061] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1123.432377][T12061] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1123.454145][T12061] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.494194][T12061] usb 3-1: Product: syz [ 1123.518717][T12061] usb 3-1: Manufacturer: syz [ 1123.523526][T12061] usb 3-1: SerialNumber: syz [ 1123.577484][T12061] usb 3-1: config 0 descriptor?? [ 1123.986950][T13022] o2cb: This node has not been configured. [ 1123.992959][T13022] o2cb: Cluster check failed. Fix errors before retrying. [ 1124.000507][T13022] (syz.5.1954,13022,1):user_dlm_register:674 ERROR: status = -22 [ 1124.008566][T13022] (syz.5.1954,13022,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1124.213989][T11301] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1124.909080][ T5777] Bluetooth: hci3: command 0x1003 tx timeout [ 1125.841852][T12061] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1125.863511][T12061] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1125.870885][T12061] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1125.899112][T12061] f81534: probe of 3-1:0.12 failed with error -71 [ 1125.949902][T12061] usb 3-1: USB disconnect, device number 7 [ 1127.085351][T13037] o2cb: This node has not been configured. [ 1127.091301][T13037] o2cb: Cluster check failed. Fix errors before retrying. [ 1127.098721][T13037] (syz.2.1958,13037,0):user_dlm_register:674 ERROR: status = -22 [ 1127.106613][T13037] (syz.2.1958,13037,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1133.167241][T13063] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1135.196395][T11301] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1135.203363][ T51] Bluetooth: hci3: command 0x1003 tx timeout [ 1135.956713][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 1137.287320][T13088] 8021q: VLANs not supported on wg2 [ 1139.083759][T13093] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1975'. [ 1145.365498][T13129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1986'. [ 1148.189126][T13153] loop4: detected capacity change from 0 to 2048 [ 1148.302436][T13153] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1150.289159][T13161] o2cb: This node has not been configured. [ 1150.295177][T13161] o2cb: Cluster check failed. Fix errors before retrying. [ 1150.302647][T13161] (syz.2.1994,13161,0):user_dlm_register:674 ERROR: status = -22 [ 1150.310511][T13161] (syz.2.1994,13161,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1150.470730][T11301] Bluetooth: hci3: command 0x1003 tx timeout [ 1150.488481][ T5777] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1151.040704][T13167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1996'. [ 1159.003318][ T5777] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1162.200400][T13236] loop3: detected capacity change from 0 to 32768 [ 1162.242744][T13236] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2017 (13236) [ 1162.274845][T13236] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1162.285129][T13236] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1162.293761][T13236] BTRFS info (device loop3): using free space tree [ 1162.527990][T13236] BTRFS info (device loop3): enabling ssd optimizations [ 1162.535057][T13236] BTRFS info (device loop3): auto enabling async discard [ 1164.306826][ T5768] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1171.065841][T13298] loop2: detected capacity change from 0 to 32768 [ 1171.152838][T13298] [ 1171.152838][T13298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1171.152838][T13298] [ 1171.283015][T13298] ERROR: (device loop2): diWrite: ixpxd invalid [ 1171.283015][T13298] [ 1171.316181][T13298] ERROR: (device loop2): txCommit: [ 1171.316181][T13298] [ 1171.712464][ T5769] [ 1171.712464][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1171.712464][ T5769] [ 1171.769844][ T5769] [ 1171.769844][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1171.769844][ T5769] [ 1173.986966][T13324] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2039'. [ 1174.300847][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1174.318796][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1174.331033][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1174.339514][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1174.348954][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1174.356509][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1176.142026][T13341] loop5: detected capacity change from 0 to 4096 [ 1176.411287][T13341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.427699][T11301] Bluetooth: hci0: command tx timeout [ 1177.688595][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.695008][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.509322][T11301] Bluetooth: hci0: command tx timeout [ 1178.629418][ T8640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.609394][T13378] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2049'. [ 1180.757404][T13329] chnl_net:caif_netlink_parms(): no params data found [ 1180.766094][T11301] Bluetooth: hci0: command tx timeout [ 1182.745469][T13329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.794505][T13329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.801738][T13329] bridge_slave_0: entered allmulticast mode [ 1182.824402][ T5777] Bluetooth: hci0: command tx timeout [ 1182.834986][T13329] bridge_slave_0: entered promiscuous mode [ 1182.904657][T13329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.924612][T13329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.958052][T13329] bridge_slave_1: entered allmulticast mode [ 1182.995027][T13329] bridge_slave_1: entered promiscuous mode [ 1183.536377][T13423] loop2: detected capacity change from 0 to 64 [ 1183.670635][T13329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.707513][T13329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.315056][T13329] team0: Port device team_slave_0 added [ 1184.409868][T13329] team0: Port device team_slave_1 added [ 1184.513076][T13329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.580280][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.678798][T13329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.977613][T13435] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2059'. [ 1185.011469][T13329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.080436][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1185.106517][ C1] vkms_vblank_simulate: vblank timer overrun [ 1185.155659][T13329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.060771][T13329] hsr_slave_0: entered promiscuous mode [ 1186.131726][T13329] hsr_slave_1: entered promiscuous mode [ 1186.197854][T13329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1186.205788][T13329] Cannot create hsr debugfs directory [ 1187.149460][T13448] o2cb: This node has not been configured. [ 1187.155480][T13448] o2cb: Cluster check failed. Fix errors before retrying. [ 1187.162953][T13448] (syz.2.2064,13448,0):user_dlm_register:674 ERROR: status = -22 [ 1187.170783][T13448] (syz.2.2064,13448,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1191.202665][ T12] hsr_slave_0: left promiscuous mode [ 1191.287283][ T12] hsr_slave_1: left promiscuous mode [ 1191.437972][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1191.521237][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1191.569237][T13473] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2071'. [ 1191.618368][ T12] bridge_slave_1: left allmulticast mode [ 1191.698231][ T12] bridge_slave_1: left promiscuous mode [ 1191.745803][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.876186][ T12] bridge_slave_0: left allmulticast mode [ 1191.904437][ T12] bridge_slave_0: left promiscuous mode [ 1191.935371][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.677341][T13491] o2cb: This node has not been configured. [ 1193.683547][T13491] o2cb: Cluster check failed. Fix errors before retrying. [ 1193.690788][T13491] (syz.2.2074,13491,1):user_dlm_register:674 ERROR: status = -22 [ 1193.698547][T13491] (syz.2.2074,13491,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1196.926249][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1197.023097][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1197.116987][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.230903][ T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1198.135108][ T12] .` (unregistering): Released all slaves [ 1199.158750][T13329] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1199.279002][T13531] o2cb: This node has not been configured. [ 1199.284881][T13531] o2cb: Cluster check failed. Fix errors before retrying. [ 1199.292463][T13531] (syz.4.2083,13531,1):user_dlm_register:674 ERROR: status = -22 [ 1199.300812][T13531] (syz.4.2083,13531,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1199.520993][T13329] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1199.681485][T13329] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1199.861848][T13329] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1199.899245][T13536] Bluetooth: MGMT ver 1.22 [ 1199.904081][T13536] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 1200.363325][ T12] IPVS: stop unused estimator thread 0... [ 1200.757066][T13329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.797813][T13329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1201.821302][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.828539][ T6988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.907721][ T6988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.914990][ T6988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.000827][T13574] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2090'. [ 1204.467144][T13329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.480554][T13586] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 1206.634611][T13329] veth0_vlan: entered promiscuous mode [ 1206.794826][T13329] veth1_vlan: entered promiscuous mode [ 1207.520008][T13329] veth0_macvtap: entered promiscuous mode [ 1207.583588][T13329] veth1_macvtap: entered promiscuous mode [ 1207.695946][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1207.905739][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.214923][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1208.226417][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.238425][T13329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1208.435049][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1208.452368][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.472800][T13329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1208.541535][T13329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.584864][T13329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1208.667153][T13329] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.731585][T13329] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.740378][T13329] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.784953][T13329] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.852933][T13631] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2099'. [ 1209.121938][ T6985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.161696][ T6985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.262943][ T6985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.328517][ T6985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.791801][T13676] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2107'. [ 1215.536747][T13691] loop4: detected capacity change from 0 to 65 [ 1215.595865][T13691] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 1218.662794][T13721] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2118'. [ 1223.067906][ T5777] Bluetooth: min 32857 > max 0 [ 1223.589275][T13772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2129'. [ 1225.133723][ T5777] Bluetooth: hci0: command tx timeout [ 1238.906736][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.913156][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.952349][T12063] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1249.132487][T12063] usb 7-1: device descriptor read/64, error -71 [ 1249.518788][T14043] o2cb: This node has not been configured. [ 1249.525014][T14043] o2cb: Cluster check failed. Fix errors before retrying. [ 1249.532278][T14043] (syz.2.2187,14043,1):user_dlm_register:674 ERROR: status = -22 [ 1249.540047][T14043] (syz.2.2187,14043,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1249.824477][T12063] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1250.170710][T12063] usb 7-1: device descriptor read/64, error -71 [ 1250.351987][T12063] usb usb7-port1: attempt power cycle [ 1250.991362][T12063] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1251.230134][T12063] usb 7-1: device not accepting address 4, error -71 [ 1253.663508][T14093] o2cb: This node has not been configured. [ 1253.669572][T14093] o2cb: Cluster check failed. Fix errors before retrying. [ 1253.676822][T14093] (syz.6.2198,14093,0):user_dlm_register:674 ERROR: status = -22 [ 1253.684700][T14093] (syz.6.2198,14093,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1257.136453][T14146] o2cb: This node has not been configured. [ 1257.142401][T14146] o2cb: Cluster check failed. Fix errors before retrying. [ 1257.149667][T14146] (syz.6.2212,14146,1):user_dlm_register:674 ERROR: status = -22 [ 1257.157497][T14146] (syz.6.2212,14146,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1257.807013][T12061] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1258.127150][T12061] usb 5-1: Using ep0 maxpacket: 32 [ 1258.402290][T12061] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1258.462676][T12061] usb 5-1: config 0 has no interface number 0 [ 1258.586085][T12061] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1258.788754][T12061] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1258.905232][T12061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.936198][T12061] usb 5-1: Product: syz [ 1258.945906][T12061] usb 5-1: Manufacturer: syz [ 1258.962436][T12061] usb 5-1: SerialNumber: syz [ 1258.991335][T12061] usb 5-1: config 0 descriptor?? [ 1259.723119][T12061] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1259.756086][T12061] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1259.843107][T12061] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1260.003764][T12061] f81534: probe of 5-1:0.12 failed with error -71 [ 1260.380573][T12061] usb 5-1: USB disconnect, device number 4 [ 1260.741557][T14187] loop6: detected capacity change from 0 to 65 [ 1260.767566][T14187] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 1261.026168][T14189] o2cb: This node has not been configured. [ 1261.032150][T14189] o2cb: Cluster check failed. Fix errors before retrying. [ 1261.039408][T14189] (syz.4.2222,14189,1):user_dlm_register:674 ERROR: status = -22 [ 1261.047254][T14189] (syz.4.2222,14189,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1263.684133][ T6283] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1263.992747][ T6283] usb 7-1: Using ep0 maxpacket: 32 [ 1264.190786][ T6283] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1264.209403][ T6283] usb 7-1: config 0 has no interface number 0 [ 1264.243732][ T6283] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1264.324333][ T6283] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1264.358797][ T6283] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.424667][ T6283] usb 7-1: Product: syz [ 1264.439326][ T6283] usb 7-1: Manufacturer: syz [ 1264.448698][ T6283] usb 7-1: SerialNumber: syz [ 1264.481669][ T6283] usb 7-1: config 0 descriptor?? [ 1264.796668][T14239] o2cb: This node has not been configured. [ 1264.802622][T14239] o2cb: Cluster check failed. Fix errors before retrying. [ 1264.809987][T14239] (syz.5.2234,14239,1):user_dlm_register:674 ERROR: status = -22 [ 1264.817825][T14239] (syz.5.2234,14239,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1265.127879][ T6283] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1265.171244][ T6283] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1265.222906][ T6283] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1265.303904][ T6283] f81534: probe of 7-1:0.12 failed with error -71 [ 1265.333799][ T6283] usb 7-1: USB disconnect, device number 6 [ 1266.337957][T14254] loop6: detected capacity change from 0 to 65 [ 1266.404294][T14254] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 1266.866061][T14233] loop2: detected capacity change from 0 to 32768 [ 1266.955748][T14233] [ 1266.955748][T14233] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1266.955748][T14233] [ 1267.812135][ T5769] [ 1267.812135][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1267.812135][ T5769] [ 1267.961304][ T5769] [ 1267.961304][ T5769] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1267.961304][ T5769] [ 1268.266186][T14284] o2cb: This node has not been configured. [ 1268.272439][T14284] o2cb: Cluster check failed. Fix errors before retrying. [ 1268.279614][T14284] (syz.4.2243,14284,0):user_dlm_register:674 ERROR: status = -22 [ 1268.287612][T14284] (syz.4.2243,14284,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1269.091887][T12063] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1269.546825][T12063] usb 3-1: Using ep0 maxpacket: 32 [ 1269.590352][T12063] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1269.621132][T12063] usb 3-1: config 0 has no interface number 0 [ 1269.627319][T12063] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1269.689134][T12063] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1269.735546][T12063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.771028][T12063] usb 3-1: Product: syz [ 1269.785481][T12063] usb 3-1: Manufacturer: syz [ 1269.800426][T12063] usb 3-1: SerialNumber: syz [ 1269.837946][T12063] usb 3-1: config 0 descriptor?? [ 1270.345410][ T6988] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.493528][T12063] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1270.516152][T12063] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1270.537578][T12063] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1270.566255][T12063] f81534: probe of 3-1:0.12 failed with error -71 [ 1270.572548][ T6988] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.600411][T12063] usb 3-1: USB disconnect, device number 8 [ 1270.707438][ T6988] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.783002][T14312] loop4: detected capacity change from 0 to 65 [ 1270.799750][T14312] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 1270.952468][ T6988] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.262710][T14356] o2cb: This node has not been configured. [ 1273.269177][T14356] o2cb: Cluster check failed. Fix errors before retrying. [ 1273.276473][T14356] (syz.2.2257,14356,0):user_dlm_register:674 ERROR: status = -22 [ 1273.284465][T14356] (syz.2.2257,14356,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1273.702800][T11301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1273.732241][T11301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1273.762445][T11301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1273.772148][T11301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1273.786782][T11301] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1273.794710][T11301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1273.926476][T14362] loop2: detected capacity change from 0 to 65 [ 1273.989015][T14362] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 1274.888261][T12061] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1275.103291][T12061] usb 3-1: Using ep0 maxpacket: 32 [ 1275.127240][T12061] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1275.168342][T12061] usb 3-1: config 0 has no interface number 0 [ 1275.174554][T12061] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1275.195168][T12061] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1275.218334][T12061] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.226431][T12061] usb 3-1: Product: syz [ 1275.238464][T12061] usb 3-1: Manufacturer: syz [ 1275.243129][T12061] usb 3-1: SerialNumber: syz [ 1275.267470][T12061] usb 3-1: config 0 descriptor?? [ 1275.613152][T14355] chnl_net:caif_netlink_parms(): no params data found [ 1275.726880][ T6988] hsr_slave_0: left promiscuous mode [ 1275.738779][ T6988] hsr_slave_1: left promiscuous mode [ 1275.754408][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.784803][ T6988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.802912][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.811219][ T6988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1275.830535][ T6988] bridge_slave_1: left allmulticast mode [ 1275.848846][ T6988] bridge_slave_1: left promiscuous mode [ 1275.869263][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.891121][ T6988] bridge_slave_0: left allmulticast mode [ 1275.896945][ T6988] bridge_slave_0: left promiscuous mode [ 1275.903434][T11301] Bluetooth: hci0: command tx timeout [ 1275.914805][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.984633][ T6988] veth1_macvtap: left promiscuous mode [ 1275.992574][ T6988] veth0_macvtap: left promiscuous mode [ 1275.998976][ T6988] veth1_vlan: left promiscuous mode [ 1276.004635][ T6988] veth0_vlan: left promiscuous mode [ 1276.188562][T12061] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1276.198946][T12061] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1276.206404][T12061] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1276.214439][T12061] f81534: probe of 3-1:0.12 failed with error -71 [ 1276.231033][T12061] usb 3-1: USB disconnect, device number 9 [ 1277.099843][T14407] fuse: Unknown parameter '0x0000000000000003' [ 1277.321768][T14401] o2cb: This node has not been configured. [ 1277.337037][T14401] o2cb: Cluster check failed. Fix errors before retrying. [ 1277.346699][T14401] (syz.5.2267,14401,1):user_dlm_register:674 ERROR: status = -22 [ 1277.354625][T14401] (syz.5.2267,14401,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1278.001294][T11301] Bluetooth: hci0: command tx timeout [ 1280.284963][T11301] Bluetooth: hci0: command tx timeout [ 1281.837920][ T6988] team0 (unregistering): Port device team_slave_1 removed [ 1282.025542][ T6988] team0 (unregistering): Port device team_slave_0 removed [ 1282.209272][ T6988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.294539][T11301] Bluetooth: hci0: command tx timeout [ 1282.361645][ T6988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1285.346199][T14469] o2cb: This node has not been configured. [ 1285.352166][T14469] o2cb: Cluster check failed. Fix errors before retrying. [ 1285.359504][T14469] (syz.2.2286,14469,0):user_dlm_register:674 ERROR: status = -22 [ 1285.367381][T14469] (syz.2.2286,14469,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1285.805804][T14473] netlink: set zone limit has 8 unknown bytes [ 1286.741433][ T6988] bond0 (unregistering): Released all slaves [ 1287.309571][T14355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.317931][T14355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.325848][T14355] bridge_slave_0: entered allmulticast mode [ 1287.333935][T14355] bridge_slave_0: entered promiscuous mode [ 1287.343601][T14355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.350905][T14355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.359978][T14355] bridge_slave_1: entered allmulticast mode [ 1287.368063][T14355] bridge_slave_1: entered promiscuous mode [ 1287.533714][T14355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.552582][T12052] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1287.580951][T14355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.735084][T14355] team0: Port device team_slave_0 added [ 1287.782363][T12052] usb 6-1: Using ep0 maxpacket: 32 [ 1287.815816][T12052] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1287.842252][T12052] usb 6-1: config 0 has no interface number 0 [ 1287.851721][T12052] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1287.862393][T14355] team0: Port device team_slave_1 added [ 1287.892247][T12052] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1287.941313][T12052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.966090][T12052] usb 6-1: Product: syz [ 1287.992517][T12052] usb 6-1: Manufacturer: syz [ 1287.997186][T12052] usb 6-1: SerialNumber: syz [ 1288.009921][T14355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.050707][T14355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.124784][T12052] usb 6-1: config 0 descriptor?? [ 1288.629520][T14355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.703156][T14355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.747877][T14355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.816807][T14355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.947331][T14355] hsr_slave_0: entered promiscuous mode [ 1288.958259][T14355] hsr_slave_1: entered promiscuous mode [ 1289.129936][T12052] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1289.148341][T12052] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1289.172148][T12052] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1289.190522][T12052] f81534: probe of 6-1:0.12 failed with error -71 [ 1290.017588][T12052] usb 6-1: USB disconnect, device number 5 [ 1291.202290][T14542] o2cb: This node has not been configured. [ 1291.208970][T14542] o2cb: Cluster check failed. Fix errors before retrying. [ 1291.219002][T14542] (syz.2.2300,14542,0):user_dlm_register:674 ERROR: status = -22 [ 1291.227597][T14542] (syz.2.2300,14542,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1291.276506][T14541] loop4: detected capacity change from 0 to 4096 [ 1291.492366][T14544] loop5: detected capacity change from 0 to 4096 [ 1291.566672][T14544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1291.756604][T14355] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1291.794165][T14355] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1291.808189][ T8640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.859827][T14355] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1291.926533][T14355] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1293.219888][T14355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.278294][T14355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.302145][T13873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.309367][T13873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.532110][T13873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.539347][T13873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.535113][T14355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.198171][T12065] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1295.227560][T14592] loop5: detected capacity change from 0 to 128 [ 1295.410382][T12065] usb 3-1: Using ep0 maxpacket: 32 [ 1295.430542][T12065] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1295.441857][T14355] veth0_vlan: entered promiscuous mode [ 1295.447658][T12065] usb 3-1: config 0 has no interface number 0 [ 1295.476357][T12065] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1295.489198][T14355] veth1_vlan: entered promiscuous mode [ 1295.505471][T12065] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1295.528395][T12065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.557712][T12065] usb 3-1: Product: syz [ 1295.562076][T12065] usb 3-1: Manufacturer: syz [ 1295.566714][T12065] usb 3-1: SerialNumber: syz [ 1295.594646][T14355] veth0_macvtap: entered promiscuous mode [ 1295.609231][T12065] usb 3-1: config 0 descriptor?? [ 1295.634381][T14355] veth1_macvtap: entered promiscuous mode [ 1295.686812][T14355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.718784][T14355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.739079][T14355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.755950][T14355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.768707][T14355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.786369][T14355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.817738][T14355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.873941][T14355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.908041][T14355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.929296][T14355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.942983][T14597] loop4: detected capacity change from 0 to 256 [ 1295.954201][T14355] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.971526][T14355] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.983902][T14355] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.998439][T14355] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.274986][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.298610][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.421846][ T6988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.537650][ T6988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.387863][T12065] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1297.395546][T12065] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1297.403118][T12065] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1297.412107][T12065] f81534: probe of 3-1:0.12 failed with error -71 [ 1297.427591][T12065] usb 3-1: USB disconnect, device number 10 [ 1300.291022][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.301738][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.337662][T14628] o2cb: This node has not been configured. [ 1300.343672][T14628] o2cb: Cluster check failed. Fix errors before retrying. [ 1300.350970][T14628] (syz.5.2316,14628,0):user_dlm_register:674 ERROR: status = -22 [ 1300.358982][T14628] (syz.5.2316,14628,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1300.545166][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1300.574264][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1300.588604][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1300.599737][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1300.624931][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1300.632647][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1301.486281][T14630] chnl_net:caif_netlink_parms(): no params data found [ 1301.998220][T14630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.024795][T14630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.032654][T14630] bridge_slave_0: entered allmulticast mode [ 1302.065519][T14645] loop5: detected capacity change from 0 to 512 [ 1302.073461][T14630] bridge_slave_0: entered promiscuous mode [ 1302.292440][T14645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1302.394903][T12052] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1302.424722][T14645] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1302.514922][ T8640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.548881][T14630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.588289][T12052] usb 5-1: Using ep0 maxpacket: 32 [ 1302.591815][T14630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.612898][T12052] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1302.635701][T14630] bridge_slave_1: entered allmulticast mode [ 1302.642224][T12052] usb 5-1: config 0 has no interface number 0 [ 1302.642287][T12052] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1302.678249][T12052] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1302.695187][ T5777] Bluetooth: hci3: command tx timeout [ 1302.707676][T14630] bridge_slave_1: entered promiscuous mode [ 1302.712449][T12052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.736535][T12052] usb 5-1: Product: syz [ 1302.740776][T12052] usb 5-1: Manufacturer: syz [ 1302.750507][T12052] usb 5-1: SerialNumber: syz [ 1302.806828][T12052] usb 5-1: config 0 descriptor?? [ 1303.035868][T14630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.949287][T14630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.546483][T14660] o2cb: This node has not been configured. [ 1304.552482][T14660] o2cb: Cluster check failed. Fix errors before retrying. [ 1304.559754][T14660] (syz.6.2327,14660,1):user_dlm_register:674 ERROR: status = -22 [ 1304.567726][T14660] (syz.6.2327,14660,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1304.606162][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1304.618902][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1304.626856][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1304.640394][T12052] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1304.652693][T12052] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1304.675822][T12052] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1304.685965][T12052] f81534: probe of 5-1:0.12 failed with error -71 [ 1304.711639][T14630] team0: Port device team_slave_0 added [ 1304.718500][T12052] usb 5-1: USB disconnect, device number 5 [ 1304.744950][T14630] team0: Port device team_slave_1 added [ 1304.763613][ T5777] Bluetooth: hci3: command tx timeout [ 1304.915728][T14630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.947692][T14630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1304.965768][T14665] syz.5.2328 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1305.063182][T14630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.109350][T14630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.128282][T14630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.195835][T14630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.368426][T14673] loop4: detected capacity change from 0 to 2048 [ 1305.406949][T14673] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003] [ 1305.439868][T14673] System zones: 0-7 [ 1305.472129][T14673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1305.512663][T14673] EXT4-fs error (device loop4): ext4_ext_precache:627: inode #2: comm syz.4.2331: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1305.586300][T14630] hsr_slave_0: entered promiscuous mode [ 1305.596724][T14673] EXT4-fs (loop4): Remounting filesystem read-only [ 1305.611623][T14630] hsr_slave_1: entered promiscuous mode [ 1305.619862][T14630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1305.628082][T14630] Cannot create hsr debugfs directory [ 1305.770361][ T7599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.860738][T14681] loop6: detected capacity change from 0 to 512 [ 1306.842218][ T5777] Bluetooth: hci3: command tx timeout [ 1307.143898][T14700] o2cb: This node has not been configured. [ 1307.150431][T14700] o2cb: Cluster check failed. Fix errors before retrying. [ 1307.157939][T14700] (syz.4.2336,14700,1):user_dlm_register:674 ERROR: status = -22 [ 1307.165879][T14700] (syz.4.2336,14700,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1307.512782][T14707] loop6: detected capacity change from 0 to 512 [ 1308.961206][ T5777] Bluetooth: hci3: command tx timeout [ 1309.019641][T14707] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1309.028005][T14707] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1309.036572][T14707] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1309.043217][T14707] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1309.052712][T14707] EXT4-fs warning (device loop6): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1309.067327][T14707] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1309.080082][T14707] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.2337: bg 0: block 40: padding at end of block bitmap is not set [ 1309.100203][T14707] EXT4-fs (loop6): Remounting filesystem read-only [ 1309.106889][T14707] EXT4-fs (loop6): 1 truncate cleaned up [ 1309.113553][T14707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1309.368689][T14707] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.537464][T14712] loop6: detected capacity change from 0 to 512 [ 1309.642627][T14712] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1309.748373][T14712] EXT4-fs error (device loop6): ext4_orphan_get:1398: inode #15: comm syz.6.2338: inode has both inline data and extents flags [ 1309.812294][T14712] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.2338: couldn't read orphan inode 15 (err -117) [ 1309.831802][T14712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1310.199970][T14712] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1310.429934][T14355] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.512705][ T3445] hsr_slave_0: left promiscuous mode [ 1310.574925][ T3445] hsr_slave_1: left promiscuous mode [ 1310.611024][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.637608][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.682112][ T3445] bridge_slave_1: left allmulticast mode [ 1310.688008][ T3445] bridge_slave_1: left promiscuous mode [ 1310.707224][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.776628][ T3445] bridge_slave_0: left allmulticast mode [ 1310.795695][ T3445] bridge_slave_0: left promiscuous mode [ 1310.810624][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.881145][T14745] loop6: detected capacity change from 0 to 65 [ 1310.929055][T14745] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 1312.321996][T14750] loop4: detected capacity change from 0 to 32768 [ 1312.393785][T14750] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1312.642884][T14750] XFS (loop4): Ending clean mount [ 1312.684390][T14750] XFS (loop4): Quotacheck needed: Please wait. [ 1312.834813][T14750] XFS (loop4): Quotacheck: Done. [ 1312.871251][ T28] audit: type=1800 audit(1771651114.057:65): pid=14750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2346" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 1313.162649][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 1313.174225][ T7599] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1313.407001][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 1313.578510][ T3445] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.757243][ T3445] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1314.724360][T14784] o2cb: This node has not been configured. [ 1314.730362][T14784] o2cb: Cluster check failed. Fix errors before retrying. [ 1314.737551][T14784] (syz.4.2353,14784,0):user_dlm_register:674 ERROR: status = -22 [ 1314.745671][T14784] (syz.4.2353,14784,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1314.876408][ T3445] .` (unregistering): Released all slaves [ 1314.998598][T14630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1315.017447][T14740] netlink: 'syz.5.2344': attribute type 1 has an invalid length. [ 1315.105212][T14740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.138007][T14743] macvlan2: entered promiscuous mode [ 1315.143682][T14743] macvlan2: entered allmulticast mode [ 1315.154668][T14743] bond0: entered allmulticast mode [ 1315.166013][T14743] bond0: entered promiscuous mode [ 1315.176273][T14743] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1315.188112][T14743] team0: Port device macvlan2 added [ 1315.213765][T14746] bond0: (slave ip6gretap2): making interface the new active one [ 1315.308358][T14746] ip6gretap2: entered promiscuous mode [ 1315.314094][T14746] ip6gretap2: entered allmulticast mode [ 1315.344857][T14746] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1315.362389][T14787] loop4: detected capacity change from 0 to 65 [ 1315.439695][T14787] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 1315.492179][T14630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1315.520216][T14630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1315.590999][T14630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1316.715437][T14630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1316.896380][T14630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.318604][T13873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.325755][T13873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.389826][T13873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.397054][T13873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.844217][ T3445] IPVS: stop unused estimator thread 0... [ 1320.110595][T14816] loop4: detected capacity change from 0 to 256 [ 1320.182817][T14816] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1320.325601][ T28] audit: type=1800 audit(1771651121.520:66): pid=14816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2364" name="file1" dev="loop4" ino=1048709 res=0 errno=0 [ 1320.452887][T14820] loop6: detected capacity change from 0 to 65 [ 1320.501028][T14630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.520679][T14820] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 1320.715226][T14630] veth0_vlan: entered promiscuous mode [ 1320.761532][T14630] veth1_vlan: entered promiscuous mode [ 1320.862942][T14630] veth0_macvtap: entered promiscuous mode [ 1321.098597][T14825] o2cb: This node has not been configured. [ 1321.104480][T14825] o2cb: Cluster check failed. Fix errors before retrying. [ 1321.111771][T14825] (syz.5.2361,14825,0):user_dlm_register:674 ERROR: status = -22 [ 1321.119603][T14825] (syz.5.2361,14825,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1321.533340][T14630] veth1_macvtap: entered promiscuous mode [ 1321.751842][T14630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.844679][T14630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.874749][T14630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.905066][T14630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.921496][T14630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.932559][T14630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.947355][T14630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1321.958278][T14630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.969486][T14630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.994616][T14630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.018242][T14630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.031000][T14630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.048655][T14630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.063131][T14630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1322.121434][T14630] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.143791][T14630] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.162396][T14630] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.166892][T14833] block device autoloading is deprecated and will be removed. [ 1322.183585][T14630] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.405552][ T6998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.413465][ T6998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.804380][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.875777][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.387356][T14857] loop5: detected capacity change from 0 to 128 [ 1324.425877][T14857] FAT-fs (loop5): bogus number of reserved sectors [ 1324.618191][T14857] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1325.000980][T14857] bridge0: port 3(veth0_to_bond) entered blocking state [ 1325.040011][T14857] bridge0: port 3(veth0_to_bond) entered disabled state [ 1325.070930][T14857] veth0_to_bond: entered allmulticast mode [ 1325.126893][T14857] veth0_to_bond: entered promiscuous mode [ 1325.203209][T12062] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1325.510415][T12062] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.631800][T12062] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1325.641360][T12062] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.653569][T12062] usb 7-1: config 0 descriptor?? [ 1325.673208][T14874] fuse: Bad value for 'fd' [ 1325.918606][T12062] usbhid 7-1:0.0: can't add hid device: -71 [ 1325.941251][T12062] usbhid: probe of 7-1:0.0 failed with error -71 [ 1325.980421][T12062] usb 7-1: USB disconnect, device number 7 [ 1326.128958][T14878] loop4: detected capacity change from 0 to 65 [ 1326.161912][T14878] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 1326.552550][T12062] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1327.052463][T12062] usb 7-1: Using ep0 maxpacket: 16 [ 1327.094167][T12062] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.116276][T12062] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1327.136588][T12062] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1327.164218][T12062] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.204078][T12062] usb 7-1: config 0 descriptor?? [ 1327.263864][T14887] loop4: detected capacity change from 0 to 4096 [ 1327.303272][T14887] ntfs3: loop4: mft corrupted [ 1327.308744][T14887] ntfs3: loop4: Failed to load $MFT. [ 1328.024118][T12062] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 1328.244874][T12062] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 1328.294952][T12062] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 1328.306991][T12062] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 1328.332786][T12062] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 1328.358329][T12062] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1328.457249][T14900] o2cb: This node has not been configured. [ 1328.463410][T14900] o2cb: Cluster check failed. Fix errors before retrying. [ 1328.470657][T14900] (syz.5.2378,14900,0):user_dlm_register:674 ERROR: status = -22 [ 1328.478515][T14900] (syz.5.2378,14900,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1328.555498][T12062] usb 7-1: USB disconnect, device number 8 [ 1328.627816][T14899] fido_id[14899]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1329.140175][T14906] fuse: Bad value for 'fd' [ 1330.550150][T14924] loop4: detected capacity change from 0 to 512 [ 1330.629677][T14924] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.2393: bg 0: block 5: invalid block bitmap [ 1330.776735][T14924] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 1330.833611][T14924] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2393: invalid indirect mapped block 3 (level 2) [ 1330.931575][T14924] EXT4-fs (loop4): 1 orphan inode deleted [ 1330.968109][T14924] EXT4-fs (loop4): 1 truncate cleaned up [ 1331.183075][T14924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1332.052225][T14924] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1422: inode #12: block 7: comm syz.4.2393: path /455/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 1332.429481][T14809] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1332.897608][T14809] usb 5-1: Using ep0 maxpacket: 8 [ 1332.918048][T14809] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1332.939146][T14809] usb 5-1: config 179 has no interface number 0 [ 1332.956658][T14809] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1332.979357][T14809] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1333.002079][T14809] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1333.019370][T14809] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1333.033275][T14809] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1333.068662][T14809] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1333.078487][T14809] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1333.099269][T14809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.454518][T14809] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8 [ 1333.961489][T14809] usb 5-1: USB disconnect, device number 6 [ 1333.967439][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1333.999967][ T7599] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.030594][T14809] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1335.813643][T14966] o2cb: This node has not been configured. [ 1335.819634][T14966] o2cb: Cluster check failed. Fix errors before retrying. [ 1335.826771][T14966] (syz.6.2400,14966,0):user_dlm_register:674 ERROR: status = -22 [ 1335.913098][T14966] (syz.6.2400,14966,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1339.134881][T14996] loop5: detected capacity change from 0 to 512 [ 1339.301803][T14996] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.2414: inode has both inline data and extents flags [ 1339.406707][T14996] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.2414: couldn't read orphan inode 15 (err -117) [ 1339.441208][T14996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1340.301796][ T8640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.944825][T12065] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1342.078408][T15021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1342.357202][T12065] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1342.511806][T12065] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1342.777673][T12065] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1342.794237][T12065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.815409][T12065] usb 5-1: config 0 descriptor?? [ 1342.837068][T12065] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1344.093801][T12065] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1344.201290][T15045] o2cb: This node has not been configured. [ 1344.221385][T15045] o2cb: Cluster check failed. Fix errors before retrying. [ 1344.237894][T15045] (syz.5.2423,15045,1):user_dlm_register:674 ERROR: status = -22 [ 1344.261341][T15045] (syz.5.2423,15045,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1344.273591][T12065] usb 7-1: Using ep0 maxpacket: 32 [ 1344.300159][T12065] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1344.314736][T12065] usb 7-1: config 0 has no interface number 0 [ 1344.363159][T12065] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1344.422016][T12065] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1344.469528][T12065] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.513375][T12065] usb 7-1: Product: syz [ 1344.534750][T12065] usb 7-1: Manufacturer: syz [ 1344.554199][T12065] usb 7-1: SerialNumber: syz [ 1344.569385][T12065] usb 7-1: config 0 descriptor?? [ 1344.716934][T12063] usb 5-1: USB disconnect, device number 7 [ 1346.399661][T12065] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1346.423874][T12065] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1346.450485][T12065] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1346.470826][T12065] f81534: probe of 7-1:0.12 failed with error -71 [ 1346.503445][T12065] usb 7-1: USB disconnect, device number 9 [ 1352.466111][T15092] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2443'. [ 1354.442206][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2448'. [ 1354.538452][ T6283] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1354.743062][ T6283] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.765680][ T6283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1354.808542][ T6283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.818850][ T6283] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1354.832141][ T6283] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1354.843332][ T6283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.883301][ T6283] usb 5-1: config 0 descriptor?? [ 1355.224821][T15114] loop2: detected capacity change from 0 to 512 [ 1355.271965][T15115] o2cb: This node has not been configured. [ 1355.291619][T15114] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.2450: inode has both inline data and extents flags [ 1355.318094][T15115] o2cb: Cluster check failed. Fix errors before retrying. [ 1355.327366][ T6283] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 1355.333720][T15119] loop6: detected capacity change from 0 to 512 [ 1355.335525][ T6283] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 1355.348675][ T6283] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 1355.357054][ T6283] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 1355.364561][ T6283] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 1355.378495][ T6283] hid-u2fzero 0003:10C4:8ACF.0003: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 1355.393696][T15114] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.2450: couldn't read orphan inode 15 (err -117) [ 1355.404817][ T6283] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero LED initialised [ 1355.416508][ T6283] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 1355.428284][ T6283] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 1355.436751][ T6283] CPU: 1 PID: 6283 Comm: kworker/1:9 Not tainted syzkaller #0 [ 1355.444250][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1355.454359][ T6283] Workqueue: usb_hub_wq hub_event [ 1355.459447][ T6283] RIP: 0010:u2fzero_rng_read+0x2a1/0x700 [ 1355.465227][ T6283] Code: 89 cc 80 3c 01 00 74 08 4c 89 ef e8 89 72 e6 f9 bb a8 00 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 01 73 e6 f9 48 8d 44 24 60 48 89 03 [ 1355.484861][ T6283] RSP: 0018:ffffc9000c816780 EFLAGS: 00010202 [ 1355.490981][ T6283] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 1355.498984][ T6283] RDX: 0000000000000000 RSI: ffffc9000c8168a0 RDI: ffff888021d82368 [ 1355.506979][ T6283] RBP: ffffc9000c816998 R08: 0000000000000000 R09: 0000000000000000 [ 1355.514977][ T6283] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1100c340006 [ 1355.522972][ T6283] R13: ffff888061a00030 R14: 1ffff1100c340083 R15: 1ffff92001902cf8 [ 1355.530968][ T6283] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1355.539921][ T6283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1355.546536][ T6283] CR2: 00005568c1b979d8 CR3: 000000006c1a2000 CR4: 00000000003506e0 [ 1355.554529][ T6283] Call Trace: [ 1355.557851][ T6283] [ 1355.560810][ T6283] ? u2fzero_brightness_set+0x2e0/0x2e0 [ 1355.566397][ T6283] ? set_current_rng+0x330/0x3d0 [ 1355.571367][ T6283] ? mutex_unlock+0x10/0x10 [ 1355.575982][ T6283] ? u2fzero_brightness_set+0x2e0/0x2e0 [ 1355.581555][ T6283] add_early_randomness+0x7a/0x1a0 [ 1355.586699][ T6283] hwrng_register+0x3db/0x4a0 [ 1355.591393][ T6283] devm_hwrng_register+0x47/0xb0 [ 1355.596356][ T6283] u2fzero_probe+0x348/0x460 [ 1355.600981][ T6283] hid_device_probe+0x293/0x5b0 [ 1355.605937][ T6283] ? hid_uevent+0x350/0x350 [ 1355.610475][ T6283] really_probe+0x25b/0xb20 [ 1355.615170][ T6283] ? pm_runtime_barrier+0x14b/0x1c0 [ 1355.620402][ T6283] __driver_probe_device+0x18c/0x330 [ 1355.625800][ T6283] driver_probe_device+0x4f/0x420 [ 1355.630935][ T6283] __device_attach_driver+0x2ca/0x510 [ 1355.636330][ T6283] bus_for_each_drv+0x252/0x2e0 [ 1355.641214][ T6283] ? coredump_store+0x90/0x90 [ 1355.645934][ T6283] ? bus_find_device+0x300/0x300 [ 1355.650900][ T6283] __device_attach+0x2c2/0x420 [ 1355.655692][ T6283] ? device_attach+0x20/0x20 [ 1355.660303][ T6283] ? do_raw_spin_unlock+0x121/0x230 [ 1355.665539][ T6283] bus_probe_device+0x180/0x260 [ 1355.670433][ T6283] device_add+0x85b/0xc20 [ 1355.674813][ T6283] hid_add_device+0x38d/0x530 [ 1355.679538][ T6283] usbhid_probe+0xe02/0x1220 [ 1355.684249][ T6283] usb_probe_interface+0x5c9/0xb20 [ 1355.689406][ T6283] ? usb_register_driver+0x3d0/0x3d0 [ 1355.694722][ T6283] really_probe+0x25b/0xb20 [ 1355.699261][ T6283] ? pm_runtime_barrier+0x14b/0x1c0 [ 1355.704509][ T6283] __driver_probe_device+0x18c/0x330 [ 1355.709997][ T6283] driver_probe_device+0x4f/0x420 [ 1355.715045][ T6283] __device_attach_driver+0x2ca/0x510 [ 1355.720441][ T6283] bus_for_each_drv+0x252/0x2e0 [ 1355.725317][ T6283] ? coredump_store+0x90/0x90 [ 1355.730013][ T6283] ? bus_find_device+0x300/0x300 [ 1355.734986][ T6283] __device_attach+0x2c2/0x420 [ 1355.739773][ T6283] ? device_attach+0x20/0x20 [ 1355.744386][ T6283] ? __kmem_cache_free+0xba/0x1e0 [ 1355.749445][ T6283] ? do_raw_spin_unlock+0x121/0x230 [ 1355.754677][ T6283] bus_probe_device+0x180/0x260 [ 1355.759588][ T6283] device_add+0x85b/0xc20 [ 1355.763945][ T6283] usb_set_configuration+0x1a79/0x20c0 [ 1355.769446][ T6283] usb_generic_driver_probe+0x8d/0x150 [ 1355.774937][ T6283] usb_probe_device+0x13d/0x270 [ 1355.779815][ T6283] ? usb_register_device_driver+0x230/0x230 [ 1355.785734][ T6283] really_probe+0x25b/0xb20 [ 1355.790261][ T6283] ? pm_runtime_barrier+0x14b/0x1c0 [ 1355.795496][ T6283] __driver_probe_device+0x18c/0x330 [ 1355.800809][ T6283] driver_probe_device+0x4f/0x420 [ 1355.806054][ T6283] __device_attach_driver+0x2ca/0x510 [ 1355.811471][ T6283] bus_for_each_drv+0x252/0x2e0 [ 1355.816356][ T6283] ? coredump_store+0x90/0x90 [ 1355.821062][ T6283] ? bus_find_device+0x300/0x300 [ 1355.826039][ T6283] __device_attach+0x2c2/0x420 [ 1355.830833][ T6283] ? device_attach+0x20/0x20 [ 1355.835447][ T6283] ? __kmem_cache_free+0xba/0x1e0 [ 1355.840511][ T6283] ? do_raw_spin_unlock+0x121/0x230 [ 1355.846180][ T6283] bus_probe_device+0x180/0x260 [ 1355.851068][ T6283] device_add+0x85b/0xc20 [ 1355.855427][ T6283] usb_new_device+0xa3c/0x1660 [ 1355.860227][ T6283] ? usb_disconnect+0x8a0/0x8a0 [ 1355.865111][ T6283] ? _raw_spin_unlock_irq+0x23/0x50 [ 1355.870347][ T6283] ? lockdep_hardirqs_on+0x98/0x150 [ 1355.875739][ T6283] hub_event+0x29bf/0x49f0 [ 1355.880208][ T6283] ? hub_post_resume+0x120/0x120 [ 1355.885175][ T6283] ? read_lock_is_recursive+0x20/0x20 [ 1355.890585][ T6283] ? _raw_spin_unlock_irq+0x23/0x50 [ 1355.895906][ T6283] ? process_scheduled_works+0x96f/0x15d0 [ 1355.901666][ T6283] ? process_scheduled_works+0x96f/0x15d0 [ 1355.907418][ T6283] process_scheduled_works+0xa5d/0x15d0 [ 1355.913002][ T6283] ? assign_work+0x430/0x430 [ 1355.917624][ T6283] ? assign_work+0x3d0/0x430 [ 1355.922270][ T6283] worker_thread+0xa55/0xfc0 [ 1355.926928][ T6283] kthread+0x2fa/0x390 [ 1355.931037][ T6283] ? pr_cont_work+0x560/0x560 [ 1355.935752][ T6283] ? kthread_blkcg+0xd0/0xd0 [ 1355.940374][ T6283] ret_from_fork+0x48/0x80 [ 1355.944826][ T6283] ? kthread_blkcg+0xd0/0xd0 [ 1355.949445][ T6283] ret_from_fork_asm+0x11/0x20 [ 1355.954249][ T6283] [ 1355.957292][ T6283] Modules linked in: [ 1355.974319][T15119] EXT4-fs error (device loop6): ext4_orphan_get:1398: inode #15: comm syz.6.2451: inode has both inline data and extents flags [ 1356.000079][T15115] (syz.5.2446,15115,1):user_dlm_register:674 ERROR: status = -22 [ 1356.032939][T15119] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.2451: couldn't read orphan inode 15 (err -117) [ 1356.108187][T15115] (syz.5.2446,15115,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1356.143821][T15114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1356.158218][T15119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1356.327416][ T6283] ---[ end trace 0000000000000000 ]--- [ 1356.328681][T15124] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.2450: Directory hole found for htree leaf block 0 [ 1356.334355][ T6283] RIP: 0010:u2fzero_rng_read+0x2a1/0x700 [ 1356.371698][ T6283] Code: 89 cc 80 3c 01 00 74 08 4c 89 ef e8 89 72 e6 f9 bb a8 00 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 01 73 e6 f9 48 8d 44 24 60 48 89 03 [ 1356.393001][ T6283] RSP: 0018:ffffc9000c816780 EFLAGS: 00010202 [ 1356.399647][ T6283] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 1356.407785][ T6283] RDX: 0000000000000000 RSI: ffffc9000c8168a0 RDI: ffff888021d82368 [ 1356.408639][T15118] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 1356.415833][ T6283] RBP: ffffc9000c816998 R08: 0000000000000000 R09: 0000000000000000 [ 1356.503946][ T6283] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff1100c340006 [ 1356.542596][ T6283] R13: ffff888061a00030 R14: 1ffff1100c340083 R15: 1ffff92001902cf8 [ 1356.567321][ T6283] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1356.576806][ T6283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1356.636540][ T6283] CR2: 000020000002e000 CR3: 0000000030f52000 CR4: 00000000003506e0 [ 1356.645330][ T6283] Kernel panic - not syncing: Fatal exception [ 1356.652017][ T6283] Kernel Offset: disabled [ 1356.656404][ T6283] Rebooting in 86400 seconds..